phpar Privacy Policy

phpar ("phpar," "we," "us," or "our") is the personal information controller responsible for the personal data you provide when using phpar.vip and all associated services (collectively, the "Platform"). phpar operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the data governance obligations imposed by PAGCOR in addition to its obligations under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data by phpar. By registering on or continuing to use phpar.vip, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

phpar collects personal data only to the extent necessary for the purposes described in this Privacy Policy. The categories of data we collect include:

2.1 Registration and Account Data

When you create a phpar account, we collect: full legal name, date of birth, mobile number, email address (where provided), and a username. This data is essential to create and operate your account and cannot be withheld if you wish to use phpar.

2.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and RA 9160 (Anti-Money Laundering Act), phpar collects: copies of government-issued identification documents (e.g., PhilSys ID, UMID, Driver's License, Passport), selfie photographs taken for liveness verification, and — where required by risk assessment — proof of address and proof of source of funds. KYC data is treated as sensitive personal information and is subject to heightened access controls.

2.3 Financial Transaction Data

phpar collects transaction records including: deposit amounts and timestamps, withdrawal requests and processing status, GCash or Maya wallet reference numbers (but not your GCash or Maya PIN), bank account numbers used for verified withdrawals, and game wagering history. Full payment instrument credentials (card numbers, mobile wallet PINs) are never stored by phpar.

2.4 Usage and Technical Data

phpar automatically collects: IP address, device type and operating system, browser type and version, session duration, pages accessed, game titles played, click patterns, and error logs. This data is used to maintain and improve the Platform and to detect fraudulent or abusive activity.

2.5 Communications Data

When you contact phpar support via live chat or email, we retain records of those communications, including the content of your messages and any attachments you provide, for a period necessary to resolve your matter and comply with our record-keeping obligations.

2.6 Responsible Gaming Data

Where you use phpar's responsible gaming tools — deposit limits, loss limits, session timers, cooling-off periods, or self-exclusion — phpar records your elections and enforcement of those tools. This data is treated with particular sensitivity and is used solely to enforce your choices.

phpar does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except where required to enforce responsible gaming elections (e.g., enforcing a self-exclusion you have requested).

Under the Data Privacy Act of 2012, phpar processes your personal data on the following legal bases:

• Consent: Where you have given specific, informed, and freely given consent to processing — primarily for marketing communications and optional profile features. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.
• Contract Performance: Processing necessary to operate your phpar account and deliver the services you have contracted for, including account management, game delivery, payments, and withdrawals.
• Legal Obligation: Processing required by PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine law — including KYC verification, AML transaction monitoring, and mandatory regulatory reporting.
• Legitimate Interest: Processing for fraud prevention, platform security, abuse detection, system performance monitoring, and analytics, where phpar's interests do not override your fundamental privacy rights.
• Vital Interest / Public Task: In exceptional circumstances, where processing is necessary to protect a vital interest or is required in the public interest, including mandatory reporting of suspected child exploitation or terrorism financing.

phpar does not sell, rent, or trade your personal data. We share your data only in the following circumstances:

5.1 Service Providers (Personal Information Processors)

phpar engages third-party service providers who process personal data on phpar's behalf under written data processing agreements that require them to comply with RA 10173 and to process data only on phpar's documented instructions. Categories of processors include:

• Payment processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations), BancNet, and other licensed Philippine payment facilitators;
• KYC and identity verification technology providers;
• Game software providers and live dealer studio operators, who receive anonymised player session data where technically required;
• Cloud infrastructure and hosting providers maintaining phpar's systems;
• Customer support platform providers processing communications data.

5.2 Regulatory and Law Enforcement Authorities

phpar discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where required or permitted by law. Such disclosures are made only to the extent required and are documented in phpar's internal compliance records.

5.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of phpar's business, personal data held by phpar may be transferred to the acquiring entity. Players will be notified of any such transfer and will have the option to close their accounts if they do not consent to the transfer of their data to the new controller.

phpar uses cookies and similar tracking technologies (web beacons, session tokens, local storage) on phpar.vip for the following purposes:

• Strictly Necessary Cookies: Session management, authentication tokens, security functions, and load balancing. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Language preferences, game lobby layout settings, and display preferences you have configured within your account. Disabling these will reset your customisation preferences.
• Performance / Analytics Cookies: Aggregated, anonymised data on how players navigate phpar.vip, which pages are most visited, and where errors occur. Used to improve Platform performance.
• Responsible Gaming Cookies: Enforcement of session timers and cooling-off periods you have elected. These are treated as functionally necessary for your protection and cannot be disabled while those tools are active.

