This Privacy Policy ("Policy") describes how phpak ("phpak," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," or "Data Subject") who access or use the phpak online gaming platform at phpak.vip and all associated services. This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as well as guidelines issued by the National Privacy Commission (NPC) of the Philippines.
By registering an account, accessing the phpak platform, or providing personal information to phpak in any form, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not register an account or provide any personal information to phpak.
phpak operates an online gaming platform serving adult players in the Republic of the Philippines. This Policy applies to all personal information processed by phpak in connection with the delivery of its platform services, including but not limited to account registration, identity verification, game participation, financial transactions, customer support interactions, and marketing communications.
This Policy applies to:
This Policy does not apply to the data practices of third-party service providers, payment processors, or game content providers that maintain their own privacy policies. Where phpak integrates with such third parties, it does so pursuant to data processing agreements that require adequate data protection standards.
Under the Data Privacy Act of 2012, phpak processes personal data on the following lawful bases:
Where phpak relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. Consent withdrawals can be submitted to phpak's Data Protection Officer using the contact details in Section 14.
phpak collects personal data from you directly (when you provide it), automatically (through your use of the platform), and from third parties (such as payment processors and identity verification services). The categories of data collected are described below.
| Category | Data Elements | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, government-issued ID type and number, nationality | RegistrationKYC |
| Contact Data | Email address, mobile number, residential address (city/province), region | Registration |
| Financial Data | GCash account reference, Maya account reference, BPI/BDO account name, transaction history, deposit and withdrawal records | TransactionsPayment processor |
| Gaming Data | Game session logs, bet amounts, win/loss records, game type preferences, session durations, bonus usage history | Automated |
| Technical Data | IP address, device type and OS, browser type and version, screen resolution, connection type, geographic region derived from IP | Automated |
| Communications Data | Support chat transcripts, email correspondence, complaint records, survey responses | Direct |
| Marketing Preferences | Email opt-in/out status, notification preferences, preferred communication language | Account settings |
Sensitive Personal Information: phpak does not intentionally collect sensitive personal information as defined under RA 10173 (including race, religion, health data, or political affiliation) except where strictly required for regulatory compliance (e.g., medical documentation supporting a responsible gaming self-exclusion request). Where such data must be processed, it is handled with heightened safeguards and retained only for as long as strictly necessary.
phpak uses the personal data it collects for the following defined purposes:
To create and maintain your phpak account; to verify your identity and age eligibility (21+ as required by PAGCOR regulations); to process deposits and withdrawals via GCash, Maya, BPI/BDO, and other supported payment channels; to deliver game content and record game outcomes; and to provide customer support services.
To fulfill phpak's obligations under the Anti-Money Laundering Act (Republic Act No. 9160, as amended), PAGCOR licensing conditions, the Data Privacy Act, and any applicable tax reporting requirements. This includes maintaining transaction records, filing suspicious transaction reports (STRs) where legally required, and cooperating with lawful requests from competent Philippine authorities.
To detect, investigate, and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in phpak's Terms and Conditions. phpak may use automated decision-making tools for fraud screening, subject to your right to request human review of any automated decision that significantly affects you.
To monitor gaming patterns for indicators of problem gambling; to enforce self-exclusion requests and deposit limits set by Players; to send responsible gaming alerts and session time notifications; and to refer Players to support resources upon request. Gaming data processed for responsible gaming purposes is treated with the utmost sensitivity and is not used for marketing profiling.
Where you have provided consent, phpak may use your data to send promotional emails, push notifications, and offers relevant to your gaming preferences. You may opt out of marketing communications at any time by adjusting your notification settings within your phpak account or by contacting phpak support. Opting out of marketing does not affect your ability to use the platform or receive essential service communications.
phpak uses aggregated and anonymized usage data to analyze platform performance, improve game selection, optimize the user interface, and develop new features. Anonymized data used for analytics cannot be re-linked to individual Players and falls outside the scope of this Policy.
phpak uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, maintain your session authentication, and improve your experience. Cookies are small data files stored on your device when you visit the phpak website.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your phpak account and accessing platform features.
phpak does not sell, rent, or trade your personal data to unaffiliated third parties for their independent marketing or commercial purposes. Personal data is shared only in the following circumstances:
In all cases of data sharing, phpak requires receiving parties to maintain confidentiality and to process shared data only for the specified purpose and in compliance with applicable Philippine data protection law.
phpak retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account and Identity Data | Duration of active account + 5 years post-closure | AMLA, PAGCOR, DPA |
| Financial Transaction Records | 5 years from transaction date (minimum) | AMLA, Tax Code |
| KYC Verification Documents | 5 years post account closure | AMLA, PAGCOR |
| Game Session Logs | 2 years from session date | Legitimate interests, dispute resolution |
| Customer Support Records | 3 years from resolution date | Legitimate interests |
| Marketing Preferences | Until opt-out or account closure | Consent |
| Self-Exclusion Records | Indefinitely (to prevent re-registration) | Legal obligation, responsible gaming |
Upon the expiry of the applicable retention period, phpak will securely delete or anonymize the relevant personal data. Where complete deletion is technically infeasible (e.g., data stored in backup systems), phpak will isolate the data and restrict it from further processing until deletion is technically possible.
phpak implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:
While phpak employs strong security measures, no online platform can guarantee absolute security. You are also responsible for keeping your phpak login credentials secure and for notifying phpak immediately if you suspect unauthorized access to your account.
