phmcao Privacy Policy

1. Introduction

phmcao ("we," "us," "our," "Platform") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and safeguard information obtained from users ("you," "your," "User") of our online gaming platform located at phmcao.cam.

By creating an account, accessing our Platform, or using our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you must not use phmcao services.

This Privacy Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC), as well as applicable Philippine Amusement and Gaming Corporation (PAGCOR) regulations.

2. Data Controller Information

For purposes of the Philippine Data Privacy Act, phmcao acts as the data controller for personal information collected through our Platform.

Data Controller: phmcao
Registered Address: Metro Manila, Philippines
Contact Email: [email protected]
Data Protection Officer: [email protected]

Our Data Protection Officer (DPO) is responsible for overseeing compliance with data protection laws, handling privacy inquiries, and coordinating with the National Privacy Commission when required.

3. Information We Collect

phmcao collects various types of personal information to provide, maintain, and improve our services. The information we collect falls into the following categories:

3.1 Information You Provide Directly

When you register for a phmcao account, you voluntarily provide the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address, postal code
• Identification Documents: Government-issued ID (passport, driver's license, UMID, SSS ID, PhilHealth ID, etc.), ID number, photo identification
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Financial Information: Payment method details (GCash account, PayMaya account, bank account information), transaction history, deposit and withdrawal records
• Communication Data: Messages sent to customer support, chat logs, feedback, survey responses

3.2 Information Collected Automatically

When you access or use phmcao, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IP address, MAC address)
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, date and time of access, games played, betting patterns
• Location Data: IP-based geolocation to verify your jurisdiction and ensure compliance with gaming regulations
• Cookies & Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags (see Section 10 for details)
• Gaming Activity: Game choices, bet amounts, win/loss records, bonus usage, wagering requirements progress

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: GCash, PayMaya, and other payment service providers share transaction verification data
• Identity Verification Services: Third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) verification providers
• Game Providers: Our licensed game suppliers may provide gameplay statistics and technical logs
• PAGCOR: Information shared as part of regulatory compliance, including self-exclusion lists

Data Category	Purpose	Legal Basis
Identity & Contact Info	Account creation, KYC verification	Contractual obligation, Legal compliance
Financial Information	Process deposits/withdrawals, AML compliance	Contractual obligation, Legal compliance
Gaming Activity	Provide services, fraud prevention, responsible gaming	Contractual obligation, Legitimate interest
Technical Data	Platform security, service improvement	Legitimate interest
Marketing Preferences	Send promotional communications	Consent (opt-in)

4. How We Use Your Information

phmcao uses your personal information for the following purposes:

4.1 Service Provision

• Create and manage your phmcao account
• Process deposits, withdrawals, and financial transactions
• Provide access to games, bonuses, and promotions
• Calculate winnings, losses, and account balances
• Process bonus claims and track wagering requirements
• Provide customer support and respond to inquiries

4.2 Regulatory Compliance

• Verify your identity and age (21+ requirement)
• Comply with PAGCOR licensing requirements
• Prevent money laundering and terrorist financing (AML/CTF compliance)
• Detect and prevent fraud, cheating, and abuse
• Maintain audit trails for regulatory inspections
• Report suspicious transactions to PAGCOR and AMLC as required by law
• Implement responsible gaming measures and self-exclusion programs

4.3 Platform Security & Integrity

• Monitor for unauthorized access, hacking attempts, and security breaches
• Detect multiple accounts, collusion, and bonus abuse
• Prevent automated betting systems and bots
• Investigate disputes, complaints, and Terms of Service violations
• Maintain system stability and prevent DDoS attacks

4.4 Service Improvement

• Analyze usage patterns to improve user experience
• Develop new games, features, and services
• Optimize Platform performance and load times
• Conduct A/B testing and user research
• Generate anonymized statistical reports and analytics

4.5 Marketing & Communications (With Your Consent)

• Send promotional offers, bonuses, and special deals
• Notify you of new games and features
• Send newsletters and loyalty program updates
• Personalize marketing content based on your preferences

Important: You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your account preferences. Opting out of marketing does not affect transactional communications (account notifications, withdrawal confirmations, etc.).

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, we must have a lawful basis to process your personal information. phmcao relies on the following legal bases:

5.1 Consent

You provide explicit consent when you create an account and accept our Terms & Conditions and Privacy Policy. You can withdraw consent for certain processing activities (e.g., marketing) at any time, though this may affect service availability.