phpar does not use third-party advertising cookies or retargeting pixels. You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent normal Platform operation. A cookie consent banner on phpar.vip allows you to manage non-essential cookie categories at any time.

phpar retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to the following minimum retention obligations:

After the applicable retention period, phpar securely deletes or anonymises your personal data using industry-standard deletion procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for aggregate analytics purposes.

phpar implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• Encryption of all data in transit using TLS 1.3;
• Encryption of sensitive data at rest using AES-256;
• Role-based access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Multi-factor authentication for all internal systems that process personal data;
• Regular third-party penetration testing and vulnerability assessments;
• Continuous intrusion detection monitoring;
• Documented data breach response procedures aligned with NPC requirements;
• Annual data privacy training for all phpar personnel who handle personal data.

While phpar takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your phpar login credentials confidential and for using the Two-Factor Authentication feature phpar provides.

Under Republic Act No. 10173, as a phpar user located in the Philippines, you have the following rights with respect to your personal data:

To exercise any of the above rights, contact phpar's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." Include your full name, registered mobile number, the specific right you are invoking, and sufficient detail to identify and action your request. phpar will respond within fifteen (15) business days. Complex requests may require up to thirty (30) days, with notice to you of the extension.

Note that certain rights are subject to exceptions. In particular, phpar may not be able to fulfil an erasure request where data must be retained to comply with PAGCOR regulations, the Anti-Money Laundering Act, or other mandatory Philippine legal obligations.

phpar's primary data processing infrastructure is located within the Philippines. Where phpar engages service providers whose systems are located outside the Philippines — including certain cloud infrastructure providers and game studio operators — personal data may be transferred to and processed in those jurisdictions.

When personal data is transferred outside the Philippines, phpar ensures that adequate safeguards are in place as required by the Data Privacy Act and NPC regulations. These safeguards include: contractual clauses requiring the recipient to apply data protection standards equivalent to RA 10173; certification of the recipient's data protection compliance; and assessment that the recipient's home jurisdiction provides an adequate level of protection.

phpar will not transfer personal data to jurisdictions that lack adequate data protection frameworks without first implementing the safeguards described above and, where required, obtaining NPC approval for the transfer.

phpar is strictly an adult gaming platform. phpar does not knowingly collect personal data from individuals under the age of 21. The Platform is restricted to persons aged 21 and over pursuant to PAGCOR regulations. Age is verified through the mandatory KYC process.

If phpar becomes aware that a minor's personal data has been collected — whether through misrepresentation of age during registration or any other means — phpar will immediately close the relevant account, refund any remaining balance to the verified depositing payment method, and permanently delete all personal data associated with the minor's account, except where required by law to retain records of the incident.

If you are a parent or guardian and believe that a minor in your care has accessed phpar, please contact phpar support immediately via live chat at phpar.vip so we can take prompt action.

phpar sends marketing communications — including promotional offers, bonus notifications, and new game announcements — only to players who have explicitly opted in to receive them. Opt-in is not a condition of registration or continued use of phpar.

You can opt out of marketing communications at any time by:

• Updating your notification preferences in Account Settings;
• Clicking the unsubscribe link in any phpar marketing email;
• Contacting phpar support at [email protected] with your opt-out request.

Withdrawing consent for marketing communications does not affect your ability to continue using phpar. phpar will continue to send transactional and account-related messages (login alerts, withdrawal confirmations, KYC status updates) regardless of marketing opt-out status, as these are essential for the operation of your account and cannot be disabled without potentially compromising your account security.

phpar may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the structure of the phpar service. Material changes — those that meaningfully affect how we process your personal data or your rights — will be communicated to registered players via:

• A prominent notice on phpar.vip at least seven (7) days before the amended policy takes effect;
• An in-platform notification on your next login after the change is published; and
• Where material changes affect sensitive data processing, an SMS or push notification to your registered mobile number.

Minor amendments — clarifications, corrections of typographical errors, or updates that do not substantively change the way phpar processes your data — may be made without prior notice. The "Last Updated" date at the top of this policy will reflect all amendments.

Your continued use of phpar after the effective date of an amended Privacy Policy constitutes your acceptance of the amended terms. If you do not accept material changes to this Privacy Policy, you must close your phpar account before the effective date of the amendment.

For any questions, concerns, or requests relating to this Privacy Policy or phpar's data processing practices, you may contact:

If you are unsatisfied with phpar's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about filing a complaint with the NPC is available through the NPC's official channels.