phslots Privacy Policy

1.1 This Privacy Policy ("Policy") is published by phslots ("we", "us", "our", "the Company") and governs the collection, use, storage, disclosure, and protection of personal data submitted to or generated through the phslots online casino and gaming platform available at phslots.one (the "Platform").

1.2 This Policy applies to all individuals who: register an account on the phslots Platform; access or browse the Platform as a guest user; contact phslots through any support or communication channel; or interact with any phslots content, promotional material, or associated service.

1.3 This Policy should be read alongside the phslots Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Where any provision of this Policy conflicts with the Terms & Conditions on a data privacy matter, this Policy shall prevail.

1.4 By using the phslots Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must cease use of the Platform immediately.

2.1 For the purposes of the Philippine Data Privacy Act of 2012 (R.A. 10173) and its Implementing Rules and Regulations, phslots is the personal information controller in respect of all personal data processed through the Platform.

2.2 phslots operates within the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). Data processing activities at phslots are conducted in compliance with PAGCOR's applicable data governance requirements as well as the National Privacy Commission's (NPC) published standards and circulars.

2.3 The phslots Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and applicable data privacy law. Contact details for the DPO are provided in Section 15 of this Policy.

3.1 The following categories of personal data are collected and processed by phslots. The specific data points collected may vary depending on your level of account verification, the services you use, and the payment methods you employ.

3.2 phslots does not intentionally collect sensitive personal information as defined under R.A. 10173 (e.g., racial or ethnic origin, political opinions, religious beliefs, health data) unless such information is voluntarily provided by the user or is strictly required for a specific regulatory compliance purpose. Any sensitive personal information that is collected is subject to heightened protection measures.

phslots collects personal data through the following mechanisms:

4.1 Direct Collection

Data you provide directly to phslots when you: complete the phslots account registration form; upload identity documents for KYC verification; conduct a financial transaction (deposit or withdrawal); communicate with the phslots support team via live chat, email, or other channels; complete any survey, promotion entry, or feedback form on the Platform.

4.2 Automated Collection

Data collected automatically when you access or use the phslots Platform, including through cookies, web beacons, pixel tags, server logs, and session recording tools. This includes your IP address, device and browser information, pages visited, time spent on the Platform, and interaction data with the game lobby and account dashboard.

4.3 Third-Party Sources

phslots may receive personal data about you from: payment service providers (GCash, Maya, BPI, BDO, Metrobank) for the purpose of confirming transaction authenticity and preventing fraud; identity verification services used in the KYC process; PAGCOR and other regulatory bodies where data sharing is required under applicable law; and fraud prevention databases where phslots has a legitimate interest in verifying account integrity.

5.1 phslots processes your personal data on one or more of the following legal bases, as applicable to each processing activity:

• Consent: Where you have given clear consent for phslots to process your personal data for a specific purpose, such as marketing communications or optional personalisation features. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and phslots — i.e., the phslots Terms & Conditions — including account management, game provision, and payment processing.
• Legal Obligation: Where processing is necessary for phslots to comply with applicable Philippine law, including KYC and AML obligations under PAGCOR regulations and Republic Act No. 9160 (Anti-Money Laundering Act of 2001, as amended).
• Legitimate Interests: Where processing is necessary for phslots's legitimate interests, provided those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, responsible gaming monitoring, and improving the Platform's performance and user experience.

6.1 phslots uses the personal data it collects for the following purposes:

• Account Creation and Management: To create, verify, maintain, and manage your phslots account throughout the duration of our relationship.
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in accordance with PAGCOR regulatory requirements before enabling real-money gameplay and processing withdrawals.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and USDT, and to maintain accurate financial records of all transactions.
• Gameplay Provision: To deliver the games, features, and services you access on the phslots Platform, including live dealer streams, slot games, sports betting, bingo, and e-sabong.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, underage access, and other prohibited conduct as defined in the phslots Terms & Conditions.
• Regulatory Compliance: To meet phslots's obligations under PAGCOR regulations, R.A. 9160 (AML), R.A. 10173 (Data Privacy Act), and any other applicable Philippine law or regulatory directive.
• Responsible Gaming: To monitor gameplay patterns, identify indicators of problem gambling, enforce self-imposed limits and self-exclusion periods, and provide appropriate intervention where responsible gaming concerns arise.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide account assistance through live chat and email.
• Marketing and Promotions: Where you have consented, to send you information about phslots bonuses, promotions, new game launches, and other relevant offers. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Platform Improvement: To analyse usage patterns, test new features, and improve the performance, security, and user experience of the phslots Platform.
• Legal Claims: To establish, exercise, or defend legal claims in connection with your phslots account or use of the Platform.

