phpgroup takes the privacy of Filipino players seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have over your own information.
Six principles that guide how phpgroup handles personal data — every day, for every player.
Every phpgroup page — including the login form, registration, deposits, and account settings — uses 256-bit SSL encryption. Your personal and financial data is protected in transit at all times.
phpgroup does not sell, rent, or trade your personal data to third parties for commercial purposes. Data is shared with service providers only where necessary to operate the phpgroup platform, and only under strict contractual obligations.
Identity verification data collected during phpgroup's KYC process is used exclusively for regulatory compliance, age verification, and fraud prevention. It is not used for marketing profiling.
Under the Philippine Data Privacy Act (Republic Act 10173), you have the right to access, correct, object to, and request erasure of your phpgroup personal data. Requests are processed within thirty (30) days.
phpgroup marketing emails and push notifications require your explicit consent at registration. You can withdraw consent and opt out of all phpgroup marketing communications at any time from your account settings.
phpgroup retains personal data only for as long as required by law or operational necessity. Retention periods for each data category are clearly defined in this Policy and are enforced through systematic deletion schedules.
This Privacy Policy ("Policy") describes how phpgroup ("phpgroup", "we", "us", "our") collects, processes, stores, and shares personal data of individuals ("you", "Player", "User") who access or use the phpgroup online gaming platform at phpgroup.club and all associated subdomains, mobile interfaces, and related services (collectively, the "Platform").
phpgroup operates as a PAGCOR-licensed online gaming platform serving Filipino players. As a licensed gaming operator under the Philippine Amusement and Gaming Corporation ("PAGCOR"), phpgroup is subject to Philippine gaming regulations and to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR"), enforced by the National Privacy Commission ("NPC").
This Policy applies to all personal data processed in connection with your use of the phpgroup Platform, regardless of whether you access phpgroup via desktop browser, mobile browser, or any other interface. By registering a phpgroup account or using any phpgroup service, you acknowledge that you have read and understood this Policy.
For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, the data controller responsible for your personal data collected through the phpgroup Platform is:
phpgroup has designated a Data Protection Officer ("DPO") in accordance with the requirements of the DPA. The DPO is responsible for overseeing phpgroup's data protection practices and ensuring compliance with applicable Philippine data privacy law. Data subject rights requests and privacy inquiries may be directed to the DPO via [email protected].
phpgroup collects the following categories of personal data in connection with your use of the Platform:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Account registration, KYC compliance, age verification |
| Contact Data | Philippine mobile number, email address, residential address | Account management, support communications, security alerts |
| Government ID Data | PhilSys ID, UMID, passport, driver's license number, ID images | KYC verification, PAGCOR compliance, anti-fraud |
| Biometric Data | Facial photograph (selfie) for identity matching | KYC verification, account security |
| Financial Data | GCash number, Maya account, bank details (masked), transaction history | Payment processing, withdrawal, AML compliance |
| Gaming Data | Wagering history, game session logs, bet amounts, win/loss records | Platform operation, responsible gaming, dispute resolution |
| Technical Data | IP address, device type, browser type, OS, session timestamps | Security, fraud detection, platform optimisation |
| Communication Data | Live chat transcripts, support emails, survey responses | Customer support, quality assurance, complaints resolution |
| Marketing Data | Promotional communication preferences, campaign response data | Marketing (where consent is given) |
phpgroup collects personal data through the following channels and methods:
4.1 Direct Collection. The majority of data phpgroup holds about you is provided directly by you during account registration, the KYC verification process, deposit and withdrawal transactions, live chat and email support interactions, and participation in surveys or promotions.
4.2 Automated Technical Collection. When you access phpgroup, certain technical data is collected automatically by our systems. This includes your IP address, device identifiers, browser fingerprint, session duration, page views, and clickstream data. This collection is necessary for platform security, fraud detection, and to maintain the technical operation of phpgroup.
4.3 Third-Party Sources. phpgroup may receive supplementary identity verification data from its authorised KYC verification service providers, where you have provided consent for such cross-referencing as part of the verification process. phpgroup may also receive fraud risk scores from payment processors in connection with deposit and withdrawal transactions.
4.4 Cookies and Tracking Technologies. phpgroup uses cookies and related tracking technologies as described in Section 8 of this Policy.
Under the Philippine Data Privacy Act, phpgroup processes personal data on the following legal grounds:
phpgroup uses collected personal data for the following specific purposes:
phpgroup does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared with third parties only in the circumstances described below:
7.1 Service Providers. phpgroup shares personal data with carefully selected third-party service providers who process data on phpgroup's behalf under contractual data processing agreements. These include:
7.2 Regulatory and Law Enforcement Disclosure. phpgroup will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement authorities, or other competent regulatory bodies where phpgroup is legally required to do so or where disclosure is necessary to comply with a valid legal process, such as a court order or official investigation.
7.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of phpgroup's business assets, personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any material changes to this Privacy Policy resulting from it.
