🔒 phophen Privacy Policy

1. Introduction

phophen ("phophen," "we," "us," or "our") operates the online gaming platform accessible at phophen.club and its associated subdomains. We are committed to protecting the privacy and personal data of every Filipino player who interacts with our platform — whether you're logging in from Manila, Cebu, Davao, or anywhere else across the Philippines.

This Privacy Policy is issued in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines (DPA), and its implementing rules and regulations. It describes what personal data we collect from you, the purposes for which we process that data, the parties with whom we may share it, and the rights you hold as a data subject under Philippine law.

By registering a phophen account, accessing the platform, or using any service we offer — including casino games, live dealer tables, sports betting, Bingo, and payment processing — you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

2. Personal Data We Collect

phophen collects personal data through multiple channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party payment and identity verification providers.

2.1 Data You Provide Directly

• Registration data: Full name, email address, Philippine mobile number, date of birth, and password.
• Identity verification (KYC): Government-issued Philippine ID (e.g., passport, PhilSys ID, UMID, driver's license), selfie or photo verification, and proof of address.
• Payment information: GCash mobile number, PayMaya account details, bank account numbers (BPI, BDO, Metrobank), and Visa/Mastercard card details where applicable. Full card numbers are never stored by phophen directly — payment card processing is handled by PCI-DSS compliant third-party processors.
• Communications: Messages sent to phophen support via live chat, email correspondence, and feedback forms.
• Responsible gaming declarations: Self-declared limits, cooling-off requests, and self-exclusion requests.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, session duration, betting history, login timestamps, and feature interactions within the phophen platform.
• Location data: General geographic location inferred from IP address (e.g., Metro Manila, Cebu, Davao region). phophen does not collect precise GPS location data.
• Cookies and tracking technologies: Session cookies, persistent cookies, and similar tracking identifiers. See Section 6 for full details.

2.3 Data from Third Parties

• Identity verification results from KYC service providers.
• Transaction confirmation data from GCash, PayMaya, and banking partners.
• Fraud screening signals from third-party risk management systems.

3. How We Use Your Data

phophen processes your personal data for the following specific purposes:

• Account creation and management: To register your phophen account, authenticate your identity at login, and maintain your account records.
• Service delivery: To provide access to casino games, live dealer tables, sports betting, Bingo, fishing games, and all other platform features available after phophen Login.
• Payment processing: To process GCash deposits, PayMaya transactions, bank transfers, and withdrawals in Philippine Peso, and to verify that payment sources belong to the registered account holder.
• Identity verification and KYC compliance: To verify your age (21+ requirement), identity, and residency in compliance with applicable Philippine regulatory requirements.
• Fraud prevention and security: To detect, investigate, and prevent unauthorized account access, money laundering, bonus abuse, multi-accounting, and other fraudulent or prohibited activities.
• Customer support: To respond to your support inquiries, resolve disputes, and provide account assistance through phophen's 24/7 live chat and email support channels.
• Responsible gaming: To implement and monitor deposit limits, wagering caps, session reminders, cooling-off periods, and self-exclusion arrangements you have requested.
• Marketing and promotions: To send you relevant bonus offers, promotional emails, and platform updates, where you have provided consent and not opted out. You may withdraw marketing consent at any time from Account Settings.
• Platform improvement: To analyze aggregate usage patterns, game performance, and user behavior to improve phophen's product, features, and user experience for Filipino players.
• Legal and regulatory compliance: To fulfill obligations under the Data Privacy Act of 2012, anti-money laundering regulations, and other applicable Philippine laws.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, phophen processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the phophen Terms and Conditions you agreed to upon account registration — including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine law, including KYC obligations, anti-money laundering requirements, and age verification mandates.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights as a data subject.
• Consent: Processing for direct marketing communications, where you have given specific, informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing

phophen does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and card processing partners, solely to process your transactions. These parties handle your financial data under their own privacy policies and PCI-DSS compliance frameworks.
• KYC and identity verification providers: Third-party services used to verify your identity, age, and document authenticity during the account verification process.
• Game software providers: JILI, PG Soft, Pragmatic Play, Spadegaming, and other licensed game studios receive limited gameplay data (e.g., bet amounts, game results) necessary for game operation and RTP auditing. They do not receive your identity or payment information.
• Fraud prevention and security vendors: Risk management and anti-fraud platforms that help phophen detect suspicious activity and protect player accounts.
• Legal and regulatory authorities: Philippine government agencies, law enforcement bodies, PAGCOR, or the Anti-Money Laundering Council (AMLC) where disclosure is required by law or court order.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to continued compliance with this Privacy Policy.

