phchas Casino
Privacy Policy

This Privacy Policy ("Policy") is issued by phchas Casino ("phchas", "we", "us", "our"), the operator of the online gaming platform accessible at phchas.vip. This Policy describes how phchas collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "Data Subject") who register accounts, access the phchas Platform, or otherwise interact with phchas in any capacity.

This Policy applies to all personal data collected through the phchas website at phchas.vip, including all game sections, account management areas, payment interfaces, customer support interactions, and any promotional communications sent by phchas to registered Members.

phchas is committed to upholding the data privacy rights of all Filipino users under Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations. phchas processes personal data lawfully, fairly, and transparently, collecting only what is necessary for specified and legitimate purposes.

For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules, phchas acts as the Personal Information Controller (PIC) with respect to personal data collected through the phchas Platform.

phchas Casino operates the platform at phchas.vip. For all data privacy inquiries, data subject requests, and complaints relating to this Policy, the designated Data Protection contact can be reached at:

phchas will respond to all data privacy requests within the timelines prescribed by the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

phchas collects the following categories of personal data from Members and users of the phchas Platform:

phchas does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless strictly necessary for identity verification purposes as required by law, in which case such data is collected and processed under explicit consent and with heightened security measures.

phchas collects personal data through the following channels and methods:

• Direct Collection — Account Registration: When you create a phchas account, you provide your name, date of birth, mobile number, and chosen credentials directly through the registration form on phchas.vip.
• Direct Collection — KYC Verification: When you submit government identification documents to complete KYC verification prior to your first withdrawal, phchas collects and processes the data contained in those documents.
• Direct Collection — Support Interactions: When you contact phchas via live chat or email, we collect the information you provide in those communications, including your account details and the content of your messages.
• Automated Collection — Platform Usage: phchas automatically collects technical and activity data as you use the platform, including IP addresses, device information, game session logs, and transaction records generated through your gameplay and financial transactions.
• Automated Collection — Cookies and Local Storage: phchas uses cookies and similar browser-based storage mechanisms to maintain your login session, remember preferences, and collect anonymised analytics data. See Section 8 (Cookies & Tracking) for full details.
• Third-Party Sources: phchas may receive identity verification confirmation from licensed KYC service providers engaged by phchas to assist with identity and age verification. phchas does not receive raw personal data from third-party data brokers for marketing purposes.

phchas processes your personal data for the following specific and legitimate purposes:

• Account Administration: Creating, managing, and maintaining your phchas account, including processing your login, managing your wallet balance, and administering bonus and promotion entitlements.
• Identity and Age Verification: Verifying that you are who you say you are and confirming that you meet the mandatory age requirement of 21 years or older as required by PAGCOR guidelines and Philippine gambling regulations.
• Payment Processing: Processing your deposits via GCash, PayMaya, or Philippine bank transfer, and processing withdrawal requests to your verified payment method.
• Fraud Prevention and Platform Integrity: Detecting and preventing fraudulent account activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in the phchas Terms and Conditions.
• Anti-Money Laundering (AML) Compliance: Monitoring transactions for suspicious patterns and reporting to relevant Philippine authorities as required by Republic Act No. 9160, the Anti-Money Laundering Act, and subsequent amendments.
• Responsible Gaming: Monitoring gameplay patterns that may indicate problem gambling behaviour; enforcing deposit limits, self-exclusion periods, and other responsible gaming tools you have activated; and reaching out to players who may need support.
• Customer Support: Responding to your queries, resolving disputes, and providing assistance through live chat and email channels.
• Platform Improvement: Using aggregated and anonymised analytics data to understand how the phchas Platform is used and to improve game performance, mobile optimisation, payment speed, and user experience.
• Legal and Regulatory Compliance: Meeting obligations under Philippine law, PAGCOR regulations, and any lawful request from competent government authorities.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by SMS or email — but only where you have opted in to receive such communications and subject to your right to opt out at any time.

