phfun Privacy Policy

1. Introduction and Scope

phfun (the "Company," "we," "us," or "our") operates an online gaming platform at phfun.lat (the "Platform") under authorization from the Philippine Amusement and Gaming Corporation (PAGCOR). This Privacy Policy describes how we collect, use, store, share, and protect personal information we receive from users (the "User," "you," or "your") of the phfun Platform.

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal information as described herein. If you do not agree with this Privacy Policy, you must immediately cease using the phfun Platform.

This Privacy Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and all circulars, advisories, and guidelines issued by the National Privacy Commission (NPC) of the Philippines. phfun is committed to protecting your personal data and respecting your privacy rights under Philippine law.

2. Information We Collect

phfun collects personal information from you in several ways, including information you provide directly during registration, information collected automatically during your use of the Platform, and information obtained from third-party sources for verification purposes. The types of information we collect include:

2.1 Information You Provide Directly

When you create a phfun account or use our services, you may provide the following personal information:

• Identity Information: Full legal name, date of birth, nationality, gender, government-issued identification numbers (e.g., passport number, driver's license number, national ID number).
• Contact Information: Email address, mobile phone number, residential address, postal code.
• Account Credentials: Username, password, security questions and answers, two-factor authentication (2FA) settings.
• Financial Information: Payment method details (GCash mobile number, Maya account, bank account numbers, credit/debit card details), transaction history, deposit and withdrawal records.
• Communication Records: Chat transcripts with customer support, emails sent to or received from phfun, feedback forms, survey responses.
• Responsible Gaming Settings: Deposit limits, loss limits, session time preferences, self-exclusion requests, cooling-off period elections.

2.2 Information Collected Automatically

When you access and use the phfun Platform, we automatically collect certain technical and usage information, including:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers (IMEI, MAC address), screen resolution, time zone settings.
• Usage Data: Pages visited, games played, bet amounts, win/loss records, session duration, clickstream data, referral source, navigation paths within the Platform.
• Location Data: Approximate geographic location derived from IP address to verify compliance with jurisdictional restrictions and PAGCOR regulations.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, local storage, and similar technologies used to enhance your experience, maintain your session, and collect analytics data.

2.3 Information from Third-Party Sources

phfun may obtain information about you from third-party sources to verify your identity, prevent fraud, and comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations. These sources may include:

• Identity verification service providers;
• Payment processors (GCash, Maya, banks, and other financial institutions);
• Credit reference agencies and fraud prevention databases;
• Publicly available sources and government registries;
• PAGCOR and other regulatory authorities in the course of compliance audits or investigations.

3. How We Use Your Information

phfun processes your personal information for the following purposes, all of which are necessary for the performance of our contract with you, compliance with legal obligations, or based on our legitimate business interests:

3.1 Account Management and Service Delivery

• To create, maintain, and manage your phfun account;
• To authenticate your identity and verify your age (21+ requirement);
• To process deposits, withdrawals, and other financial transactions;
• To provide access to gaming services, including live casino, slots, sports betting, bingo, and other game categories;
• To maintain session continuity and save your preferences and settings;
• To communicate with you regarding your account, transactions, and platform updates.

3.2 Regulatory and Legal Compliance

• To comply with PAGCOR licensing conditions and Philippine gaming regulations;
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements;
• To verify that you are physically located within Philippine territory when accessing the Platform;
• To respond to lawful requests from law enforcement, courts, and regulatory authorities;
• To maintain records as required by law, including transaction logs and communication records;
• To implement responsible gaming policies, including age verification, self-exclusion enforcement, and problem gambling detection.

3.3 Fraud Prevention and Platform Security

• To detect and prevent fraudulent activity, money laundering, bonus abuse, collusion, and other violations of our Terms and Conditions;
• To monitor gameplay patterns and identify irregular or suspicious behavior;
• To protect the security and integrity of the Platform, including preventing unauthorized access and cyberattacks;
• To investigate disputes, chargebacks, and complaints;
• To enforce our Terms and Conditions and take appropriate action in the event of policy violations.

