phderm Privacy Policy

1. Introduction and Data Controller Information

phderm ("we", "us", "our", "Company") is a Philippine-registered online gaming operator licensed by the Philippine Amusement and Gaming Corporation (PAGCOR). We are the data controller responsible for your personal information collected through our website, mobile applications, and related services (collectively, the "Platform"). This Privacy Policy applies to all personal data we collect from Filipino players and users of our Platform.

As a data controller under the Philippine Data Privacy Act of 2012, we adhere to the principles of transparency, legitimate purpose, and proportionality in our data processing activities. Our data protection practices are supervised by our designated Data Protection Officer (DPO), who ensures compliance with Philippine data protection regulations and oversees all matters related to your privacy rights.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a phderm account or use our Platform, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (e.g., Philippine passport number, driver's license number, Unified Multi-Purpose ID number)
• Contact Information: Residential address, email address, Philippine mobile phone number
• Financial Information: Bank account details, e-wallet account information (GCash number, PayMaya account), payment card details, transaction history, deposit and withdrawal records
• Account Credentials: Username, password, security questions and answers, two-factor authentication settings
• Verification Documents: Copies of government-issued identification documents, utility bills or bank statements for address verification, proof of payment method ownership
• Communication Data: Messages sent through live chat, emails to customer support, call recordings with our support team, survey responses and feedback

2.2 Information Automatically Collected

When you access and use the phderm Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, device identifiers (IMEI, MAC address, advertising ID), screen resolution, language settings
• Connection Data: IP address, internet service provider, connection type, approximate geographic location based on IP address
• Usage Information: Pages visited, games played, time spent on the Platform, clickstream data, navigation patterns, bet amounts and frequencies, win/loss records
• Performance Data: Error logs, diagnostic data, application crashes, loading times, feature usage statistics

2.3 Information from Third Parties

We may receive additional information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations. These sources include:

• Payment processors and financial institutions (GCash, PayMaya, Philippine banks) providing transaction verification
• Credit reference agencies and fraud prevention services operating in the Philippines
• Identity verification service providers conducting Know Your Customer (KYC) checks
• PAGCOR and other regulatory bodies providing self-exclusion databases and responsible gaming information
• Marketing partners and affiliates who refer players to phderm (limited to referral codes and non-sensitive identifiers)

3. How We Use Your Information

phderm processes your personal information for the following legitimate business purposes, in compliance with the Philippine Data Privacy Act:

3.1 Account Management and Service Provision

• Creating and maintaining your phderm player account
• Verifying your identity and age (21+ requirement) to comply with Philippine gaming regulations
• Processing deposits, withdrawals, and other financial transactions through GCash, PayMaya, bank transfers, and other payment methods
• Providing access to games, promotions, bonuses, and other Platform features
• Managing your gaming sessions and maintaining accurate game records
• Responding to your inquiries, support requests, and complaints
• Sending transactional communications including account notifications, payment confirmations, and security alerts

3.2 Legal and Regulatory Compliance

• Complying with PAGCOR licensing requirements and Philippine Anti-Money Laundering Council (AMLC) regulations
• Conducting Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures as required by law
• Detecting, investigating, and preventing fraud, money laundering, terrorist financing, and other illegal activities
• Maintaining records required by Philippine gaming laws and financial regulations
• Cooperating with law enforcement, regulatory authorities, and legal proceedings when legally required
• Enforcing our Terms and Conditions and protecting our legal rights

3.3 Responsible Gaming and Player Protection

• Implementing responsible gaming tools including deposit limits, session timers, and self-exclusion
• Monitoring gaming patterns to identify potentially problematic gambling behavior
• Preventing underage gambling by verifying that all players are 21 years or older
• Providing support and resources for players who may have gambling-related concerns
• Maintaining self-exclusion databases in coordination with PAGCOR

3.4 Platform Improvement and Personalization

• Analyzing usage patterns to improve Platform functionality, game selection, and user experience
• Personalizing content, promotions, and game recommendations based on your preferences and gaming history
• Testing new features, conducting A/B testing, and optimizing Platform performance
• Conducting market research and understanding Filipino player preferences

3.5 Marketing and Communications

With your consent where required by law, we may use your information to:

• Send promotional emails about new games, bonuses, tournaments, and special offers
• Deliver personalized marketing messages via SMS to your Philippine mobile number
• Display targeted advertisements on third-party websites and social media platforms
• Invite you to participate in surveys, contests, and promotional campaigns

You may opt out of marketing communications at any time through your account settings or by following unsubscribe instructions in our emails.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you (Terms and Conditions) and provide gaming services
• Legal Obligation: Processing required to comply with Philippine laws, PAGCOR regulations, anti-money laundering requirements, and other legal obligations
• Consent: Processing based on your explicit consent, such as for marketing communications (which you may withdraw at any time)
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, security, Platform improvement, and customer service, provided these interests do not override your fundamental rights and freedoms

5. How We Share Your Information

phderm does not sell your personal information to third parties. We may share your information in the following limited circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to support our operations, including:

• Payment Processors: GCash, PayMaya, Philippine banks, and other payment service providers processing your deposits and withdrawals
• Identity Verification Services: KYC and anti-fraud service providers verifying your identity and age
• Cloud Hosting and IT Services: Companies providing server infrastructure, data storage, and technical support
• Customer Support Platforms: Live chat, email ticketing, and call center service providers
• Marketing and Analytics Partners: Email service providers, SMS gateways, analytics platforms, and advertising networks
• Game Providers: Third-party gaming software developers whose games are featured on phderm

All service providers are contractually required to maintain the confidentiality and security of your information and may only use it for the specific purposes we authorize.