phchas processes your personal data under the following legal bases as recognised by the Philippine Data Privacy Act of 2012:

• Performance of a Contract: Processing necessary to perform our contractual obligations to you as a registered phchas Member — including account management, payment processing, game access, and support services.
• Consent: Where you have given clear, specific, freely given, informed, and unambiguous consent to processing for a specific purpose — particularly for optional marketing communications and certain cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Compliance with Legal Obligation: Processing required by applicable Philippine laws, including the Data Privacy Act, Anti-Money Laundering Act, and PAGCOR regulations — specifically KYC documentation, transaction records, and regulatory reporting.
• Legitimate Interests: Processing necessary for the legitimate interests of phchas, including fraud detection, platform security, prevention of prohibited conduct, and analysis of anonymised platform usage data — provided such interests are not overridden by your fundamental rights and freedoms.

phchas does not sell your personal data. phchas may share your personal data with third parties only in the following circumstances and only to the extent strictly necessary:

• Payment Providers: GCash (Mynt/Globe), PayMaya (Maya Philippines), BPI, BDO, Metrobank, and UnionBank receive transaction data necessary to process deposits and withdrawals. Each of these providers operates under their own privacy policies and applicable Philippine financial regulations.
• KYC Verification Providers: Licensed identity verification service providers engaged by phchas may receive copies of your government ID and personal details for the purpose of conducting identity and age verification. These providers are contractually bound to process such data only for that purpose and to maintain equivalent security standards.
• Game Technology Providers: Game developers (such as PG Soft, Pragmatic Play, and Jili Games) may receive anonymised session identifiers required to load and operate their games within the phchas Platform. Game providers do not receive your personal identity data or financial information.
• Regulatory Authorities: phchas may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the National Bureau of Investigation (NBI), or any other competent Philippine government authority where required by law, court order, or lawful regulatory demand.
• Legal Advisors: phchas may share relevant account data with external legal counsel in connection with a legal dispute, investigation, or regulatory proceeding in which phchas is a party.

phchas uses cookies and similar local storage technologies on phchas.vip to deliver and improve the platform experience. Cookies are small data files stored in your browser. phchas uses the following types:

• Strictly Necessary Cookies: Essential for the phchas Platform to function. These include session authentication tokens that keep you logged in, CSRF protection tokens, and language preference storage. These cookies cannot be disabled without preventing basic platform functions from working.
• Functional Cookies: Remember your preferences such as display settings and game lobby filters. These are non-essential but improve your experience. You may disable them without losing core platform functionality.
• Analytics Cookies: Collect anonymised data about how visitors use phchas.vip — which pages are visited, which games are loaded, and how long sessions last. This data is used in aggregate form only, with no individual identification, to help phchas improve the platform. Analytics data is not shared with advertising networks.
• Security Cookies: Support phchas's fraud detection systems by recording device fingerprint elements and login patterns. These are strictly necessary for platform security and cannot be disabled.

phchas does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You will not be followed around the internet by phchas advertising based on your visit to phchas.vip.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will impair your ability to log in to and use the phchas Platform.

phchas retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, in accordance with the following general retention schedule:

• Account and Identity Data: Retained for the duration of your phchas account membership and for a period of five (5) years following account closure, to meet legal record-keeping obligations under PAGCOR regulations and the Anti-Money Laundering Act.
• KYC Documentation: Retained for a minimum of five (5) years from the date of last transaction or account closure (whichever is later), as required by Philippine AML law.
• Transaction Records: Retained for a minimum of five (5) years in accordance with PAGCOR reporting requirements and the Anti-Money Laundering Act.
• Game Activity Logs: Retained for three (3) years following the relevant session, primarily for dispute resolution purposes. Aggregated anonymised analytics data may be retained indefinitely.
• Support Interaction Records: Retained for two (2) years from the date of the interaction, or longer where the matter is the subject of an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of your account plus two (2) years after opt-out or account closure, to evidence the lawfulness of historical communications.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data — which cannot reasonably be linked back to any individual — may be retained indefinitely for statistical and research purposes.