As a Data Subject under the Data Privacy Act of 2012, you are entitled to the following rights with respect to your personal data processed by phpak. These rights may be exercised by submitting a written request to phpak's Data Protection Officer (DPO) using the contact details in Section 14.
You have the right to know what personal data phpak collects about you and how it is used, stored, and shared — as set out in this Policy.
You have the right to request a copy of the personal data phpak holds about you, along with information about how it is being processed.
You have the right to request correction of inaccurate or incomplete personal data phpak holds about you without undue delay.
You have the right to request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to phpak's legal retention obligations.
You have the right to object to phpak's processing of your data for marketing purposes or where phpak relies on legitimate interests as its legal basis, subject to applicable limitations.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller where technically feasible.
You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, and to request human review of any such decision.
You have the right to lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe phpak has violated your data privacy rights.
phpak will respond to all verified rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case phpak will notify you of the extension and the reason for it within the initial 30-day period.
phpak's platform is strictly for persons aged 21 years and above. phpak does not knowingly collect or process personal data from individuals under the age of 21. Registration by a person under 21 is a violation of phpak's Terms and Conditions and is prohibited under applicable PAGCOR regulations.
If phpak becomes aware that it has collected personal data from a person under the age of 21, it will immediately suspend the associated account, delete the personal data as soon as technically feasible (subject to any mandatory legal holds), and refund any deposits made in accordance with phpak's minor protection protocol.
If you are a parent or guardian and believe that your child or a person in your care has registered on the phpak platform, please contact phpak's Data Protection Officer immediately using the contact details in Section 14. We will treat such reports as a priority matter.
phpak's primary data processing infrastructure is located within or accessible from the Republic of the Philippines. However, certain service providers engaged by phpak — including international game content providers and globally distributed cloud infrastructure providers — may process data in locations outside the Philippines.
Where personal data is transferred outside the Philippines, phpak ensures that such transfers are governed by appropriate safeguards, which may include:
phpak does not transfer personal data to jurisdictions that do not provide adequate data protection standards without implementing appropriate contractual or technical safeguards.
The phpak platform is a self-contained environment and does not intentionally include outbound links to third-party websites for general browsing purposes. However, some platform interfaces may display the names or logos of payment partners and game providers for informational or branding purposes.
phpak is not responsible for the privacy practices, data handling standards, or content of any third-party platforms or services. Where you independently navigate to a third-party website — including the websites of payment providers such as GCash or Maya — the privacy policy of that third party governs the data processing that occurs on their platform. phpak encourages you to review the privacy policies of all third-party services you use in connection with your gaming activities.
phpak may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable Philippine law, or NPC guidelines. The "Last Updated" date at the top of this page indicates when the most recent revision was made.
Where changes are material — meaning they substantively affect how phpak processes your personal data or your rights as a Data Subject — phpak will notify registered Players via email to their registered address and by displaying a prominent notice on the phpak platform for a minimum of thirty (30) days prior to the effective date of the change.
Your continued use of the phpak platform following the effective date of any updated Policy constitutes your acknowledgment of the changes. If you do not agree to a material change, you may request account closure as described in phpak's Terms and Conditions, and phpak will retain your data only as required by applicable law.
phpak has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Policy. All data rights requests, privacy inquiries, consent withdrawals, and data breach notifications should be directed to the DPO as follows:
When submitting a data rights request, please include your full name, the email address associated with your phpak account, and a clear description of the right you wish to exercise or the concern you wish to raise. phpak may ask for additional information to verify your identity before processing the request — this is to protect your data from unauthorized access by third parties claiming to act on your behalf.
Six concrete commitments that put your data protection rights at the center of everything phpak does.
Every connection between your device and the phpak platform is protected by TLS 1.2+ encryption. Your login credentials, payment data, and personal information travel securely — visible only to you and phpak.
phpak does not sell, rent, or trade your personal data to any unaffiliated third party for their marketing or commercial purposes. Your information is used only to operate and improve the phpak platform.
phpak's data handling practices are designed in full compliance with the Data Privacy Act of 2012 and NPC guidelines. A designated Data Protection Officer oversees ongoing compliance across all data processing activities.
Access, rectify, erase, or port your personal data — your RA 10173 rights are always available. Submit a request to phpak's DPO and receive a response within 30 days, no bureaucratic runaround.
phpak doesn't hold your data indefinitely. Clear retention schedules mean your information is deleted or anonymized once it's no longer required for the purpose it was collected — and not a day later.
Marketing communications from phpak require your consent and can be withdrawn at any time via account settings or by contacting support. Opting out of marketing never affects your access to games or services.
Your privacy matters to us as much as your entertainment does. phpak is built on transparency, fair play, and genuine respect for every Philippine player's data rights. Ready to get started?