Privacy Policy – How phhalik Protects Your Personal Information

1Who We Are

phhalik is an online casino and sports betting platform serving players in the Philippines. You can access phhalik at phhalik.best. When this Privacy Policy refers to "phhalik", "we", "us", or "our", it means the entity operating the phhalik platform and responsible for the processing of your personal data.

phhalik acts as the data controller in respect of the personal information collected from players who register and use the platform. We are committed to protecting your privacy in line with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and other applicable data protection obligations.

This Privacy Policy applies to all personal data collected through the phhalik website, mobile interface, customer support interactions, and any other phhalik service. By registering an account or using phhalik, you acknowledge that you have read and understood this policy.

2Data We Collect

phhalik collects personal information only where it is necessary to provide the platform's services, verify player identity, process financial transactions, or comply with legal obligations. The categories of data we collect include:

Registration Information

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Mobile phone number registered in the Philippines
• Email address
• Residential address in the Philippines
• Username and encrypted password

Identity Verification (KYC) Documents

• Copy of a valid Philippine government-issued photo ID (passport, driver's licence, PhilSys National ID, UMID, or PRC ID)
• Proof of current residential address (utility bill, bank statement, or government document issued within the past three months)
• Payment method verification (e.g., confirmation screenshot of your GCash or Maya account showing your registered name)
• Source of funds documentation when required for high-volume accounts

Financial Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references
• GCash, Maya, BDO, BPI, UnionBank, and other payment method reference numbers (not full account credentials)
• Account balance and betting history on phhalik
• Bonus claim and wagering activity records

Technical & Usage Data

• IP address and approximate geolocation at the time of login
• Device type, operating system, and browser information
• Session activity logs including pages visited, games played, and time spent on platform
• Cookies and similar tracking technologies (see Section 8 for full details)

Communications Data

• Records of live chat conversations, email exchanges, and support ticket history between you and phhalik's customer support team
• Feedback, survey responses, and complaint records

3How We Collect Your Data

phhalik collects your personal information through the following methods:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion on phhalik.
• Automatically: When you browse or use the phhalik platform, our systems automatically collect technical data such as your IP address, device information, session activity, and cookie data. This happens as a standard feature of web platform operation.
• From payment processors: When you make a deposit or withdrawal via GCash, Maya, BDO, BPI, or another payment method, phhalik receives transaction confirmation data from the relevant payment processor to verify and reconcile your account balance.
• From identity verification services: In certain cases, phhalik may use third-party identity verification providers to assist with KYC document checks. These providers process your documents on phhalik's behalf and under strict confidentiality obligations.
• From fraud prevention systems: Automated fraud detection tools may analyse your activity patterns on phhalik to identify unusual behaviour. This is a protective measure for both the platform and your account.

4Why We Use Your Data

phhalik uses the personal data we collect for the following specific purposes:

5Legal Basis for Processing

phhalik processes your personal data on the following legal grounds under applicable data protection law:

• Contractual necessity: Processing your registration details, KYC documents, payment information, and account activity data is necessary to perform the contract between you and phhalik — that is, to provide the gaming and betting services you have requested.
• Legal obligation: phhalik is required to collect and retain certain data to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and applicable Philippine gaming laws. This data must be processed regardless of your individual preferences.
• Legitimate interests: phhalik processes technical and usage data on the basis of our legitimate interest in preventing fraud, maintaining platform security, improving service quality, and detecting prohibited behaviour. We balance this interest against your privacy rights and only collect what is proportionate and necessary.
• Consent: Where phhalik processes data for marketing communications or non-essential cookies, we do so only with your explicit consent. You may withdraw this consent at any time through your account settings or by contacting support.

6Who We Share Your Data With

phhalik does not sell, rent, or trade your personal information to third parties. We share your data only in the circumstances described below, and always under strict confidentiality and data protection obligations:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and card networks receive transaction data as necessary to process your deposits and withdrawals. These providers are bound by their own data security standards and Philippine financial regulations.
• Identity verification providers: phhalik may use third-party KYC service providers to assist in verifying identity documents. These providers process your documents solely for verification purposes and under confidentiality agreements with phhalik.
• Fraud prevention and security services: Automated fraud detection and cybersecurity services may process certain technical data to identify suspicious activity and protect the platform and your account.
• Game software providers: Third-party live casino and sports data providers receive only the minimum data necessary to deliver the game service — typically a session token and anonymised player reference, not your full personal details.
• Legal and regulatory authorities: phhalik will disclose personal data to Philippine government agencies, law enforcement bodies, or regulatory authorities when required to do so by law, court order, or valid legal process. We will notify you of such requests where legally permitted.
• Professional advisors: Our legal, accounting, and compliance advisors may access limited personal data where necessary to provide professional services to phhalik. All such parties are bound by professional confidentiality obligations.

7Data Retention

phhalik retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. Specific retention periods are as follows:

• Active account data: Retained for the duration of your active phhalik account plus a minimum of five years after account closure, as required by anti-money laundering regulations applicable to gaming platforms.
• KYC verification documents: Retained for a minimum of five years from the date of last transaction or account closure, whichever is later, in line with Philippine AML regulatory requirements.
• Transaction records: Deposit, withdrawal, and betting history retained for a minimum of five years for regulatory compliance and dispute resolution purposes.
• Customer support records: Communications and complaint records retained for three years from the date of the interaction.
• Technical logs: IP addresses and session logs retained for up to 12 months for security and fraud investigation purposes.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your account so that we can demonstrate compliance with consent requirements.

