Privacy Policy

1. About This Privacy Policy

1.1 This Privacy Policy applies to all personal data collected and processed by phmacoa in connection with the operation of the phmacoa online gaming platform, including its website, mobile interface, games, payment processing services, and customer support functions.

1.2 phmacoa operates under a PAGCOR licence and is subject to the regulatory requirements of the Philippine Amusement and Gaming Corporation, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC). Data collection and processing obligations arise from these regulatory frameworks and cannot be waived.

1.3 This Policy is governed by the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission of the Philippines.

2. Personal Data We Collect

2.1 Identity Data — full legal name, date of birth, nationality, and copies of government-issued identification documents (e.g., SSS card, UMID, PhilHealth ID, passport, or driver's licence).

2.2 Contact Data — Philippine mobile number, email address (where provided), and residential address.

2.3 Financial Data — GCash account reference, PayMaya account reference, bank account details (BPI, BDO, or Metrobank) used for deposits or withdrawals, transaction history, and account balance records.

2.4 Account Data — username, encrypted password, account registration date, login history, session data, and responsible gaming settings.

2.5 Gaming Activity Data — game participation records, wager history, winnings and losses, bonus redemption history, and game preferences.

2.6 Technical Data — IP address, device identifiers, browser type and version, operating system, screen resolution, and geolocation data (to verify Philippine residency).

2.7 Communications Data — records of your interactions with phmacoa's customer support team, including live chat transcripts and any correspondence submitted through the platform.

3. How We Collect Your Data

3.1 Directly from you — when you register for a phmacoa account, complete KYC verification, make deposits or withdrawal requests, contact customer support, or update your account profile.

3.2 Automatically — through cookies, session tokens, log files, and analytics tools that record your interactions with the phmacoa platform. This includes pages visited, games launched, time spent in sessions, and device/browser characteristics.

3.3 From third-party verification services — phmacoa may engage third-party identity verification and KYC service providers to verify the identity information you provide during registration. These providers operate under data processing agreements with phmacoa and are bound by confidentiality obligations.

3.4 From payment processors — transaction status updates and payment confirmation data are received from GCash, PayMaya, and banking partners as part of deposit and withdrawal processing.

4. How We Use Your Personal Data

4.1 phmacoa uses your personal data for the following purposes:

• Account registration and management — creating, verifying, and maintaining your phmacoa account
• Identity verification and KYC compliance — meeting PAGCOR, AMLC, and regulatory requirements for licensed online gaming operators
• Payment processing — facilitating deposits and withdrawals through your chosen payment method
• Game provision and personalisation — delivering games, tracking gameplay records, and presenting relevant game recommendations
• Responsible gaming monitoring — detecting patterns that may indicate problem gambling and enforcing any limits or restrictions you have set
• Customer support — responding to enquiries, resolving disputes, and maintaining communication records
• Security and fraud prevention — detecting and investigating suspicious activity, preventing unauthorised access, and protecting account integrity
• Marketing communications — sending bonus offers, promotions, and platform updates (subject to your marketing preference settings)
• Legal and regulatory obligations — complying with PAGCOR reporting requirements, AMLC suspicious transaction reporting, court orders, and other lawful demands

5. Legal Bases for Processing

5.1 phmacoa processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to fulfil our obligations to you as a registered phmacoa account holder, including account management, game provision, and payment processing
• Legal obligation — processing required to comply with PAGCOR licensing conditions, AMLC anti-money laundering obligations, and NPC data protection requirements
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and analytics to improve platform performance
• Consent — processing for marketing communications, where consent has been obtained and may be withdrawn at any time

6. Data Sharing & Third-Party Disclosure

6.1 phmacoa does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes.

