phmaca Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, storage, use, disclosure, and protection of personal data and sensitive personal information (collectively, "Personal Information") by phmaca ("we", "us", "our"), operating under the domain phmaca.cam. This Policy applies to all users ("you", "User", "Player") of our online casino and sports betting platform, including our website, mobile application, and related services (collectively, the "Service").

phmaca is committed to protecting your privacy and complying with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission of the Philippines. By accessing or using the Service, you acknowledge that you have read, understood, and consent to the collection and processing of your Personal Information as described in this Policy.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Service. If you do not agree with the terms of this Policy, you must not use the Service and should refrain from creating an account with phmaca.

2. Data Controller and Contact Information

phmaca acts as the data controller for Personal Information collected through the Service. We determine the purposes and means of processing your Personal Information and are responsible for ensuring compliance with applicable data protection laws.

Data Protection Officer Contact:
If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, you may contact our Data Protection Officer at:

• Email: [email protected] (with subject line "Privacy Inquiry" or "Data Protection Request")
• Response Time: We endeavor to respond to privacy inquiries within 15 business days, as required by Philippine data protection regulations.

3. Personal Information We Collect

phmaca collects various categories of Personal Information necessary to provide the Service, comply with legal obligations, and enhance your gaming experience. The types of information we collect include:

3.1 Information You Provide Directly

When you register for an account, make deposits or withdrawals, or interact with our customer support, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (e.g., national ID, passport number, driver's license)
• Contact Information: Residential address, email address, mobile phone number
• Financial Information: Payment method details (GCash account, PayMaya account, bank account numbers), transaction history, deposit and withdrawal records
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Identity Verification Documents: Copies of government-issued IDs, proof of address (utility bills, bank statements), selfie photographs for identity verification
• Communication Records: Content of live chat conversations, email correspondence, customer support tickets, feedback and complaints

3.2 Information Collected Automatically

When you access and use the Service, we automatically collect technical and usage information through cookies, web beacons, and similar technologies:

• Device Information: Device type, operating system, browser type and version, device identifiers (IMEI, MAC address), screen resolution
• Usage Data: Pages visited, games played, bet history, session duration, features accessed, search queries, click patterns
• Network Information: IP address, internet service provider, approximate geographic location (derived from IP address), connection timestamps
• Cookies and Tracking Technologies: Session cookies, persistent cookies, analytics cookies, preference cookies (see Section 10 for detailed cookie information)

3.3 Information from Third-Party Sources

We may receive Personal Information about you from third-party service providers to verify your identity, prevent fraud, and comply with regulatory requirements:

• Payment Processors: Transaction verification data from GCash, PayMaya, banks, and other payment service providers
• Identity Verification Services: Age verification results, identity authentication data, fraud risk assessments
• Gaming Software Providers: Game outcome data, RNG results, gameplay statistics
• Anti-Fraud Services: Fraud detection scores, device fingerprinting data, behavioral analytics

4. Purposes of Data Processing

phmaca collects and processes your Personal Information for specific, legitimate purposes, including:

4.1 Account Management and Service Provision

• Creating and maintaining your user account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to games, live casino, sports betting, and other gaming services
• Managing bonuses, promotions, and loyalty programs
• Maintaining transaction records and account history
• Providing customer support and responding to inquiries

4.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement) as mandated by Philippine law
• Complying with PAGCOR licensing requirements and gaming regulations
• Meeting anti-money laundering (AML) and counter-terrorist financing (CTF) obligations under Philippine law
• Conducting Know Your Customer (KYC) due diligence
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Responding to lawful requests from law enforcement, regulatory authorities, and courts
• Maintaining records required by PAGCOR and other regulatory bodies

4.3 Security and Fraud Prevention

• Detecting and preventing fraud, collusion, money laundering, and other illegal activities
• Monitoring for suspicious betting patterns and account activity
• Protecting against unauthorized account access and cyber attacks
• Enforcing our Terms and Conditions and preventing terms violations
• Identifying and blocking duplicate accounts
• Investigating disputes, complaints, and potential breaches