7.1 phslots may share your personal data with the following categories of third parties, solely for the legitimate purposes described in this Policy:

• Payment Service Providers: GCash (Globe Fintech Innovations, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, and Metrobank — to process your financial transactions. Each provider's own privacy policy governs their handling of your data once transmitted for payment processing.
• KYC and Identity Verification Partners: Third-party identity verification services engaged by phslots to process government ID documents and perform biometric verification checks as part of the account KYC process.
• Game Software Providers: Game technology providers including JILI Games, Pragmatic Play, PG Soft, Evolution Gaming, and other licensed game developers may receive anonymised session and gameplay data necessary for game operation and technical support. No identifying personal data is shared beyond what is technically necessary.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies — where disclosure is required by law, court order, or regulatory directive. phslots will notify affected users of any such disclosure where legally permitted to do so.
• Legal and Professional Advisors: Lawyers, auditors, and other professional advisors engaged by phslots under strict confidentiality obligations, where disclosure is necessary for legal compliance or the defence of legal claims.
• Fraud Prevention Databases: Industry-standard fraud prevention and AML screening services operating in the Philippine and international gaming sector, where phslots has a legitimate interest in preventing financial crime.

7.2 All third parties with whom phslots shares personal data are required to process that data only as directed by phslots, in accordance with applicable Philippine data privacy law, and subject to appropriate data processing agreements.

8.1 The phslots Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and support analytical and responsible gaming functions. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential for the phslots Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and responsible gaming limit configurations, so these do not need to be re-entered on each visit.
• Analytical Cookies: Collect anonymised data about how users interact with the phslots Platform — pages visited, time spent, navigation paths — to help phslots improve the Platform's design and performance.
• Responsible Gaming Cookies: Track session duration to trigger time-based alerts and enforce session limits where these have been self-set by the account holder.

8.2 Consent for non-essential cookies is requested via a cookie consent banner displayed on first access to the phslots Platform. You may withdraw consent for non-essential cookies at any time by adjusting your browser settings or contacting phslots support. Note that disabling certain cookies may affect the functionality of some Platform features.

8.3 phslots does not use third-party advertising cookies or permit third-party advertisers to set tracking cookies on the phslots Platform.

9.1 phslots retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the retention periods required by applicable Philippine law and regulatory requirements.

9.2 The following general retention periods apply:

• Account and KYC Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements under R.A. 9160.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC requirements and phslots's internal audit obligations.
• Gameplay Data: Retained for three (3) years from the date of the relevant game session, for dispute resolution, responsible gaming analysis, and RTP audit purposes.
• Communications Data: Support chat transcripts and email correspondence are retained for two (2) years from the date of the communication, or longer where the communication relates to an active dispute or regulatory matter.
• Technical and Session Data: IP logs and session data are retained for twelve (12) months, except where flagged in connection with a security incident, fraud investigation, or regulatory inquiry.

9.3 Where data is retained solely to comply with a legal obligation, it is held in restricted-access storage and is not used for any operational or commercial purpose. Upon expiry of the applicable retention period, data is securely destroyed or anonymised in accordance with phslots's data deletion procedures.

10.1 phslots implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed on the Platform. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the phslots Platform — including phslots login credentials, personal data, and financial transaction details — is encrypted using industry-standard 256-bit SSL/TLS encryption.
• Password Hashing: Passwords stored in the phslots system are processed through a one-way cryptographic hash function. phslots staff cannot access your password in plaintext at any time. If you lose your password, it must be reset — it cannot be recovered.
• Access Control: Access to personal data within phslots is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls, and all access to sensitive data is logged.
• Two-Factor Authentication (2FA): phslots provides SMS-based 2FA for all account holders. Enabling 2FA is strongly recommended and adds a critical layer of security to the phslots login process.
• Regular Security Audits: phslots conducts regular penetration testing and security audits on the Platform infrastructure. Critical vulnerabilities are remediated as a priority.
• Fraud Monitoring: Automated systems monitor transactions and account activity for indicators of fraud, AML risk, and account compromise, with alerts escalated to the security team in real time.

