This Privacy Policy applies to all personal data collected and processed by pphpg in connection with your use of the pphpg platform at https://pphpg.cam, the pphpg mobile application, and any related services. It is published in compliance with Republic Act No. 10173 (the Data Privacy Act of 2012) and its implementing rules and regulations, enforced by the National Privacy Commission (NPC) of the Philippines.
01 Introduction & Scope
pphpg ("we", "us", "our", "the Company", "the Platform") operates the online casino and sports betting website accessible at https://pphpg.cam and associated mobile applications (collectively, "the Platform"). We take the privacy and security of your personal information seriously and are committed to processing it lawfully, fairly, and transparently.
This Privacy Policy describes how pphpg collects, uses, stores, discloses, and protects the personal data of all individuals who interact with our Platform, including registered players, prospective users, and visitors ("you", "your", "Data Subject"). It also describes your rights as a data subject under the Data Privacy Act of 2012 and how to exercise them.
By registering an account, making a deposit, placing a bet, or otherwise using the pphpg Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
This Policy should be read alongside pphpg's Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform.
02 Data Controller
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller — the entity that determines the purposes and means of processing your personal data — is pphpg, the operator of the platform accessible at pphpg.cam.
pphpg has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. The DPO can be contacted at [email protected] (plain text — not a clickable link). All data privacy inquiries, access requests, and complaints should be directed to the DPO using the contact details in Section 15 of this Policy.
03 Personal Data We Collect
pphpg collects the following categories of personal data in the course of providing its services to Filipino players:
3.1 Identity Data
Full Legal Name Date of Birth Gender Nationality Government ID Type & Number Profile Photo (KYC)
Identity data is collected during account registration and KYC (Know Your Customer) verification. This includes copies of valid Philippine government-issued identification such as UMID, SSS ID, PhilHealth ID, Driver's License, or Passport.
3.2 Contact Data
Email Address Mobile Number Residential Address City / Province
3.3 Financial Data
GCash Account Reference PayMaya Account Reference Bank Account Details Transaction History Deposit & Withdrawal Records
pphpg does not store full credit or debit card numbers. All payment processing is handled by regulated third-party payment processors, and pphpg only retains transaction references and status indicators.
3.4 Account & Gaming Data
Username Account Balance Bet History Game Session Logs Bonus Redemption Records VIP Tier Status Self-Exclusion Records
3.5 Technical & Usage Data
IP Address Device Identifiers Browser Type & Version Operating System Pages Visited Session Duration Click-Through Data Referral Source
3.6 Communications Data
Live Chat Transcripts Support Ticket Content Email Correspondence Survey Responses
04 How We Collect Personal Data
pphpg collects your personal data through the following means:
- Direct Submission: Information you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or completing a survey or promotional form.
- Automated Collection: Technical and usage data collected automatically when you access and use the Platform, including through cookies, server logs, and device fingerprinting technologies.
- Third-Party Sources: Information received from payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank) during transaction processing; identity verification service providers during KYC checks; and fraud prevention and AML compliance data providers.
- Publicly Available Sources: In limited circumstances, pphpg may supplement your profile with information from publicly available Philippine government databases or regulatory sanction lists for AML compliance purposes.
05 Legal Basis for Processing
pphpg processes your personal data on one or more of the following lawful bases as defined under the Data Privacy Act of 2012:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Contractual necessity; Performance of a contract |
| KYC identity verification | Legal obligation (PAGCOR / AML compliance) |
| Payment processing and fraud prevention | Contractual necessity; Legal obligation; Legitimate interest |
| Game provision and betting services | Contractual necessity; Performance of a contract |
| Customer support | Contractual necessity; Legitimate interest |
| Regulatory reporting (AML / CTF) | Legal obligation |
| Marketing communications (opt-in) | Consent |
| Platform analytics and improvement | Legitimate interest |
| Responsible gaming monitoring | Legal obligation; Legitimate interest |
06 How We Use Your Personal Data
pphpg uses your personal data strictly for the purposes described at collection. These purposes include:
- Creating, maintaining, and administering your pphpg player account.
- Verifying your identity and age (21+ requirement) in compliance with PAGCOR regulations.
- Processing deposits, withdrawals, and all financial transactions on the Platform.
- Providing access to all casino games, live dealer tables, slots, bingo, and sports betting markets.
- Calculating and crediting bonuses, promotions, and VIP rewards to your account.
- Detecting, investigating, and preventing fraud, money laundering, and prohibited account activity.
- Fulfilling legal and regulatory obligations including AML and CTF reporting requirements.