When data is no longer required for any legitimate purpose or legal obligation, phhalik deletes or anonymises it securely. You may request early deletion of certain data types — see Section 10 for your rights in this regard.

8Cookies & Tracking Technologies

phhalik uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, analyse usage, and — where you have consented — to deliver relevant promotional content. Here is a breakdown of the types of cookies phhalik uses:

You can manage cookie preferences through your browser settings. Note that disabling cookies beyond the strictly necessary category may affect the functionality of certain phhalik features. Clearing all cookies will log you out of your phhalik session.

9Payment Data Security

phhalik takes the security of your financial information with the utmost seriousness. Given that a large portion of our Filipino player base uses GCash, Maya, and other e-wallet services as their primary payment method, phhalik has implemented security practices specifically tailored to mobile payment environments.

Key security measures for payment data at phhalik:

• No credential storage: phhalik never stores your GCash PIN, Maya password, bank login credentials, or full debit/credit card numbers. Payment authentication always occurs through the payment provider's own secure interface.
• Tokenisation: Payment method references stored by phhalik are tokenised identifiers — not the actual account numbers — provided by the payment processor to enable transaction matching without exposing sensitive data.
• Transaction monitoring: phhalik monitors all payment activity for unusual patterns that may indicate unauthorised access or fraud. Suspicious activity triggers automatic alerts and account review.
• Same-name withdrawal rule: phhalik enforces a strict policy that withdrawals can only be processed to payment accounts registered in the same name as the phhalik account. This prevents unauthorised fund redirection.
• Two-factor verification: High-value withdrawal requests and certain account changes at phhalik require secondary verification via your registered mobile number before processing.

If you ever suspect unauthorised access to your phhalik account or notice transactions you did not initiate, contact our support team immediately via live chat. We will investigate and take protective action within one hour of your report during business hours.

10Your Data Rights as a phhalik Player

Under the Data Privacy Act of 2012 and phhalik's own privacy commitments, you have the following rights in respect of your personal data:

To exercise any of these rights, contact phhalik's Data Privacy Officer at support@phhalik.best or through the live chat function. Include your registered account email and a description of your request. We may need to verify your identity before actioning the request.

11Children's Privacy

phhalik is strictly an adults-only platform. You must be at least 21 years of age to register and use any phhalik service. phhalik does not knowingly collect personal information from any person under the age of 21.

If phhalik discovers that personal data has been collected from a person under the age of 21, the account will be immediately closed, all associated data deleted, and any funds held will be reviewed under phhalik's underage gambling investigation process.

If you are a parent or guardian and believe that a minor has registered an account on phhalik without your knowledge, please contact support@phhalik.best immediately so that we can investigate and take appropriate action.

12Cross-Border Data Transfers

phhalik's core platform infrastructure and data storage is operated with Philippine player data security as a priority. In certain cases, personal data may be transferred to or processed by service providers operating in other jurisdictions — for example, live casino game technology providers or certified KYC verification platforms.

Where such transfers occur, phhalik ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine data protection law. These safeguards include contractual data processing agreements, security certifications, and regular compliance reviews.

phhalik does not transfer your personal data to countries or organisations that do not provide an adequate level of data protection. If you have questions about specific cross-border transfers involving your data, contact our Data Privacy Officer.

13Security Measures

phhalik implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information:

• Encryption in transit: All data transmitted between your device and phhalik servers is protected by 256-bit SSL/TLS encryption. You can verify this by checking for the padlock icon in your browser's address bar when using phhalik.
• Encryption at rest: Sensitive personal data stored in phhalik's databases — including KYC documents and identity information — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within phhalik is restricted on a strict need-to-know basis. Staff members can only access the data categories required to perform their specific role.
• Intrusion detection: phhalik's infrastructure includes continuous monitoring for unauthorised access attempts, unusual network activity, and potential security breaches.
• Security testing: phhalik's platform undergoes regular penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All phhalik staff with access to personal data receive regular data protection training and are bound by strict confidentiality obligations in their contracts.

Despite these measures, no online platform can guarantee absolute security. If a data breach occurs that is likely to affect your rights and freedoms as a phhalik player, we will notify you promptly in accordance with our legal obligations under the Data Privacy Act.

14Updates to This Privacy Policy

phhalik may update this Privacy Policy from time to time to reflect changes in our data practices, new services, or updated legal requirements. When we make material changes, we will notify registered players by email and through a prominent notice on the phhalik platform at least 7 days before the changes take effect.

The date shown at the top of this page — "Last Updated: January 2025" — will be revised with each update. We encourage you to review this page periodically to stay informed about how phhalik protects your personal data.

Your continued use of phhalik after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you disagree with significant changes to how we handle your data, you may contact us to discuss your options, including account closure and data deletion where legally permissible.

15Contact Us About Privacy

If you have any question, concern, or request related to your personal data and how phhalik handles it, please reach out to us through one of the following channels:

• Data Privacy Officer — Email: support@phhalik.best (include "Privacy Request" in your subject line for priority routing)
• Live Chat: Available 24/7 on the phhalik platform — average response time under 2 minutes for support queries

For formal data subject requests (access, correction, deletion, portability), phhalik will acknowledge your request within 3 business days and complete it within 30 days. If we require additional time due to the complexity of the request, we will inform you and provide an expected completion date.

If you are not satisfied with phhalik's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. phhalik encourages you to contact us first so that we can resolve the issue directly before escalating to a regulatory body.