All third parties with whom phophen shares personal data are contractually required to process such data only for the specified purpose, in accordance with applicable data protection law, and with appropriate security measures in place.

6. Cookies & Tracking Technologies

phophen uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Essential for platform functionality, including session management after phophen Login, authentication tokens, and security features. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings, game filter selections, and display preferences.
• Analytics cookies: Used to collect aggregate, anonymized data about how Filipino players interact with phophen — pages visited, session lengths, and feature usage — to improve the platform. These do not identify individual users.
• Marketing cookies: Used only where you have consented to receive personalized promotions from phophen. You may withdraw consent at any time via Account Settings or by contacting support.

You can manage cookie preferences in your browser settings. Note that disabling strictly necessary cookies will prevent phophen from functioning correctly.

7. Data Retention

phophen retains your personal data for as long as your account remains active and for a defined period thereafter, as required by applicable law and legitimate business necessity:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by Philippine anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years in compliance with AMLC and PAGCOR record-keeping requirements.
• Support communications: Retained for up to three (3) years from the date of the last communication.
• Marketing consent records: Retained until you withdraw consent and for a reasonable period thereafter as evidence of the consent record.
• Cookies and analytics data: Session cookies expire when you close your browser. Persistent analytics data is retained in anonymized, aggregate form.

When personal data is no longer required for any lawful purpose, phophen securely deletes or anonymizes it in accordance with our data disposal procedures.

8. Data Security

phophen's security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and phophen servers — the same standard used by major Philippine banks like BPI and BDO.
• Salted password hashing — your phophen password is never stored in readable form. Even phophen staff cannot retrieve your password.
• SMS-based two-factor authentication (2FA) — available to all players after phophen Login, providing an additional layer of account security via your registered Philippine mobile number.
• Anomalous login detection — automated systems flag and challenge login attempts from unrecognized devices or locations.
• Role-based access controls — phophen staff can only access player data to the extent required by their specific job function.
• Regular security audits — phophen's platform and infrastructure undergo periodic third-party security assessments.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phophen will notify the National Privacy Commission (NPC) and affected data subjects as required by the Data Privacy Act of 2012 and its implementing rules.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and phophen's Privacy Policy, you have the following rights with respect to your personal data:

• Right to be informed: The right to know that your personal data is being collected and processed — which this Privacy Policy fulfills.
• Right of access: The right to request a copy of the personal data phophen holds about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your phophen account.
• Right to erasure / right to be forgotten: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to data portability: The right to receive a structured, commonly used copy of your personal data in a machine-readable format where technically feasible.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing. Objection to marketing processing will be honored immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint: You have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact phophen's data privacy team at [email protected]. phophen will respond to verified data subject requests within thirty (30) days of receipt.

10. Children's Privacy

phophen does not knowingly collect personal data from individuals under the age of 21. If phophen discovers or has reason to believe that an account was registered by a person under 21 years of age, the account will be immediately suspended, all balances will be forfeited, and any personal data associated with the underage account will be securely deleted to the extent permitted by law.

If you are a parent or guardian and believe that a minor under your care has accessed or registered on phophen, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

11. International Data Transfers

phophen's primary operations and data storage are based to serve Filipino players. In certain cases, personal data may be processed by service providers located outside the Philippines — for example, international game software providers, cloud infrastructure services, or global fraud prevention systems.

Where personal data is transferred outside the Philippines, phophen ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012, including contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law. Such transfers are conducted only with parties that provide adequate levels of data protection.

12. Policy Changes

phophen may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. Material changes will be communicated to registered players via email to the address on your phophen account, or through a notice displayed on the platform at login.

The "Last updated" date at the top of this page will be revised upon each substantive amendment. Your continued use of the phophen platform after the effective date of any change constitutes your acknowledgment of the revised Privacy Policy. We encourage you to review this page periodically.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact phophen's data privacy team: