phsabong Privacy Policy

1 Introduction

phsabong is committed to protecting the privacy and personal data of every player who uses our Platform. We understand that Filipino players trust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy is designed to be transparent about our data practices so that you can make informed decisions about your use of phsabong.

This Policy applies to all personal data collected through the phsabong website at phsabong.app, the phsabong mobile application, and any other digital touchpoints operated by phsabong. It applies to registered players, prospective players who browse the Platform without registering, and any individual who contacts phsabong's customer support team.

This Policy should be read alongside phsabong's Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with phsabong. If you have any questions about this Policy or how phsabong handles your data, please contact our Data Protection Officer using the details provided in Section 13.

2 Data We Collect

phsabong collects the following categories of personal data from players and Platform users. We only collect data that is necessary for the purposes described in this Policy.

2.1 Identity and Registration Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Gender
• Nationality and country of residence
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence)
• Username and account credentials (password stored in hashed form only)

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address, including barangay, city or municipality, province, and postal code

2.3 Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details for BPI, BDO, Metrobank, or other approved banking partners
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references
• Source of funds declarations where required by anti-money laundering regulations

2.4 Gaming and Behavioural Data

• Game history, including games played, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings, including deposit limits, session limits, and self-exclusion status
• Customer support interaction records, including chat transcripts and email correspondence

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Platform access logs, including login timestamps and session activity
• Cookie identifiers and similar tracking technology data (see Section 8)

3 How We Collect Your Data

phsabong collects personal data through the following channels:

Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account settings, you provide personal data directly to phsabong.

Automatically through the Platform: When you access and use the phsabong Platform, we automatically collect technical and behavioural data through server logs, cookies, and similar tracking technologies. This includes your IP address, device information, pages visited, games played, and session activity.

From third-party verification providers: To comply with our Know Your Customer (KYC) and anti-money laundering (AML) obligations, phsabong may receive identity verification data from accredited third-party identity verification service providers. This may include confirmation of your identity against government databases or credit reference agencies.

From payment processors: When you make a deposit or withdrawal using GCash, PayMaya, BPI, BDO, Metrobank, or other approved payment methods, phsabong receives transaction confirmation data from the relevant payment processor.

From regulatory authorities: phsabong may receive information about players from PAGCOR or other competent regulatory authorities in connection with our licensing obligations, responsible gaming programmes, or investigations into prohibited conduct.

4 How We Use Your Data

phsabong uses the personal data we collect for the following purposes:

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phsabong processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform our contract with you — that is, to provide you with access to the phsabong Platform and its gaming services. This includes account registration, transaction processing, and customer support.
• Legal obligation: Processing that is required to comply with applicable Philippine law and regulatory requirements, including PAGCOR licensing conditions, anti-money laundering obligations under Republic Act No. 9160 (as amended), and tax reporting requirements.
• Legitimate interests: Processing that is necessary for phsabong's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided that such interests are not overridden by your rights and interests.
• Consent: Processing that is based on your freely given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing and Disclosure

phsabong does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Service Providers and Data Processors

phsabong engages trusted third-party service providers to assist in operating the Platform. These providers act as data processors on our behalf and are contractually bound to process your data only in accordance with our instructions and this Policy. Categories of service providers include:

• Identity verification and KYC service providers
• Payment processors and e-wallet providers (GCash, PayMaya, BPI, BDO, Metrobank, and others)
• Cloud hosting and data storage providers
• Customer support platform providers
• Fraud detection and cybersecurity service providers
• Analytics and platform performance monitoring providers

6.2 Regulatory and Law Enforcement Authorities

phsabong may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory directive. phsabong will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phsabong's business, your personal data may be transferred to the acquiring entity as part of that transaction. phsabong will notify you of any such transfer and ensure that the receiving entity is bound by data protection obligations no less protective than those in this Policy.

6.4 Cross-Border Data Transfers

Some of phsabong's service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, phsabong will implement appropriate safeguards — such as contractual clauses approved by the National Privacy Commission — to ensure your data remains protected.

7 Data Retention

phsabong retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session, or longer if required by regulatory obligations.
• Customer support records: Retained for three (3) years from the date of the last interaction, or longer if the interaction relates to an unresolved dispute or legal claim.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, to demonstrate compliance.
• Technical and log data: Retained for up to twelve (12) months, unless longer retention is required for security investigations or legal proceedings.

Upon expiry of the applicable retention period, phsabong will securely delete or anonymise your personal data in accordance with our data disposal procedures. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for analytical purposes.

8 Cookies and Tracking Technologies

phsabong uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies help us recognise you, remember your preferences, keep you securely logged in, and understand how you use the Platform.

Types of cookies used by phsabong:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming tool configurations — to provide a more personalised experience.
• Analytics cookies: These cookies collect anonymised information about how players use the Platform, including which pages are visited most frequently and how players navigate between sections. This data helps phsabong improve the Platform's performance and usability.
• Security cookies: These cookies help phsabong detect and prevent fraudulent activity, unauthorised access, and other security threats.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the phsabong Platform.

9 Data Security

phsabong implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and phsabong's servers is encrypted using 256-bit SSL/TLS protocols. You can verify this by checking for the padlock icon and "https" in your browser's address bar.
• Encryption at rest: Sensitive personal and financial data stored on phsabong's servers is encrypted at rest using industry-standard encryption algorithms.
• Password security: Player passwords are never stored in plain text. phsabong uses strong one-way hashing algorithms with salting to store password credentials securely.
• Access controls: Access to personal data within phsabong is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-factor authentication: phsabong offers two-factor authentication (2FA) for player accounts and requires it for all internal staff accounts with access to player data.
• Regular security audits: phsabong conducts regular penetration testing, vulnerability assessments, and security audits of its Platform and infrastructure.
• Incident response: phsabong maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, phsabong will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act.

While phsabong takes all reasonable steps to protect your personal data, no system is completely immune to security threats. You also play an important role in keeping your account secure — please use a strong, unique password and enable 2FA on your phsabong account.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phsabong:

• Right to be informed: You have the right to be informed about how phsabong collects and uses your personal data. This Policy fulfils that obligation.
• Right of access: You have the right to request a copy of the personal data phsabong holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data phsabong holds about you. You may update most of your account information directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to phsabong's legal obligations to retain certain data under PAGCOR regulations and anti-money laundering law.
• Right to object: You have the right to object to the processing of your personal data where phsabong relies on legitimate interests as the legal basis, and where you believe your rights and interests override those legitimate interests.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to phsabong in a structured, commonly used, and machine-readable format, and to request that this data be transmitted to another data controller where technically feasible.
• Right to withdraw consent: Where phsabong processes your data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: If you believe phsabong has not handled your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact phsabong's Data Protection Officer using the contact details in Section 13. phsabong will respond to all verified data rights requests within thirty (30) days of receipt, in accordance with the Data Privacy Act.

11 Children's Privacy and Age Restriction

The phsabong Platform is strictly intended for individuals who are at least 21 years of age, in accordance with the minimum legal age for casino-style gambling in the Philippines. phsabong does not knowingly collect personal data from individuals under the age of 21.

All registration applications are subject to age verification. phsabong uses a combination of self-declaration, document verification, and third-party identity verification services to confirm that players meet the 21+ age requirement before granting access to real-money gaming features.

If phsabong discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the personal data in question to the extent permitted by law, and report the matter to the appropriate authorities where required.

12 Changes to This Privacy Policy

phsabong reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will:

• Post the updated Policy on this page with a revised "Last Updated" date at the top.
• Send a notification to your registered email address where the changes are significant and affect your rights.
• Display a prominent notice on the phsabong Platform for a reasonable period following the update.

Your continued use of the phsabong Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the Platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how phsabong protects your personal data. The current version of this Policy is always available on this page.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or phsabong's handling of your personal data, please contact our Data Protection Officer:

For general customer support queries unrelated to data privacy, please contact our 24/7 support team via live chat on the phsabong Platform or by emailing [email protected].

If you are not satisfied with phsabong's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.