Privacy Policy

This Privacy Policy applies to all personal information collected, processed, or stored by phcast in connection with the operation of the Platform at phcast.vip, including all related web pages, account management functions, customer support channels, and promotional activities.

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012, hereinafter "DPA") and its Implementing Rules and Regulations, the data controller for all personal information processed under this Policy is phcast, the operator of phcast.vip, a PAGCOR-licensed online gaming platform based in the Philippines.

This Policy should be read in conjunction with the phcast Terms and Conditions. Capitalized terms not defined herein shall have the meanings assigned to them in the phcast Terms and Conditions.

phcast collects personal data through your direct interactions with the Platform, through automated technical means, and in some cases from third-party sources such as payment processors and identity verification providers. The categories of personal data phcast collects include:

2.1 Registration and Identity Data

• Full legal name as it appears on a valid Philippine government-issued identification document
• Date of birth (for mandatory 21+ age verification)
• Residential address within the Philippines
• Email address and/or Philippine mobile number
• Username and hashed account password (passwords are never stored in plain text)
• Copies of government-issued identification documents submitted during KYC (PhilSys ID, passport, driver's licence, UMID, or equivalent)
• Selfie photographs or liveness check images where required for biometric identity verification

2.2 Financial and Transaction Data

• GCash account details, Maya account details, bank account numbers (BPI, BDO, UnionBank, Metrobank, or other linked accounts), or cryptocurrency wallet addresses used for deposits and withdrawals
• Transaction history including deposit amounts, withdrawal requests, dates, and payment method used
• Source of funds documentation where requested for compliance purposes

2.3 Gaming Activity Data

• Complete bet and game session history including game titles, stake amounts, outcomes, and timestamps
• Bonus usage, wagering progress, and promotional participation history
• Responsible gaming tool selections, including deposit limits, loss limits, and self-exclusion status

2.4 Technical and Device Data

• IP address, browser type and version, operating system, and device identifiers
• Session duration, pages visited, clickstream data, and login timestamps
• Geolocation data at a country/region level to enforce Philippine territorial access requirements

2.5 Communications Data

• Records of all communications between you and phcast customer support, including live chat transcripts, email correspondence, and support ticket contents
• Survey responses, feedback submissions, and voluntary communications sent to phcast

phcast processes personal data for the following purposes:

• Account Creation and Management: To register your phcast account, verify your identity and age, maintain your player profile, and manage your login credentials.
• Payment Processing: To process deposits and withdrawals via your selected Philippine payment method, reconcile transactions, and prevent payment fraud.
• Regulatory Compliance: To fulfil phcast's obligations under the PAGCOR licence, the Anti-Money Laundering Act (RA 9160 as amended by RA 10927), and other applicable Philippine legislation, including filing of Covered and Suspicious Transaction Reports (CTRs and STRs) with the Anti-Money Laundering Council (AMLC) where required.
• Game Delivery and Platform Operation: To deliver games, calculate and credit winnings, manage bonus allocations, and ensure the integrity and continuity of the phcast gaming service.
• Responsible Gaming: To enforce deposit limits, self-exclusion requests, and other responsible gaming tools you have activated, and to identify patterns of play that may indicate problem gambling requiring intervention.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other prohibited conduct on the Platform.
• Customer Support: To respond to your inquiries, process complaints, and resolve disputes related to your phcast account or gaming activity.
• Marketing Communications (with consent): To send promotional offers, bonus notifications, and platform updates to players who have opted into marketing communications. You may withdraw consent at any time.
• Analytics and Platform Improvement: To analyse aggregate usage patterns and improve the phcast platform, user experience, and game selection — using anonymised or pseudonymised data wherever possible.

phcast processes your personal data on the following legal bases under the DPA:

• Contractual Necessity: Processing is necessary to fulfil the contract between phcast and you as a registered player — including account management, payment processing, and game delivery.
• Legal Obligation: Processing is required to comply with phcast's obligations under Philippine law, including PAGCOR licence conditions, AML legislation, and PAGCOR reporting requirements.
• Legitimate Interests: Processing is necessary for phcast's legitimate interests in fraud prevention, platform security, and responsible gaming enforcement, where these interests are not overridden by your data protection rights.
• Consent: For marketing communications and certain non-essential cookies, phcast relies on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phcast does not sell personal data. phcast may share personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, UnionBank, Metrobank, and other payment partners require transaction data to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify player identity and screen against sanctions and PEP (politically exposed persons) lists.
• Game Providers: Licensed software providers whose games are hosted on phcast receive limited technical data (such as session tokens and stake amounts) necessary to operate games and return results. Game providers do not receive full player identity data.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law, court order, or regulatory mandate.
• IT and Security Service Providers: Cloud hosting, cybersecurity, fraud detection, and platform analytics vendors operating under data processing agreements that bind them to equivalent data protection standards.
• Professional Advisers: Legal counsel, auditors, and compliance consultants where necessary for phcast's legal or regulatory obligations, subject to professional confidentiality obligations.

