phplus Casino – Privacy Policy

1. Introduction

1.1 phplus ("we," "us," "our") is a PAGCOR-regulated online casino and sports betting platform operating at phplus.asia and serving Filipino players across the Republic of the Philippines.

1.2 We act as the Personal Information Controller for all personal data collected through the phplus Platform, as defined under Republic Act 10173 (the Data Privacy Act of 2012) and its Implementing Rules and Regulations.

1.3 This Privacy Policy explains: what personal data we collect, why we collect it, how we use and protect it, with whom we may share it, and what rights you have over your personal data as a phplus player and as a data subject under Philippine law.

1.4 This Policy supplements the phplus Terms & Conditions and is incorporated into that agreement by reference. Capitalised terms not defined here have the meanings given to them in the Terms & Conditions.

2. Personal Data We Collect

2.1 phplus collects personal data in the following categories:

Registration & Identity Data

• Full legal name as it appears on a Philippine government-issued identification document;
• Date of birth (to verify compliance with the 21-year minimum age requirement);
• Philippine mobile number and email address;
• Residential address in the Philippines;
• Copies of government-issued ID (e.g., PhilSys National ID, UMID, passport, driver's licence) submitted during KYC verification.

Financial & Transaction Data

• GCash account number, PayMaya account number, or bank account details used for deposits and withdrawals;
• Deposit amounts, withdrawal requests, and transaction timestamps;
• Source-of-funds declarations where required for AMLC compliance.

Gaming Activity Data

• Game sessions, wager amounts, game outcomes, and bet history;
• Bonus usage, wagering progress, and promotion redemption records;
• Responsible gaming settings you configure, including deposit limits and self-exclusion requests.

Technical & Device Data

• IP address, device type, browser type and version, operating system;
• Session duration, pages visited within phplus, and feature interactions;
• Geolocation data (country and region level) to verify Philippine jurisdiction compliance.

Communications Data

• Records of customer support interactions via live chat, including chat transcripts and support ticket history;
• Email correspondence and SMS notifications sent to your registered contact details.

2.2 phplus does not collect sensitive personal information as defined under RA 10173 (such as health data, political affiliation, or religious beliefs) unless specifically required and consented to in connection with a responsible gaming support referral.

3. How We Use Your Personal Data

3.1 phplus uses your personal data for the following purposes:

3.2 phplus does not use automated decision-making or profiling in any manner that produces significant legal effects on Players, without providing appropriate safeguards and the right to request human review.

4. Legal Bases for Processing

4.1 phplus processes your personal data on the following legal bases under RA 10173:

• Consent: For marketing communications and optional features (you may withdraw consent at any time via Account Settings or by contacting our Data Protection Officer);
• Contractual Necessity: To provide you with a phplus account, process payments, and deliver gaming services as agreed in the Terms & Conditions;
• Legal Obligation: To comply with PAGCOR's regulatory requirements, the Anti-Money Laundering Act (RA 9160, as amended), and other applicable Philippine laws;
• Legitimate Interests: For fraud prevention, platform security, and responsible gaming monitoring — subject always to your fundamental rights and interests not overriding those legitimate interests.

5. Data Sharing with Third Parties

5.1 phplus does not sell, rent, lease, or trade your personal data to third-party marketers under any circumstances.

5.2 phplus may share your personal data with the following categories of third parties, strictly for the purposes outlined in Section 3:

• Payment Service Providers: GCash (Mynt — Globe Fintech Innovations Inc.), PayMaya (Maya Bank), and accredited Philippine banks — for processing your deposits and withdrawals;
• Identity Verification Providers: PAGCOR-accredited KYC and biometric verification service providers for identity and age verification;
• Game Providers: Licensed third-party game software providers whose titles are available on the phplus platform — limited to data necessary to operate your game session;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) — as required by law;
• Cloud & Infrastructure Providers: Data centre and cloud service providers hosting phplus platform infrastructure, operating under data processing agreements that restrict use to platform operation only.

5.3 All third parties with whom phplus shares personal data are bound by data processing agreements that prohibit further use, transfer, or disclosure of your data beyond the stated purpose.

