phfun Privacy Policy

This Privacy Policy ("Policy") describes how phfun ("phfun," "we," "us," or "our"), the operator of the online gaming platform accessible at phfun.one, collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the phfun platform, including its website, mobile interface, games, and all associated services.

phfun is committed to protecting the privacy and personal data of all players, particularly those based in the Philippines. This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

This Policy should be read together with phfun's Terms and Conditions, which govern your use of the phfun platform. Capitalized terms not defined in this Policy have the meanings given to them in the Terms and Conditions.

phfun collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

phfun does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless specifically required for responsible gaming purposes (e.g., self-exclusion requests) or as mandated by applicable Philippine law.

phfun collects personal data through the following channels:

• Direct Registration: When you create a phfun account, you provide identity and contact data directly through the registration form on phfun.one.
• KYC Verification: When you submit identity documents to complete phfun's Know Your Customer process, we collect and store copies of those documents securely.
• Financial Transactions: When you make deposits or request withdrawals via GCash, PayMaya, BPI, BDO, or Metrobank, we receive transaction data from the relevant payment provider.
• Platform Usage: As you use the phfun platform — browsing games, placing wagers, accessing your account dashboard — we automatically collect technical and gaming data through server logs and analytics tools.
• Customer Support: When you contact phfun's support team via live chat or email, we collect the content of your communications and any personal data you provide in the course of seeking assistance.
• Cookies and Tracking Technologies: phfun uses cookies and similar technologies to collect technical data about your browsing behavior on phfun.one. See Section 7 for full details.

phfun uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and manage your phfun player account, including processing your registration, verifying your identity, and enabling you to access phfun's games and services.
• Age and Identity Verification: To verify that you meet the minimum age requirement of 21 years as required under Philippine gambling regulations, and to confirm your identity in compliance with PAGCOR's KYC requirements.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank), and to maintain accurate financial records of all transactions.
• Regulatory Compliance: To comply with phfun's obligations under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the phfun platform.
• Responsible Gaming: To monitor gaming behavior and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your queries, complaints, and support requests, and to maintain records of our communications with you.
• Platform Improvement: To analyze usage patterns and technical data to improve the performance, security, and user experience of the phfun platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and phfun news — but only where you have provided explicit consent to receive such communications. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012, phfun processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and phfun — specifically, to provide you with access to phfun's gaming platform and associated services as described in the Terms and Conditions.
• Legal Obligation: Processing is required to comply with phfun's legal obligations under Philippine law, including PAGCOR regulations, AMLA reporting requirements, and NPC data protection obligations.
• Legitimate Interests: Processing is necessary for phfun's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, security monitoring, and platform analytics — provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities — particularly marketing communications and the use of non-essential cookies — phfun relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

phfun does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Providers: GCash, PayMaya, BPI, BDO, and Metrobank receive the financial data necessary to process your deposits and withdrawals. These providers are subject to their own privacy policies and Philippine financial regulations.
• Game Technology Providers: Third-party game studios and live dealer platform providers receive limited technical and gaming data necessary to deliver their games on the phfun platform. All such providers are contractually bound to handle your data in accordance with applicable privacy laws.
• Identity Verification Services: phfun may use third-party KYC and identity verification service providers to assist with document verification and age confirmation. These providers process your identity data solely for verification purposes.
• Regulatory Authorities: phfun is required by law to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities upon lawful request or as required by applicable regulations.
• Legal and Professional Advisors: phfun may share personal data with its legal counsel, auditors, and other professional advisors where necessary for the conduct of phfun's business, subject to professional confidentiality obligations.

phfun uses cookies and similar tracking technologies on phfun.one to enhance your browsing experience, maintain your session, and collect analytics data. The types of cookies we use include:

• Essential Cookies: These cookies are strictly necessary for the phfun platform to function. They enable core features such as account login sessions, security tokens, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: phfun uses analytics tools to collect aggregated, anonymized data about how players use phfun.one — including pages visited, time spent, and navigation paths. This data helps us improve the platform. Analytics cookies are only placed with your consent.
• Preference Cookies: These cookies remember your platform preferences, such as language settings and display options, to provide a more personalized experience on return visits.
• Security Cookies: phfun uses security cookies to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the platform.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the phfun platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

phfun retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active phfun account, plus a minimum of five (5) years following account closure, as required by PAGCOR regulations and AMLA record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act and PAGCOR requirements.
• KYC and Identity Documents: Retained for the duration of your account plus five (5) years following account closure, or longer if required by a regulatory investigation or legal proceeding.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless the matter is subject to ongoing dispute resolution or legal proceedings.
• Technical and Analytics Data: Retained in anonymized or aggregated form for up to two (2) years for platform improvement purposes.

Upon expiry of the applicable retention period, phfun will securely delete or anonymize your personal data in accordance with its data disposal procedures, unless retention is required by a specific legal obligation or ongoing regulatory matter.

phfun implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and phfun's servers is encrypted using TLS 1.2 or higher. Personal data stored on phfun's servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to phfun personnel and authorized service providers who have a legitimate need to access it for the purposes described in this Policy. All access is logged and audited.
• Firewalls and Intrusion Detection: phfun's infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for and respond to suspicious activity in real time.
• Regular Security Audits: phfun conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in its platform and data infrastructure.
• Staff Training: All phfun personnel who handle personal data receive regular training on data protection obligations and security best practices.

While phfun takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phfun account credentials and for notifying phfun immediately if you suspect unauthorized access to your account.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phfun. To exercise any of these rights, contact phfun's Data Protection Officer at the details provided in Section 15.

The phfun platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. phfun does not knowingly collect personal data from individuals under the age of 21.

If phfun discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate steps to prevent recurrence. Any funds deposited by an underage player will be handled in accordance with phfun's Terms and Conditions and applicable Philippine law.

The phfun platform may contain references to third-party services, such as payment providers (GCash, PayMaya, BPI, BDO, Metrobank) and game technology partners. When you interact with these third-party services, you are subject to their respective privacy policies, which are separate from and independent of this phfun Privacy Policy.

phfun is not responsible for the privacy practices, data handling, or content of any third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your phfun account before providing them with your personal data.

phfun primarily stores and processes personal data within the Philippines. In certain circumstances — for example, where phfun uses internationally based game technology providers or cloud infrastructure services — your personal data may be transferred to and processed in countries outside the Philippines.

Where such international transfers occur, phfun ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Philippine Data Privacy Act of 2012. These safeguards may include contractual data protection clauses, adequacy assessments, or other mechanisms recognized by the National Privacy Commission.

By using the phfun platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of phfun's services, subject to the safeguards described above.

phfun reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When material changes are made, phfun will:

• Post the updated Privacy Policy on phfun.one/privacy-policy with a revised "Last Updated" date.
• Send a notification to your registered email address summarizing the key changes.
• Display a prominent notice on the phfun platform for a reasonable period following the update.

Your continued use of the phfun platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using phfun and may request account closure in accordance with the Terms and Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or phfun's handling of your personal data, please contact phfun's Data Protection Officer (DPO). Under the Philippine Data Privacy Act, phfun has designated a DPO responsible for overseeing compliance with data protection obligations.

When submitting a data privacy request, please include your full name, registered phfun email address, and a clear description of your request or concern. phfun may require you to verify your identity before processing certain requests to protect the security of your account and personal data.

If you are not satisfied with phfun's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph.