phmachao Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phmachao ("phmachao," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("Player," "User," or "you") who access or use the phmachao website at https://phmachao.club and all associated services (collectively, the "Platform").

phmachao is committed to protecting the privacy and personal data of every Filipino player who uses our Platform. This Policy is drafted in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

By registering an account or using the phmachao Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

This Policy should be read together with phmachao's Terms & Conditions, which govern your use of the Platform.

2. Data Controller

phmachao acts as the Personal Information Controller (as defined under the Data Privacy Act of 2012) with respect to the personal data collected through the Platform. This means phmachao determines the purposes and means of processing your personal information.

phmachao has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the DPO directly for any privacy-related concerns at [email protected] with the subject line "Data Privacy Inquiry."

3. Personal Data We Collect

phmachao collects personal data that is necessary to provide our services, verify player identity, process transactions, and comply with PAGCOR regulations and Philippine law. The categories of personal data we collect include:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Nationality and country of residence
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence)
• Email address and mobile number
• Username and encrypted password

3.2 Financial & Transaction Data

• GCash or PayMaya account details (mobile number associated with the account)
• Bank account details for BPI, BDO, or Metrobank transactions
• Deposit and withdrawal history
• Transaction amounts in Philippine Peso (PHP)

3.3 Gaming Activity Data

• Game history, bet amounts, and outcomes
• Session duration and login timestamps
• Bonus and promotion usage
• Responsible gaming tool settings (deposit limits, self-exclusion status)

3.4 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Cookie identifiers and session tokens
• Platform access logs and error reports

3.5 Communications Data

• Records of your communications with phmachao customer support
• Feedback, complaints, and survey responses

4. How We Use Your Personal Data

phmachao uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your phmachao account, including verifying your identity and age (21+ requirement) and processing your login credentials.
• Service Delivery: To provide access to games, process deposits and withdrawals in PHP, and deliver the full range of phmachao Platform features.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations under Republic Act No. 9160, and other applicable Philippine laws and regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the performance, security, and user experience of the phmachao Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where permitted by applicable law. You may opt out of marketing communications at any time.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, phmachao processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and phmachao (i.e., the Terms & Conditions), including account registration, game access, and payment processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, AML obligations, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for phmachao's legitimate interests in operating a secure, fair, and compliant gaming platform, including fraud prevention and platform security, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as marketing communications and the use of non-essential cookies, phmachao relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

phmachao does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal information only in the following limited circumstances:

• Payment Processors: We share necessary financial data with approved payment service providers (GCash, PayMaya, BPI, BDO, Metrobank) solely to process your deposits and withdrawals in PHP.
• Identity Verification Providers: We may share identity documents and personal details with third-party KYC (Know Your Customer) verification providers to confirm your age and identity in compliance with PAGCOR requirements.
• Regulatory & Law Enforcement Authorities: We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.
• Technology & Infrastructure Partners: We engage trusted third-party service providers for hosting, security, analytics, and customer support infrastructure. These providers are contractually bound to process your data only on phmachao's instructions and in accordance with applicable data privacy law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of phmachao's business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom phmachao shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the purposes specified by phmachao.

7. Cookies & Tracking Technologies

phmachao uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the phmachao website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how Players use the Platform, including pages visited, session duration, and error events. This data helps phmachao improve the user experience.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations, to personalise your experience on the Platform.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content and to measure the effectiveness of phmachao's marketing campaigns.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phmachao Platform. For more information on managing cookies, refer to your browser's help documentation.

8. Data Retention

phmachao retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations.

Specifically:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and AML obligations under Philippine law.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming Activity Logs: Retained for a minimum of two (2) years from the date of the activity, or longer where required by regulatory directive.
• Customer Support Records: Communications with phmachao support are retained for two (2) years from the date of the last interaction.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it will be deleted or anonymised within thirty (30) days.

Upon expiry of the applicable retention period, phmachao will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

9. Data Security

phmachao implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the phmachao Platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including passwords and financial information, is stored in encrypted form using strong cryptographic algorithms.
• Access Controls: Access to personal data is restricted to authorised phmachao personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Firewalls & Intrusion Detection: phmachao's infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems.
• Regular Security Audits: phmachao conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the Platform.
• Staff Training: All phmachao personnel who handle personal data receive regular training on data privacy obligations and security best practices.

While phmachao takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your phmachao login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by phmachao:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data phmachao holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phmachao's legal and regulatory retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phmachao has violated your data privacy rights.

To exercise any of these rights, please contact phmachao's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." phmachao will respond to all verified requests within thirty (30) days in accordance with the Data Privacy Act of 2012.

11. Children's Privacy

The phmachao Platform is strictly intended for individuals aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. phmachao does not knowingly collect personal data from individuals under the age of 21.

If phmachao becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the phmachao Platform, please contact us immediately at [email protected].

Parents and guardians are encouraged to use parental control tools and to monitor their children's online activity to prevent access to gambling platforms.

12. International Data Transfers

phmachao primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines, for example, where phmachao uses internationally hosted cloud infrastructure or third-party technology platforms.

Where personal data is transferred outside the Philippines, phmachao ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. Such safeguards may include contractual data processing agreements incorporating standard data protection clauses approved by the National Privacy Commission.

By using the phmachao Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the protections outlined above.

13. Updates to This Privacy Policy

phmachao reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

When material changes are made to this Policy, phmachao will notify registered Players by posting a prominent notice on the Platform and, where practicable, by sending a notification to the email address associated with your account. Your continued use of the phmachao Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.

We recommend that you review this Privacy Policy periodically to stay informed of how phmachao is protecting your personal information. If you have any concerns about changes to this Policy, please contact our Data Protection Officer before continuing to use the Platform.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or phmachao's handling of your personal data, please contact us through the following channels:

• Data Protection Officer Email: [email protected] — please use the subject line "Data Privacy Inquiry" or "Data Subject Rights Request"
• 24/7 Live Chat: Available directly on the phmachao Platform in both Filipino and English

phmachao aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within thirty (30) days. For complex requests, we may require additional time and will notify you accordingly.

If you are not satisfied with phmachao's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data privacy matters in the Philippines.

Note: This Privacy Policy applies solely to the phmachao Platform at https://phmachao.club. It does not apply to third-party websites or services that may be referenced in our content. phmachao is not responsible for the privacy practices of third-party platforms. This Platform is intended for players aged 21 and above residing in the Philippines.