Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how phmacaw ("phmacaw," "we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you," "Player," or "User") who access or use the phmacaw online casino platform at phmacaw.org (the "Platform").

phmacaw is committed to protecting the privacy and personal data of all Filipino players in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering an account or using the phmacaw Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

This Policy applies to all personal data collected through the phmacaw website, mobile platform, customer support channels, and any other phmacaw-operated service. It does not apply to third-party websites or services that may be referenced on the Platform.

2. Data Controller Information

phmacaw acts as the data controller for all personal information collected through the Platform. As data controller, phmacaw determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

For all data privacy inquiries, requests, or complaints, you may contact phmacaw's designated Data Protection Officer (DPO) at:

Email: [email protected]
Subject Line: Data Privacy Request – [Your Name]

3. Personal Data We Collect

phmacaw collects the following categories of personal data from registered players and Platform visitors:

Category	Examples	Purpose
Identity Data	Full name, date of birth, government-issued ID number, nationality	Account registration, KYC verification, age verification (21+)
Contact Data	Email address, mobile number, home address (city/province)	Account communication, support, notifications
Financial Data	GCash number, bank account details (BPI, BDO, Metrobank), transaction history	Processing deposits and withdrawals, fraud prevention
Technical Data	IP address, device type, browser type, operating system, session data	Platform security, fraud detection, performance optimization
Usage Data	Games played, bet amounts, session duration, login timestamps	Responsible gaming monitoring, personalization, analytics
Communications Data	Support chat logs, email correspondence, feedback submissions	Customer support, dispute resolution, quality assurance

phmacaw does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance purposes.

4. How We Collect Your Data

phmacaw collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-Party Sources: Identity verification data from government databases or third-party KYC service providers used to confirm your identity and age in compliance with PAGCOR requirements.
• Payment Processors: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard when you conduct financial transactions on the Platform.

5. How We Use Your Data

phmacaw uses your personal data for the following purposes:

• To create, manage, and maintain your phmacaw account.
• To verify your identity and confirm that you meet the minimum age requirement of 21 years as required under Philippine gaming regulations.
• To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, and other accepted payment methods.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations, and other applicable Philippine laws and regulations.
• To provide 24/7 customer support and resolve disputes or complaints.
• To send you account-related notifications, promotional offers, and responsible gaming reminders (where you have consented to receive such communications).
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behavior.
• To improve the phmacaw Platform, optimize game performance, and personalize your gaming experience.
• To conduct internal analytics and business reporting.

6. Legal Basis for Processing

phmacaw processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfill our obligations under the phmacaw Terms & Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AML regulations, tax reporting obligations, and other applicable Philippine laws.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time by contacting phmacaw support.

7. Data Sharing & Third Parties

phmacaw does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, for the purpose of processing financial transactions.
• Identity Verification Providers: Third-party KYC and age verification services used to confirm player identity in compliance with PAGCOR requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or court order.
• Technology Service Providers: Cloud hosting, cybersecurity, and analytics providers who process data on phmacaw's behalf under strict data processing agreements.
• Game Providers: Licensed game software providers whose titles are available on the phmacaw Platform, to the extent necessary for game operation and fairness auditing.

All third parties with whom phmacaw shares personal data are required to implement appropriate technical and organizational security measures and to process data only in accordance with phmacaw's instructions and applicable Philippine data protection law.

8. Cookies & Tracking Technologies

phmacaw uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze Platform usage.

phmacaw uses the following types of cookies:

• Essential Cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and game history to personalize your experience.
• Analytics Cookies: Collect anonymized data about how players use the Platform to help us improve performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorized access to your account.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the phmacaw Platform.

9. Data Retention

phmacaw retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your account registration and for a period thereafter as required by applicable law.

Specifically, phmacaw retains:

• Account and identity data for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and Philippine AML regulations.
• Financial transaction records for a minimum of five (5) years, as required by the Anti-Money Laundering Act.
• Customer support communications for up to three (3) years following resolution of the relevant matter.
• Technical and usage data for up to twenty-four (24) months, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, phmacaw will securely delete or anonymize your personal data in accordance with its data disposal procedures.

10. Data Security

phmacaw implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phmacaw Platform.
• Encrypted storage of sensitive personal and financial data on secure, access-controlled servers.
• Two-factor authentication (2FA) via OTP for account login and high-value transactions.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent cybersecurity professionals.
• Strict internal access controls ensuring that only authorized phmacaw personnel can access personal data on a need-to-know basis.
• Comprehensive staff training on data protection obligations and security best practices.

While phmacaw takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, phmacaw will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012.

11. Your Rights Under the DPA

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmacaw:

• Right to be Informed: The right to know what personal data phmacaw collects about you and how it is used.
• Right of Access: The right to request a copy of the personal data phmacaw holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to phmacaw's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another data controller.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact phmacaw's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." phmacaw will respond to all verified requests within thirty (30) days in accordance with NPC guidelines.

12. Children's Privacy

phmacaw's Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. phmacaw does not knowingly collect personal data from individuals under the age of 21.

If phmacaw becomes aware that personal data has been collected from a person under 21 years of age, it will immediately suspend the relevant account, delete the associated personal data, and report the matter to the appropriate regulatory authorities. If you believe a minor has registered on the phmacaw Platform, please contact us immediately at [email protected].

13. International Data Transfers

phmacaw primarily stores and processes personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines, such as cloud infrastructure providers or game software vendors.

Where such international transfers occur, phmacaw ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require the recipient to maintain data protection standards equivalent to those required under Philippine law. phmacaw will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or a lawful basis for doing so.

14. Changes to This Policy

phmacaw reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via email notification or a prominent notice on the Platform at least fourteen (14) days prior to the effective date of the change.

The date of the most recent revision is displayed at the top of this page. Your continued use of the phmacaw Platform following the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed about how phmacaw protects your personal data.

15. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or phmacaw's data processing practices, please contact our Data Protection Officer:

Email: [email protected]
Subject: Data Privacy Request – [Your Name]

If you are not satisfied with phmacaw's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.