phmacai Privacy Policy

1. Introduction

phmacai ("phmacai," "we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you," "your," or "Player") of the phmacai website and platform (the "Platform"). This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information in connection with your use of the Platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). It should be read together with our Terms and Conditions, which govern your use of the Platform.

By registering an account on phmacai or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, please do not use the Platform.

2. Data Controller

phmacai acts as the data controller in respect of the personal data collected through the Platform. As data controller, phmacai determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

For all data privacy inquiries, requests, or complaints, you may contact our Data Protection Officer at: [email protected]

3. Personal Data We Collect

phmacai collects the following categories of personal data from players:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (e.g., Philippine passport, SSS ID, driver's licence, PhilSys ID);
• Contact Data: Residential address (including city — Manila, Cebu, Davao, Quezon City, Makati, or elsewhere in the Philippines), email address, and mobile number;
• Account Data: Username, encrypted password, account preferences, and communication preferences;
• Financial Data: Payment method details (GCash number, PayMaya account, BPI/BDO/Metrobank account details), transaction history, deposit and withdrawal records, and account balance information;
• Gaming Data: Betting history, game activity, session duration, wagering patterns, and responsible gaming tool usage;
• Technical Data: IP address, device type, browser type and version, operating system, time zone, and platform access logs;
• Usage Data: Information about how you navigate and interact with the Platform, including pages visited, features used, and links clicked;
• Communications Data: Records of your correspondence with phmacai customer support, including live chat transcripts and email exchanges.

4. How We Collect Your Data

phmacai collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Technical and usage data collected automatically when you access the Platform, through cookies, server logs, and similar tracking technologies;
• Third parties: Identity verification data from KYC service providers; payment confirmation data from payment processors (GCash, PayMaya, BPI, BDO, Metrobank); fraud prevention data from security service providers; and regulatory data from PAGCOR where required.

5. How We Use Your Personal Data

phmacai uses your personal data for the following purposes:

• To register and maintain your phmacai account;
• To verify your identity and age (21+) in compliance with PAGCOR requirements and the DPA;
• To process deposits, withdrawals, and other financial transactions in Philippine Peso;
• To provide customer support and respond to your inquiries;
• To administer bonuses, promotions, and loyalty programs;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To comply with our legal and regulatory obligations under Philippine law, including PAGCOR reporting requirements and anti-money laundering (AML) obligations;
• To improve the Platform, personalize your experience, and conduct internal analytics;
• To send you service-related communications, including account notifications and security alerts;
• To send you marketing communications about phmacai promotions and offers, where you have consented to receive such communications;
• To enforce our Terms and Conditions and protect the rights and safety of phmacai and other players.

6. Legal Basis for Processing

phmacai processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications;
• Contractual necessity: Where processing is necessary for the performance of the contract between you and phmacai (i.e., the Terms and Conditions), including account management and transaction processing;
• Legal obligation: Where processing is necessary for phmacai to comply with a legal obligation under Philippine law, including PAGCOR regulations and AML requirements;
• Legitimate interests: Where processing is necessary for the legitimate interests of phmacai, such as fraud prevention, platform security, and improving our services, provided that such interests are not overridden by your rights and interests.

7. Disclosure of Your Personal Data

phmacai does not sell, rent, or trade your personal data to third parties. We may disclose your personal data to the following categories of recipients:

• Service providers: Third-party vendors who provide services on our behalf, including KYC verification providers, payment processors, IT infrastructure providers, customer support platforms, and fraud prevention services. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law;
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where disclosure is required by law or regulation;
• Law enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other legal process;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of phmacai's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

8. International Data Transfers

Some of phmacai's service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, phmacai will implement appropriate safeguards — such as contractual clauses approved by the National Privacy Commission — to ensure that your data remains protected in accordance with the DPA.

By using the Platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the purposes described in this Privacy Policy, subject to the safeguards described above.

9. Data Retention

phmacai retains your personal data for as long as your account remains active and for such additional period as is necessary to comply with our legal and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements;
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction;
• Gaming activity data is retained for a minimum of three (3) years;
• Customer support communications are retained for two (2) years from the date of the last interaction.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with phmacai's data disposal procedures.

10. Cookies and Tracking Technologies

phmacai uses cookies and similar tracking technologies (such as web beacons and pixel tags) on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use the Platform.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional cookies: Remember your preferences and settings to provide a more personalized experience.
• Analytics cookies: Collect anonymized information about how players use the Platform, helping us improve performance and user experience.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

11. Your Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phmacai:

• Right to be informed: The right to be informed of how your personal data is being collected and processed;
• Right of access: The right to request a copy of the personal data phmacai holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data on grounds relating to your particular situation, or where processing is for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days in accordance with NPC guidelines. We may require you to verify your identity before processing your request.

12. Children's Privacy

The phmacai Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account or use the Platform in any capacity.

If phmacai becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on phmacai, please notify us immediately at [email protected].

13. Security Measures

phmacai implements a range of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication options for player accounts;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While phmacai takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your phmacai login credentials and for notifying us immediately if you suspect any unauthorized access to your account.

14. Changes to This Policy

phmacai reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

Where changes are material, phmacai will notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how phmacai protects your data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phmacai handles your personal data, please contact our Data Protection Officer. Our support team is available 24/7 and includes Filipino-speaking agents who can assist you in English or Filipino.

Data Protection Officer: [email protected]

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that phmacai has not handled your personal data in accordance with the Data Privacy Act of 2012.