phmcao Privacy Policy

1. Introduction

phmcao ("we," "us," or "our") operates the online casino and sports betting platform accessible at phmcao.com. We are committed to protecting the privacy and personal data of every player and visitor who interacts with our platform. This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, how we store and protect it, and the rights available to you as a data subject under Philippine law.

This Policy should be read together with phmcao's Terms & Conditions and Responsible Gaming Policy. If you have any questions about how we handle your data, please contact our Data Protection Officer (DPO) using the details provided in Section 13.

2. Personal Data We Collect

phmcao collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., Philippine passport, SSS ID, UMID, PhilSys National ID, driver's license, PRC ID, voter's ID).
• Contact Data: Email address, Philippine mobile number, and residential address.
• Financial Data: GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records.
• Account Data: Username, encrypted password, account preferences, bonus history, and gaming activity logs.
• Technical Data: IP address, device type, browser type and version, operating system, time zone, and session data.
• Usage Data: Pages visited, games played, betting history, session duration, and clickstream data.
• Communications Data: Records of your correspondence with phmcao's customer support team, including live chat transcripts and email exchanges.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, and session time preferences.

We do not collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for identity verification and regulatory compliance purposes.

3. How We Collect Your Data

phmcao collects personal data through the following means:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automated technologies: When you browse or use the phmcao platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: We may receive data from payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank), identity verification service providers, fraud prevention agencies, and PAGCOR regulatory databases where applicable.

4. Purpose of Processing

phmcao processes your personal data for the following purposes:

• To create, manage, and maintain your phmcao player account.
• To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering laws.
• To process deposits, withdrawals, and other financial transactions.
• To provide customer support and respond to your inquiries.
• To administer bonuses, promotions, and loyalty programs.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To comply with legal and regulatory obligations, including reporting requirements under Philippine law.
• To improve the phmcao platform, personalize your experience, and conduct analytics.
• To send you service-related communications, including account notifications and security alerts.
• To enforce our Terms & Conditions and Responsible Gaming Policy.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), phmcao processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (i.e., providing the phmcao gaming platform and related services).
• Legal obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, where we rely on your explicit consent, which you may withdraw at any time.

6. Data Sharing & Disclosure

phmcao does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers to facilitate transactions.
• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and eligibility.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies where disclosure is required by law.
• Technology and service providers: Cloud hosting, cybersecurity, analytics, and customer support platform providers who process data on our behalf under strict data processing agreements.
• Fraud prevention agencies: To detect and prevent fraudulent activity, money laundering, and other illegal conduct.

All third-party service providers engaged by phmcao are contractually required to implement appropriate data protection measures consistent with RA 10173 and this Privacy Policy.

7. Data Retention

phmcao retains your personal data for as long as necessary to fulfill the purposes outlined in this Policy, and in accordance with applicable legal and regulatory retention requirements. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following account closure, as required under Philippine anti-money laundering regulations.
• KYC and identity verification documents are retained for the duration of your account and for five (5) years thereafter.
• Customer support communications are retained for three (3) years.
• Technical and usage data collected via cookies may be retained for shorter periods as specified in our Cookies Policy (Section 10).

Upon expiry of the applicable retention period, phmcao will securely delete or anonymize your personal data.

8. Data Security

phmcao implements robust technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phmcao platform.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication (MFA) for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC (National Privacy Commission) notification requirements.

While phmcao takes all reasonable precautions, no method of electronic transmission or storage is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, phmcao will notify you and the National Privacy Commission as required by law.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by phmcao:

• Right to be informed: You have the right to know what personal data phmcao collects and how it is used.
• Right of access: You may request a copy of the personal data phmcao holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact phmcao's Data Protection Officer at the details provided in Section 13. We will respond to all verified requests within fifteen (15) business days.

10. Cookies Policy

phmcao uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze platform usage.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the platform to function correctly, including session management and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and login status to improve your experience.
• Analytics cookies: Collect anonymized data about how users interact with the platform to help us improve performance and usability.
• Marketing cookies: Used to deliver relevant promotional content. These are only activated with your explicit consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phmcao platform.

11. Minors & Age Restriction

phmcao strictly prohibits access to its platform by individuals under 21 years of age, in accordance with PAGCOR regulations and Philippine gaming laws. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data and close the associated account.

If you believe a minor has registered on phmcao or accessed the platform, please contact our support team immediately at [email protected].

12. Changes to This Privacy Policy

phmcao reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification. The "Last Updated" date at the top of this page will be revised accordingly. Your continued use of phmcao following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact phmcao's Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 through the phmcao platform after logging in.
• Response Time: phmcao aims to respond to all data subject requests within fifteen (15) business days.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.