5.2 Contractual Necessity

Processing is necessary to fulfill our contractual obligations to you, including providing gaming services, processing payments, and maintaining your account.

5.3 Legal Obligation

We are legally required to process certain information to comply with:

• PAGCOR licensing and regulatory requirements
• Philippine Anti-Money Laundering Act (AMLA) and its amendments
• Data Privacy Act of 2012 (RA 10173)
• Tax regulations and financial reporting requirements
• Court orders, subpoenas, or lawful government requests

5.4 Legitimate Interest

We have legitimate business interests in:

• Preventing fraud, cheating, and money laundering
• Maintaining Platform security and integrity
• Improving our services and user experience
• Protecting our legal rights and enforcing Terms of Service

We balance these interests against your privacy rights and implement safeguards to minimize privacy impact.

6. Data Sharing & Third Parties

phmcao does not sell your personal information to third parties. However, we may share your information with the following categories of recipients for legitimate business and legal purposes:

6.1 Service Providers

We engage trusted third-party service providers who process personal information on our behalf, including:

• Payment Processors: GCash, PayMaya, banks, and other financial institutions for deposit/withdrawal processing
• Identity Verification Services: KYC/AML compliance providers for age and identity verification
• Game Providers: Licensed game suppliers who operate games on our Platform
• Cloud Hosting Services: Data storage and server hosting providers
• Customer Support Tools: Live chat, ticketing, and CRM software providers
• Marketing Services: Email delivery platforms, SMS providers (only with your consent)

All service providers are contractually bound to protect your information, use it only for specified purposes, and comply with applicable data protection laws.

6.2 Regulatory Authorities

We are legally obligated to share information with government authorities, including:

• PAGCOR: For licensing compliance, audits, and responsible gaming enforcement
• Anti-Money Laundering Council (AMLC): For suspicious transaction reports
• National Privacy Commission (NPC): In case of data breach investigations or compliance inquiries
• Law Enforcement: When required by court order, subpoena, or lawful government request
• Tax Authorities: For tax compliance and financial reporting

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and Platform notice before your information is transferred and becomes subject to a different privacy policy.

6.4 Legal Protection

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Protect against fraud, security threats, or illegal activity
• Enforce our Terms & Conditions
• Protect the rights, property, or safety of phmcao, our users, or the public
• Respond to legal claims or disputes

7. Data Security Measures

phmcao implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

7.1 Technical Security

• Encryption: 256-bit SSL/TLS encryption for all data transmissions between your device and our servers
• Encrypted Storage: Sensitive data (passwords, financial information) is encrypted at rest using AES-256 encryption
• Secure Authentication: Multi-factor authentication (MFA) available for enhanced account security
• Firewall Protection: Network-level firewalls and intrusion detection/prevention systems (IDS/IPS)
• DDoS Protection: Distributed denial-of-service attack mitigation
• Regular Security Audits: Penetration testing and vulnerability assessments conducted by independent security firms

7.2 Organizational Security

• Access Controls: Role-based access control (RBAC) limits employee access to personal data on a need-to-know basis
• Employee Training: Regular data protection and security awareness training for all staff
• Confidentiality Agreements: All employees and contractors sign strict confidentiality agreements
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from security incidents
• Data Breach Protocol: Immediate notification to affected users and NPC within 72 hours of discovery, as required by law

7.3 Physical Security

• Secure data centers with 24/7 physical security monitoring
• Biometric access controls and video surveillance
• Redundant power supplies and backup systems
• Disaster recovery and business continuity plans

8. Data Retention

phmcao retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Active Accounts

While your account is active, we retain all account information, transaction history, and gaming records to provide continuous service.

8.2 Closed Accounts

After you close your account, we retain certain information for regulatory and legal purposes:

• Identity & KYC Documents: Retained for 5 years after account closure (PAGCOR requirement)
• Transaction Records: Retained for 5 years (AMLA requirement)
• Gaming Activity: Retained for 3 years for audit and dispute resolution purposes
• Communication Logs: Retained for 2 years for quality assurance and dispute resolution

8.3 Deletion

After the applicable retention period expires, we securely delete or anonymize your personal information. Anonymized data (with all personal identifiers removed) may be retained indefinitely for statistical analysis and service improvement.

