phhalik Privacy Policy

1.Introduction and Scope

phhalik ("phhalik," "we," "us," or "our") operates the online gaming platform accessible at https://phhalik.one (the "Platform"). This Privacy Policy ("Policy") describes the personal data phhalik collects from users and visitors ("you"), the purposes for which that data is used, how it is protected, and the rights you hold with respect to your personal information.

This Policy applies to all personal data collected through: (a) registration and use of your phhalik account; (b) deposits, withdrawals, and financial transactions conducted on the Platform; (c) interaction with customer support; (d) browsing the phhalik website; and (e) participation in phhalik promotions, bonuses, and loyalty programs.

2.Data Controller Information

phhalik acts as the personal information controller for all personal data collected through the Platform. As the controller, phhalik determines the purposes and means by which your personal data is processed. phhalik has appointed a Data Protection Officer (DPO) who oversees compliance with this Policy and applicable data privacy regulations. Contact details for the DPO are provided in Section 13 of this Policy.

3.Personal Data We Collect

3.1 Registration and Identity Data

When you create a phhalik account, we collect the following information:

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (to verify the 21+ age requirement under Philippine gaming regulations);
• Email address and mobile phone number;
• Residential address (city, province, postal code — Philippines);
• Username and encrypted password;
• Government-issued ID documents submitted during KYC verification (e.g., Philippine passport, driver's license, UMID, SSS ID, PhilHealth ID).

3.2 Financial and Transaction Data

To process deposits and withdrawals, phhalik collects:

• GCash account number or PayMaya account identifier;
• Bank account details (BPI, BDO, Metrobank) for bank transfer transactions;
• Cryptocurrency wallet addresses where applicable;
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers.

3.3 Gaming and Behavioral Data

phhalik collects data generated through your use of Platform games and services, including:

• Game session records (games played, bets placed, outcomes, session duration);
• Bonus and promotion redemption history;
• Login timestamps, session IP addresses, and device identifiers;
• Customer support interaction records including live chat transcripts.

3.4 Technical and Device Data

When you access the Platform, we automatically collect certain technical data:

• IP address and approximate geographic location (city/province level);
• Browser type, version, and operating system;
• Device type (mobile, tablet, desktop) and screen resolution;
• Referring URL and pages visited on the Platform;
• Cookie identifiers (see Section 9 for details).

4.How We Use Your Personal Data

phhalik uses personal data collected from players for the following purposes:

• Account management: Creating, maintaining, and securing your phhalik account;
• Service delivery: Processing deposits, withdrawals, and enabling gameplay across all phhalik products including Casino, Slots, Bingo, E-Sports, and Royal Fishing;
• Identity verification (KYC): Verifying your identity and age (21+) as required by Philippine gaming regulations;
• Anti-money laundering (AML): Monitoring transactions for suspicious activity and reporting to the AMLC where legally required;
• Responsible gaming: Monitoring gaming patterns to identify problem gambling indicators and enabling player protection tools;
• Fraud prevention: Detecting and preventing unauthorized account access, bonus abuse, and financial fraud;
• Customer support: Responding to inquiries, resolving disputes, and providing assistance via live chat;
• Marketing communications: Sending promotional offers, new game announcements, and bonus notifications — only where you have provided consent or where permitted by applicable law. You may opt out at any time;
• Legal compliance: Meeting obligations under Philippine law, including the Data Privacy Act, Anti-Money Laundering Act, and applicable gaming regulations;
• Platform improvement: Analyzing usage patterns to improve game selection, payment processes, and overall player experience.

5.Legal Basis for Processing

phhalik processes your personal data under the following legal bases as recognized by the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the phhalik Terms & Conditions, including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with Philippine law, including KYC, AML reporting, and age verification requirements;
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform optimization, where these interests are not overridden by your fundamental privacy rights;
• Consent: For marketing communications and optional data uses, processing based on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.Data Sharing and Third-Party Disclosure

phhalik does not sell your personal data to third parties. We may share personal data with the following categories of recipients only where necessary and with appropriate safeguards:

• Payment processors: GCash (Globe Fintech Innovations), PayMaya (Maya Bank), and Philippine commercial banks (BPI, BDO, Metrobank) — for the purpose of processing deposits and withdrawals;
• Game content providers: Certified gaming software providers (e.g., Pragmatic Play, PG Soft, Evolution) receive session data necessary to deliver and audit gameplay — these providers are contractually prohibited from using player data for independent purposes;
• Identity verification services: Third-party KYC service providers engaged to verify identity documents against Philippine government databases;
• Regulatory authorities: The Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or valid legal process;
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors operating under data processing agreements that restrict data use to phhalik's documented purposes.