4.4 Marketing and Communication

• Sending promotional emails about new games, bonuses, and special offers (with your consent)
• Providing personalized gaming recommendations based on your preferences
• Conducting customer satisfaction surveys and market research
• Informing you about changes to our services, terms, or policies

4.5 Service Improvement and Analytics

• Analyzing usage patterns to improve user experience and site performance
• Testing new features and game offerings
• Conducting internal research and statistical analysis
• Optimizing our platform for different devices and connection speeds

4.6 Responsible Gaming

• Monitoring for signs of problem gambling behavior
• Implementing and enforcing deposit limits, loss limits, and self-exclusion requests
• Providing access to responsible gaming tools and resources

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, phmaca processes your Personal Information based on the following legal grounds:

• Consent: You have given explicit consent for processing (e.g., marketing communications, optional data collection)
• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services, processing payments)
• Legal Obligation: Processing is required to comply with Philippine laws, including PAGCOR regulations, AML laws, and tax obligations
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and service improvement, provided such interests are not overridden by your fundamental rights and freedoms

6. Data Sharing and Disclosure

phmaca does not sell, rent, or trade your Personal Information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients for the purposes described in Section 4:

6.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, banks, and other financial institutions to process deposits and withdrawals
• Gaming Software Providers: Suppliers of slots, live casino, sports betting platforms, and other games
• Identity Verification Services: Third-party providers that verify your age, identity, and address
• Cloud Hosting Providers: Companies that host our servers and databases
• Customer Support Tools: Live chat software providers and ticketing systems
• Marketing and Analytics Partners: Email service providers, analytics platforms (with your consent for marketing)

All service providers are contractually obligated to maintain the confidentiality and security of your Personal Information and may only use it for the specific purposes we authorize.

6.2 Regulatory and Law Enforcement Authorities

We may disclose Personal Information to:

• Philippine Amusement and Gaming Corporation (PAGCOR) for licensing and compliance purposes
• Anti-Money Laundering Council (AMLC) for suspicious transaction reports
• Bureau of Internal Revenue (BIR) for tax reporting
• National Privacy Commission for data protection compliance
• Law enforcement agencies when required by court order, subpoena, or lawful request

6.3 Corporate Transactions

If phmaca undergoes a merger, acquisition, reorganization, or sale of assets, your Personal Information may be transferred to the successor entity, subject to the same privacy protections outlined in this Policy. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

6.4 Consent-Based Sharing

We may share your Personal Information with other third parties where you have given explicit consent for such disclosure.

7. Data Retention

phmaca retains your Personal Information only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.

7.1 Active Accounts

While your account remains active, we retain all Personal Information necessary to provide the Service, maintain your account history, and comply with ongoing regulatory obligations.

7.2 Closed or Inactive Accounts

After account closure or extended inactivity, we retain Personal Information for the following periods:

• Transaction Records: 5 years from the date of transaction (required by PAGCOR and anti-money laundering regulations)
• Identity Verification Documents: 5 years from account closure (required by KYC/AML regulations)
• Gaming History and Bet Records: 5 years (required by PAGCOR licensing conditions)
• Customer Support Communications: 3 years for dispute resolution and quality assurance purposes
• Marketing Data: Until you withdraw consent or request deletion, whichever comes first

7.3 Legal Holds

If your account is subject to a legal investigation, dispute, audit, or regulatory inquiry, we may retain relevant Personal Information beyond standard retention periods until the matter is resolved.

7.4 Deletion After Retention Period

Once the applicable retention period expires, we securely delete or anonymize your Personal Information so that it can no longer identify you. Anonymized data may be retained indefinitely for statistical and research purposes.