6.2 phmacoa may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• PAGCOR — as required by licensing conditions and regulatory reporting obligations
• Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting as required under Philippine AMLA legislation
• KYC and identity verification providers — third-party services engaged to verify your identity documents
• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners, for transaction processing
• IT infrastructure providers — cloud hosting, data storage, and cybersecurity service providers operating under data processing agreements
• Law enforcement authorities — when required by a valid court order, lawful request, or other legal process under Philippine law

6.3 All third parties with whom phmacoa shares personal data are required to handle that data in accordance with applicable Philippine data protection law and their contractual obligations to phmacoa.

7. Cookies & Tracking Technologies

7.1 phmacoa uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device by your browser.

7.2 phmacoa uses the following types of cookies:

• Essential cookies — required for the platform to function, including session authentication, login state, and security tokens. These cannot be disabled without affecting platform functionality.
• Analytics cookies — used to collect anonymised data about how players navigate and use the phmacoa platform, to identify improvements.
• Preference cookies — store your language, display, and notification preferences across sessions.

7.3 You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect certain features of the phmacoa platform.

8. Data Retention

8.1 phmacoa retains personal data for as long as your account remains active and for a period following account closure as required by applicable law and regulatory obligations.

8.2 Transaction records, KYC documents, and gaming activity data are retained for a minimum of five (5) years following the closure of your account, in compliance with AMLC record-keeping requirements and PAGCOR audit obligations.

8.3 Marketing preference records are retained for as long as necessary to honour your preferences and comply with applicable regulations.

8.4 Following the expiry of the applicable retention period, phmacoa will securely delete or anonymise your personal data in accordance with NPC guidelines.

9. Data Security

9.1 phmacoa implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and phmacoa's servers
• Encrypted storage of passwords and sensitive financial data
• Access controls limiting personal data access to authorised phmacoa personnel only
• Regular security assessments and penetration testing
• Two-factor authentication (OTP) for sensitive account actions

9.2 While phmacoa takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to cause serious harm, phmacoa will notify affected players and the National Privacy Commission in accordance with NPC breach notification requirements.

10. Your Data Privacy Rights

10.1 Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phmacoa:

• Right to be informed — to know what personal data we hold about you and how it is being processed
• Right of access — to request a copy of your personal data
• Right to rectification — to request correction of inaccurate or incomplete personal data
• Right to erasure — to request deletion of your personal data, subject to legal retention obligations
• Right to object — to object to certain processing activities, including direct marketing
• Right to data portability — to receive your personal data in a structured, machine-readable format where technically feasible
• Right to lodge a complaint — to file a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated

10.2 To exercise any of these rights, please contact phmacoa's support team via the in-platform live chat or the contact email listed on the platform. phmacoa will respond to all data rights requests within thirty (30) days of receipt.

11. Children's Privacy & Age Restrictions

11.1 The phmacoa platform is strictly for persons who are at least twenty-one (21) years of age. phmacoa does not knowingly collect personal data from individuals under the age of 21.

11.2 If phmacoa becomes aware that personal data has been collected from an individual under 21, we will immediately close the associated account, delete the collected data to the extent permitted by law, and take appropriate regulatory notification steps.

11.3 Age verification is conducted as part of the phmacoa registration and KYC process. By registering, you confirm and warrant that you are 21 years of age or older. For players 21 years and above only.

12. Amendments to This Policy

12.1 phmacoa reserves the right to amend this Privacy Policy at any time. Notice of material changes will be communicated via the platform and/or to your registered mobile number. The most current version is always available on this page, identified by the last-updated date.

12.2 Your continued use of phmacoa following notification of any changes to this Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should stop using the platform and may request account closure.

13. Contact & Complaints

13.1 For questions, requests, or concerns about this Privacy Policy or phmacoa's data processing practices, please contact our support team via the 24/7 live chat available within the phmacoa platform, or via the support email address listed in the Contact & Support section of the platform.

13.2 If you are not satisfied with phmacoa's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.

This Privacy Policy was last reviewed and updated in June 2026. It supersedes all previous versions of the phmacoa Privacy Policy.