phmapalaf Privacy Policy

1. Introduction

phmapalaf is the Philippines' premier online gaming platform, serving Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and beyond. As a platform that handles real-money transactions and personal account information, phmapalaf takes data privacy with the utmost seriousness. We are committed to protecting your personal information in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and all related issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected through the phmapalaf website, mobile site, customer support channels, and any other touchpoints through which you interact with phmapalaf. It does not apply to third-party websites or services that may be linked from our platform — those are governed by their own privacy policies.

2. Personal Data We Collect

2.1 Registration & Identity Data

When you create a phmapalaf account, we collect the following information:

• Full legal name as it appears on your government-issued ID;
• Date of birth (to verify you are 21 years of age or older);
• Email address and mobile number;
• Residential address (city, province, region);
• Government-issued identification documents (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID) submitted for KYC verification.

2.2 Financial Data

To process deposits and withdrawals in Philippine Peso, phmapalaf collects payment-related information including your GCash or PayMaya mobile number, bank account details (for BPI, BDO, or Metrobank transfers), and card information (for Visa or Mastercard transactions). phmapalaf does not store full card numbers — card data is handled by our PCI-DSS compliant payment processors.

2.3 Gaming & Transaction Data

phmapalaf automatically records your gaming activity on the platform, including game history, bet amounts, win/loss records, bonus usage, and transaction logs. This data is required for regulatory compliance, dispute resolution, and responsible gaming monitoring.

2.4 Technical & Usage Data

When you access phmapalaf, we automatically collect certain technical information, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, session duration, and navigation patterns;
• Referring URLs and search terms used to find phmapalaf.

2.5 Communications Data

If you contact phmapalaf's customer support team via email, live chat, or any other channel, we retain records of those communications, including the content of your messages and our responses, for quality assurance and dispute resolution purposes.

3. How We Use Your Personal Data

phmapalaf uses your personal data for the following purposes:

• Account management: To create, verify, and maintain your phmapalaf account;
• Identity verification (KYC): To comply with PAGCOR regulations and anti-money laundering requirements under Philippine law;
• Payment processing: To process deposits and withdrawals in Philippine Peso via your chosen payment method;
• Gaming services: To provide access to our games, record your gaming history, and calculate winnings;
• Responsible gaming: To monitor gaming patterns and enforce responsible gaming tools such as deposit limits and self-exclusion;
• Customer support: To respond to your inquiries, complaints, and requests;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, cheating, and unauthorized access;
• Legal compliance: To comply with applicable Philippine laws, PAGCOR directives, and court orders;
• Platform improvement: To analyze usage patterns and improve the phmapalaf platform experience;
• Marketing communications: To send you promotional offers and updates about phmapalaf, where you have consented to receive such communications.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, phmapalaf processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the phmapalaf Terms & Conditions, including account management and payment processing;
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent.

5. Data Sharing & Disclosure

phmapalaf does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We may share your data with the following categories of recipients only to the extent necessary:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard payment networks, solely to process your transactions;
• KYC and identity verification providers: Third-party services that assist phmapalaf in verifying your identity and age;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where required by law;
• Law enforcement: Philippine law enforcement agencies, where required by a valid court order or legal process;
• IT and infrastructure providers: Cloud hosting and technology service providers who process data on our behalf under strict data processing agreements;
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties with whom phmapalaf shares personal data are required to handle that data in accordance with applicable Philippine privacy laws and phmapalaf's data protection standards.

6. Data Retention

phmapalaf retains your personal data for as long as your account is active and for a period thereafter as required by applicable law. Specifically:

• Account and KYC records are retained for a minimum of five (5) years after account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Transaction records are retained for a minimum of five (5) years;
• Customer support communications are retained for three (3) years;
• Marketing consent records are retained until you withdraw consent or for three (3) years after your last interaction with phmapalaf, whichever is earlier.

After the applicable retention period, your personal data will be securely deleted or anonymized in accordance with phmapalaf's data disposal procedures.

7. Cookies & Tracking Technologies

phmapalaf uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us remember your preferences, keep you logged in, and understand how you use phmapalaf.

We use the following types of cookies:

• Essential cookies: Required for the platform to function correctly, including session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and login details to improve your experience.
• Analytics cookies: Help us understand how players use phmapalaf so we can improve our services. Data collected is aggregated and anonymized.
• Marketing cookies: Used to deliver relevant promotional content about phmapalaf. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the phmapalaf platform.

8. Data Security

phmapalaf implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and phmapalaf servers;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Strict access controls ensuring that only authorized phmapalaf personnel can access personal data, on a need-to-know basis;
• Regular security audits and vulnerability assessments of our platform infrastructure;
• Two-factor authentication options for player accounts to prevent unauthorized access.

While phmapalaf takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your phmapalaf account credentials confidential and for notifying us immediately if you suspect any unauthorized access to your account.

9. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by phmapalaf:

• Right to be informed: You have the right to know what personal data phmapalaf collects and how it is used, as described in this Policy;
• Right of access: You may request a copy of the personal data phmapalaf holds about you;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to phmapalaf's legal retention obligations;
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability: You may request a copy of your personal data in a structured, commonly used format;
• Right to lodge a complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe phmapalaf has violated your data privacy rights.

To exercise any of these rights, please contact phmapalaf's Data Protection Officer at the details provided in Section 12 below. We will respond to all verified requests within the timeframes required by Philippine law.

10. Children's Privacy

The phmapalaf platform is strictly intended for individuals who are 21 years of age or older, as required by Philippine law and PAGCOR regulations. phmapalaf does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has provided personal data to phmapalaf, we will immediately close the account and delete all associated personal data. If you believe a minor has registered on phmapalaf, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

phmapalaf reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When we make material changes, we will post the updated Policy on this page with a revised effective date and, where appropriate, notify registered players via email or in-platform notification.

Your continued use of the phmapalaf platform after the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how phmapalaf protects your personal information.

12. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or phmapalaf's data processing practices, please contact our Data Protection Officer (DPO):

phmapalaf Data Protection Officer
Email: [email protected]
Support Hours: 24 hours a day, 7 days a week

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

This Privacy Policy was last updated on January 1, 2026. phmapalaf is committed to protecting your personal data in accordance with the Data Privacy Act of 2012 and all applicable Philippine regulations.