All third parties with whom phcast shares personal data are required to implement appropriate technical and organizational security measures and to process data only for the purposes specified by phcast.

phcast uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Session management, authentication, security tokens, and load balancing — required for the Platform to function. These cannot be disabled.
• Functional Cookies: Remembering your language preferences, last visited game category, and responsible gaming tool settings to improve your experience on phcast.
• Analytics Cookies: Aggregated, anonymised usage data to help phcast understand how players navigate the Platform and identify areas for improvement. phcast uses privacy-respecting analytics and does not share individual-level analytics data with third parties for advertising purposes.
• Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content. You may withdraw consent via the cookie preferences panel or your Account Settings at any time.

Most browsers allow you to control cookies through browser settings. Disabling strictly necessary cookies will impair or prevent Platform functionality.

phcast retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by Philippine law and PAGCOR regulations:

• Account and Identity Data: Retained for the duration of your phcast account and for a minimum of five (5) years following account closure, as required by AML legislation and PAGCOR licence conditions.
• Transaction and Gaming Records: Retained for a minimum of five (5) years from the date of the transaction, consistent with PAGCOR reporting obligations and the Anti-Money Laundering Act.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a specific regulatory inquiry or legal hold.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to enable dispute resolution and service quality review.
• Marketing Consent Records: Retained for the duration of your account and for three (3) years following account closure, to demonstrate compliance with consent requirements.

Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with phcast's data disposal procedures.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phcast:

• Right to Be Informed: To be told what personal data phcast holds about you, how it is used, and to whom it has been disclosed — as set out in this Privacy Policy.
• Right to Access: To request a copy of the personal data phcast holds about you. Requests will be responded to within twenty (20) business days.
• Right to Correction: To request correction of inaccurate or incomplete personal data. For account-critical data (name, date of birth), corrections may require documentary evidence.
• Right to Erasure: To request deletion of your personal data where phcast no longer has a legal basis to retain it. Note that regulatory retention obligations may limit this right in respect of certain categories of data.
• Right to Data Portability: To receive a copy of data you have provided to phcast in a structured, commonly used, machine-readable format.
• Right to Object: To object to processing of your personal data for direct marketing purposes at any time. You may also object to other processing based on legitimate interests, subject to phcast's overriding legitimate interests or legal obligations.
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phcast has violated your data protection rights.

To exercise any of these rights, contact phcast's Data Protection Officer at [email protected] with the subject line "Data Privacy Request". phcast will verify your identity before processing any data rights request.

phcast does not knowingly collect personal data from individuals under the age of 21 years. The phcast Platform is strictly restricted to adult players 21 years of age or older in accordance with PAGCOR regulations. All registration attempts are subject to age verification, and phcast will immediately close and delete any account found to belong to a person under 21 years of age, with all associated data erased within the timeframe permitted by applicable law.

If you are a parent or guardian and believe your minor child has submitted personal data to phcast, please contact [email protected] immediately and phcast will take prompt action to delete such data and close the associated account.

phcast's primary data processing infrastructure is located within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud screening services operating in other jurisdictions.

Where such transfers occur, phcast ensures that they are subject to appropriate safeguards, including contractual data processing agreements that require the recipient to implement data protection standards equivalent to those required under the Philippine Data Privacy Act of 2012. phcast does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing such safeguards.

phcast implements the following technical and organisational security measures to protect player personal data:

• TLS 1.2 or higher encryption for all data transmitted between player devices and the phcast Platform
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
• Role-based access control ensuring that phcast staff can only access personal data necessary for their specific operational function
• Multi-factor authentication required for phcast staff access to systems containing personal data
• Regular penetration testing and security audits conducted by qualified independent security professionals
• Incident response procedures with defined escalation paths for personal data breaches, including NPC notification obligations
• Regular staff training on data protection obligations and secure data handling practices

While phcast takes all reasonable precautions, no digital platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their phcast account.

phcast reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine law, PAGCOR regulatory requirements, phcast's operational practices, or industry best practice. Material changes to this Policy will be communicated to registered players via the email address on file at least seven (7) days before the changes take effect. The effective date at the top of this page will be updated accordingly.

Continued use of the phcast Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. phcast recommends that you review this page periodically.

For all privacy-related inquiries, data rights requests, or complaints relating to phcast's handling of your personal data, please contact phcast's designated Data Protection Officer:

• Email: [email protected]
• Subject Line: "Data Privacy Request" or "Privacy Policy Inquiry"
• Response Time: Within twenty (20) business days of receipt of a verified request
• Regulatory Authority: National Privacy Commission (NPC), Republic of the Philippines

phcast is committed to resolving privacy concerns promptly and transparently. If you are unsatisfied with phcast's response, you have the right to escalate your complaint to the NPC.