8.4 Legal Holds

If your information is subject to legal proceedings, investigations, or disputes, we will retain it until the matter is resolved, even if this exceeds normal retention periods.

9. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

9.1 Right to Be Informed

You have the right to know how we collect, use, and share your personal information. This Privacy Policy serves to inform you of our data practices.

9.2 Right to Access

You have the right to request a copy of the personal information we hold about you. You can access most information through your account dashboard or request a data export by contacting [email protected].

9.3 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most information through your account settings or contact customer support for assistance.

9.4 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal information in certain circumstances, such as when:

• The information is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• The information was unlawfully processed

Note: We may refuse deletion requests when retention is required by law (e.g., PAGCOR and AMLA retention requirements) or necessary for legal claims.

9.5 Right to Object

You have the right to object to processing based on legitimate interest or for direct marketing purposes. You can opt out of marketing communications at any time.

9.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and transmit it to another service provider where technically feasible.

9.7 Right to File a Complaint

If you believe we have violated your privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC):

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto Street, Pasay City, Metro Manila 1307
Email: [email protected]
Website: www.privacy.gov.ph

9.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] or [email protected]. We will respond to verified requests within thirty (30) days. We may require identity verification before processing requests.

10. Cookies & Tracking Technologies

phmcao uses cookies and similar tracking technologies to enhance user experience, analyze Platform usage, and provide personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our Platform. They help us recognize your browser, remember your preferences, and improve Platform functionality.

10.2 Types of Cookies We Use

• Essential Cookies: Required for Platform operation, including login authentication, session management, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous usage data to analyze Platform performance and identify technical issues.
• Functionality Cookies: Remember your preferences (language, display settings) for a personalized experience.
• Marketing Cookies: Track your activity to deliver targeted advertising and measure campaign effectiveness (only with your consent).

10.3 Third-Party Cookies

We use third-party analytics and advertising services that may place cookies on your device, including Google Analytics, Facebook Pixel, and game provider tracking tools. These third parties have their own privacy policies.

10.4 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific sites
• Clear all cookies when closing the browser

11. Protection of Minors

phmcao strictly prohibits use of our services by individuals under the age of twenty-one (21) years. We do not knowingly collect personal information from minors.

11.1 Age Verification

We implement robust age verification measures, including:

• Date of birth verification during registration
• Government-issued ID verification
• Database checks against known underage individuals
• Behavioral analysis to detect fraudulent age claims

11.2 Underage Account Discovery

If we discover that an individual under 21 has registered an account, we will:

• Immediately suspend and permanently close the account
• Refund any deposited funds to the payment method used
• Void all gaming activity and forfeit winnings
• Report the incident to PAGCOR as required
• Delete personal information as soon as legally permissible

12. International Data Transfers

phmcao primarily stores data on servers located in the Philippines. However, some service providers (cloud hosting, analytics, payment processors) may store or process data in other jurisdictions.

When we transfer personal information outside the Philippines, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the National Privacy Commission
• Transfers to countries with adequate data protection laws
• Explicit consent for specific international transfers
• Compliance with cross-border data transfer requirements under the Data Privacy Act

You have the right to obtain information about international data transfers and the safeguards in place by contacting our Data Protection Officer.

13. Changes to Privacy Policy

phmcao reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational reasons.

When we make material changes that affect how we collect, use, or share your personal information, we will:

• Update the "Last Updated" date at the top of this policy
• Send email notification to your registered email address
• Display a prominent notice on the Platform
• Require re-acceptance for material changes that affect your rights

We encourage you to review this Privacy Policy periodically. Continued use of phmcao services after changes become effective constitutes acceptance of the updated Privacy Policy.

Previous versions of this Privacy Policy are archived and available upon request from [email protected].

14. Contact & Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

Privacy Inquiries

Email: [email protected]
Data Protection Officer: [email protected]
General Support: [email protected]
Security Concerns: [email protected]

Response Time

We strive to respond to all privacy inquiries within five (5) business days. For complex requests (data access, erasure, portability), we will respond within thirty (30) days as required by law.

Complaint Resolution Process

1. Internal Complaint: Contact our Data Protection Officer at [email protected]
2. Escalation: If not satisfied, request escalation to senior management
3. External Complaint: File a complaint with the National Privacy Commission (contact details in Section 9.7)