Privacy Policy

1. Introduction

phscash ("we," "us," "our") is committed to protecting the privacy and personal data of every Filipino player who uses our platform. This Privacy Policy describes how phscash collects, uses, stores, shares, and protects your personal information when you access or use the phscash website at phscash.net, our mobile site, and any related services we provide.

This policy is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC). It should be read together with the phscash Terms and Conditions and our Responsible Gaming Policy.

By registering a phscash account or continuing to use our platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the phscash platform and contact us to close your account.

2. Data Controller

phscash operates as the data controller for all personal information collected through the phscash platform. As data controller, phscash determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with the Philippine Data Privacy Act of 2012 and applicable PAGCOR regulatory requirements.

phscash has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. If you have any questions or concerns regarding the processing of your personal data, you may contact our DPO directly at:

• Email: support at phscash.net
• Platform: Via the phscash Live Chat support channel, available 24/7

3. Personal Data We Collect

phscash collects only the personal data that is necessary and proportionate to the purposes described in this Privacy Policy. The categories of personal data we collect are as follows:

3.1 Registration and Identity Data

• Full legal name (first name, middle name, last name)
• Date of birth and age verification information
• Residential address (including barangay, city or municipality, province)
• Email address and mobile phone number
• Government-issued identification number and document (e.g., Philippine passport, driver's licence, SSS/UMID card, PhilSys national ID)
• Nationality and country of residence

3.2 Financial and Transaction Data

• Deposit and withdrawal history, amounts, and timestamps
• Payment method details (GCash account reference, Maya account reference, BPI/BDO/Metrobank account identifiers, card type and last four digits)
• Account balance and bonus balance information
• Transaction reference numbers and status records

3.3 Gaming Activity Data

• Game session logs including games played, wagers placed, and outcomes
• Sports betting selections, odds accepted, and settlement results
• Bonus and promotion participation records
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cool-off periods)

3.4 Technical and Device Data

• IP address and approximate geolocation at the time of login
• Device type, operating system, and browser or app version
• Session duration and navigation patterns within the phscash platform
• Cookies and similar tracking technology data (see Section 8)

3.5 Communications Data

• Records of your communications with phscash customer support via live chat, email, or in-platform messaging
• Feedback, survey responses, and complaint records
• Marketing communication preferences and opt-in/opt-out records

4. How We Collect Your Data

phscash collects your personal data through the following channels:

• Direct registration: Information you provide when creating or updating your phscash account.
• KYC verification: Identity and address documents you submit to complete the verification process required by PAGCOR.
• Platform use: Data generated automatically as you navigate and use the phscash website or mobile platform, including gaming activity and transaction records.
• Payment processors: Transaction confirmation and payment method reference data received from authorised payment providers such as GCash, Maya, BPI, BDO, and Metrobank.
• Customer support interactions: Information you share with our support team through live chat, email, or any other communication channel we provide.
• Cookies and tracking technologies: Technical data collected automatically via cookies, web beacons, and similar technologies as described in Section 8.
• Third-party verification services: Identity verification and fraud detection data from authorised third-party KYC and anti-money laundering service providers, used solely for compliance purposes.

5. How We Use Your Personal Data

phscash uses your personal data strictly for the purposes set out below. We do not use your data for any purpose that is incompatible with the original reason it was collected.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phscash processes your personal data on one or more of the following lawful bases:

• Contractual necessity: Processing required to perform our contractual obligations to you as a phscash account holder, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Philippine Data Privacy Act, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for phscash's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — provided these interests are not overridden by your rights and interests.
• Consent: Where phscash relies on your consent as the legal basis for processing — in particular for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing and Disclosure

phscash does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

7.1 Payment Service Providers

Authorised payment processors including GCash, Maya, BPI, BDO, Metrobank, and card network operators receive the minimum necessary data to process your deposits and withdrawals. All payment partners are required to handle your data in accordance with applicable Philippine financial regulations.

7.2 Identity Verification and Compliance Services

Third-party KYC and AML service providers engaged by phscash to support our PAGCOR compliance obligations. These providers are bound by strict data processing agreements and may only use your data for the specific compliance purpose for which it was shared.

7.3 Regulatory Authorities

phscash is required to report certain information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities where mandated by law. Such disclosures are made only to the extent required by the applicable legal obligation.

7.4 Technology and Infrastructure Partners

Cloud hosting, cybersecurity, and platform analytics providers that support the technical operation of the phscash platform. These partners act as data processors under binding data processing agreements and may not use your data for their own purposes.