7.Data Retention

phhalik retains personal data only for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations. Retention periods by data category:

• Account and identity data: Retained for the duration of your phhalik account and for a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming session data: Retained for three (3) years to support dispute resolution and responsible gaming monitoring;
• Customer support records: Retained for two (2) years from the date of each interaction;
• Technical and device data: Retained for up to twelve (12) months for security and fraud analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard methods.

8.Security of Your Personal Data

phhalik implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your browser and the phhalik Platform is protected by 256-bit TLS encryption — the same standard used by Philippine banking apps including GCash and BDO;
• Encryption at rest: Sensitive data fields including passwords (hashed with bcrypt), ID document images, and financial identifiers are encrypted in our database systems;
• Access controls: Internal access to personal data is restricted on a need-to-know basis. All internal access is logged and subject to regular audit;
• Two-factor authentication: phhalik accounts support 2FA via SMS OTP and authenticator apps — we strongly encourage all players to enable this feature;
• Penetration testing: Regular third-party security assessments are conducted to identify and remediate vulnerabilities in our systems;
• Data breach response: phhalik maintains a documented incident response plan. In the event of a personal data breach that poses risk to player rights, affected individuals and the NPC will be notified within 72 hours of discovery, as required by the Data Privacy Act.

9.Cookies and Tracking Technologies

The phhalik Platform uses cookies and similar tracking technologies to operate core platform functions, improve the player experience, and for analytics. Categories of cookies used:

• Strictly necessary cookies: Essential for platform operation including session management, login authentication, and security functions. These cannot be disabled without impairing basic functionality;
• Functional cookies: Remember your preferences such as language settings, game lobby filters, and login credentials where you select "Remember me";
• Analytics cookies: Collect anonymized data about how players navigate the Platform to help phhalik improve page performance and game discovery;
• Session security cookies: Bind your authenticated session to your specific device and IP fingerprint to prevent session hijacking.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access your phhalik account or play games, but may affect the personalization of your experience.

10.Your Rights Under Philippine Data Privacy Law

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights regarding your personal data held by phhalik:

• Right to be informed: To know what personal data phhalik collects, why, and how it is used — as described in this Policy;
• Right of access: To request a copy of the personal data phhalik holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data in your phhalik account;
• Right to erasure: To request deletion of your personal data where retention is no longer legally required or justified — subject to AML and gaming regulatory retention obligations;
• Right to data portability: To receive a copy of your personal data in a structured, machine-readable format;
• Right to object: To object to the processing of your personal data for direct marketing purposes at any time;
• Right to file a complaint: To lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact phhalik's Data Protection Officer via the details in Section 13. We will respond to verified requests within thirty (30) days.

11.Children's Privacy

The phhalik Platform is strictly intended for adults aged 21 years and above in accordance with Philippine gaming regulations. phhalik does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete such data and close the associated account. If you believe a minor has registered on the phhalik Platform, please contact us immediately via live chat or email.

12.Changes to This Privacy Policy

phhalik may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated to registered players via the email address on file at least seven (7) days before the amendment takes effect. The updated Policy will also be posted prominently on this page with a revised "Last Updated" date. We encourage you to review this Policy regularly. Continued use of the phhalik Platform after the effective date of any revised Policy constitutes your acceptance of the changes.

13.Contact Our Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your data privacy rights, or have concerns about how phhalik handles your personal data, please contact our Data Protection Officer:

• Live Chat: Available 24/7 from within your phhalik account — select "Privacy / Data Request" from the support menu
• Email (DPO): [email protected]
• General Support: [email protected]

We aim to acknowledge all data privacy requests within 5 business days and to resolve them within 30 calendar days. For complex requests, we may require additional time and will notify you accordingly.