Privacy Policy

1. Introduction

phplus ("we," "us," "our," or "Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online casino platform accessible at https://phplus.cam and all associated services, mobile applications, and features (collectively, the "Service" or "Platform").

This Privacy Policy applies to all users of the phplus Platform, including visitors who browse without registering and registered users who create accounts and participate in gaming activities. By accessing or using the Service, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information as described in this Privacy Policy.

We are committed to compliance with all applicable data protection laws and regulations in the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. We also adhere to international data protection standards to ensure your information receives appropriate protection regardless of where it is processed.

If you do not agree with the terms of this Privacy Policy, you should immediately discontinue use of the Service and refrain from creating an account or providing any personal information. Your continued use of the Platform following any changes to this Privacy Policy constitutes acceptance of those changes.

2. Information We Collect

phplus collects various categories of information to provide, maintain, and improve our Service, comply with legal obligations, and ensure the security and integrity of our gaming operations.

2.1 Information You Provide Directly

When you register for a phplus account, participate in promotions, contact customer support, or otherwise interact with our Service, you may provide the following types of information:

• Account Registration Information: Full legal name, date of birth, gender, email address, mobile phone number, residential address, and username.
• Identity Verification Information: Government-issued identification documents (passport, driver's license, national ID card), proof of address documents, and photographs for identity verification purposes.
• Financial Information: Payment method details including e-wallet account information (GCash, PayMaya), bank account numbers, credit/debit card information (processed securely through our payment processors), and transaction history.
• Communication Content: Messages, inquiries, feedback, and other communications you send to our customer support team or submit through contact forms.
• Voluntary Information: Profile information, preferences, survey responses, contest entries, and any other information you choose to provide.

2.2 Information Collected Automatically

When you access and use the phplus Platform, we automatically collect certain information about your device, browsing behavior, and interaction with the Service:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (including IMEI, MAC address, and mobile advertising identifiers), and device settings.
• Usage Information: Pages visited, games played, features accessed, time spent on the Platform, clickstream data, referral sources, search queries, and interaction patterns.
• Location Information: IP address, geographic location derived from IP address, and precise geolocation data (only with your explicit consent where required by applicable law).
• Gaming Activity: Bets placed, games played, wins and losses, bonus usage, wagering patterns, gaming session duration, and statistical gameplay data.
• Log Data: Server logs containing access times, error messages, system activity, and technical diagnostic information.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification, fraud detection data, and payment method validation from GCash, PayMaya, banks, and other payment service providers.
• Identity Verification Services: Verification results, fraud risk assessments, and compliance screening information from third-party identity verification and KYC (Know Your Customer) service providers.
• Regulatory Databases: Self-exclusion lists, gambling restriction databases, and regulatory compliance information maintained by PAGCOR or other gaming authorities.
• Marketing Partners: Information about your interaction with our marketing campaigns if you arrived at phplus through affiliate or advertising channels.

2.4 Sensitive Information

We collect certain categories of sensitive information that require special protection under Philippine data privacy law:

• Government-issued identification numbers contained in verification documents.
• Financial account information and transaction history.
• Biometric data (such as facial recognition data) only if you opt into enhanced security features that use such technology.

We implement enhanced security measures and access controls for all sensitive information and only collect such information when necessary for account verification, regulatory compliance, fraud prevention, or security purposes.

3. How We Use Your Information

phplus uses the information we collect for the following purposes, all of which are necessary for providing our Service, complying with legal obligations, and protecting the interests of our users and business:

3.1 Providing and Managing the Service

• Creating, maintaining, and managing your user account.
• Processing your registration and verifying your eligibility to use gaming services.
• Enabling you to access games, place bets, and participate in promotions.
• Processing deposits, withdrawals, and other financial transactions.
• Tracking your gaming activity, account balance, and transaction history.
• Providing customer support and responding to your inquiries.
• Personalizing your experience on the Platform based on your preferences and activity.

3.2 Security, Fraud Prevention, and Compliance

• Verifying your identity and age to ensure compliance with legal requirements.
• Detecting, preventing, and investigating fraud, money laundering, and other illegal activities.
• Monitoring for prohibited activities including multiple accounts, bonus abuse, and use of automated betting systems.
• Complying with legal obligations under Philippine gaming law, PAGCOR regulations, and anti-money laundering requirements.
• Maintaining audit trails and records required by regulatory authorities.
• Enforcing our Terms and Conditions and other policies.
• Protecting the security and integrity of our Platform and preventing unauthorized access.