3.4 Marketing and Promotional Communications

• To send you promotional offers, bonuses, free spins, cashback, and other marketing communications via email, SMS, push notifications, and in-platform messages (only if you have consented to receive such communications);
• To personalize promotional content based on your gaming preferences and activity;
• To notify you of new game releases, platform features, and special events.

You may opt out of marketing communications at any time by adjusting your communication preferences in your account settings or by clicking the "unsubscribe" link in any marketing email. Opting out of marketing communications will not affect transactional or service-related messages, which are necessary for account operation.

3.5 Analytics and Platform Improvement

• To analyze usage patterns and player behavior to improve the user experience;
• To conduct A/B testing and product development research;
• To identify and fix technical issues, bugs, and performance bottlenecks;
• To generate aggregated and anonymized reports for internal business purposes and regulatory reporting.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act and applicable regulations, phfun processes your personal information based on one or more of the following legal grounds:

• Consent: You have provided explicit consent for us to process your personal data for specific purposes, such as marketing communications.
• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms and Conditions you agreed to when creating your account.
• Legal Obligation: Processing is required to comply with applicable laws, including PAGCOR regulations, AML laws, KYC requirements, and data retention obligations.
• Legitimate Interest: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided such interests do not override your fundamental rights and freedoms.

5. How We Share Your Information

phfun does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information with the following categories of recipients in the circumstances described below:

5.1 Service Providers and Business Partners

phfun engages third-party service providers to perform functions on our behalf. These service providers have access to your personal information only to the extent necessary to perform their services and are contractually obligated to maintain the confidentiality and security of your data. Categories of service providers include:

• Payment processors (GCash, Maya, bank partners, and other financial institutions);
• Identity verification and KYC service providers;
• Game studio partners and live dealer platform operators;
• Cloud hosting and data storage providers;
• Customer support platform providers;
• Email and SMS communication service providers;
• Analytics and marketing technology providers;
• Cybersecurity and fraud prevention service providers.

5.2 Regulatory and Law Enforcement Authorities

phfun may disclose your personal information to PAGCOR, the National Privacy Commission, law enforcement agencies, courts, and other government authorities when required by law or when we have a good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or lawful request from a regulatory authority;
• Investigate or prevent suspected illegal activity, fraud, or violations of our Terms and Conditions;
• Protect the safety, rights, or property of phfun, our users, or the public;
• Respond to AML investigations or suspicious transaction reports.

5.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy proceeding involving phfun, your personal information may be transferred to the successor entity or acquirer, subject to the same privacy protections outlined in this Privacy Policy. You will be notified via email and/or a prominent notice on the Platform if such a transfer occurs.

5.4 Aggregated and Anonymized Data

phfun may share aggregated, de-identified, or anonymized data that does not identify you personally with third parties for analytics, research, or business intelligence purposes. Such data cannot be used to re-identify you and is not considered personal information under the Data Privacy Act.

6. Cookies and Tracking Technologies

phfun uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on the Platform, maintain your session, and collect analytics data. Cookies are small text files stored on your device that allow us to recognize you when you return to the Platform.

6.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for the Platform to function properly, including session management, login authentication, and security.	Session or up to 30 days
Functional Cookies	Remember your preferences, settings, and language choices to enhance your experience.	Up to 1 year
Analytics Cookies	Collect information about how you use the Platform to help us improve performance and usability.	Up to 2 years
Marketing Cookies	Track your activity across the Platform to deliver personalized promotional content and measure campaign effectiveness.	Up to 1 year

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies; however, disabling essential cookies may prevent certain features of the Platform from functioning correctly. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

7. Data Retention

phfun retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

• Account Information: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by AML regulations and PAGCOR licensing conditions.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial record-keeping obligations under Philippine law.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for a minimum of two (2) years following the resolution of each support interaction.
• Marketing Preferences: Retained until you withdraw consent or close your account, plus a reasonable period to process the opt-out.
• Technical Logs: Typically retained for six (6) to twelve (12) months for security monitoring and fraud prevention purposes, unless a longer period is required for an ongoing investigation.

When personal information is no longer required for any of the above purposes, phfun will securely delete or anonymize it in accordance with our data destruction policy and applicable law.