- Providing customer support via live chat, email, and phone.
- Sending transactional notifications relating to your account (deposits confirmed, withdrawals processed, login alerts, security alerts).
- Sending promotional and marketing communications where you have provided explicit opt-in consent. You may withdraw consent at any time via account settings or by contacting support.
- Monitoring gameplay for responsible gaming purposes and enforcing self-exclusion and deposit limit settings.
- Improving the Platform through analytics, A/B testing, and user research.
- Enforcing our Terms & Conditions and other pphpg policies.
pphpg does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is shared with service providers only as necessary to deliver the services described in this Policy.
07 Cookies & Tracking Technologies
pphpg uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to operate and improve the Platform, authenticate sessions, detect fraud, and measure the effectiveness of our communications. The types of cookies we use include:
- Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in between pages and security cookies that protect against CSRF attacks. These cookies cannot be disabled without significantly impairing Platform functionality.
- Functional Cookies: Remember your preferences (e.g., language, display settings) and personalize your experience on return visits.
- Analytics Cookies: Help us understand how players use the Platform by collecting aggregated, anonymised usage statistics. This data informs Platform improvements and feature development.
- Security & Fraud Detection Cookies: Used to identify unusual access patterns, detect automated bots, and prevent account takeover attacks.
You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair your ability to use the Platform, including preventing successful login. Your continued use of the Platform following our cookie notice constitutes acceptance of our cookie practices.
08 Data Sharing & Third-Party Disclosure
pphpg may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:
- Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers for the processing of deposits and withdrawals. These providers are subject to their own data protection obligations under Philippine law.
- Identity Verification Providers: Third-party KYC service providers who assist in verifying the identity and age of registered players in compliance with PAGCOR requirements.
- Game Content Providers: Licensed game suppliers and software providers whose games are hosted on the pphpg Platform. These providers may receive technical session data necessary for game operation. They do not receive your full personal profile.
- AML Compliance Services: Fraud detection, sanctions screening, and anti-money laundering service providers who assist pphpg in meeting its regulatory obligations.
- Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies where disclosure is required by law or lawful order.
- Law Enforcement: Philippine law enforcement agencies where disclosure is required in connection with a criminal investigation or by valid legal process.
- IT Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity providers that support Platform operations under data processing agreements with pphpg.
All third-party service providers engaged by pphpg are required to comply with applicable data protection laws and to process personal data only on pphpg's instructions. pphpg does not authorize any service provider to use your personal data for their own commercial purposes.
09 Data Retention
pphpg retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, regulatory, or reporting requirements. Specific retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data (active accounts) | Duration of account + 5 years after closure | PAGCOR / AML regulatory requirement |
| KYC documents | 5 years from date of submission | AML / CTF compliance |
| Financial transaction records | 5 years from transaction date | AML compliance; tax obligations |
| Betting and game session history | 3 years from session date | Regulatory requirement; dispute resolution |
| Customer support communications | 3 years from last contact | Legitimate interest; dispute resolution |
| Marketing consent records | Until consent withdrawn + 3 years | Legal obligation to evidence consent |
| Technical / access logs | 12 months | Security; fraud detection |
| Self-exclusion records | Permanent (for re-admission purposes) | Responsible gaming / PAGCOR requirement |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual. Where anonymisation is not technically feasible, the data is securely destroyed.
10 Data Security
pphpg implements a comprehensive set of technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and pphpg servers.
- Encryption at rest for sensitive data fields including passwords (bcrypt hashing), financial data, and government ID details.
- Multi-factor authentication (MFA) options for player accounts and mandatory MFA for all internal staff accessing production systems.
- Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
- Regular third-party penetration testing and vulnerability assessments of the Platform.
- Intrusion detection systems, DDoS protection, and Web Application Firewall (WAF) deployment.
- Automated fraud and anomaly detection monitoring all account activities in real time.
- Comprehensive employee data privacy training and confidentiality obligations.
- Incident response procedures for detecting, containing, and notifying affected parties in the event of a personal data breach.
While pphpg takes all reasonable technical measures to protect your data, the security of your account also depends on your own actions. You are responsible for keeping your login credentials confidential, using a strong unique password, and notifying pphpg immediately if you suspect unauthorized access to your account.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected data subjects, pphpg will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the Data Privacy Act of 2012.
11 Your Rights as a Data Subject
Under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the following rights with respect to your personal data held by pphpg:
Right to be Informed
To be told what personal data pphpg holds about you, the purposes of processing, and who it may be shared with.
