phginto Privacy Policy

1. Introduction

phginto ("phginto", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("Player", "User", "you") of the phginto online gaming platform accessible at phginto.app ("Platform"). This Privacy Policy describes how phginto collects, uses, stores, shares, and protects your personal information in connection with your use of the Platform.

This Privacy Policy is incorporated into and forms part of the phginto Terms & Conditions. By registering for or using the phginto Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the phginto Platform.

2. Data Controller

phginto is the data controller responsible for your personal data collected through the Platform. As data controller, phginto determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

If you have any questions or concerns about how phginto handles your personal data, you may contact our Data Protection Officer (DPO) at [email protected].

3. Information We Collect

phginto collects personal information that is necessary to provide you with a safe, secure, and compliant gaming experience. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine passport number, SSS number, PhilSys ID number, driver's licence number).
• Contact Data: Email address, Philippine mobile number, and residential address (including barangay, city/municipality, province, and postal code).
• Financial Data: Payment method details (e.g., GCash account number, PayMaya account, BPI/BDO/Metrobank account details), transaction history, deposit and withdrawal records, and account balance information.
• Account Data: Username, encrypted password, account preferences, bonus history, and gameplay history.
• Technical Data: IP address, device type, browser type and version, operating system, time zone, and cookies and similar tracking data.
• Usage Data: Information about how you use the phginto Platform, including pages visited, games played, session duration, and click-stream data.
• Communications Data: Records of your communications with phginto customer support, including live chat transcripts and email correspondence.
• Verification Data: Copies of identity documents and selfies submitted for KYC (Know Your Customer) verification purposes.

phginto collects this information directly from you when you register, make deposits or withdrawals, contact customer support, or use the Platform, as well as automatically through cookies and similar technologies.

4. How We Use Your Personal Data

phginto uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your phginto account, including verifying your identity and eligibility to use the Platform.
• Service Delivery: To provide you with access to phginto's games, promotions, and other Platform features.
• Payment Processing: To process deposits, withdrawals, and other financial transactions through your chosen Philippine payment method (GCash, PayMaya, BPI, BDO, Metrobank, etc.).
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and PAGCOR regulatory requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other illegal or prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, complaints, and support requests.
• Responsible Gaming: To monitor your gaming activity and provide responsible gaming tools, including deposit limits, self-exclusion, and cooling-off periods, where appropriate.
• Marketing Communications: To send you promotional offers, bonuses, and news about phginto, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse usage patterns and improve the functionality, performance, and user experience of the phginto Platform.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with the phginto Platform.

5. Legal Basis for Processing

phginto processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and phginto (i.e., the Terms & Conditions), including account management and payment processing.
• Legal Obligation: Processing is necessary to comply with phginto's legal obligations under Philippine law, including AML, KYC, and regulatory reporting requirements.
• Legitimate Interests: Processing is necessary for phginto's legitimate interests, including fraud prevention, platform security, and business analytics, provided these interests are not overridden by your rights and interests.
• Consent: Where phginto relies on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

phginto does not sell, rent, or trade your personal data to third parties for their own marketing purposes. phginto may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: Philippine payment service providers (including GCash, PayMaya, BPI, BDO, and Metrobank) to process your financial transactions.
• Identity Verification Providers: Third-party KYC and identity verification service providers to verify your identity and comply with regulatory requirements.
• Game Providers: Third-party game software providers who supply games available on the phginto Platform, to the extent necessary for game operation and fairness auditing.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where required by law or regulation.
• Professional Advisers: Lawyers, accountants, auditors, and other professional advisers engaged by phginto, subject to confidentiality obligations.
• IT and Security Providers: Cloud hosting, cybersecurity, and IT infrastructure providers who process data on phginto's behalf under strict data processing agreements.

All third parties with whom phginto shares personal data are required to handle such data in accordance with applicable Philippine privacy law and phginto's data protection standards.

7. Data Retention

phginto retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Specifically:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations.
• KYC verification documents are retained for a minimum of five (5) years following the end of the business relationship.
• Customer support communications are retained for three (3) years.
• Marketing consent records are retained until you withdraw your consent, plus an additional period as required by law.

When your personal data is no longer required, phginto will securely delete or anonymise it in accordance with our data retention and disposal procedures.

8. Data Security

phginto implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phginto Platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Access controls and role-based permissions limiting access to personal data to authorised phginto personnel only.
• Regular security audits, penetration testing, and vulnerability assessments.
• Staff training on data protection and information security best practices.

While phginto takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phginto will notify you and the National Privacy Commission in accordance with applicable law.

9. Cookies and Tracking Technologies

phginto uses cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your experience on the Platform, analyse usage patterns, and deliver relevant content. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the phginto Platform, including session management and security features. These cannot be disabled.
• Performance Cookies: Used to collect anonymous information about how visitors use the Platform, helping phginto improve performance and user experience.
• Functional Cookies: Used to remember your preferences and personalise your experience on the phginto Platform.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of phginto's marketing campaigns. These are only set with your consent.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phginto Platform.

10. Your Data Protection Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phginto:

• Right to be Informed: The right to be informed about how phginto collects and uses your personal data (as set out in this Privacy Policy).
• Right of Access: The right to request a copy of the personal data phginto holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to phginto's legal and regulatory retention obligations.
• Right to Object: The right to object to certain types of processing, including direct marketing.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phginto has violated your data protection rights.

To exercise any of these rights, please contact phginto's Data Protection Officer at [email protected]. phginto will respond to your request within thirty (30) days.

11. Children's Privacy

The phginto Platform is strictly intended for adults aged 21+ in accordance with Philippine gambling regulations. phginto does not knowingly collect personal data from individuals under the age of 21. If phginto becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on the phginto Platform, please contact us immediately at [email protected].

12. International Data Transfers

phginto primarily stores and processes your personal data within the Philippines. In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines (for example, where phginto uses cloud infrastructure or third-party service providers located abroad). Where such transfers occur, phginto ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and NPC regulations, including the use of standard contractual clauses or other approved transfer mechanisms.

13. Changes to This Privacy Policy

phginto reserves the right to update or modify this Privacy Policy at any time. When material changes are made, phginto will notify registered players via email or a prominent notice on the Platform. The revised Privacy Policy will take effect on the date specified in the notice. Your continued use of the phginto Platform after the effective date constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how phginto protects your personal data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or phginto's data protection practices, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the phginto Platform
• Response Time: phginto aims to respond to all privacy-related enquiries within 30 days

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with phginto's response to your privacy concern.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions.