This Privacy Policy explains what personal data phmaca collects from you, why we collect it, how we use and protect it, and the rights you have over it — all in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012.
Six principles guide every data decision we make at phmaca — from registration through to account closure.
phmaca collects only the personal data that is strictly required for account operation, PAGCOR compliance, KYC, and payment processing. We do not collect data speculatively or for purposes beyond what is set out in this Policy.
Your personal data is not sold, rented, or traded to any third party for marketing, profiling, or commercial purposes. Data is shared only with service providers necessary to operate phmaca and as required by law.
All data transmitted to and from phmaca is protected by TLS 1.3 encryption. Sensitive data at rest is stored using industry-standard encryption protocols. Access to personal data within phmaca is restricted by role-based access controls.
Under the Philippine Data Privacy Act, you have the right to access, correct, erase, and port your personal data held by phmaca. These rights are exercisable by contacting our Data Protection Officer — requests are processed within 15 business days.
phmaca's data practices are designed to comply with Republic Act No. 10173 (Data Privacy Act of 2012) and the Implementing Rules and Regulations issued by the National Privacy Commission of the Philippines.
In the event of a personal data breach that may pose risk to your rights and freedoms, phmaca will notify affected players and the National Privacy Commission within the timeframes mandated by RA 10173.
Summary first. This Policy is written in plain English to make it as readable as possible. However, it remains a legally binding document. By using phmaca, you confirm that you have read and understood how your data is handled. If you have any questions, contact our Data Protection Officer at the details in Section 14.
In this Privacy Policy, the following terms shall have the meanings set out below:
phmaca is the Personal Information Controller responsible for the Personal Data collected through the phmaca Platform. phmaca determines the purposes for which your data is collected and the means by which it is processed.
phmaca operates under a PAGCOR licence and is subject to the data privacy obligations imposed by the DPA, its Implementing Rules and Regulations, and relevant NPC issuances. phmaca has appointed a Data Protection Officer (DPO) as required by the DPA. Contact details for the DPO are set out in Section 14.
This Policy applies to all Personal Data processed by phmaca in connection with your use of the Platform, including data collected prior to account registration (e.g., browsing data) and data collected after account closure (e.g., transaction records retained for legal compliance).
phmaca collects the following categories of Personal Data from players and website visitors:
Sensitive data handling: Government ID documents and KYC materials are classified as sensitive personal information under the DPA. phmaca applies heightened security measures to this category of data and limits access to authorised KYC compliance personnel only.
phmaca collects Personal Data through the following methods:
| Collection Method | Data Collected |
|---|---|
| Account registration form | Name, date of birth, email, mobile number, password |
| KYC document submission | Government ID scans, proof of address, selfie/liveness image |
| Deposit and withdrawal transactions | Payment method details, transaction amounts and references |
| Platform gameplay | Game session data, bet history, responsible gaming settings |
| Browser and device (automatic) | IP address, device type, browser, session logs |
| Cookies and tracking technologies | Session cookies, analytics, fraud detection signals |
| Support communications | Chat transcripts, email content, complaint records |
| Third-party verification services | Identity verification results from accredited KYC providers |
phmaca processes your Personal Data for the following purposes:
phmaca does not use your Personal Data for automated profiling that produces legal or similarly significant effects on you, nor do we use it for any purpose that would be incompatible with the purposes listed above without first obtaining your separate consent.
Under the DPA, phmaca processes your Personal Data on the following legal bases:
phmaca does not sell or rent your Personal Data to any third party. We share your data only in the following limited circumstances:
phmaca engages third-party service providers who process Personal Data on our behalf, strictly under written data processing agreements that require them to maintain the same level of data protection as phmaca. These include:
phmaca will disclose Personal Data to regulators, law enforcement, or courts where required by applicable Philippine law, PAGCOR regulation, or valid legal process. This includes mandatory reporting under the AMLA and PAGCOR responsible gaming requirements.
In the event of a merger, acquisition, or transfer of phmaca's business or assets, Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified prior to any such transfer.
No cross-border transfers without safeguards. Where phmaca transfers Personal Data outside the Philippines (e.g., to cloud infrastructure), we ensure appropriate safeguards are in place as required by the DPA and NPC regulations, including standard contractual clauses.
phmaca retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law or regulation.
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AMLA, PAGCOR compliance |
| KYC documents | Duration of account + 5 years after closure | RA 9160 (AMLA), PAGCOR |
| Transaction records | 5 years from transaction date | AMLA, BSP, tax regulations |
| Gaming session data | 3 years from session date | PAGCOR licence obligation |
| Support communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Self-exclusion records | Duration of exclusion + 5 years | PAGCOR responsible gaming |
| Technical / access logs | 12 months | Security, fraud prevention |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes Personal Data and may be retained for statistical or analytical purposes without restriction.
phmaca implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, loss, destruction, or disclosure. These measures include:
While phmaca takes all reasonable steps to protect your data, no online system can guarantee absolute security. You also have a role to play — keep your account password secure, do not share your credentials, and notify us immediately at [email protected] if you suspect any unauthorised access to your account.
phmaca uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored in your browser when you visit a website.
You may manage or disable non-essential cookies through your browser's cookie settings. Note that disabling essential cookies will prevent you from logging in and using the Platform. phmaca does not use cookies to serve third-party advertising on its Platform.
Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in relation to your Personal Data held by phmaca. These rights are exercisable by contacting our Data Protection Officer (see Section 14).
phmaca will respond to all data subject rights requests within 15 business days of receipt. Where additional time is required for complex requests, phmaca will notify you within the initial 15-day period with an explanation and an expected completion date.
phmaca is strictly an adult platform. In accordance with PAGCOR regulations and Philippine law, the Platform is accessible only to individuals who are 21 years of age or older.
phmaca does not knowingly collect, use, or retain Personal Data from any person under the age of 21. All accounts undergo age verification as part of the KYC process before real-money gaming is permitted. Any account found to belong to a person under 21 will be immediately closed, and all associated data will be handled in accordance with PAGCOR's underage gambling protocols.
If you are a parent or guardian and believe your child has accessed or registered on phmaca, please contact our Data Protection Officer immediately at [email protected] so that the account can be investigated and closed promptly.
13.1 phmaca may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance.
13.2 Material changes — those that significantly affect your rights or how we process your Personal Data — will be communicated to you via email to your registered address at least seven (7) days before they take effect. A notice will also be displayed prominently on the Platform.
13.3 The effective date at the top of this page reflects the date of the most recent version. Continued use of the Platform after the effective date of an updated Policy constitutes your acknowledgment of the changes.
13.4 If you do not agree to an updated Privacy Policy, you may close your phmaca account before the changes take effect by contacting our support team.
For all privacy-related enquiries, data subject rights requests, or to report a potential data breach, please contact phmaca's Data Protection Officer:
Data Protection Officer phmaca
Email: [email protected]
Response Time: Within 15 Philippine business days of receipt
Serving: Players across the Philippines — Manila, Cebu, Davao, Quezon City, Makati, and nationwide
National Privacy Commission (NPC). If you are not satisfied with phmaca's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about the NPC complaint process is available through the NPC's official Philippine government channels.
Play with confidence knowing your personal data is handled in strict compliance with the Philippine Data Privacy Act. PAGCOR-regulated, RA 10173 compliant, and built for Filipino players. Minimum age 21+.
21+ · PAGCOR-Regulated · RA 10173 Compliant · Philippines Only