8. Data Security

phfun implements appropriate technical and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, destruction, or accidental loss. Our security measures include:

• Encryption: All data transmitted between your device and the phfun Platform is encrypted using Transport Layer Security (TLS) 1.2 or higher. Sensitive data stored on our servers, including payment information and identity documents, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized phfun personnel and third-party service providers on a strict need-to-know basis, governed by role-based access controls and monitored access logs.
• Two-Factor Authentication: phfun offers two-factor authentication (2FA) for all registered accounts to provide an additional layer of security against unauthorized account access.
• Security Monitoring: The Platform is continuously monitored for suspicious activity, unauthorized access attempts, and potential security threats using automated intrusion detection and prevention systems.
• Vulnerability Management: phfun conducts regular security assessments, penetration testing, and vulnerability scans to identify and address potential weaknesses in our systems.
• Staff Training: All phfun employees who handle personal data receive mandatory data protection and security training as part of their onboarding and ongoing professional development.

Despite our best efforts, no data transmission over the internet or electronic storage system is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phfun will notify the National Privacy Commission and affected users in accordance with the requirements of the Data Privacy Act and NPC Circular No. 16-03.

9. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal information held by phfun:

• Right to Be Informed: You have the right to be informed of how phfun collects, uses, stores, and shares your personal information, as described in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal information phfun holds about you, including information about how it is being used and to whom it has been disclosed.
• Right to Correction: You have the right to request correction of any inaccurate, incomplete, or outdated personal information we hold about you. You may update most of your account information directly through your account settings.
• Right to Erasure or Blocking: You have the right to request the deletion or blocking of your personal information in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to our legal retention obligations under PAGCOR regulations and Philippine law.
• Right to Data Portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to have that data transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes or based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that your privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at the contact details provided in Section 13 of this Privacy Policy. phfun will respond to all verified data subject requests within thirty (30) days of receipt. We may request proof of identity before processing your request to protect against unauthorized access to your personal information.

10. Children's Privacy

The phfun Platform is strictly intended for persons who are 21 years of age or older, in accordance with PAGCOR regulations and Philippine law governing gambling activities. phfun does not knowingly collect personal information from individuals under the age of 21.

If we become aware that a user is under the age of 21, we will immediately suspend the account, refund any deposits to the payment method of origin, void any winnings, and permanently delete the personal information associated with the account. If you have reason to believe that a minor has registered for a phfun account, please notify us immediately at [email protected] so that we can take appropriate action.

11. International Data Transfers

phfun primarily stores and processes personal data within the Philippines. In certain circumstances, your personal information may be transferred to, and processed by, phfun's service providers located in other countries for purposes such as cloud hosting, customer support infrastructure, and payment processing. Where such international transfers occur, phfun ensures that appropriate safeguards are in place to protect your personal information, in accordance with the Data Privacy Act and NPC guidelines on cross-border data flows.

By using the phfun Platform, you acknowledge and consent to the transfer of your personal information to countries outside the Philippines where phfun's service providers operate, subject to the safeguards described above.

12. Third-Party Platforms and Links

The phfun Platform may contain references to or integrations with third-party services such as payment gateways (GCash, Maya, BPI, BDO, Metrobank), game studio software, and live dealer platforms. These third-party services operate under their own privacy policies, which phfun does not control and for which phfun accepts no responsibility.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of phfun. phfun's Privacy Policy applies solely to personal information collected and processed by phfun through the Platform and does not extend to third-party platforms or services.

13. Contact and Data Protection Officer

phfun has appointed a Data Protection Officer (DPO) to oversee compliance with the Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal information or this Privacy Policy, you may contact our DPO through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week on every page of the phfun Platform
• FAQ: Visit our FAQ page for answers to common privacy questions

phfun is committed to resolving all privacy-related enquiries and complaints in a timely and fair manner. If you are not satisfied with our response, you may escalate your complaint to the National Privacy Commission of the Philippines.

14. Changes to This Privacy Policy

phfun reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Any material changes will be communicated to registered users via email notification and/or a prominent notice on the Platform prior to the change taking effect. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the phfun Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed of how phfun is protecting your personal information.