phpak Privacy Policy

1. Introduction

phpak ("phpak", "we", "us", "our") is committed to protecting the privacy and personal data of all players and visitors to the phpak online gaming platform, accessible at phpak.app. This Privacy Policy ("Policy") explains what personal information phpak collects from Filipino players and platform visitors, how that information is used, how it is protected, and the rights available to individuals in connection with their personal data.

This Policy applies to all personal data processed by phpak in connection with the operation of the phpak platform, including account registration, game play, financial transactions, customer support interactions, and marketing communications. This Policy should be read together with the phpak Terms and Conditions.

By registering a phpak account or otherwise using the phpak platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

phpak collects personal data from you in the following categories:

Category	Examples	How Collected
Identity Data	Full legal name, date of birth, government-issued ID details	Account registration; identity verification
Contact Data	Philippine mobile number, email address, residential address	Account registration; customer support
Financial Data	GCash number, PayMaya account reference, BPI/BDO/Metrobank account identifiers (tokenized), transaction history	Deposit and withdrawal processing
Gaming Data	Game history, wager amounts, session logs, win/loss records, bonus activity	Automatically during platform use
Technical Data	IP address, device type, browser, operating system, session timestamps	Automatically via cookies and server logs
Communications Data	Customer support chat transcripts, emails sent to phpak	Customer support interactions
Marketing Preferences	Communication opt-in/opt-out records, promotional campaign interactions	Account settings; marketing responses

phpak does not knowingly collect sensitive personal data (e.g., health information, political opinions, religious beliefs) beyond what may be incidentally disclosed by a player in the course of a customer support interaction. Such data is not used for profiling or marketing purposes.

3. How phpak Uses Your Personal Data

phpak uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and administering your phpak player account; verifying your identity and age (21+); communicating account-related notifications.
• Service delivery: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank; enabling access to phpak games; managing bonuses and promotions.
• Regulatory compliance: Conducting anti-money laundering (AML) and know-your-customer (KYC) checks as required by applicable Philippine regulatory requirements; retaining records as mandated by law.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, and platform abuse.
• Responsible gaming: Monitoring gaming behavior for indicators of problem gambling; applying responsible gaming tools at the player's request or where required by applicable guidelines.
• Customer support: Responding to inquiries submitted to phpak's Filipino-language and English-language support team.
• Platform improvement: Analysing aggregated, anonymized usage data to improve phpak's platform, game library, and user experience for Filipino players.
• Marketing (where consented): Sending promotional communications, bonus offers, and platform updates to players who have opted in to marketing communications. Players may opt out at any time via account settings or by contacting phpak support.

4. Legal Basis for Processing

phpak processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the phpak player account agreement, including account administration, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML and KYC obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and improvement of phpak services, where these interests are not overridden by the rights and interests of players.
• Consent: Processing for marketing communications and non-essential cookies, where the player has provided explicit consent. Consent may be withdrawn at any time.

5. Sharing Your Personal Data

phpak does not sell, rent, or trade your personal data to third parties for their own commercial purposes. phpak may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other licensed payment service providers — solely for the purpose of processing deposits and withdrawals.
• Game providers: Licensed game software providers who supply titles on the phpak platform, to the extent necessary to operate the relevant games and maintain game integrity.
• Identity verification services: Third-party KYC and AML compliance providers engaged to assist with identity verification, age verification, and fraud detection.
• Regulatory authorities: Philippine gaming regulators and law enforcement authorities, where disclosure is required by law, court order, or regulatory direction.
• Service providers: Cloud hosting, analytics, customer support, and security vendors engaged to support phpak's platform operations, under strict data processing agreements.

All third-party service providers engaged by phpak are required to process personal data only as instructed by phpak and to implement appropriate technical and organisational security measures.

6. Payment Data and Financial Information

phpak handles payment data with particular care. When you make a deposit or withdrawal via GCash, PayMaya, or a Philippine bank, your transaction is processed through the relevant payment provider's secure infrastructure. phpak does not store GCash PINs, PayMaya PINs, or full bank account credentials on phpak servers. Payment references retained by phpak are tokenized and stored in encrypted form.

All financial transactions on phpak are denominated in Philippine Peso (₱ PHP). Transaction records are retained in accordance with applicable Philippine regulatory requirements and phpak's data retention schedule.

7. Cookies and Tracking Technologies

phpak uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, detect fraud, and improve the user experience for Filipino players. The following categories of cookies are used:

• Strictly necessary cookies: Required for platform functionality, session management, and security. These cannot be disabled.
• Performance cookies: Used to collect anonymized analytics data about how players interact with the phpak platform, enabling platform improvements. These are activated only where you have consented.
• Marketing cookies: Used to deliver relevant promotional content. These are activated only where you have provided explicit consent.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair phpak platform functionality.

8. Data Security

phpak implements comprehensive technical and organisational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data in transit between your device and phpak servers.
• Encryption of sensitive data at rest, including financial records and identity verification data.
• Access controls limiting phpak staff access to personal data on a strict need-to-know basis.
• Regular independent security audits and penetration testing of the phpak platform.
• Multi-factor authentication requirements for phpak administrative systems.

While phpak maintains robust security infrastructure, no online platform can guarantee absolute security. If you believe your phpak account has been compromised, contact phpak support immediately via live chat.

9. Data Retention

phpak retains personal data for the following periods, or longer where required by applicable law:

• Active account data: Retained for the duration of your active phpak account and for a period of five (5) years following account closure, in compliance with applicable AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, or such longer period as may be required by Philippine regulatory authorities.
• Support communications: Retained for three (3) years from the date of the interaction unless a longer period is required to resolve an ongoing dispute.
• Marketing data: Retained until you withdraw consent or request deletion, after which marketing data is promptly deleted or anonymized.

10. Your Data Protection Rights

Filipino players have the following rights in connection with their personal data held by phpak. To exercise any of these rights, contact phpak support via live chat or email:

• Right of access: You may request a copy of the personal data phpak holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phpak's legal retention obligations.
• Right to restrict processing: You may request that phpak restrict processing of your personal data in certain circumstances.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

phpak will respond to all data rights requests within the timeframes required under applicable Philippine data protection obligations. Identity verification may be required before phpak can action a data rights request.

11. Children and Minors

The phpak platform is strictly for individuals aged 21+. phpak does not knowingly collect personal data from persons under 21 years of age. If phpak becomes aware that personal data has been collected from an underage individual, that data will be deleted and the associated account will be permanently closed. If you believe an underage person has registered a phpak account, please notify phpak support immediately.

12. Cross-Border Data Transfers

phpak primarily processes and stores player data within the Philippines and in jurisdictions with data protection standards equivalent to or exceeding Philippine requirements. Where phpak engages service providers located outside the Philippines (e.g., cloud infrastructure providers), such transfers are conducted under appropriate data transfer safeguards, including contractual data processing agreements that bind the recipient to data protection standards consistent with this Policy.

13. Updates to This Privacy Policy

phpak may update this Privacy Policy from time to time to reflect changes in platform operations, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email notification or an in-platform notice. The updated Policy will be published on this page with a revised effective date. Your continued use of the phpak platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any update, you should contact phpak support to close your account.

14. Contact phpak About Privacy

If you have questions, concerns, or requests relating to this Privacy Policy or phpak's handling of your personal data, please contact the phpak privacy team via:

• Live Chat: Available 24/7 in Tagalog and English from the phpak platform.
• Email: [email protected] (displayed as plain text — not a clickable link).

phpak's support team serves Filipino players across all regions of the Philippines — from Metro Manila and Cebu to Davao and beyond — and aims to respond to all privacy inquiries within 48 hours.