phhalik
Privacy Policy

phhalik ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users ("you," "your," or "the Player") who access or use the phhalik online gaming platform. This Privacy Policy has been prepared in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC) of the Philippines.

This Policy describes the types of personal information phhalik collects, the purposes for which it is processed, the parties with whom it may be shared, the security measures in place to protect it, and the rights available to you as a data subject under Philippine law.

This Privacy Policy should be read alongside the phhalik Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Privacy Policy shall prevail.

phhalik collects personal data through several channels, including account registration, identity verification, payment processing, platform usage, and customer support interactions. The categories of personal data we collect include:

phhalik does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive data is collected — such as government ID details — it is handled with the highest level of care and stored with enhanced security controls.

phhalik processes your personal data for the following specific and legitimate purposes:

• Account Management: To create, maintain, and administer your phhalik player account, including verifying your identity and age (minimum 21 years) in compliance with Philippine gaming regulations.
• Service Delivery: To provide access to phhalik's full range of gaming products, including casino games, sports betting, bingo, and slot games, and to process your deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank.
• Regulatory Compliance: To fulfill phhalik's obligations under applicable Philippine laws, including anti-money laundering (AML) requirements under Republic Act No. 9160, age verification requirements, and reporting obligations to relevant regulatory authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the phhalik platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through phhalik's support channels.
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests in accordance with the phhalik Responsible Gaming Policy.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time through your account settings.
• Platform Improvement: To analyze aggregated usage data and improve the phhalik platform's features, performance, and user experience.

phhalik will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

Under the Data Privacy Act of 2012, phhalik processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and phhalik — specifically, to operate your player account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with phhalik's obligations under Philippine law, including AML reporting, age verification, and regulatory record-keeping requirements.
• Legitimate Interests: Processing is necessary for phhalik's legitimate interests in preventing fraud, ensuring platform security, and improving service quality, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, phhalik relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

phhalik does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to confirm your identity and eligibility to use the phhalik platform.
• Fraud Prevention Services: Specialist providers engaged to detect and prevent fraudulent activity, money laundering, and other prohibited conduct.
• Game Content Providers: Third-party game developers and live dealer studios whose games are hosted on the phhalik platform, to the extent necessary for game delivery and dispute resolution.
• Regulatory Authorities: The Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other lawful process.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by phhalik, subject to strict confidentiality obligations.

All third parties with whom phhalik shares personal data are required to process that data in accordance with applicable Philippine privacy law and phhalik's data protection standards. phhalik does not transfer personal data outside the Philippines except where necessary and subject to appropriate safeguards.

phhalik uses cookies and similar tracking technologies to operate the platform, enhance your user experience, and gather analytical data. The types of cookies used on the phhalik platform include:

• Strictly Necessary Cookies: Essential for the operation of the phhalik platform, including maintaining your login session, remembering your language preferences, and enabling secure transactions. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how players interact with the phhalik platform, helping us identify areas for improvement. These cookies do not identify you personally.
• Functional Cookies: Used to remember your preferences and personalize your phhalik experience, such as your preferred game categories or display settings.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of phhalik's marketing campaigns. These cookies are only placed with your prior consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phhalik platform. For marketing cookies, you may also update your preferences through your phhalik account settings.

phhalik retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active phhalik account, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and its implementing regulations.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a specific regulatory obligation or ongoing investigation.
• Customer Support Records: Retained for a period of three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, phhalik will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where anonymization is not technically feasible, the data will be securely destroyed.

phhalik implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the phhalik platform is encrypted using industry-standard 256-bit SSL/TLS technology. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within phhalik is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: phhalik supports and encourages the use of two-factor authentication (2FA) on all player accounts to provide an additional layer of security against unauthorized access.
• Penetration Testing: phhalik's platform and infrastructure undergo regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: phhalik maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, phhalik will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Data Privacy Act of 2012.

While phhalik takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phhalik login credentials and for notifying phhalik immediately if you suspect unauthorized access to your account.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phhalik. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 12:

phhalik will respond to all valid data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case phhalik will notify you of the extension and the reasons for it. phhalik reserves the right to verify your identity before processing any data subject request.

The phhalik platform is strictly intended for adults aged 21 years and older in accordance with Philippine gaming regulations. phhalik does not knowingly collect personal data from individuals under the age of 21.

If phhalik becomes aware that personal data has been collected from a person under 21 years of age, it will immediately suspend the relevant account, delete the associated personal data, and take appropriate steps to prevent further access by that individual. Any funds associated with an underage account will be handled in accordance with phhalik's Terms & Conditions and applicable regulatory requirements.

If you are a parent or guardian and believe that your child under the age of 21 has registered on the phhalik platform, please contact our support team immediately at the details provided in Section 12. We will investigate and take prompt action.

phhalik reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. The "Last Updated" date at the top of this Policy will be revised accordingly whenever material changes are made.

Where changes are material — meaning they significantly affect your rights or the way phhalik processes your personal data — phhalik will provide advance notice via the Platform or by email to your registered address at least fourteen (14) days before the changes take effect. For non-material changes, the updated Policy will be published on the phhalik website and will take effect immediately upon publication.

Your continued use of the phhalik platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any changes to this Policy, you should cease using the phhalik platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way phhalik handles your personal data, please contact our Data Protection Officer. We are committed to addressing all privacy-related inquiries promptly and transparently.

Data Protection Officer — phhalik
Email: [email protected]

General Support:
Email: [email protected]

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that phhalik has violated your data privacy rights. The NPC can be reached through its official government channels.