5.2 Legal and Regulatory Authorities

We may disclose your information to:

• PAGCOR and other gaming regulatory authorities as required by our license
• Philippine Anti-Money Laundering Council (AMLC) for suspicious transaction reporting
• Law enforcement agencies and courts in response to valid legal requests
• Government agencies and tax authorities as required by Philippine law

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to this Privacy Policy and applicable Philippine data protection laws.

5.4 With Your Consent

We may share your information with other third parties when you have provided explicit consent for such sharing.

6. Data Security Measures

phderm employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmissions are protected using 256-bit SSL/TLS encryption. Payment information and passwords are encrypted using advanced cryptographic protocols.
• Access Controls: Role-based access restrictions ensure that only authorized personnel can access personal information on a need-to-know basis.
• Secure Infrastructure: Our servers are housed in secure data centers with physical access controls, 24/7 monitoring, and redundant systems.
• Authentication: Multi-factor authentication options are available to protect your account from unauthorized access.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scanning to identify and address potential weaknesses.
• Employee Training: All phderm employees undergo data protection and security training and are bound by confidentiality obligations.
• Incident Response: We maintain a comprehensive incident response plan to address security breaches and data protection incidents promptly.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately of any unauthorized access.

7. Data Retention

phderm retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

Data Category	Retention Period	Legal Basis
Account Information	Duration of account + 5 years	Philippine gaming regulations
Financial Transactions	7 years from transaction date	AMLC and tax requirements
KYC Documents	5 years after account closure	PAGCOR requirements
Gaming Records	5 years from game date	Gaming license obligations
Marketing Consent	Until consent is withdrawn	Data Privacy Act consent requirements
Self-Exclusion Records	Permanent retention	Responsible gaming obligations

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with our data retention policy and Philippine law.

8. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

8.1 Right to Information

You have the right to be informed about the collection and processing of your personal data, which we fulfill through this Privacy Policy.

8.2 Right to Access

You may request access to your personal information held by phderm. We will provide you with a copy of your data in a commonly used format within thirty (30) days of your request.

8.3 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request corrections. You can update most information directly through your account settings, or contact our Data Protection Officer for assistance.

8.4 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information in certain circumstances, including when it is no longer necessary for the purposes for which it was collected. However, we may retain certain information where required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

8.5 Right to Object

You may object to the processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications through your account settings or by following unsubscribe instructions.

8.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and transmit it to another data controller where technically feasible.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request" or through your account settings where applicable. We will respond to your request within the timeframes required by Philippine law (typically within thirty days). We may require verification of your identity before processing your request.

9. Cookies and Tracking Technologies

phderm uses cookies, web beacons, pixel tags, and similar technologies to enhance your experience on our Platform, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you on return visits.

Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function, including authentication, security, and basic navigation features. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use the Platform to help us improve functionality and user experience.
• Functional Cookies: Remember your preferences, language settings, and customizations to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure the effectiveness of marketing campaigns.

You can manage cookie preferences through your browser settings. However, disabling essential cookies may affect your ability to use certain Platform features. Most browsers allow you to refuse cookies or delete existing cookies. For more information, consult your browser's help documentation.

10. International Data Transfers

While phderm primarily serves Filipino players and operates within the Philippines, certain service providers may process data outside the Philippines. When we transfer personal information internationally, we ensure appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission
• Transfers to countries with adequate data protection laws as recognized by Philippine authorities
• Obtaining your explicit consent where required by law

All international transfers comply with the Philippine Data Privacy Act and National Privacy Commission regulations regarding cross-border data flows.

11. Children's Privacy

The phderm Platform is strictly prohibited for individuals under twenty-one (21) years of age. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from someone under 21, we will immediately delete that information and terminate the associated account. Parents or guardians who believe their child has provided personal information to phderm should contact us immediately at [email protected].

12. Changes to This Privacy Policy

phderm reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by email to your registered email address and/or by posting a prominent notice on the Platform. The "Last Updated" date at the top of this document indicates when changes were last made. Your continued use of the Platform after we post modifications constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact:

If you are not satisfied with our response, you have the right to file a complaint with the Philippine National Privacy Commission:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto Street, Pasay City, Metro Manila 1307
Email: [email protected]
Hotline: +63 2 8234-2228

14. Philippine Data Privacy Act Compliance Statement

This Privacy Policy is designed to comply with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission. phderm is committed to upholding the rights of data subjects and maintaining the highest standards of data protection as mandated by Philippine law. Our data processing activities adhere to the principles of transparency, legitimate purpose, and proportionality as set forth in the Data Privacy Act.