Privacy Policy of phamco Gaming Platform

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all personal information collected, processed, and stored by phamco Gaming Corporation ("phamco", "we", "us", "our") through our website, mobile applications, and related services (collectively, the "Platform"). By creating an account, accessing, or using phamco, you acknowledge that you have read, understood, and consent to the collection and processing of your personal data as described in this Policy.

phamco is registered with the National Privacy Commission (NPC) of the Philippines and complies with all applicable data protection laws, including the Data Privacy Act of 2012, its Implementing Rules and Regulations (IRR), and relevant NPC Circulars. We are committed to the principles of transparency, legitimate purpose, and proportionality in data processing.

2. Key Definitions

For purposes of this Privacy Policy:

• "Personal Information" or "Personal Data" means any information from which the identity of an individual can be reasonably and directly ascertained, or when combined with other information would directly and certainly identify an individual. This includes name, date of birth, address, phone number, email address, government-issued ID details, financial information, and gaming activity records.
• "Sensitive Personal Information" means personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic or sexual life, or any proceeding for any offense committed or alleged to have been committed. phamco collects limited sensitive personal information, primarily date of birth for age verification purposes.
• "Processing" means any operation or set of operations performed upon personal data, including collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure, or destruction of data.
• "Data Subject" means you, the individual to whom the personal data relates.
• "Consent" means any freely given, specific, informed indication of will, whereby you agree to the collection and processing of your personal data.

3. Information We Collect

3.1 Information You Provide Directly

When you register for a phamco account, we collect the following information that you provide to us:

• Account Registration Data: Full legal name, date of birth, email address, mobile phone number, username, and password (encrypted).
• Identity Verification Data (KYC): Government-issued ID (PhilSys National ID, Driver's License, Passport, UMID, Postal ID, or other valid Philippine identification documents), selfie photograph for facial verification, proof of address (utility bill, bank statement, or barangay certificate dated within three months).
• Payment and Financial Information: Bank account details, e-wallet numbers (GCash, Maya), cryptocurrency wallet addresses, transaction history, deposit and withdrawal records. We do not store full credit or debit card numbers; payment processing is handled by PCI-DSS compliant third-party processors.
• Communication Data: Messages sent to customer support via live chat, email, or contact forms, feedback, complaints, and survey responses.
• Voluntary Profile Information: Optional information such as profile picture, preferred language, and communication preferences.

3.2 Information Automatically Collected

When you use phamco, we automatically collect certain technical and usage information through cookies, web beacons, and similar technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, advertising ID, or similar unique identifiers).
• Connection Information: IP address, internet service provider (ISP), geographic location (country, region, city based on IP), connection type (Wi-Fi, mobile data).
• Usage and Activity Data: Pages visited, time spent on pages, games played, bets placed, wins and losses, login times, session duration, click patterns, navigation paths, referral sources.
• Cookies and Tracking Technologies: Session cookies (temporary, deleted when you close your browser), persistent cookies (remain on your device for a set period), analytics cookies (Google Analytics, Mixpanel), and functional cookies (language preference, login status). You may disable cookies in your browser settings, but this may limit functionality.

3.3 Information from Third Parties

phamco may receive information about you from third parties, including:

• Payment Processors: Transaction status, payment method verification, fraud detection signals from GCash, Maya, banks, cryptocurrency exchanges, and payment gateways.
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from specialized KYC service providers.
• Fraud Prevention and Security Providers: Risk scores, device fingerprinting, IP reputation data, and behavioral analytics from cybersecurity partners.
• Marketing and Analytics Partners: Aggregated demographic data, campaign performance metrics, and user acquisition sources from advertising networks (subject to separate consent).

4. Purpose and Legal Basis for Processing

phamco processes your personal data for the following purposes, each with a lawful basis under the Data Privacy Act:

Purpose	Legal Basis
Account creation and management	Performance of contract; Consent
Identity verification (KYC) and age verification (21+)	Legal obligation (PAGCOR regulations); Consent
Processing deposits, withdrawals, and payment transactions	Performance of contract; Consent
Providing gaming services (slots, bingo, fishing, casino, sports betting)	Performance of contract; Consent
Customer support and communication	Performance of contract; Legitimate interest
Fraud prevention, security monitoring, and anti-money laundering (AML)	Legal obligation; Legitimate interest
Compliance with PAGCOR licensing requirements and regulatory reporting	Legal obligation
Marketing communications (promotions, bonuses, newsletters)	Consent (opt-in); you may opt-out at any time
Analytics and service improvement	Legitimate interest; Consent (for cookies)
Legal proceedings, dispute resolution, and enforcement of Terms	Legal obligation; Legitimate interest

4.1 Consent Withdrawal

Where we rely on your consent as the legal basis for processing, you have the right to withdraw your consent at any time by contacting us or adjusting your account settings. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Please note that certain processing activities (such as KYC verification) are required by law or necessary for contract performance and cannot be opted out of without closing your account.

5. How We Share Your Information

5.1 Third-Party Service Providers

phamco engages trusted third-party service providers to perform functions on our behalf. These providers have access to personal data only as necessary to perform their functions and are contractually obligated to protect your data and use it solely for the purposes we specify. Categories of service providers include:

• Payment Processors: GCash, Maya, banks, cryptocurrency exchanges, and payment gateway providers for processing deposits and withdrawals.
• KYC and Identity Verification Providers: Specialized vendors that verify your identity, age, and address using government databases and biometric technology.
• Cloud Hosting and Data Storage Providers: Servers and databases hosted in secure data centers (ISO 27001 certified) located in the Philippines and Southeast Asia.
• Customer Support Software: Live chat platforms, helpdesk ticketing systems, and CRM tools to manage support interactions.
• Cybersecurity and Fraud Prevention: Tools for threat detection, device fingerprinting, IP analysis, and anti-fraud monitoring.
• Analytics and Marketing Platforms: Google Analytics, Facebook Pixel, Mixpanel, and email marketing services (subject to your marketing consent).

5.2 Legal and Regulatory Authorities

phamco may disclose your personal data to government agencies, law enforcement, or regulatory bodies when required by law or in response to valid legal requests, including:

• Philippine Amusement and Gaming Corporation (PAGCOR) for licensing compliance, audits, and regulatory investigations.
• Anti-Money Laundering Council (AMLC) for suspicious transaction reports as required by the Anti-Money Laundering Act (Republic Act No. 9160, as amended).
• National Privacy Commission (NPC) in response to data protection inquiries or enforcement actions.
• Philippine National Police (PNP) or National Bureau of Investigation (NBI) in criminal investigations.
• Courts and tribunals in connection with legal proceedings.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you via email and prominent notice on the phamco Platform before your data is transferred and becomes subject to a different privacy policy.

5.4 No Sale of Personal Data

phamco does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Any data sharing is strictly limited to the purposes described in this Policy and subject to appropriate safeguards.

6. Data Security Measures

phamco employs industry-standard technical, physical, and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and phamco servers is encrypted using TLS 1.3. Passwords are hashed using bcrypt with salt. Payment card data (when applicable) is tokenized and never stored on our servers.
• Access Controls: Personal data is accessible only to authorized employees and contractors on a need-to-know basis. Multi-factor authentication (MFA) is required for administrative access.
• Firewalls and Intrusion Detection: Network-level firewalls, web application firewalls (WAF), and intrusion detection/prevention systems (IDS/IPS) monitor and block malicious traffic.
• Regular Security Audits: Annual penetration testing, vulnerability assessments, and security audits conducted by independent third-party cybersecurity firms.
• Data Backup and Recovery: Regular encrypted backups stored in geographically separate locations to ensure business continuity and disaster recovery.
• Employee Training: All phamco employees undergo mandatory data privacy and security training upon hiring and annually thereafter.

Despite our security measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and should notify us immediately of any suspected unauthorized access.

7. Data Retention

phamco retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active account plus 5 years after account closure (PAGCOR and AML compliance requirements).
• KYC Documents: Retained for 5 years after account closure as required by AMLC regulations.
• Transaction Records: Retained for 7 years in accordance with Bureau of Internal Revenue (BIR) and AMLC record-keeping requirements.
• Customer Support Communications: Retained for 3 years for quality assurance and dispute resolution.
• Marketing Consent and Communication Records: Retained until consent is withdrawn, plus 1 year for compliance documentation.
• Website Logs and Analytics Data: Aggregated and anonymized data may be retained indefinitely; personal data in logs is deleted after 12 months.

