phpera Casino – Privacy Policy

This Privacy Policy ("Policy") applies to all personal information collected, processed, and stored by phpera Casino ("phpera", "we", "us", "our") in connection with the operation of the website at https://phpera.vip and all related services (collectively, the "Platform"). It should be read alongside our Terms & Conditions, which govern your use of the Platform.

phpera is committed to processing personal data in a manner consistent with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC) of the Philippines.

1. Who We Are (Data Controller)

phpera Casino operates the Platform and acts as the data controller for all personal information collected through it. As data controller, phpera determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is carried out lawfully and transparently.

Our designated Data Protection Officer (DPO) can be reached at [email protected] (plain text only — not a clickable link). All data privacy-related inquiries, requests, and complaints should be directed to the DPO.

2. Personal Data We Collect

Depending on how you interact with the phpera Platform, we may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and a copy of your government-issued Philippine ID (e.g., passport, UMID, SSS card, driver's license, PhilSys national ID) submitted during KYC verification.
• Contact Data: Email address, Philippine mobile number, and correspondence records with phpera support.
• Financial Data: GCash account reference, Maya account reference, bank account details (for bank transfer transactions), deposit history, withdrawal history, and transaction records.
• Account Data: Username, encrypted password hash, account creation date, login history, session records, and account preferences.
• Gaming Activity Data: Bet history, game session logs, wager amounts, win/loss records, and bonus utilisation history.
• Technical Data: IP address, device type and model, operating system, browser type and version, time zone, and general geolocation data derived from IP.
• Usage Data: Pages visited, features accessed, time spent on Platform sections, clickstream data, and Platform navigation patterns.
• Communications Data: Records of live chat conversations, email correspondence, and any feedback or survey responses submitted to phpera.

3. How We Collect Your Data

phpera collects personal data through the following means:

• Direct submission: When you register an Account, complete KYC verification, make a deposit or withdrawal request, contact support, or participate in promotions.
• Automated technologies: Through cookies, web beacons, and server logs when you browse and interact with the Platform. See Section 6 for details.
• Third-party providers: From payment processors (e.g., GCash, Maya) for transaction verification; from identity verification services during KYC; and from game providers in relation to gaming activity on their software.

4. Why We Process Your Personal Data

phpera processes your personal data for the following purposes:

• To register and maintain your phpera Account;
• To verify your identity and age (21+) as required by applicable Philippine regulations;
• To process deposits, withdrawals, and other financial transactions;
• To provide customer support and respond to your inquiries;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To comply with our obligations under Philippine law, including Anti-Money Laundering Act (AMLA) reporting requirements;
• To personalise your gaming experience and recommend relevant games or promotions;
• To send transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts);
• To send promotional and marketing communications where you have given consent;
• To improve Platform performance, security, and user experience through analytics;
• To support responsible gaming initiatives, including identifying potential problem gambling behaviour.

5. Legal Bases for Processing

Under the Data Privacy Act of 2012 and its IRR, phpera relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted when registering — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with Philippine law, including KYC/AML obligations under RA 9160 (as amended) and age verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and analytics, where such interests are not overridden by your data subject rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. Consent may be withdrawn at any time.

6. Cookies and Tracking Technologies

phpera uses cookies and similar tracking technologies to operate the Platform. The types of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function — including session management, login persistence, and security tokens. These cannot be disabled without affecting Platform functionality.
• Performance cookies: Collect anonymised data about how players use the Platform (e.g., pages visited, error messages). Used to improve Platform performance.
• Functional cookies: Remember your preferences such as language settings and game lobby filters.
• Analytics cookies: Help phpera understand aggregate Platform usage patterns. Data is processed in anonymised or pseudonymised form.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. phpera does not use cookies to track your activity on other websites or to serve advertising on third-party platforms.

7. Data Sharing and Disclosure

phpera does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• Game providers: Pragmatic Play, Evolution, Jili, and other certified game providers, in relation to your gaming sessions on their platforms.
• Identity verification services: Third-party KYC providers engaged by phpera to verify player identity and age.
• Regulatory authorities: The Anti-Money Laundering Council (AMLC), National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law.
• IT and infrastructure providers: Cloud hosting, server management, and cybersecurity service providers acting as data processors under written agreements.

All third-party data processors engaged by phpera are required to handle personal data in accordance with the Data Privacy Act of 2012 and are bound by data processing agreements.

8. Data Retention

phpera retains personal data for as long as your Account is active and for such further period as may be required by applicable Philippine law. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following Account closure, in compliance with AMLA record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs are retained for a minimum of two (2) years.
• Support and communications records are retained for a minimum of two (2) years.

Upon expiry of the applicable retention period, phpera will securely delete or anonymise the relevant personal data.

9. Security Measures

phpera implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the phpera Platform;
• Encryption of sensitive data fields (including password hashes and financial identifiers) at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing;
• Two-factor authentication available for all player Accounts.

While phpera takes all reasonable steps to secure your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, phpera will notify the National Privacy Commission and affected players within 72 hours of becoming aware of the breach, as required under NPC Circular No. 16-03.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phpera:

• Right to be informed: The right to know what personal data phpera holds about you and how it is processed — as set out in this Policy.
• Right of access: The right to request a copy of the personal data phpera holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to phpera's legal retention obligations.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phpera has violated your data privacy rights.

To exercise any of these rights, contact phpera's Data Protection Officer at [email protected]. Requests will be acknowledged within 72 hours and actioned within 15 calendar days where practicable.

11. Children's Privacy

phpera Casino is strictly for persons aged 21 years and older. We do not knowingly collect personal data from persons under 21. If phpera discovers that personal data has been submitted by a person under 21, that data will be deleted and the associated Account closed immediately. If you have reason to believe that a person under 21 has registered on the Platform, please notify us at [email protected].

12. Changes to This Privacy Policy

phpera may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform functionality. Material changes will be communicated to registered players via email or Platform notification at least 7 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the current version. Continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the revised Policy.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or phpera's data processing practices, please contact our Data Protection Officer:

Email: [email protected] (plain text — not a clickable link)
Response target: within 72 hours on business days (Monday–Friday, Philippine time)

If you are not satisfied with phpera's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines — the relevant supervisory authority for data privacy matters in the Philippines.

This Policy should be read together with the phpera Terms & Conditions and the Responsible Gaming Policy.