7.4 With Your Consent. phpgroup may share your personal data with additional third parties where you have given explicit, informed, and freely revocable consent to that specific sharing.
phpgroup uses cookies — small text files stored on your device — and related technologies including local storage and session tokens, to operate and improve the Platform. The following cookie categories are used:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent phpgroup platform functionality, including the ability to log in and manage your account.
phpgroup retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | PAGCOR licensing, AML compliance |
| KYC / Government ID Data | Duration of account + 5 years post-closure | RA 9160 Anti-Money Laundering Act |
| Financial Transaction Records | 5 years from transaction date | PAGCOR, AML regulatory requirements |
| Gaming Session Logs | 3 years from session date | Dispute resolution, regulatory audit |
| Customer Support Communications | 3 years from last interaction | Complaints resolution, quality assurance |
| Technical / IP Logs | 12 months from collection | Security, fraud detection |
| Marketing Preference Data | Until consent is withdrawn | Consent-based processing |
Upon expiry of the applicable retention period, phpgroup will securely delete or anonymise the relevant personal data in accordance with its data destruction procedures, unless a specific legal obligation requires extended retention.
phpgroup implements technical and organisational security measures proportionate to the sensitivity of the personal data it processes. These measures include:
In the event of a personal data breach that is likely to adversely affect your rights and freedoms, phpgroup will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with DPA requirements.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to personal data phpgroup holds about you:
Request a copy of all personal data phpgroup holds about you, including categories, sources, and processing purposes.
Request correction of inaccurate or incomplete personal data in your phpgroup account.
Request deletion of your personal data where phpgroup no longer has a legal basis to retain it.
Object to processing of your data for marketing communications or legitimate interest purposes.
Request your phpgroup personal data in a structured, commonly used, machine-readable format.
Request that phpgroup restrict processing of your data while a rectification or objection request is being assessed.
To exercise any of these rights, submit a written request to phpgroup's Data Protection Officer at [email protected]. phpgroup will respond within thirty (30) days of receipt of a valid request. phpgroup may need to verify your identity before processing a rights request.
Please note that certain rights are subject to limitations where phpgroup has a legal obligation to retain data — for example, KYC and transaction records required by PAGCOR and the Anti-Money Laundering Council cannot be deleted upon request while the regulatory retention obligation remains in effect.
phpgroup's gaming services are strictly for individuals aged 21 years and older, as required by PAGCOR. phpgroup does not knowingly collect personal data from individuals under 21 years of age. The KYC verification process — which requires a valid government-issued ID and real-time facial photograph — is specifically designed to prevent minors from registering phpgroup accounts.
If phpgroup determines that personal data has been collected from an individual under 21 years of age, that data will be immediately deleted, the account will be closed, and any balance will be voided in accordance with phpgroup's Terms and Conditions. If you believe phpgroup has inadvertently collected data from a minor, please notify us immediately at [email protected].
The phpgroup platform may contain references to or integrations with third-party services, including game provider interfaces and payment provider portals. These third parties operate their own privacy practices independently of phpgroup. When you interact directly with a third-party interface — for example, when completing a GCash transaction — you are subject to that provider's privacy policy, not phpgroup's.
phpgroup is not responsible for the privacy practices of third-party services accessed through or in connection with the phpgroup platform. Players are encouraged to review the privacy policies of payment providers and game studios where relevant. phpgroup selects service providers that meet appropriate data protection standards and binds them to contractual privacy obligations.
phpgroup may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes — those that significantly affect your rights or the way phpgroup uses your data — will be communicated to registered players by email to the address on file, at least seven (7) days before the revised Policy takes effect.
Non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy) may be made without specific notification, and the updated Policy will be posted on this page with a revised effective date.
Your continued use of the phpgroup platform after any Policy revision constitutes your acceptance of the updated terms. The current version of this Policy, including the effective date shown at the top of this page, is always the binding version.
If you believe that phpgroup has not handled your personal data in accordance with this Privacy Policy or the Philippine Data Privacy Act, you have the right to lodge a formal complaint. phpgroup encourages you to raise the matter with us directly in the first instance, so that we have the opportunity to address your concern.
Privacy complaints should be submitted in writing to phpgroup's Data Protection Officer at [email protected]. phpgroup will acknowledge your complaint within five (5) business days and provide a substantive response within thirty (30) days of receipt.
If you are not satisfied with phpgroup's response, or if you prefer to raise the matter directly with the supervisory authority, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC), the government body responsible for enforcing the Data Privacy Act.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phpgroup, please contact phpgroup's Data Protection Officer through the following channels:
When contacting phpgroup regarding a data privacy matter, please include your phpgroup account username, a description of your request or concern, and any relevant reference numbers to assist with a prompt and accurate response.
Secure & Trusted
phpgroup is built on transparency, PAGCOR compliance, and genuine respect for Filipino players' data rights. Your information stays secure, private, and under your control — always.
For players 21 years and older only · PAGCOR Licensed · Philippine Data Privacy Act Compliant