Upon expiration of the retention period, personal data is securely deleted or anonymized such that it can no longer be associated with you. You may request earlier deletion of certain data by exercising your right to erasure, subject to legal and regulatory limitations.

8. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data:

8.1 Right to Be Informed

You have the right to be informed of the nature, purpose, and extent of the processing of your personal data. This Privacy Policy serves as our primary disclosure. We will provide additional information upon request.

8.2 Right to Access

You have the right to obtain from phamco confirmation of whether or not personal data concerning you is being processed, and if so, to access that data. You may request a copy of your personal data by contacting us. We will provide the information in a structured, commonly used, and machine-readable format within 15 days of your request.

8.3 Right to Object

You have the right to object to the processing of your personal data, including processing for direct marketing purposes. You may opt out of marketing communications at any time by clicking "unsubscribe" in emails or adjusting settings in your account.

8.4 Right to Erasure or Blocking

You have the right to request deletion or blocking of your personal data when: (1) it is no longer necessary for the purposes for which it was collected; (2) you withdraw consent and there is no other legal basis; (3) you object to processing and there are no overriding legitimate grounds; (4) the data has been unlawfully processed; or (5) erasure is required for compliance with legal obligations. This right is subject to legal retention requirements (e.g., PAGCOR, AMLC, BIR).

8.5 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You may update most information directly in your phamco account settings. For changes to verified KYC data (name, date of birth), contact customer support with supporting documentation.

8.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. Upon request, we will provide your account and transaction data in CSV or JSON format.

8.7 Right to Lodge a Complaint

If you believe phamco has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC). Contact information: National Privacy Commission, 5th Floor, Philippine International Convention Center, Vicente Sotto Street, Pasay City; Email: [email protected]; Hotline: +63 2 8234-2228.

8.8 How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection Officer (DPO) at [email protected] or submit a request via your account settings. We will respond to your request within 15 days. Requests must include sufficient information to verify your identity (name, registered email, account username). For security purposes, we may request additional verification.

9. Cookies and Tracking Technologies

phamco uses cookies and similar tracking technologies to provide, improve, and personalize your experience. A cookie is a small text file stored on your device. Types of cookies we use:

• Essential Cookies: Necessary for the operation of the Platform, including session management, authentication, and security. These cannot be disabled.
• Functional Cookies: Enable personalization features such as language preference, remember me functionality, and saved game settings.
• Analytics Cookies: Help us understand how you use phamco by collecting anonymous usage data (pages visited, time on site, bounce rate). We use Google Analytics (subject to Google's privacy policy).
• Marketing Cookies: Track your activity across websites to deliver targeted advertising. These require your consent and can be disabled in your account settings or browser.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling essential cookies may prevent you from accessing certain features of phamco. For more information on managing cookies, visit your browser's help section.

10. International Data Transfers

phamco primarily stores and processes your personal data within the Philippines and Southeast Asia. However, some of our service providers (cloud hosting, analytics tools) may transfer data to servers located outside the Philippines. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the National Privacy Commission.
• Adequacy determinations confirming that the destination country provides adequate data protection.
• Binding Corporate Rules for multinational service providers.

By using phamco, you consent to such transfers subject to the safeguards described above.

11. Children's Privacy

phamco is an adult-only gaming platform. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately and close the associated account. If you believe a minor has provided personal data to phamco, please contact us at [email protected].

12. Changes to This Privacy Policy

phamco reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. We will notify you of material changes by:

• Posting a notice on the phamco homepage for at least 30 days.
• Sending an email notification to your registered email address.
• Displaying a pop-up notification when you next log in.

The "Last Updated" date at the top of this Policy indicates when it was last revised. Your continued use of phamco after the effective date of changes constitutes acceptance of the updated Policy. If you do not agree to the changes, you must cease using phamco and close your account.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or phamco's data processing practices, please contact us:

• Data Protection Officer (DPO): [email protected]
• Customer Support: 24/7 Live Chat on phamco.cam or [email protected]
• Mailing Address: phamco Gaming Corporation, Metro Manila, Philippines
• National Privacy Commission (Complaints): [email protected] | +63 2 8234-2228