7.5 Game Content Providers

Third-party game software providers whose games are hosted on the phscash platform may receive anonymised gaming session data for the purpose of game performance monitoring and RNG certification. No personally identifiable information is shared with game providers beyond what is technically necessary to deliver the game session.

8. Cookies and Tracking Technologies

phscash uses cookies and similar technologies to operate and improve the platform. The following types of cookies may be placed on your device when you visit phscash.net:

8.1 Strictly Necessary Cookies

These cookies are essential for the phscash platform to function correctly. They maintain your login session, remember your security settings, and ensure transactions are processed accurately. These cookies cannot be disabled without significantly impairing your ability to use the platform.

8.2 Functional Cookies

Functional cookies allow phscash to remember your preferences — such as your preferred language, display settings, or recently played games — to provide a more personalised experience. These cookies do not track your activity outside the phscash platform.

8.3 Analytics Cookies

phscash uses anonymised analytics cookies to understand how players navigate the platform, which features are most used, and where technical issues may arise. This data is used solely to improve the phscash experience and is not linked to your personal identity.

8.4 Managing Cookies

You may configure your browser to refuse or delete cookies. Note that disabling strictly necessary cookies will affect the functionality of the phscash platform. Full cookie management instructions are available in the help section of all major browsers.

9. Data Retention

phscash retains your personal data only for as long as is necessary for the purposes set out in this Privacy Policy or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLC regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in compliance with the Anti-Money Laundering Act.
• Gaming activity logs: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming monitoring, and regulatory audits.
• Customer support communications: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an unresolved dispute or legal matter.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in accordance with NPC guidelines on data disposal.

10. Data Security

phscash implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your device and phscash servers is protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive personal data stored in phscash databases is encrypted at the field level using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to phscash personnel and authorised third-party processors on a strict need-to-know basis, authenticated via multi-factor authentication.
• Intrusion detection: phscash employs continuous network monitoring and intrusion detection systems to identify and respond to security incidents in real time.
• Regular security audits: The phscash platform and data infrastructure undergo periodic independent security assessments and penetration testing.
• Staff training: All phscash personnel handling personal data receive regular data protection and cybersecurity training.

In the event of a personal data breach that is likely to result in harm to affected individuals, phscash will notify the National Privacy Commission and affected players within the timeframes required by the Philippine Data Privacy Act and NPC Circular No. 16-03.

11. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phscash:

• Right to be informed: You have the right to be informed about how your personal data is being collected and processed — which this Privacy Policy fulfils.
• Right of access: You have the right to request a copy of the personal data that phscash holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by phscash be corrected without undue delay.
• Right to erasure: You have the right to request deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, subject to phscash's legal retention obligations under PAGCOR and AMLC regulations.
• Right to object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that phscash has not processed your personal data in accordance with the Data Privacy Act.

To exercise any of the above rights, please contact phscash at support at phscash.net. We will respond to all verified requests within thirty (30) days in accordance with NPC guidelines. We may need to verify your identity before processing your request to protect the security of your account.

12. Children's Privacy

The phscash platform is strictly intended for individuals aged 18 years and above. phscash does not knowingly collect personal data from anyone under the age of 18. If phscash discovers that personal data has been collected from a minor, the account will be immediately suspended, the data will be deleted, and the matter will be reported to PAGCOR as required by law.

If you are a parent or guardian and believe your child has registered on the phscash platform, please contact us immediately at support at phscash.net so that we can take prompt action.

13. International Data Transfers

The phscash platform is operated for Filipino players and data is primarily stored and processed within infrastructure that serves the Philippines. Where phscash engages technology or service providers whose infrastructure is located outside the Philippines, we ensure that appropriate safeguards are in place prior to any such transfer, in compliance with NPC regulations on cross-border data transfers.

Such safeguards may include standard contractual clauses approved by the NPC, binding corporate rules, or adequacy determinations. phscash will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without your explicit consent or a recognised legal transfer mechanism.

14. Changes to This Privacy Policy

phscash reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, phscash will notify registered players via email or a prominent on-platform notification prior to the changes taking effect. The effective date at the top of this document will be updated accordingly.

Your continued use of the phscash platform following notification of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how phscash protects your personal data.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or want to raise a concern about how phscash handles your personal data, please contact us through the following channels:

• Email (Data Protection): support at phscash.net
• Live Chat: Available 24/7 on the phscash platform
• Response Time: phscash aims to acknowledge all data-related enquiries within 5 business days and resolve them fully within 30 days.

If you are not satisfied with phscash's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the government body responsible for administering and enforcing the Data Privacy Act of 2012 in the Philippines.

phscash is committed to working with you and, where necessary, with the NPC to resolve any concerns about the handling of your personal data promptly and fairly.