Right to Access
To request a copy of all personal data pphpg holds about you. We will respond to verified access requests within 30 days.
Right to Rectification
To request correction of inaccurate or incomplete personal data. You can update most account details directly via account settings.
Right to Erasure
To request deletion of your personal data where it is no longer necessary for the purpose collected, subject to overriding legal retention obligations.
Right to Object
To object to processing of your data for direct marketing purposes. Opt-out of marketing communications at any time via account settings.
Right to Data Portability
To receive a copy of the personal data you have provided to pphpg in a structured, commonly used, machine-readable format.
Right to File a Complaint
To file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.
Right to Withdraw Consent
To withdraw consent to data processing at any time where processing is based on consent, without affecting the lawfulness of prior processing.
To exercise any of your rights, please contact our Data Protection Officer at [email protected] (plain text — not a clickable link) with the subject line "Data Subject Request". We will acknowledge your request within 5 business days and respond fully within 30 calendar days. We may need to verify your identity before processing your request.
12 Children's Privacy
The pphpg Platform is strictly intended for persons aged 21 years and above in accordance with PAGCOR regulations governing online gambling in the Philippines. pphpg does not knowingly collect or process personal data of persons under the age of 21. If pphpg becomes aware that it has inadvertently collected data from a person under 21, all such data will be immediately deleted and the account suspended.
If you are a parent or guardian and believe that a minor has registered on pphpg or provided their personal data to the Platform, please contact us immediately at [email protected]. We will investigate and take appropriate action without undue delay.
13 Cross-Border Data Transfers
The pphpg Platform serves Filipino players and primarily processes data within the Republic of the Philippines. However, some of our third-party service providers — including cloud hosting infrastructure providers, game content suppliers, and cybersecurity services — may be based in or operate infrastructure in other countries.
Where personal data is transferred outside the Philippines, pphpg ensures that appropriate safeguards are in place to protect that data, including contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law, and where applicable, the data subject's explicit consent to the transfer.
pphpg complies with the cross-border transfer provisions of the Data Privacy Act of 2012 and the implementing rules of the National Privacy Commission. Personal data transferred abroad remains subject to this Privacy Policy and the Data Privacy Act regardless of where it is processed.
14 Updates to This Privacy Policy
pphpg may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, pphpg will notify registered players via email or in-platform notification at least 7 days before the revised Policy takes effect, where practicable.
The date of the most recent revision is displayed at the top of this page as "Last Updated." Your continued use of the pphpg Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must discontinue use and close your account before the effective date.
We encourage you to review this Privacy Policy periodically to remain informed of how pphpg collects, uses, and protects your personal information.
15 Contact & Complaints
For any questions, concerns, or requests relating to this Privacy Policy or pphpg's data processing practices, please contact our Data Protection Officer through the following channels:
- Email (DPO): [email protected] — Subject: "Data Privacy Inquiry" or "Data Subject Request" (plain text — not a clickable link)
- Live Chat: Available 24/7 via the live chat widget on pphpg.cam. For data subject requests, please use the subject line "Data Privacy Request" and our DPO team will be assigned to your query.
- Response Times: Acknowledgement within 5 business days. Full response within 30 calendar days. Complex requests may require an extension of up to an additional 30 days, which we will notify you of within the initial 30-day period.
If you are not satisfied with pphpg's response to a data privacy concern or complaint, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, the independent regulator responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available on the NPC's official website.
Your Privacy at pphpg — At a Glance
Key commitments pphpg makes to every Filipino player regarding their personal data.
256-Bit SSL Encryption
All personal data transmitted between your device and pphpg is encrypted using bank-grade 256-bit SSL/TLS. Your information is never transmitted in plain text.
Data Privacy Act Compliant
pphpg processes all personal data in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and the regulations of the National Privacy Commission.
No Sale of Your Data
pphpg never sells, rents, or trades your personal data to third parties for their own marketing or commercial purposes. Your data belongs to you.
Full Data Subject Rights
Access, rectify, export, or request deletion of your personal data at any time. Data subject requests are acknowledged within 5 business days.
Defined Retention Periods
pphpg retains your data only as long as legally required. After applicable retention periods expire, data is securely deleted or irreversibly anonymised.
Breach Notification
In the event of a data breach affecting your personal data, pphpg will notify the NPC within 72 hours and inform affected players without undue delay.
Questions About Your pphpg Data?
Our Data Protection Officer and 24/7 support team are ready to help with any privacy inquiry, data access request, or account question. Login to access live support now. pphpg — Philippines' trusted casino. 21+ only. Gamble responsibly.
Login to pphpg View FAQ