phgolden Privacy Policy — How We Protect Your Personal Data

phgolden ("we," "us," "our") operates the online casino and sports betting platform accessible at phgolden.biz (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, visitors, and applicants.

This Privacy Policy applies to all personal information collected, processed, stored, or disclosed by phgolden in connection with the operation of the Platform. It governs data collected through the phgolden website, account registration process, customer support channels, payment processing systems, and any other interactions you have with phgolden.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines. phgolden recognizes the importance of data privacy to Filipino players and is committed to upholding the highest standards of data governance.

phgolden is the Personal Information Controller in respect of all personal data processed through the phgolden Platform, as defined under the Philippine Data Privacy Act of 2012.

phgolden has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and handling inquiries, requests, and complaints from data subjects. The DPO can be contacted at:

• Email: [email protected] (subject line: "Data Privacy Request")
• Response Time: Acknowledgement within 72 hours; full response within 15 business days
• Operating Hours: Monday to Friday, 9:00 AM – 6:00 PM Philippine Standard Time

phgolden collects the following categories of personal data from players and Platform visitors:

phgolden does not intentionally collect sensitive personal information as defined under RA 10173 (such as racial or ethnic origin, political opinions, religious beliefs, health data, or criminal records) unless specifically required for a regulatory compliance purpose and with your explicit consent.

phgolden collects personal data through the following channels and mechanisms:

• Direct registration: Information you provide when creating a phgolden account, completing KYC verification, or updating your account profile.
• Transaction processing: Data shared during deposit and withdrawal transactions, including references provided by GCash, Maya, and Philippine banking partners.
• Platform use: Data generated automatically as you use the phgolden platform, including gameplay data, session logs, and navigation behavior.
• Customer support interactions: Information shared when you contact phgolden's support team via live chat, email, or any other channel.
• Third-party verification services: Identity verification data returned by KYC service providers used to validate government ID documents.
• Cookies and tracking technologies: Technical and behavioral data collected via cookies and similar technologies as described in Section 8 of this Policy.
• Fraud prevention systems: Device fingerprinting and behavioral analytics data generated by phgolden's fraud detection infrastructure.

phgolden uses personal data for the following purposes:

1. Account management: Creating, maintaining, and administering your phgolden player account, including processing your registration, managing your preferences, and providing account support.
2. Age and identity verification: Confirming that you meet the 21+ age requirement and verifying your identity in compliance with PAGCOR licensing conditions and Philippine KYC/AML regulations.
3. Payment processing: Facilitating deposits via GCash, Maya, and other accepted Philippine payment methods, and processing withdrawal requests to verified accounts.
4. Regulatory compliance: Meeting phgolden's obligations under applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160), and the Data Privacy Act of 2012.
5. Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct.
6. Responsible gaming: Monitoring gaming patterns to identify players who may be experiencing gambling-related harm, and applying appropriate responsible gaming interventions in accordance with phgolden's policies.
7. Platform improvement: Analyzing aggregate usage data to improve platform performance, game library curation, and the overall player experience.
8. Customer support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions for quality assurance.
9. Marketing communications: Sending promotional offers, bonus notifications, and platform updates where you have given explicit consent to receive such communications.

phgolden processes personal data under one or more of the following legal bases recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract represented by your phgolden account and these Terms, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with phgolden's obligations under Philippine law, including PAGCOR licensing conditions, AML regulations, and tax reporting requirements.
• Legitimate interests: Processing necessary for phgolden's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and the improvement of phgolden's services — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — particularly for marketing communications and certain non-essential cookies. You may withdraw consent at any time without affecting prior processing.

phgolden does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Personal data is shared only in the following limited circumstances:

• Payment service providers: GCash (GXI Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other Philippine financial institutions, for the purpose of processing deposits and withdrawals. These providers receive only the data necessary to complete the specific transaction.
• Game content providers: Pragmatic Play, Evolution Gaming, and other licensed game developers whose content is hosted on the phgolden platform. Game providers may receive your Player ID and game session data for jackpot processing and audit purposes. They do not receive your identity documents or financial details.
• KYC and identity verification providers: Third-party identity verification services used to validate government-issued identification documents during the KYC process. These providers operate under strict data processing agreements.
• Fraud prevention and security services: Cybersecurity and fraud detection providers who assist phgolden in protecting the Platform and its players from unauthorized access and fraudulent activity.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law, court order, or regulatory directive.
• Legal and professional advisors: phgolden's lawyers, auditors, and compliance consultants where necessary for legal proceedings, regulatory audits, or compliance reviews.

All third parties who receive phgolden player data are required to process it only for the specified purpose, maintain adequate security measures, and comply with applicable Philippine data privacy laws. phgolden conducts due diligence on third-party data processors before engagement.

phgolden uses cookies and similar tracking technologies to operate the Platform, improve the player experience, and support security functions. The following categories of cookies are used:

• Strictly necessary cookies: Required for core platform functions including session management, login authentication, and security controls. These cookies cannot be disabled without preventing you from using phgolden's services.
• Functional cookies: Store your preferences such as language settings, game lobby filters, and display configurations to personalize your Platform experience between sessions.
• Analytics cookies: Collect aggregate, anonymized data about how players navigate and use the phgolden Platform. This data is used solely to improve platform performance and usability. phgolden uses privacy-respecting analytics tools that do not share data with advertising networks.
• Security cookies: Used by phgolden's fraud detection systems to identify unusual device patterns or login behavior that may indicate unauthorized access attempts.

phgolden does not use third-party advertising cookies or behavioral tracking pixels that serve targeted advertising from external networks. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies may impair your ability to use the Platform.

phgolden retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and KYC records: A minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Transaction records: A minimum of five (5) years from the date of the transaction, in compliance with AML record-keeping requirements.
• Support communications: Three (3) years from the date of the final communication, for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the duration of the consent and for one (1) year following withdrawal of consent, to demonstrate compliance with data subject requests.
• Technical and security logs: Twelve (12) months from the date of generation, for fraud investigation and security audit purposes.

