phplus Privacy Policy

Effective Date: January 1, 2026

1. Introduction and Scope

This Privacy Policy ("Policy") describes how phplus ("phplus," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "Player," or "Data Subject") who access or use the phplus online gaming platform at phplus.club (the "Platform").

phplus is committed to protecting the privacy and security of your personal data. We process personal information in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected through the Platform, including data collected during account registration, identity verification, gameplay, financial transactions, customer support interactions, and use of our website. By registering an account or using the phplus Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller Information

phplus acts as the Personal Information Controller (PIC) with respect to the personal data you provide when using the Platform. As PIC, phplus determines the purposes and means of processing your personal information.

For all privacy-related inquiries, requests, and complaints, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Registration and Identity Data

When you create a phplus account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Residential address in the Philippines (barangay, city/municipality, province)
• Email address and/or Philippine mobile number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and Philippine anti-money laundering laws, we collect:

• Copies of government-issued photo identification (passport, driver's license, UMID, PhilSys National ID, SSS ID, or PRC ID)
• Proof of address documents (utility bills, bank statements, or barangay certificates)
• Selfie photographs taken during the verification process

3.3 Financial and Transaction Data

When you make deposits or request withdrawals, we collect:

• GCash or PayMaya account details (mobile number associated with the e-wallet)
• Bank account details for bank transfer transactions (account name, account number, bank name)
• Debit card details (card number is tokenized — we do not store full card numbers)
• Transaction history, including deposit amounts, withdrawal amounts, dates, and reference numbers

3.4 Gaming Activity Data

We collect data about your activity on the phplus Platform, including:

• Games played, wagers placed, and game outcomes
• Session duration and login/logout timestamps
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical information:

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser type and version
• Referring URL and pages visited on the Platform
• Cookie identifiers and session tokens (see Section 9)

3.6 Customer Support Data

When you contact phplus customer support, we collect the content of your communications, including chat transcripts, email correspondence, and any attachments or screenshots you provide.

4. How We Collect Your Data

phplus collects personal data through the following means:

• Directly from you — when you register, complete KYC verification, make transactions, use responsible gaming tools, or contact support
• Automatically — through cookies, web beacons, and server logs when you access the Platform
• From third parties — from identity verification service providers, payment processors (GCash, PayMaya, banks), and fraud prevention services, where necessary to verify your identity and process transactions securely

5. Legal Basis for Processing

phplus processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing is required to fulfill our obligations under the Terms and Conditions you agreed to upon registration, including operating your account, processing deposits and withdrawals, and providing gaming services
• Legal obligation — processing is required to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and NPC regulations
• Legitimate interests — processing is necessary for phplus's legitimate interests in preventing fraud, ensuring platform security, and improving our services, provided these interests are not overridden by your rights
• Consent — for certain processing activities such as marketing communications, we rely on your explicit consent, which you may withdraw at any time

6. How We Use Your Personal Data

phplus uses the personal data we collect for the following purposes:

• Creating and managing your phplus account
• Verifying your identity and age (21+) in compliance with PAGCOR requirements
• Processing deposits and withdrawals through GCash, PayMaya, bank transfer, and debit card
• Providing access to casino games, slots, bingo, and fishing games on the Platform
• Administering bonuses, promotions, and loyalty rewards
• Detecting and preventing fraud, money laundering, and other illegal activity
• Complying with our legal and regulatory obligations under Philippine law
• Providing customer support and resolving disputes
• Sending transactional communications (account confirmations, withdrawal notifications, security alerts)
• Sending promotional communications about phplus offers and new games — only where you have provided consent
• Monitoring and enforcing responsible gaming commitments, including processing self-exclusion requests
• Analyzing Platform usage to improve game offerings, user experience, and site performance

7. Sharing Your Personal Data

7.1 Service Providers

phplus shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include identity verification providers, payment processors (GCash, PayMaya, and partner banks), game software providers, cloud hosting services, and customer support platforms. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable Philippine data privacy law.

7.2 Regulatory and Law Enforcement Authorities

phplus may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

7.3 No Sale of Personal Data

phplus does not sell, rent, lease, or otherwise transfer your personal data to third-party advertisers, data brokers, or marketing companies. Your personal information is not a commodity at phplus.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of phplus's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect.

8. Data Retention

phplus retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law. Specifically:

• Account and KYC data — retained for a minimum of five (5) years after account closure, as required by the Anti-Money Laundering Act
• Transaction records — retained for a minimum of five (5) years from the date of each transaction
• Gaming activity logs — retained for three (3) years from the date of activity
• Customer support records — retained for two (2) years from the date of the last interaction
• Marketing consent records — retained until consent is withdrawn, plus one (1) year thereafter

Upon expiry of the applicable retention period, phplus will securely delete or anonymize your personal data in accordance with NPC guidelines.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit the phplus Platform. They help us recognize your browser, remember your preferences, keep your session active, and understand how you use the Platform.

9.2 Types of Cookies We Use

• Strictly necessary cookies — required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies — help us understand how players navigate the Platform so we can improve the user experience. Data collected is aggregated and anonymized.
• Security cookies — used to detect and prevent fraudulent activity and unauthorized account access.

9.3 Managing Cookies

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phplus Platform, including your ability to stay logged in or access certain features.

10. Security Measures

phplus implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• TLS 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for all personal data stored at rest
• Tokenization of payment card data — full card numbers are never stored on phplus servers
• Multi-factor authentication (MFA) options for player accounts
• Regular security audits and penetration testing by independent cybersecurity firms
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• 24/7 security monitoring and automated threat detection systems

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, phplus will notify the NPC within 72 hours of becoming aware of the breach and will notify affected players without undue delay, in accordance with NPC Circular 16-03.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phplus:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. phplus will respond to all data subject requests within fifteen (15) business days of receipt. We may request proof of identity before processing your request to protect against unauthorized access to your data.

12. Children's Privacy

The phplus Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. phplus does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and report the matter to the relevant authorities where required. If you believe a minor has registered on phplus, please contact our support team immediately.

13. Changes to This Privacy Policy

phplus reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. Material changes will be communicated to registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Effective Date" at the top of this Policy indicates when the current version was last updated. Your continued use of the phplus Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. We encourage you to review this Policy periodically.

14. Contact Our Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or complaints regarding phplus's handling of your personal data, please contact our designated Data Protection Officer:

• Email: privacy@phplus.club
• General Support: support@phplus.club
• Response Time: Within 15 business days of receipt
• Languages: English and Filipino

If you are not satisfied with phplus's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines through its official channels.