phshy Casino Privacy Policy

1 Who We Are

phshy Casino ("phshy," "we," "us," or "our") operates the online gaming platform accessible at phshy.net, providing casino games, slots, bingo, and related entertainment services to players in the Philippines. phshy acts as the Personal Information Controller in respect of the personal data collected through the phshy platform, as defined under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations.

This Privacy Policy applies to all personal data collected from users who visit, register on, or interact with the phshy website and its associated services. By using phshy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Data We Collect

phshy Casino collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

phshy does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect data relating to your political opinions, religious beliefs, or health information unless specifically required by applicable law.

3 How We Use Your Data

phshy Casino processes your personal data for the following purposes:

• Account Management: To create, maintain, and manage your phshy player account, including verifying your identity and age (21+ requirement) through our KYC process;
• Service Delivery: To provide access to phshy's game library, process deposits and withdrawals via GCash, Maya, and Philippine bank transfers, and deliver customer support;
• Regulatory Compliance: To comply with anti-money laundering (AML) obligations, PAGCOR-related reporting requirements, and other applicable Philippine laws and regulations;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other prohibited conduct on the phshy platform;
• Responsible Gaming: To monitor gaming patterns and identify players who may be at risk of gambling-related harm, and to administer self-exclusion and deposit limit tools;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where permitted by applicable law. You may opt out at any time;
• Platform Improvement: To analyze usage patterns, improve the phshy user experience, and develop new features and services;
• Legal Claims: To establish, exercise, or defend legal claims arising in connection with your use of the phshy platform.

4 Legal Basis for Processing

phshy Casino processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Consent: Where you have given phshy your explicit consent to process your personal data for a specific purpose, such as receiving marketing communications;
• Contractual Necessity: Where processing is necessary to perform the contract between you and phshy (i.e., the Terms and Conditions), including account creation, game access, and payment processing;
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to phshy, including AML reporting, KYC verification, and regulatory disclosures;
• Legitimate Interests: Where processing is necessary for phshy's legitimate interests, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and freedoms.

5 Data Sharing & Disclosure

phshy Casino does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist phshy in verifying player identities and screening for financial crime risks;
• Game Providers: Licensed game software providers whose games are hosted on the phshy platform may receive limited technical data necessary to deliver their games;
• Regulatory Authorities: Philippine government agencies, including but not limited to PAGCOR and the National Privacy Commission (NPC), where disclosure is required by law or regulatory order;
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by phshy in connection with legal proceedings or compliance obligations;
• Business Transfers: In the event of a merger, acquisition, or sale of phshy's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

6 Cookies & Tracking Technologies

phshy Casino uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your session, and analyze site usage. The types of cookies used by phshy include:

• Essential Cookies: Strictly necessary for the phshy platform to function. These cookies enable core features such as account login, session management, and security. They cannot be disabled without affecting platform functionality;
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the phshy website, helping us identify areas for improvement;
• Preference Cookies: Store your platform preferences, such as language settings and display options, so you don't have to re-enter them on each visit;
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phshy platform. phshy does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

7 Data Retention

phshy Casino retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. Specific retention periods include:

• Account Data: Retained for the duration of your active phshy account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of the transaction;
• KYC Documents: Identity verification documents are retained for the period required by applicable Philippine law and regulatory guidance;
• Gaming History: Retained for a minimum of three (3) years to support dispute resolution and responsible gaming monitoring;
• Marketing Data: Retained until you withdraw your consent or opt out of marketing communications, after which it will be deleted or anonymized within a reasonable period.

When personal data is no longer required, phshy will securely delete or anonymize it in accordance with our data disposal procedures.

8 Data Security

phshy Casino implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the phshy platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Access controls limiting phshy staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of phshy systems;
• Multi-factor authentication options for player accounts;
• Incident response procedures to detect, contain, and notify affected players in the event of a data breach, in accordance with NPC notification requirements.

9 Your Rights Under Philippine Law

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phshy Casino:

• Right to Be Informed: You have the right to be informed of how phshy collects, uses, and processes your personal data, as set out in this Privacy Policy;
• Right of Access: You may request a copy of the personal data phshy holds about you, along with information about how it is being processed;
• Right to Rectification: You may request that phshy correct any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phshy's legal retention obligations;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on phshy's legitimate interests;
• Right to Data Portability: You may request that phshy provide your personal data in a structured, commonly used, machine-readable format;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phshy has violated your data privacy rights.

To exercise any of these rights, please contact phshy's Data Protection Officer using the details provided in Section 13. phshy will respond to all verified requests within the timeframes prescribed by applicable law. We may need to verify your identity before processing your request.

10 Children's Privacy

If phshy becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the phshy platform, please contact us immediately using the details in Section 13.

phshy employs age verification measures during the registration process and may request documentary proof of age at any time. Providing false information about your age to circumvent these controls is a serious breach of phshy's Terms and Conditions.

11 Cross-Border Data Transfers

phshy Casino primarily processes and stores personal data within the Philippines. In certain circumstances, your personal data may be transferred to, or accessed by, service providers or partners located outside the Philippines — for example, where phshy uses internationally hosted cloud infrastructure or engages game providers based in other jurisdictions.

Where such cross-border transfers occur, phshy ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines. phshy will not transfer your personal data to a foreign jurisdiction that does not provide an adequate level of data protection without your consent or without implementing appropriate protective measures.

12 Updates to This Privacy Policy

phshy Casino may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, phshy will notify registered players by posting a prominent notice on the platform and, where practicable, by sending a notification to your registered email address or mobile number.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how phshy protects your personal data. Your continued use of the phshy platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or phshy's handling of your personal data, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission if you believe phshy has not handled your personal data in accordance with the Data Privacy Act of 2012.