6. Cookies & Tracking Technologies

6.1 phplus uses cookies and similar tracking technologies (web beacons, local storage) on the phplus Platform for the following purposes:

• Strictly Necessary Cookies: Required for platform operation — session authentication, security tokens, and phplus Login session management. These cannot be disabled without impacting platform functionality;
• Analytics Cookies: Anonymous aggregated data used to understand how Filipino players navigate and use phplus, allowing us to improve the platform experience;
• Preference Cookies: Storing your language, display, and game filter preferences to personalise your phplus experience;
• Security Cookies: Device fingerprinting and anomaly detection to protect your phplus account from unauthorized access.

6.2 phplus does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect your ability to log in and use the phplus Platform.

7. Data Retention

7.1 phplus retains personal data for as long as your account is active and for the periods required by applicable law after account closure:

• Identity & KYC data: Five (5) years from account closure, as required by PAGCOR and AMLC regulations;
• Financial transaction records: Five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• Gaming activity data: Two (2) years from account closure, for responsible gaming and dispute resolution purposes;
• Customer support records: Two (2) years from the date of the last interaction;
• Marketing consent records: Retained until withdrawn, plus one (1) year thereafter as evidence of consent.

7.2 Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with NPC-recommended secure deletion standards.

8. Data Security Measures

8.1 phplus implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmissions between your device and phplus servers;
• Encryption at rest for all stored personal data and payment information;
• Role-based access control (RBAC) limiting employee access to personal data strictly to those with a need-to-know for their designated functions;
• Multi-factor authentication required for all phplus staff systems that access player data;
• Regular penetration testing and security audits of platform infrastructure;
• Automated intrusion detection and anomaly monitoring on all player account access patterns.

8.2 In the event of a personal data breach that poses a real risk of serious harm to affected data subjects, phplus will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected Players without undue delay.

9. Your Data Subject Rights

9.1 Under the Philippine Data Privacy Act (RA 10173), phplus Players have the following rights with respect to their personal data:

• Right to be Informed: To know what personal data phplus holds about you and how it is used — as described in this Policy;
• Right of Access: To request a copy of your personal data held by phplus;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure: To request deletion of your personal data — subject to phplus's legal retention obligations under PAGCOR and AMLC regulations;
• Right to Object: To object to processing of your personal data for marketing purposes at any time, without affecting the lawfulness of prior processing;
• Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format;
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) if you believe phplus has violated your data privacy rights.

9.2 To exercise any of these rights, please contact our Data Protection Officer via the details provided in Section 13. phplus will respond to verified data subject requests within fifteen (15) business days.

10. Children's and Minors' Privacy

10.1 The phplus Platform is strictly restricted to individuals who are 21 years of age or older as mandated by PAGCOR regulations applicable to online gambling in the Philippines. phplus does not knowingly collect personal data from individuals below the age of 21.

10.2 If phplus discovers that it has collected personal data from a person below the age of 21, the associated Account will be suspended immediately and all personal data and funds will be handled in accordance with PAGCOR's minor protection protocols. Relevant data may be shared with PAGCOR as required.

10.3 If you believe a minor has registered on the phplus platform, please contact our support team immediately via live chat at phplus.asia.

11. International Data Transfers

11.1 phplus primarily processes and stores personal data within the Philippines. Where data is transferred outside the Philippines — for example, to cloud infrastructure providers with regional data centres — such transfers are made only to jurisdictions or recipients that provide an adequate level of data protection comparable to RA 10173 standards, or under appropriate contractual safeguards approved by the NPC.

11.2 phplus will not transfer personal data to jurisdictions that do not provide adequate privacy protections without implementing appropriate legal safeguards and, where required, obtaining your prior consent.

12. Changes to This Privacy Policy

12.1 phplus may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR requirements. Material changes will be communicated to registered Players via the email address associated with their phplus Account or via a prominent notice on the Platform at least seven (7) days before the changes take effect.

12.2 The current version of this Privacy Policy is always available at phplus.asia/privacy-policy. The "Last Updated" date at the top of this page indicates when this Policy was most recently revised. Your continued use of the phplus Platform following notification of an updated Policy constitutes your acceptance of the revised terms.

13. Contact & Data Protection Officer

13.1 phplus has appointed a Data Protection Officer (DPO) in compliance with NPC requirements. For all data privacy inquiries, requests to exercise data subject rights, or reports of suspected privacy breaches, please contact:

If you are not satisfied with phplus's response to your data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC).