phgrate Privacy Policy

1 Introduction

phgrate ("we," "us," or "our") is committed to protecting the privacy and personal data of all players who use the phgrate online casino platform ("Platform"). This Privacy Policy ("Policy") describes how phgrate collects, uses, discloses, stores, and safeguards your personal information in connection with your use of the Platform, including all games, features, promotions, and support services.

This Policy applies to all users of the phgrate Platform, including registered players, visitors to the phgrate website, and anyone who contacts phgrate's customer support team. By registering an account with phgrate or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

phgrate complies with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). We take our obligations under Philippine data protection law seriously and have implemented appropriate technical and organizational measures to protect your personal information.

2 Data We Collect

phgrate collects personal data that is necessary for the operation of the Platform, compliance with legal obligations, and the delivery of a safe and enjoyable gaming experience for Filipino players. The categories of personal data we collect include:

2.1 Registration & Identity Data

When you create a phgrate account, we collect information including your full legal name, date of birth, gender, nationality, residential address (including city, province, and postal code), email address, and mobile phone number. This information is required to verify your identity, confirm your eligibility to use the Platform (including the 21+ age requirement), and comply with KYC obligations.

2.2 Identity Verification Documents

As part of our Know Your Customer (KYC) process, phgrate may collect copies of government-issued identification documents such as your Philippine passport, driver's license, SSS/GSIS ID, PhilSys National ID, or PRC ID. We may also collect proof of address documents such as utility bills, bank statements, or barangay certificates.

2.3 Financial & Transaction Data

phgrate collects information related to your deposits, withdrawals, and gaming transactions, including payment method details (such as your GCash mobile number or Maya account reference), transaction amounts, dates, and reference numbers. We do not store full bank account numbers or complete debit card numbers on our servers.

2.4 Gaming Activity Data

We collect data about your activity on the Platform, including games played, bets placed, wins and losses, session duration, bonus usage, and responsible gaming tool settings. This data is used to operate the Platform, detect fraud, and support responsible gaming initiatives.

2.5 Technical & Device Data

When you access the phgrate Platform, we automatically collect certain technical information, including your IP address, device type and model, operating system, browser type and version, screen resolution, and connection type. This data helps us optimize the Platform for Philippine network conditions (including Globe and Smart mobile networks) and detect suspicious activity.

2.6 Communications Data

If you contact phgrate's support team via live chat or email, we retain records of those communications, including the content of your messages and any attachments, for quality assurance, training, and dispute resolution purposes.

3 How We Use Your Data

phgrate uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your phgrate account, including processing your registration, verifying your identity, and enabling you to log in securely.
• Platform Operation: To provide access to games, process bets and payouts, manage bonuses and promotions, and deliver all features of the phgrate Platform.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, bank transfer, and debit card, and to maintain accurate financial records.
• Legal & Regulatory Compliance: To comply with our obligations under Philippine law, including KYC verification, anti-money laundering (AML) requirements, PAGCOR regulatory reporting, and the Data Privacy Act of 2012.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal or prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce responsible gaming tools (such as deposit limits and self-exclusion), and comply with PAGCOR responsible gaming requirements.
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance via live chat and email.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, design, and features of the phgrate Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.

4 Legal Basis for Processing

phgrate processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable Philippine regulations:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your phgrate account, process transactions, and provide access to the Platform.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including KYC/AML obligations, PAGCOR regulatory requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for phgrate's legitimate interests in operating a secure, fair, and commercially viable online casino platform, including fraud prevention, security monitoring, and platform improvement — provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, phgrate relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

phgrate does not sell your personal data. We may share your personal information with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the minimum data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist phgrate in verifying player identities and screening against sanctions lists.
• Game Software Providers: Licensed game providers whose titles are available on the phgrate Platform may receive anonymized or pseudonymized gaming activity data for technical and audit purposes.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or regulatory obligation.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by phgrate, subject to confidentiality obligations.
• Law Enforcement: Philippine law enforcement agencies where disclosure is required by a valid court order, subpoena, or other legal process.

6 Cookies & Tracking Technologies

phgrate uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and support security functions. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences to personalize your phgrate experience.
• Analytics Cookies: Collect anonymized data about how players use the Platform — such as which games are most popular and how long sessions last — to help phgrate improve the Platform.
• Security Cookies: Help phgrate detect and prevent fraudulent activity, unauthorized access, and bot traffic.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the phgrate Platform. For more information on managing cookies in the Philippines, refer to the guidance published by the National Privacy Commission.

7 Data Retention

phgrate retains your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:

• Account Data: Retained for the duration of your active phgrate account, plus a minimum of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by applicable law or regulatory direction.
• Gaming Activity Logs: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Support Communications: Retained for a minimum of two (2) years from the date of the last communication for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.

When personal data is no longer required for any of the above purposes, phgrate will securely delete or anonymize it in accordance with our data disposal procedures.

8 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phgrate:

• Right to Be Informed: You have the right to be informed about how phgrate collects and processes your personal data, as set out in this Policy.
• Right of Access: You have the right to request a copy of the personal data phgrate holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data phgrate holds about you. You may update certain account details directly through your phgrate account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phgrate's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to phgrate's overriding legitimate grounds.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phgrate has violated your data privacy rights.

Please note that certain rights may be limited where phgrate is required to retain or process your data to comply with legal obligations, prevent fraud, or enforce our Terms & Conditions.

9 Data Security

phgrate implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the phgrate Platform is protected using 256-bit SSL/TLS encryption. Sensitive data stored on phgrate's servers is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data is restricted to phgrate personnel and authorized third parties who have a legitimate need to access it. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: phgrate supports two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
• Intrusion Detection: phgrate employs automated systems to monitor for suspicious activity, unauthorized access attempts, and potential security breaches in real time.
• Regular Security Audits: phgrate conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the Platform.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, phgrate will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

10 Children's Privacy

The phgrate Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations and PAGCOR guidelines. phgrate does not knowingly collect personal data from individuals under the age of 21.

If phgrate becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. All deposits made by underage players will be handled in accordance with applicable regulations.

If you are a parent or guardian and believe that your child may have registered an account with phgrate, please contact our support team immediately via live chat or email so that we can investigate and take appropriate action.

11 International Data Transfers

phgrate primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification services.

Where personal data is transferred outside the Philippines, phgrate ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses that meet the standards required by the National Privacy Commission. phgrate will not transfer your personal data to countries that do not provide an adequate level of data protection without implementing appropriate safeguards.

12 Third-Party Links

The phgrate Platform may contain references to third-party services such as payment processors (GCash, Maya) and game software providers. phgrate is not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you use in connection with your phgrate account.

This Policy applies solely to personal data collected and processed by phgrate. It does not govern the data practices of third-party payment processors, game providers, or any other external services.

13 Changes to This Policy

phgrate reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When we make material changes to this Policy, we will notify registered players via the email address on file and post a prominent notice on the phgrate Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. We encourage you to review this Policy periodically to stay informed about how phgrate protects your personal data. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

14 Contact & Data Protection Officer

phgrate has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our DPO using the details below:

phgrate aims to acknowledge all privacy-related inquiries within three (3) business days and to resolve them within fifteen (15) business days. For complex requests, we will keep you informed of progress and any expected delays.

If you are not satisfied with phgrate's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.