Privacy Policy

1. Introduction

phplus is committed to protecting the privacy and personal data of every player who uses the phplus Casino platform. This Privacy Policy ("Policy") is issued by phplus ("phplus," "we," "us," or "the Company"), the operator of the online gaming platform accessible at phplus.one. phplus is regulated by the Philippine Amusement and Gaming Corporation ("PAGCOR") and operates in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations.

This Policy describes what personal data phplus collects from you, why we collect it, how we use it, with whom we share it, how long we keep it, and what rights you have in relation to your personal data. This Policy applies to all data processing activities conducted by phplus in connection with the operation of phplus Casino, including account registration, deposits and withdrawals, customer support, marketing communications (where consented), and regulatory compliance activities.

2. Data Controller

The data controller responsible for your personal data is phplus, the operator of the phplus Casino platform at phplus.one. phplus determines the purposes and means of processing your personal data as described in this Policy. For all data privacy enquiries, you may contact phplus through the details set out in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register for or use a phplus account, we collect the following categories of personal data that you provide to us:

• Identity Data: Full legal name, date of birth, nationality, government-issued ID number and document scan (UMID, PhilHealth ID, driver's license, SSS ID, or Philippine passport), and facial photograph submitted during KYC verification;
• Contact Data: Philippine mobile number, email address, and residential address;
• Account Credentials: Username and hashed password (we do not store plaintext passwords);
• Financial Data: GCash account number, Maya wallet number, bank account details (BPI, BDO, Metrobank, etc.), cryptocurrency wallet addresses, deposit and withdrawal transaction records;
• Communications Data: Records of your correspondence with phplus Customer Support, including live chat transcripts and email exchanges.

3.2 Data We Collect Automatically

When you access and use the phplus platform, we automatically collect the following technical and behavioural data:

• Device & Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and device identifiers;
• Usage Data: Pages visited, games played, session duration, betting history, deposit and withdrawal frequency, and navigation patterns within the phplus platform;
• Location Data: Approximate geographic location derived from your IP address, used to verify geographic eligibility and comply with PAGCOR's territorial licensing requirements;
• Cookie Data: Data collected via cookies and similar tracking technologies as described in Section 7.

4. How phplus Uses Your Personal Data

5. Legal Bases for Processing

phplus processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contract Performance: Processing necessary to fulfil our obligations under your phplus account agreement, including account management, game access, and payment processing;
• Legal Obligation: Processing required to comply with Philippine laws and PAGCOR regulations, including anti-money laundering, KYC verification, responsible gaming obligations, and mandatory regulatory reporting;
• Legitimate Interests: Processing for fraud prevention, platform security, platform improvement, and responsible gaming monitoring — where these interests are not overridden by your fundamental rights;
• Consent: Processing for optional marketing communications, where you have provided explicit, freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Sharing Your Personal Data

phplus does not sell, rent, or trade your personal data to third-party marketers. We share your personal data only in the following circumstances:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), Philippine banks (BPI, BDO, Metrobank), and other payment service providers — solely to facilitate deposits and withdrawals;
• KYC & Compliance Providers: Third-party identity verification services contracted by phplus to conduct document checks and fraud screening under our PAGCOR compliance obligations;
• Game Technology Providers: Casino game platform and software providers who may process limited technical data to deliver game content — these parties are contractually bound to process data only on phplus's instructions;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where disclosure is required by law or valid legal process;
• Professional Advisors: Legal, accounting, and auditing firms engaged by phplus, bound by professional confidentiality obligations;
• Business Transfers: In connection with any merger, acquisition, or sale of phplus's business or assets, where personal data may be transferred to the acquiring entity subject to equivalent data protection commitments.

7. Cookies & Tracking Technologies

phplus uses cookies and similar tracking technologies on the phplus platform. Cookies are small text files stored on your device that help phplus deliver a functional and personalised experience.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the phplus platform to function — including session management, login authentication, and security tokens. These cannot be disabled without impairing platform functionality;
• Functional Cookies: Remember your preferences such as language settings, last-played games, and responsible gaming limit settings;
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the phplus platform, used to improve platform performance and user experience;
• Security Cookies: Used to detect and prevent fraudulent account activity and bot traffic.

You may control cookie settings through your browser settings. Disabling strictly necessary cookies may impair your ability to log in or use the phplus platform normally.

8. Data Retention

phplus retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account Data & Transaction Records: A minimum of five (5) years following account closure, in compliance with PAGCOR requirements and the Anti-Money Laundering Act;
• KYC Documents: A minimum of five (5) years following the last transaction, as required by the AMLC;
• Customer Support Records: Three (3) years from the date of the relevant interaction;
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.

Upon expiry of applicable retention periods, phplus will securely delete or anonymise your personal data in accordance with our data disposal procedures.

9. Data Security

phplus implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, without limitation:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phplus platform;
• Encrypted storage of all sensitive personal data and financial information at rest;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• Two-factor authentication requirements for administrative system access;
• Regular penetration testing and security vulnerability assessments;
• Incident response procedures for data security breaches, including mandatory NPC notification within 72 hours where a breach is likely to result in harm to data subjects.

While phplus applies rigorous security measures, no internet-based platform is completely immune from security risks. You are responsible for keeping your phplus login credentials confidential and for notifying phplus immediately if you suspect unauthorised access to your account.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phplus:

To exercise any of these rights, contact phplus Customer Support via live chat or email at the address in Section 14. phplus will respond to verified requests within thirty (30) calendar days. Identity verification may be required before processing rights requests.

11. Children and Minors

phplus does not knowingly collect personal data from individuals under the age of twenty-one (21). The phplus platform is strictly intended for adults aged 21 and above in accordance with PAGCOR regulations. If phplus becomes aware that it has collected personal data from a person under 21 without appropriate parental or guardian consent, phplus will take immediate steps to delete that data and close the associated account. If you believe that a minor has accessed or registered at phplus, please contact Customer Support immediately.

12. International Data Transfers

phplus's primary data processing operations are conducted in the Philippines. Where personal data is transferred to third-party service providers located outside the Philippines — for example, international KYC verification providers or cloud infrastructure partners — phplus ensures that such transfers are subject to appropriate safeguards consistent with the Data Privacy Act of 2012 and the National Privacy Commission's guidelines on cross-border data transfers. These safeguards may include contractual data processing agreements, adequacy assessments, and binding corporate rules where applicable.

13. Changes to This Privacy Policy

phplus reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be posted at phplus.one/privacy-policy with the updated effective date. Where amendments are material — such as changes to the categories of data collected, new third-party sharing arrangements, or changes to your rights — phplus will provide reasonable prior notice through an in-platform notification or email to your registered address. Your continued use of the phplus platform following the posting of an amended Policy constitutes acceptance of the updated terms. If you do not agree with the updated Policy, you should cease using phplus and close your account.

14. Contact & Complaints

For all data privacy enquiries, requests to exercise your data rights, or complaints regarding phplus's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the phplus platform at phplus.one
• Email: [email protected]

If you are not satisfied with phplus's response to your privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

This Policy was last updated in June 2026. The version published at phplus.one/privacy-policy is the operative version at any given time.