phchas implements a multi-layered security framework to protect your personal and financial data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport Encryption: All data in transit between your browser or device and phchas servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this connection is active.
• Password Hashing: Account passwords are never stored in plain text. phchas uses industry-standard one-way cryptographic hashing algorithms. Even phchas personnel cannot retrieve your plain-text password.
• OTP Authentication: Sensitive account actions — including withdrawals, password resets, and profile changes — require one-time password (OTP) verification sent to your registered Philippine mobile number via SMS.
• Access Controls: Access to personal data within phchas's internal systems is restricted on a strict need-to-know basis. Staff authorised to access personal data are bound by confidentiality obligations and undergo data privacy training.
• Payment Data Isolation: phchas does not store full bank account numbers or GCash credentials on its servers. Payment data is handled through secure API integrations with your payment provider. phchas holds only the references required to process your transactions.
• Fraud Monitoring: phchas operates automated systems that continuously monitor account activity for anomalies, unusual login patterns, and suspicious transaction behaviour, triggering alerts or account restrictions where necessary.
• Infrastructure Security: phchas platform servers are hosted in secure data centre environments with physical access controls, network-level firewalls, intrusion detection systems, and regular security audits.

While phchas takes all reasonable and appropriate technical and organisational measures to secure your personal data, no internet-based system can be guaranteed to be 100% secure. You are encouraged to use strong, unique passwords and to enable two-factor authentication on your phchas account to maximise your personal account security.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phchas. To exercise any of these rights, contact phchas at [email protected] with the subject line "Data Subject Request."

The phchas Platform is strictly intended for adults aged 21 years and above. phchas does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If phchas becomes aware that personal data has been collected from a person under 21 — whether through registration with false age information or any other means — phchas will immediately suspend the relevant account, delete the associated personal data to the extent not required for legal evidence or regulatory reporting, and forfeit any account balance in accordance with phchas's Terms and Conditions.

If you are a parent or guardian and believe that your child (under 21) has registered a phchas account, please contact phchas immediately at [email protected]. phchas will investigate and take appropriate action without undue delay.

phchas is an online platform serving Filipino users, and the primary processing of personal data occurs within systems aligned with the Philippine data protection framework. However, certain service providers engaged by phchas — including platform technology providers and game developers — may operate infrastructure in jurisdictions outside the Philippines.

Where personal data is transferred to or processed in a country other than the Philippines, phchas ensures that appropriate safeguards are in place, including:

• Contractual clauses that impose equivalent data protection obligations on the recipient, consistent with the standards of the Philippine Data Privacy Act;
• Assessment of the recipient jurisdiction's data protection laws to ensure an adequate level of protection;
• Technical and organisational security measures appropriate to the risk of the transfer.

phchas does not transfer your personal data to countries or organisations that are unable to provide an adequate level of protection for that data. All cross-border transfers involving KYC documentation or financial data are subject to heightened scrutiny and contractual protection.

phchas reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, phchas's data processing practices, or the services and features offered on the phchas Platform.

When material changes are made to this Policy, phchas will notify registered Members by:

• Posting a notice on the phchas Platform upon login;
• Sending an SMS notification to your registered Philippine mobile number, where practicable; and
• Updating the "Last Updated" date at the top of this page.

Your continued use of the phchas Platform after the revised Privacy Policy has been posted constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to the revised Policy, you must cease using the phchas Platform and may request account closure.

Where changes are required by law and take immediate effect, phchas will notify you as soon as reasonably practicable after the changes become effective.

For all data privacy enquiries, data subject rights requests, or privacy-related complaints, please contact phchas through the following channel:

phchas will acknowledge your request within 3 business days and provide a substantive response within 15 business days. Complex matters may require up to 30 business days, of which phchas will notify you in writing.

If you are not satisfied with phchas's handling of your data privacy concern after raising it directly with us, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.