Privacy Policy – phmaca

1. Who We Are

phmaca ("phmaca," "we," "us," or "our") operates the online gaming platform accessible at phmaca.net, offering casino games, sports betting, online bingo, sabong, and related services to players in the Philippines. This Privacy Policy governs the collection and use of personal data by phmaca in connection with the Platform and any related communications.

phmaca acts as the data controller for personal information collected through the Platform. All data processing activities are conducted in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

2. Personal Data We Collect

phmaca collects personal data in the categories described below. We collect only data that is necessary and proportionate to the purposes identified in this Policy.

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., PhilSys National ID, passport number, driver's license number).
• Contact Data: Email address, Philippine mobile number, and residential address (province, city/municipality).
• Account Data: Username, hashed password, account preferences, communication settings, and responsible gaming tool configurations.
• Financial Data: Deposit and withdrawal transaction history, GCash or PayMaya reference numbers, BPI/BDO/Metrobank account details (last four digits only), and bonus redemption records. Full payment credentials are never stored on phmaca servers; they are processed by certified payment service providers.
• Gaming Data: Game history, bet amounts, win/loss records, session durations, and game preferences.
• Technical Data: IP address, device type and operating system, browser type and version, session tokens, and connection timestamps.
• Communications Data: Records of your correspondence with phmaca support, live chat transcripts, and feedback submissions.

3. How We Collect Your Data

phmaca collects personal data through the following means:

• Direct Provision: When you register an account, complete identity verification (KYC), make a deposit, contact support, or complete any form on the Platform.
• Automated Technologies: Through cookies, web beacons, server logs, and session tracking technologies that operate when you access and interact with the Platform. See Section 7 (Cookies) for full details.
• Third-Party Sources: From payment processors (e.g., GCash, PayMaya), identity verification providers, and fraud prevention services, where necessary to fulfil our legal and contractual obligations.

4. How We Use Your Personal Data

phmaca uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and secure your phmaca account, process deposits and withdrawals, and communicate account-related information.
• Identity Verification: To verify your age (21+ requirement) and identity in compliance with PAGCOR guidelines and Philippine anti-money laundering regulations.
• Service Delivery: To provide you with access to phmaca games, sports betting, bonuses, and all other Platform features.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover, and other prohibited activities.
• Legal Compliance: To fulfil obligations under Philippine law, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and any applicable PAGCOR regulatory requirements.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and develop new features and improvements to the phmaca Platform.
• Marketing Communications: Where you have given explicit consent, to send you promotional emails, SMS notifications, or in-app messages about phmaca offers, bonuses, and new game launches. You may withdraw consent at any time from your account settings.
• Responsible Gaming: To monitor gaming behaviour and, where necessary, proactively contact players showing signs of problematic gambling, in line with our responsible gaming commitments.

5. Legal Bases for Processing

phmaca processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between you and phmaca (i.e., to operate your account and deliver gaming services).
• Legal Obligation: Processing required to comply with Philippine law, including AML obligations and PAGCOR regulatory requirements.
• Legitimate Interests: Processing necessary for phmaca's legitimate interests in fraud prevention, platform security, and improving its services, provided such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent, primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

phmaca does not sell, rent, or trade your personal information to third parties for commercial purposes. We may share your data with the following categories of recipients, only to the extent necessary and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and card processing networks, solely to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged by phmaca to fulfil our legal verification obligations.
• Fraud & AML Screening Services: Service providers that assist in detecting and preventing money laundering, fraud, and other prohibited activities.
• Regulators & Law Enforcement: Where required by law, court order, or legitimate regulatory request from PAGCOR, the NPC, or other Philippine government authorities.
• Professional Advisors: Legal counsel, auditors, and accountants, bound by professional confidentiality obligations, where necessary to manage our business affairs.

All third-party service providers engaged by phmaca are required to process personal data only on our documented instructions and to implement security measures commensurate with the sensitivity of the data involved.

7. Cookies and Tracking Technologies

phmaca uses cookies and similar tracking technologies (including web beacons and local storage) on the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function, including maintaining your login session, securing your account, and remembering your cookie consent choice. These cannot be disabled.
• Functional Cookies: Enable enhanced functionality such as remembering your game preferences, display language, and responsible gaming settings.
• Analytics Cookies: Used to collect aggregated, anonymised information about how players interact with the Platform, helping us identify popular games, diagnose performance issues, and improve the user experience. These are activated only with your consent.

You can manage or withdraw consent for non-essential cookies through the cookie preference centre accessible in the Platform footer. Note that disabling certain cookies may affect the functionality of some Platform features.

8. Data Retention

phmaca retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Accounts: Personal data associated with active phmaca accounts is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, phmaca retains personal and financial data for a minimum of five (5) years, in compliance with Philippine AML obligations and applicable tax record requirements.
• Support Correspondence: Customer support records are retained for three (3) years from the date of the last interaction.
• Marketing Data: Where consent to marketing communications has been withdrawn, personal data used solely for that purpose will be deleted or anonymised within thirty (30) days of the withdrawal.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with phmaca's data disposal procedures.

9. Data Security

phmaca implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and phmaca servers;
• Encryption at rest for sensitive personal and financial data stored in phmaca databases;
• Role-based access controls limiting employee access to personal data to those with a legitimate business need;
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• An incident response plan governing detection, containment, and notification of personal data breaches.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you suspect that your phmaca account has been compromised, contact us immediately at [email protected].

10. Your Data Protection Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmaca:

• Right to be Informed: The right to be notified of how your data is collected, used, and processed — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data phmaca holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: The right to object to the processing of your personal data for direct marketing or on grounds relating to your particular situation where phmaca relies on legitimate interests.
• Right to Withdraw Consent: The right to withdraw consent for consent-based processing at any time without penalty, via your account settings or by contacting support.

To exercise any of the above rights, please contact phmaca at [email protected]. We will respond to verified requests within thirty (30) days. If you are not satisfied with our response, you may file a complaint with the National Privacy Commission of the Philippines.

11. Minors and Age Restriction

phmaca is strictly an adult platform. No person under the age of twenty-one (21) years may create an account or use any phmaca service. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account and delete the relevant data.

If you believe that a minor has registered on phmaca or provided personal data to us, please notify us immediately at [email protected] so that we can take prompt action.

12. Third-Party Links

The phmaca Platform does not contain links to external third-party websites. However, where third-party services (such as payment gateways) are integrated into the Platform, those services operate under their own privacy policies, which phmaca does not control. We encourage you to review the privacy policies of any third-party service you interact with in connection with your phmaca account.

13. Changes to This Privacy Policy

phmaca may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the evolution of the Platform. When we make material changes to this Policy, we will notify registered players by email and post a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this page reflects when the most recent revision was made. Your continued use of phmaca after the effective date of any revised Policy constitutes your acceptance of the updated terms.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data phmaca holds about you, please contact our Data Privacy Officer:

• Email: [email protected]
• Live Chat: Available 24/7 from your logged-in phmaca account dashboard
• Response Time: We will acknowledge your request within 72 hours and provide a substantive response within 30 days

For responsible gaming support, including self-exclusion requests, please visit our Responsible Gaming page or contact support directly.