Privacy Policy

1. Introduction

phgolden ("phgolden," "we," "us," or "our") operates the online gaming platform accessible at https://phgolden.app and through the phgolden mobile application. As the data controller for personal information collected through the phgolden platform, we are committed to handling your data responsibly, transparently, and in full compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations.

This Privacy Policy ("Policy") describes the types of personal information we collect from players and visitors, the purposes for which we use that information, the circumstances under which we may share it, and the rights you have in relation to your personal data. This Policy applies to all users of the phgolden platform, whether you are a registered player, a visitor browsing the website, or a person who has contacted our customer support team.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which form part of your overall agreement with phgolden.

2. Personal Data We Collect

phgolden collects the following categories of personal data in connection with the operation of the platform:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID
• Date of birth
• Residential address (including barangay, city, province, and ZIP code)
• Email address
• Philippine mobile number
• Government-issued ID type and number (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys ID)

2.2 Financial Data

• GCash or PayMaya mobile wallet number
• Bank account details (BPI, BDO, Metrobank) where used for deposits or withdrawals
• Transaction history including deposits, withdrawals, wagers, and winnings denominated in Philippine Peso (₱)

2.3 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the phgolden platform
• Login timestamps and access logs
• Game history and betting patterns

2.4 Communications Data

• Records of communications with phgolden customer support, including live chat transcripts and email correspondence
• Survey responses and feedback submitted through the platform
• Marketing preferences and communication opt-in or opt-out records

3. How We Collect Your Data

phgolden collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the phgolden platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank; and publicly available information used for compliance screening.

4. How We Use Your Personal Data

phgolden uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your phgolden account, including verifying your identity and age (21+ requirement) during registration and ongoing KYC reviews.
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records.
• Platform operation: To deliver the games, features, and services available on the phgolden platform, including personalized game recommendations and account notifications.
• Legal and regulatory compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, PAGCOR regulatory requirements, and the Data Privacy Act of 2012.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the phgolden platform and its players.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools where requested or required.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the phgolden platform.

5. Legal Basis for Processing

phgolden processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing required to perform our obligations under the phgolden Terms & Conditions, including account management, transaction processing, and platform delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and NPC data privacy obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

phgolden does not sell, rent, or trade your personal data. We may share your information with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Fraud prevention and AML screening services: Service providers that assist phgolden in detecting and preventing fraudulent activity and money laundering.
• IT and platform service providers: Cloud hosting, data storage, and software service providers who process data on phgolden's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulatory directive.
• Professional advisers: Legal counsel, auditors, and other professional advisers, subject to confidentiality obligations.

7. Data Retention

phgolden retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general guide:

• Account and identity data is retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Marketing preference records are retained until you withdraw consent or close your account, whichever is earlier.
• Technical and usage logs are retained for up to twelve (12) months for security and platform improvement purposes.

Where phgolden is required by law to retain data for a longer period, the statutory retention period will apply. Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized.

8. Data Security

phgolden implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phgolden platform
• Encryption of sensitive data at rest, including financial information and government ID details
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of the phgolden platform
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Staff training on data privacy obligations and secure data handling practices

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phgolden will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

9. Cookies & Tracking Technologies

phgolden uses cookies and similar tracking technologies on the phgolden website and mobile application. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use the platform.

9.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function, including session management and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and login status to improve your experience on phgolden.
• Analytics cookies: Help us understand how players use the phgolden platform so we can improve its performance and features. Data collected is aggregated and anonymized where possible.
• Marketing cookies: Used to deliver relevant promotional content within the phgolden platform. These are only set with your consent.

9.2 Managing Cookies

You can manage your cookie preferences through the cookie settings panel available on the phgolden platform. You may also configure your browser to refuse or delete cookies, though doing so may affect the functionality of certain platform features. Disabling strictly necessary cookies will prevent you from using the phgolden platform.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by phgolden:

• Right to be informed: The right to know what personal data phgolden collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data phgolden holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phgolden has not handled your personal data in accordance with the Data Privacy Act of 2012.

To exercise any of these rights, please contact phgolden's Data Protection Officer using the contact details in Section 13. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

11. Minors and Age Restriction

The phgolden platform is strictly intended for persons who are 21 years of age or older. phgolden does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the phgolden platform or provide any personal information to us.

If phgolden becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that phgolden may have inadvertently collected data from a minor, please contact our Data Protection Officer immediately.

12. Changes to This Privacy Policy

phgolden reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material, phgolden will provide reasonable advance notice to registered players via email or a prominent notice on the phgolden platform. Your continued use of the platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how phgolden protects your personal data.

13. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or phgolden's handling of your personal data, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with phgolden's response to your data privacy concern.