10.2 In the event of a personal data breach that poses a risk to the rights of affected individuals, phslots will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected data subjects without undue delay, in accordance with the requirements of R.A. 10173 and NPC Circular No. 16-03.

10.3 Notwithstanding phslots's security measures, no internet-based system is entirely immune to risk. You are responsible for maintaining the security of your phslots login credentials and for reporting any suspected unauthorised access to your account immediately.

11.1 As a data subject under the Philippine Data Privacy Act of 2012 (R.A. 10173), you have the following rights in respect of your personal data held by phslots:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed. This Privacy Policy constitutes phslots's fulfilment of this obligation.
• Right of Access: The right to obtain confirmation of whether phslots holds personal data about you and, if so, to receive a copy of that data in a portable format.
• Right to Correction: The right to request correction of inaccurate or incomplete personal data held by phslots, without undue delay.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no overriding legal obligation requires its retention.
• Right to Object: The right to object to processing of your personal data for direct marketing, profiling, or any other processing conducted on the basis of legitimate interests, where such objection is justified by your particular circumstances.
• Right to Data Portability: The right to receive personal data you have provided to phslots in a structured, commonly used, machine-readable format, and to transmit that data to another service provider.
• Right to Damages: The right to seek compensation for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of personal data by phslots, where such damage is established.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phslots has violated your data privacy rights.

11.2 To exercise any of the above rights, please submit a written request to the phslots Data Protection Officer using the contact information in Section 15. phslots will acknowledge your request within 5 business days and respond substantively within 30 calendar days, or within the timeframe prescribed by the NPC for the specific request type.

11.3 phslots may require identity verification before processing data subject rights requests to prevent unauthorised access to another person's data. Where a request is refused or partially refused, phslots will explain the reason in writing and advise you of your right to appeal to the NPC.

12.1 The phslots Platform enforces a mandatory age verification process as part of KYC. Any account found to belong to a person under the age of 21 will be immediately closed, all associated balances will be returned to the depositing payment source (less any legally permissible deductions), and any personal data collected will be deleted to the extent permitted by law.

12.2 Parents or legal guardians who believe a minor has created a phslots account or provided personal data to phslots are requested to contact the phslots support team or DPO immediately using the contact information in Section 15. phslots will take prompt remedial action upon such notification.

13.1 The phslots Platform may involve the transfer of personal data to servers, service providers, or partners located outside the Philippines — in particular, game software providers and cloud infrastructure services that operate globally.

13.2 Where personal data is transferred outside the Philippines, phslots ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under R.A. 10173. These safeguards may include: contractual clauses approved by or consistent with NPC standards; adequacy decisions where the receiving jurisdiction provides comparable data protection; or binding corporate rules where the transfer is to a member of the same corporate group.

13.3 By using the phslots Platform and accepting this Privacy Policy, you consent to the transfer of your personal data as described in this Section, subject to the safeguards described above.

14.1 phslots reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business practices, or the services offered through the phslots Platform.

14.2 When material amendments are made to this Policy, phslots will notify registered account holders by: (a) displaying a prominent notice on the phslots Platform; (b) sending an email to your registered email address; or (c) sending an SMS to your registered Philippine mobile number — using at least one of these channels.

14.3 The effective date displayed at the top of this Policy reflects the date of the most recent revision. Your continued use of the phslots Platform after the effective date of an amended Policy constitutes your acceptance of the revised terms.

14.4 Where an amendment materially affects your rights as a data subject in a manner that requires fresh consent, phslots will request such consent explicitly before the amendment takes effect in relation to your personal data.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or phslots's data processing activities, please contact the phslots Data Protection Officer through the following channels:

• Email: [email protected] — subject line: "Data Privacy Request — [Your Registered Email]"
• Live Chat: Available 24/7 on the phslots Platform. For complex data privacy matters, please use email to ensure a full written record is maintained.

15.2 phslots will acknowledge all data privacy correspondence within 5 business days. Substantive responses to data subject rights requests will be provided within 30 calendar days of the date of receipt of the request, or within any shorter timeframe prescribed by the National Privacy Commission.

15.3 If you are not satisfied with phslots's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC can be reached through its official website and handles complaints relating to violations of R.A. 10173 by personal information controllers operating in the Philippines.