Privacy Policy – phtttt Casino Philippines

1. About This Policy

This Privacy Policy is issued by phtttt Casino ("phtttt," "we," "us," "our"), the operator of the online gaming platform accessible at phtttt.vip. This Policy applies to all personal data processed in connection with your use of the phtttt platform, whether accessed via desktop browser, mobile browser, or any other supported interface.

phtttt processes personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). Where phtttt's operations are also subject to the requirements of the Philippine Amusement and Gaming Corporation (PAGCOR), PAGCOR regulations on data handling and anti-money laundering compliance apply concurrently.

By registering an account on phtttt or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein, to the extent that consent is the applicable legal basis for such processing.

2. Personal Data We Collect

2.1 Categories of Personal Data

phtttt collects the following categories of personal data from players and prospective players:

2.2 Sensitive Personal Information

phtttt does not ordinarily collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act (e.g., health data, religious beliefs, sexual orientation). Where such information is volunteered by a player in the context of a responsible gaming self-assessment or support interaction, it will be treated with the heightened protections applicable to sensitive personal information under the DPA and will not be used for any purpose beyond delivering the relevant support service.

3. How We Collect Your Personal Data

phtttt collects personal data through the following channels:

• Direct Submission: Information you provide when registering your phtttt account, completing KYC verification, submitting a withdrawal request, contacting customer support, or participating in a promotion;
• Automated Collection: Technical and gaming data collected automatically when you access and use the phtttt platform, including session logs, game event data, and device fingerprints used for security and fraud prevention;
• Payment Processors: Confirmation data, reference numbers, and masked account identifiers shared by GCash, Maya, BPI, BDO, and other payment providers when you initiate a deposit or withdrawal;
• Identity Verification Services: Results from third-party KYC/AML screening providers used to verify government-issued IDs and screen against sanctions and PEP lists;
• Cookies and Similar Technologies: Session cookies, preference cookies, and analytics identifiers placed on your device when you visit phtttt.vip, as further described in Section 9.

4. Purposes of Processing

phtttt processes your personal data for the following purposes:

• To create, maintain, and manage your phtttt account, including authentication and account security;
• To process deposits, withdrawals, and all financial transactions on your phtttt account;
• To conduct Know Your Customer (KYC) identity verification as required by PAGCOR and under Philippine AMLA obligations;
• To screen for money laundering, terrorist financing, fraud, and other financial crimes in compliance with Republic Act No. 9160 (Anti-Money Laundering Act), as amended;
• To administer bonuses, promotions, and the phtttt VIP loyalty program;
• To deliver customer support services and resolve complaints, disputes, and technical issues;
• To enforce our Terms & Conditions, detect prohibited conduct, and protect the integrity of the gaming environment;
• To comply with PAGCOR reporting requirements and respond to lawful requests from Philippine government agencies and law enforcement;
• To send transactional communications (e.g., OTP codes, deposit confirmations, withdrawal notifications) to your registered mobile number;
• To send promotional communications about phtttt offers and new game releases, where you have not opted out;
• To conduct internal analytics, platform improvement, and responsible gaming monitoring.

5. Legal Bases for Processing

phtttt relies on the following legal bases under the Data Privacy Act of 2012 for processing your personal data:

• Contract Performance: Processing necessary to perform the phtttt Terms & Conditions agreement with you, including account management and payment processing;
• Legal Obligation: Processing necessary to comply with phtttt's obligations under Philippine law, including AMLA, PAGCOR regulations, tax reporting requirements, and NPC data governance obligations;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal business analytics, where these interests are not overridden by your data privacy rights;
• Consent: Processing for optional promotional communications, where your explicit consent has been obtained and may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

6.1 Third-Party Service Providers

phtttt shares personal data with carefully selected third-party service providers acting as data processors on our behalf, including: payment processors (GCash/GXI, Maya, banking partners); KYC and AML screening providers; game software providers (to the extent necessary for game operation and dispute resolution); cloud infrastructure and hosting providers; customer support platform operators; and fraud detection technology providers. All third-party processors are bound by data processing agreements that restrict their use of phtttt player data to the specific purpose for which it was shared.

6.2 Regulatory Disclosures

phtttt is required by law to disclose certain player data to Philippine regulatory and government bodies, including PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and law enforcement agencies acting pursuant to valid legal process. phtttt will comply with such requirements to the extent mandated by Philippine law, and will notify affected players of such disclosure where legally permitted to do so.