8. Data Security Measures

phmaca implements technical, physical, and organizational security measures to protect your Personal Information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

8.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols
• Secure Storage: Personal Information is stored in encrypted databases with restricted access controls
• Password Protection: User passwords are hashed using industry-standard cryptographic algorithms and never stored in plain text
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and intrusion detection/prevention systems
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration testing

8.2 Access Controls

• Personal Information is accessible only to authorized personnel who require it to perform their job functions
• Employees sign confidentiality agreements and receive data protection training
• Access to sensitive data is logged and monitored
• Role-based access controls limit data exposure based on job responsibilities

8.3 Third-Party Security

• All service providers with access to Personal Information must meet our security standards
• Data processing agreements include security obligations and audit rights
• We assess third-party security practices before engagement

8.4 Incident Response

In the event of a data breach that poses a risk to your rights and freedoms, phmaca will:

• Notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required by law
• Inform affected users without undue delay if the breach is likely to result in high risk to their rights
• Take immediate steps to contain the breach and mitigate harm
• Conduct a thorough investigation and implement corrective measures

9. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your Personal Information:

9.1 Right to Be Informed

You have the right to be informed about the collection and processing of your Personal Information, including the purposes, legal basis, recipients, and retention periods. This Privacy Policy serves to inform you of these matters.

9.2 Right to Access

You have the right to obtain confirmation of whether we are processing your Personal Information and to access such information. You may request a copy of your Personal Information in a commonly used electronic format.

9.3 Right to Rectification

If your Personal Information is inaccurate, incomplete, or outdated, you have the right to request correction or update. You can update most information directly through your account settings or by contacting customer support.

9.4 Right to Erasure or Blocking

You may request deletion or blocking of your Personal Information in the following circumstances:

• The information is no longer necessary for the purposes it was collected
• You withdraw consent (where consent was the legal basis for processing)
• The information was unlawfully processed
• Erasure is required to comply with a legal obligation

However, we may retain certain information where required by law (e.g., transaction records for 5 years) or where we have legitimate grounds to do so (e.g., resolving disputes, enforcing agreements).

9.5 Right to Object

You may object to the processing of your Personal Information for:

• Direct marketing purposes (including profiling for marketing)
• Processing based on legitimate interests

We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests or rights.

9.6 Right to Data Portability

Where technically feasible, you have the right to receive your Personal Information in a structured, commonly used, machine-readable format and to transmit it to another data controller.

9.7 Right to Lodge a Complaint

If you believe phmaca has violated your privacy rights or failed to comply with data protection laws, you have the right to file a complaint with the National Privacy Commission of the Philippines.

9.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond to your request within 15 business days as required by Philippine law. To protect your privacy, we may need to verify your identity before fulfilling your request.

10. Cookies and Tracking Technologies

phmaca uses cookies, web beacons, and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., session management, security, load balancing). These cannot be disabled.
• Functional Cookies: Remember your preferences and settings (e.g., language preference, username for login convenience)
• Analytics Cookies: Help us understand how visitors interact with our website, which pages are most popular, and where improvements are needed
• Marketing Cookies: Track your visits across websites to deliver targeted advertising (only with your consent)

10.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling certain cookies may affect the functionality of the Service. Essential cookies cannot be disabled if you wish to use the Service.

10.3 Third-Party Cookies

Some cookies are placed by third-party service providers (e.g., analytics providers, payment processors, game suppliers). These third parties have their own privacy policies governing their use of cookies.

11. International Data Transfers

phmaca primarily stores and processes Personal Information within the Philippines. However, some of our service providers (such as cloud hosting providers and gaming software suppliers) may be located in other countries. When we transfer Personal Information outside the Philippines, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the National Privacy Commission
• Data processing agreements with security and confidentiality obligations
• Verification that the recipient country has adequate data protection laws

By using the Service, you acknowledge and consent to such transfers, provided appropriate safeguards are maintained.

12. Children's Privacy

The Service is strictly intended for users aged 21 years and older. phmaca does not knowingly collect Personal Information from individuals under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will promptly delete such information and close the associated account. Parents or guardians who believe their child has provided Personal Information to phmaca should contact us immediately at [email protected].

13. Changes to This Privacy Policy

phmaca reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated through:

• Email notification to your registered email address
• Prominent notice on the phmaca website
• Notification upon your next login to the Service

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Service after such notification constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account by contacting customer support.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact:

• Email: [email protected] (Subject: "Privacy Inquiry")
• Data Protection Officer: Available through the same email address
• Response Time: We aim to respond within 15 business days

If you are not satisfied with our response, you may file a complaint with:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center, Vicente Sotto St., Pasay City, Metro Manila, Philippines
• Email: [email protected]
• Website: www.privacy.gov.ph