3.3 Communication and Marketing

• Sending account-related notifications including confirmations, security alerts, and administrative messages.
• Communicating about promotions, bonuses, tournaments, and other special offers (with your consent where required).
• Sending newsletters, gaming tips, and updates about new games or features.
• Conducting surveys and collecting feedback to improve our Service.
• Notifying you about changes to our Terms, Privacy Policy, or Service features.

3.4 Analytics and Improvement

• Analyzing usage patterns and trends to understand how users interact with our Platform.
• Testing new features, games, and functionalities.
• Improving the performance, reliability, and user experience of our Service.
• Conducting research and statistical analysis on gaming behavior and preferences.
• Optimizing our marketing campaigns and measuring their effectiveness.

3.5 Responsible Gaming

• Monitoring for signs of problem gambling behavior.
• Implementing and enforcing deposit limits, loss limits, and self-exclusion requests.
• Providing resources and support for responsible gaming practices.
• Complying with responsible gaming obligations under PAGCOR regulations.

4. Data Sharing and Disclosure

phplus does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the limited circumstances described below, and we require all recipients to protect your data in accordance with applicable law and contractual obligations.

4.1 Service Providers and Business Partners

We share information with third-party service providers who perform services on our behalf:

• Payment Processors: GCash, PayMaya, banks, and other financial institutions that process deposits, withdrawals, and payments.
• Game Providers: Software providers who supply the casino games, slots, and other gaming content available on our Platform.
• Identity Verification Services: KYC and AML compliance providers who verify user identities and screen for fraud risks.
• Technology Infrastructure: Cloud hosting providers, content delivery networks, and technical infrastructure partners who support our Platform operations.
• Customer Support: Customer service platforms and communication tools used to provide support services.
• Analytics Providers: Services that help us analyze Platform usage and improve our Service.
• Marketing Partners: Email service providers and marketing platforms used to deliver promotional communications (only with your consent).

All service providers are contractually required to protect your information, use it only for the purposes we specify, and maintain appropriate security measures.

4.2 Regulatory and Legal Obligations

We disclose information when required by law or when we believe disclosure is necessary to:

• Comply with PAGCOR regulations, gaming laws, and other legal requirements.
• Respond to valid legal process including court orders, subpoenas, and government requests.
• Cooperate with law enforcement investigations of fraud, money laundering, or other criminal activity.
• Report suspicious transactions to financial intelligence units as required by anti-money laundering laws.
• Protect the rights, property, or safety of phplus, our users, or the public.
• Enforce our Terms and Conditions or other agreements.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar corporate transaction, your information may be transferred to the successor entity. We will notify you via email or prominent notice on our Platform before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you provide explicit consent, such as when you authorize us to share your information with a specific partner or participate in a co-branded promotion.

4.5 Aggregated and De-identified Information

We may share aggregated statistical data and de-identified information that cannot reasonably be used to identify you. Such information may be used for research, analytics, or marketing purposes without restriction.

5. Cookies and Tracking Technologies

phplus uses cookies, web beacons, and similar tracking technologies to collect information about your interaction with our Platform, remember your preferences, and improve your user experience.

5.1 Types of Cookies We Use

5.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may prevent you from accessing certain features of the Platform or may affect functionality. Essential cookies cannot be disabled as they are necessary for the Service to operate.

You can also manage cookie preferences through your account settings for certain non-essential cookies. To learn more about cookies and how to manage them, visit your browser's help documentation or www.allaboutcookies.org.

5.3 Third-Party Tracking

Our Platform may include third-party analytics tools and advertising networks that use their own cookies and tracking technologies. These third parties may collect information about your online activities across different websites and services. We do not control third-party cookies and encourage you to review their privacy policies.

6. Data Security

phplus implements comprehensive technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction.

6.1 Technical Security Measures

• Encryption: All data transmission uses 256-bit SSL/TLS encryption. Sensitive data is encrypted both in transit and at rest using industry-standard encryption algorithms.
• Secure Infrastructure: Our Platform is hosted on secure servers with firewalls, intrusion detection systems, and regular security updates.
• Access Controls: Multi-factor authentication, role-based access controls, and the principle of least privilege limit access to personal information to authorized personnel only.
• Security Monitoring: 24/7 monitoring systems detect and respond to security threats, suspicious activity, and potential breaches.
• Regular Testing: Penetration testing, vulnerability assessments, and security audits are conducted regularly by independent security firms.

6.2 Organizational Security Measures

• Staff training on data privacy, security best practices, and confidentiality obligations.
• Confidentiality agreements requiring all employees and contractors to protect user information.
• Data breach response procedures and incident management protocols.
• Regular review and update of security policies and procedures.
• Compliance with ISO 27001 information security standards.