6.3 No Sale of Personal Data

phtttt does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes. Data shared with third parties is limited to what is necessary for the specific operational, legal, or regulatory purpose identified in this Policy.

7. Data Retention

phtttt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law:

• KYC and Identity Records: Minimum five (5) years from account closure, as required by AMLA and PAGCOR;
• Transaction Records: Minimum five (5) years from the date of the transaction, as required by AMLA;
• Gaming Logs: Three (3) years from the date of the gaming session, unless required longer for dispute resolution or regulatory purposes;
• Customer Support Records: Three (3) years from the resolution of the support interaction;
• Marketing Consent Records: Until consent is withdrawn and for one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, phtttt will securely delete or anonymize your personal data in a manner that prevents re-identification.

8. Data Security

phtttt implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmissions between your device and phtttt servers;
• AES-256 encryption for sensitive data at rest, including financial data and identity documents stored on phtttt infrastructure;
• Role-based access controls ensuring that phtttt personnel can only access personal data necessary for their specific job functions;
• Two-factor authentication requirements for all phtttt administrative system access;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• Incident response procedures aligned with NPC notification requirements — phtttt will notify the NPC and affected players of any personal data breach within seventy-two (72) hours of discovery, where the breach is likely to result in serious harm.

Despite these measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the security of your own phtttt account credentials. If you suspect unauthorized access to your account, contact phtttt support immediately.

9. Cookies and Tracking Technologies

phtttt uses cookies and similar technologies (collectively, "cookies") on the phtttt.vip website. Cookies are small text files placed on your device that allow phtttt to recognize your browser across sessions and provide a functional, personalized experience.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the operation of the phtttt platform, including authentication session cookies, security tokens, and load balancing cookies. These cannot be disabled without materially impairing platform functionality.
• Functional Cookies: Remember your preferences (e.g., language, lobby display settings) to personalize your phtttt experience.
• Analytics Cookies: Used to understand aggregate usage patterns on phtttt — which game categories are most visited, average session duration, and platform performance metrics. Analytics data is aggregated and not used to identify individual players.
• Security and Fraud Prevention Cookies: Device fingerprinting and behavioral signals used to detect automated bots, fraudulent account access attempts, and prohibited multi-accounting.

You may control cookie preferences through your browser settings. Disabling cookies other than strictly necessary cookies may affect the functionality of certain phtttt features but will not prevent you from accessing the platform.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data processed by phtttt:

• Right to Be Informed: The right to be notified of the nature, purpose, and extent of processing of your personal data, as provided in this Privacy Policy;
• Right of Access: The right to request a copy of your personal data held by phtttt, including information on how it has been used;
• Right to Rectification: The right to correct inaccurate or incomplete personal data held by phtttt;
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where processing is no longer necessary, consent has been withdrawn, or data was unlawfully processed — subject to retention requirements imposed by Philippine law on phtttt;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, or on grounds relating to your particular situation where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact phtttt's Data Protection Officer at the contact details provided in Section 14. phtttt will respond to verified data subject requests within thirty (30) calendar days of receipt.

11. Children's Privacy — 21+ Only

12. Cross-Border Data Transfers

Some of phtttt's third-party service providers (including game software providers, cloud infrastructure operators, and KYC screening services) may process personal data in jurisdictions outside the Philippines. Where such transfers occur, phtttt ensures that appropriate safeguards are in place to protect your personal data at a standard consistent with the requirements of the Philippine Data Privacy Act, including through contractual clauses that obligate recipient organizations to apply equivalent data protection standards.

phtttt will not transfer personal data to a foreign jurisdiction unless that transfer is covered by an appropriate legal mechanism under the DPA and its IRR, or has been approved by the National Privacy Commission where required.

13. Updates to This Privacy Policy

phtttt reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes — those that significantly affect your rights or how your data is used — will be communicated to registered players via in-platform notification at least fourteen (14) days before taking effect.

The current version of this Privacy Policy is always available at phtttt.vip/privacy-policy. The "Last Updated" date on this page indicates when the current version was published. Your continued use of phtttt after the effective date of any revision constitutes your acknowledgment of the updated Policy.

14. Contact & Data Protection Officer

phtttt has designated a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012 and the NPC's registration requirements. The DPO is responsible for overseeing phtttt's data protection compliance and serves as the primary point of contact for data subject inquiries.

For complaints regarding phtttt's data privacy practices that have not been satisfactorily resolved through our internal process, you may escalate to the National Privacy Commission of the Philippines at privacy.gov.ph (plain text — not a link).