phmaccao Privacy Policy

1. Introduction

phmaccao ("we", "us", "our") is committed to protecting the privacy and personal data of all users ("you", "your") who access and use the phmaccao Platform at phmaccao.club. This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations.

This Policy describes the types of personal information we collect from you when you register, deposit, play games, or otherwise interact with phmaccao, how that information is used, with whom it may be shared, and the choices and rights available to you regarding your personal data. Please read this Policy carefully. If you do not agree with the practices described herein, you should not use the phmaccao Platform.

This Policy should be read together with our Terms & Conditions, which govern your use of the phmaccao Platform and are incorporated herein by reference.

2. Personal Data We Collect

phmaccao collects only the personal data that is necessary to provide our services, comply with legal and regulatory obligations, and maintain the security and integrity of the Platform. The categories of personal data we may collect include:

2.1 Identity & Contact Information

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Nationality and country of residence
• Email address and mobile phone number
• Residential address (barangay, city/municipality, province)

2.2 Identity Verification Documents

• Copies of government-issued photo identification (e.g., Philippine passport, UMID, SSS ID, driver's license, PhilHealth ID)
• Proof of address documents (e.g., utility bill, bank statement)
• Proof of payment method ownership where required

2.3 Financial Information

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash mobile number, PayMaya account reference, BPI/BDO/Metrobank account details — stored only to the extent required for transaction processing)
• Account balance history and wagering activity

2.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited, session duration, and clickstream data
• Game history, bet amounts, and session logs

2.5 Communications Data

• Records of your communications with phmaccao customer support (live chat transcripts, email correspondence)
• Responses to surveys or promotional communications where you have opted in

3. How We Collect Your Data

phmaccao collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the phmaccao Platform. See Section 7 for more details on our cookie practices.
• From third parties — including identity verification service providers, payment processors (such as GCash and PayMaya), fraud prevention agencies, and regulatory authorities where we are legally required to obtain or share information.

4. How We Use Your Personal Data

phmaccao uses the personal data we collect for the following purposes:

5. Legal Basis for Processing

phmaccao processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing is required to perform our obligations under the Terms & Conditions you have agreed to, including account management and payment processing.
• Legal obligation — processing is required to comply with applicable laws and regulations, including AML, KYC, and gaming regulatory requirements.
• Legitimate interests — processing is necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
• Consent — where we rely on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

phmaccao does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your financial transactions.
• Identity verification providers — third-party KYC and AML compliance service providers who assist us in verifying your identity and screening for financial crime risks.
• Game software providers — licensed third-party game suppliers whose platforms are integrated into phmaccao, to the extent necessary to deliver game services.
• Regulatory authorities — government agencies and regulators, including PAGCOR and the National Privacy Commission (NPC), where we are legally required to disclose information.
• Law enforcement — where required by a valid court order, subpoena, or applicable law.
• IT and security service providers — companies that provide hosting, cybersecurity, and technical infrastructure services to phmaccao, subject to strict data processing agreements.

7. Cookies & Tracking Technologies

phmaccao uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security functions. A cookie is a small text file placed on your device when you visit a website.

7.1 Types of Cookies We Use

• Essential cookies — required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Analytics cookies — help us understand how players interact with the Platform so we can improve performance and user experience.
• Preference cookies — remember your settings and preferences (e.g., language, display options) to personalize your experience.
• Marketing cookies — used to deliver relevant promotional content. These are only activated where you have provided consent.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the phmaccao Platform.

8. Data Retention

phmaccao retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data — retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction records — retained for a minimum of five (5) years from the date of the transaction.
• KYC documents — retained for a minimum of five (5) years following the end of the business relationship.
• Customer support records — retained for a period of two (2) years from the date of the last interaction.
• Marketing consent records — retained until you withdraw consent or for a maximum of three (3) years from the date of last engagement, whichever is earlier.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our internal data disposal procedures.

9. Data Security

phmaccao implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive personal and financial data at rest
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Multi-factor authentication for administrative access to systems containing personal data
• Incident response procedures for detecting, reporting, and managing personal data breaches

10. Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmaccao:

• Right to be informed — you have the right to know what personal data phmaccao collects about you and how it is used.
• Right of access — you may request a copy of the personal data phmaccao holds about you at any time.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data in your phmaccao account.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object — you may object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability — you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the phmaccao Data Privacy Officer via the contact details provided in Section 14 of this Policy. We will respond to all verified requests within fifteen (15) business days.

11. Children's Privacy

The phmaccao Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. phmaccao does not knowingly collect personal data from individuals under the age of 21.

12. Third-Party Links

The phmaccao Platform may contain links to third-party websites or services (for example, payment provider portals). This Privacy Policy applies solely to data collected by phmaccao and does not cover the privacy practices of any third-party websites. phmaccao is not responsible for the content or privacy practices of external sites. We encourage you to review the privacy policies of any third-party services you access.

13. Changes to This Privacy Policy

phmaccao reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered users by email or by posting a prominent notice on the Platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the phmaccao Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure by contacting our support team.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by phmaccao, please contact our Data Privacy Officer through the following channels:

phmaccao aims to acknowledge all data privacy requests within three (3) business days and to resolve them within fifteen (15) business days. For complex requests, we may require additional time and will notify you accordingly.

You also have the right to escalate unresolved privacy concerns to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.