Upon expiry of the applicable retention period, phgolden will securely delete or anonymize personal data in accordance with industry best practices for data destruction.

phgolden implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss:

• Encryption in transit: All data transmitted between your device and phgolden's servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Encryption at rest: Personal data and financial records stored in phgolden's databases are encrypted using AES-256 encryption.
• Access controls: Strict role-based access controls limit employee access to personal data to only what is required for their specific function. All access to player data is logged and audited.
• Infrastructure security: phgolden's platform infrastructure is hosted in data centers with physical security controls, regular penetration testing, and continuous intrusion monitoring.
• Password security: Player passwords are stored using bcrypt hashing with individual salts. phgolden never stores passwords in readable form.
• Two-factor authentication: phgolden offers and strongly recommends 2FA for all player accounts to significantly reduce the risk of unauthorized access.

Despite these measures, no information security system is entirely infallible. In the unlikely event of a data breach that poses a risk to your rights and freedoms, phgolden will notify affected data subjects and the National Privacy Commission in accordance with the timeframes required under RA 10173 and NPC Circular 16-03.

phgolden's services are strictly intended for individuals who are 21 years of age or older. phgolden does not knowingly collect or process personal data from individuals under the age of 21.

If phgolden becomes aware that personal data has been submitted by or on behalf of an individual under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any gaming activity and associated winnings generated by an underage user will be voided.

If you are a parent or guardian and believe that a minor in your care has accessed phgolden and submitted personal data, please contact our Data Protection Officer at [email protected] immediately. We will respond to such notifications within 24 hours.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phgolden:

• Right to be Informed: The right to receive clear and accessible information about how phgolden processes your personal data, as provided in this Privacy Policy.
• Right of Access: The right to obtain a copy of the personal data phgolden holds about you, including information about its source, use, and any third parties to whom it has been disclosed.
• Right to Rectification: The right to request correction of personal data that is inaccurate, incomplete, outdated, false, or unlawfully obtained.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal retention requirements.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where the processing is based on legitimate interest.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Damages: The right to be indemnified for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phgolden has not handled your personal data in compliance with RA 10173.

To exercise any of these rights, submit a written request to phgolden's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will verify your identity before processing the request and will respond within fifteen (15) business days.

phgolden's primary data processing infrastructure is located within the Philippines. In certain circumstances, personal data may be processed or accessed by service providers operating outside the Philippines — for example, international game content providers or cloud infrastructure providers with data centers in other jurisdictions.

Where personal data is transferred outside the Philippines, phgolden ensures that adequate safeguards are in place to protect your privacy rights, including:

• Data processing agreements that require recipient parties to apply data protection standards equivalent to those required under RA 10173;
• Transfers only to jurisdictions that have been assessed as providing an adequate level of data protection;
• Standard contractual clauses incorporating data subject protections recognized under international data privacy frameworks.

You may request information about the specific safeguards applicable to any cross-border transfers of your personal data by contacting phgolden's Data Protection Officer.

phgolden will only send you promotional communications — including emails about bonuses, new games, special events, and platform updates — where you have explicitly opted in to receive such communications during registration or through your account settings.

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your phgolden account settings;
• Clicking the "unsubscribe" link included in any marketing email sent by phgolden; or
• Contacting phgolden support and requesting removal from all marketing lists.

Opt-out requests will be processed within 48 hours. Withdrawing marketing consent does not affect your ability to use phgolden's gaming services or receive essential account communications such as transaction confirmations, security alerts, and KYC notifications.

phgolden does not share your contact details with third-party marketers or permit third parties to use your phgolden contact information for their own marketing purposes.

phgolden may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players by email to their registered address and/or via a prominent notice on the phgolden Platform, at least seven (7) days before the changes take effect.

The current version of this Privacy Policy, together with its effective date, is always available at phgolden.biz/privacy-policy. Your continued use of the phgolden Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes.

If you disagree with any material change to this Privacy Policy, you have the right to close your phgolden account and withdraw your available balance before the change takes effect. Contact phgolden support to initiate account closure.

phgolden welcomes questions, feedback, and concerns about its data privacy practices. Please contact phgolden's Data Protection Officer through the following channels:

• Email: [email protected] (subject line: "Data Privacy Request" or "Privacy Complaint")
• Live Chat: Available 24/7 from within your phgolden account dashboard
• Response Commitment: Acknowledgement within 72 hours; full substantive response within 15 business days

If phgolden's response to your privacy concern is not satisfactory, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the regulatory authority responsible for enforcing RA 10173 and has jurisdiction over complaints against Philippine-registered personal information controllers.