6.3 Payment Security

Financial transactions are processed through PCI DSS compliant payment processors. We do not store complete credit card numbers on our servers. Payment information is tokenized and encrypted by our payment partners.

6.4 Limitations

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. You also have a responsibility to protect your account by maintaining the confidentiality of your password and notifying us immediately of any unauthorized access.

7. Data Retention

phplus retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Retention Periods

• Active Accounts: Information is retained for the duration of your active account and for a reasonable period thereafter to handle any outstanding issues.
• Closed Accounts: After account closure, we retain certain information for up to seven (7) years to comply with legal obligations including anti-money laundering laws, tax regulations, and gaming authority requirements.
• Transaction Records: Financial transaction records are retained for seven (7) years as required by Philippine financial regulations.
• Identity Verification Documents: Retained for seven (7) years after account closure for regulatory compliance purposes.
• Marketing Communications: Retained until you withdraw consent or we determine the information is no longer needed for marketing purposes.
• Legal Holds: Information subject to legal proceedings or regulatory investigations is retained until the matter is resolved.

7.2 Deletion and Anonymization

After the applicable retention period expires, we securely delete or anonymize your personal information. Anonymized information that cannot identify you may be retained indefinitely for statistical and analytical purposes.

8. Your Privacy Rights

Under the Philippine Data Privacy Act and other applicable laws, you have certain rights regarding your personal information. phplus respects these rights and provides mechanisms for you to exercise them.

8.1 Right to Access

You have the right to request access to the personal information we hold about you. You can view much of your information directly through your account dashboard, including your profile details, transaction history, and gaming activity. For additional information not available through your account, contact our privacy team.

8.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most information through your account settings. For verification documents or other information that cannot be self-updated, contact customer support to request corrections.

8.3 Right to Erasure

You have the right to request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected or when you withdraw consent. However, we may retain certain information where we have a legal obligation to do so or where retention is necessary for legitimate business purposes such as fraud prevention.

8.4 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your communication preferences in account settings.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

8.6 Right to Withdraw Consent

Where we process your information based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8.7 How to Exercise Your Rights

To exercise any of these rights, contact our Data Privacy Officer through the contact information provided in Section 12. We will respond to your request within the timeframes required by applicable law, typically within thirty (30) days. We may require verification of your identity before processing your request to protect against unauthorized access to your information.

8.8 Right to Lodge a Complaint

If you believe we have processed your personal information in violation of applicable law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines or other applicable data protection authority.

9. International Data Transfers

phplus primarily operates in and serves users in the Philippines. However, some of our service providers and technology infrastructure may be located outside the Philippines. When we transfer your information internationally, we implement appropriate safeguards to ensure your information receives adequate protection.

International transfers are made only to countries with adequate data protection laws or under contractual arrangements that provide equivalent protection to that required under Philippine law. We use standard contractual clauses, binding corporate rules, or other approved mechanisms for international data transfers.

By using our Service, you acknowledge and consent to the transfer of your information outside the Philippines where necessary to provide the Service, subject to the protections described in this Privacy Policy.

10. Children's Privacy

The phplus Service is not intended for use by individuals under the age of twenty-one (21) years. We do not knowingly collect personal information from minors. If you are under 21, do not use the Service or provide any information to phplus.

If we become aware that we have collected personal information from an individual under 21 without verification of parental consent, we will take steps to delete that information immediately. If you believe we may have information from or about a minor, please contact us immediately.

Parents and legal guardians should monitor their children's Internet usage and help enforce this Privacy Policy by instructing minors never to provide information through the Service without permission.

11. Changes to This Privacy Policy

phplus reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our Platform with a new "Effective Date."
• Sending an email notification to the address associated with your account.
• Displaying a prominent notice on our Platform homepage or in your account dashboard.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after changes to the Privacy Policy constitutes acceptance of the updated terms. If you do not agree with changes, you should discontinue use of the Service and may request deletion of your account.

For significant changes that materially affect your rights, we may request your explicit consent before the changes take effect.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through our Platform
• Customer Support: Access through your account dashboard

For specific privacy-related inquiries or to exercise your privacy rights under applicable law, you may also contact our Data Privacy Officer directly through the email address above. Please include "Privacy Request" in the subject line and provide sufficient information to allow us to verify your identity and process your request.

We endeavor to respond to all privacy-related inquiries within thirty (30) days. For complex requests, we may require additional time and will notify you of any extension.