phcast Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phcast ("phcast", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the phcast online gaming platform at https://phcast.app ("Platform"), including all associated services, features, and content.

phcast is committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This Policy is intended to give you a clear understanding of our data practices so that you can make informed decisions about your use of the Platform.

By registering an account on the Platform or otherwise using our services, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy should be read together with our Terms & Conditions, which govern your use of the Platform generally.

2. Who We Are

phcast is the operator of the online gaming platform accessible at https://phcast.app, providing casino games, slots, bingo, and related gaming services to eligible players in the Philippines. phcast operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of this Policy, phcast is the data controller responsible for your personal data. This means we determine the purposes and means by which your personal data is processed.

If you have any questions about how phcast handles your personal data, you can contact us at the details provided in Section 16 of this Policy.

3. Personal Data We Collect

phcast collects the following categories of personal data:

4. How We Collect Your Data

phcast collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Data collected automatically when you use the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for more detail on cookies.
• Third-party sources: Data received from identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and regulatory databases, where necessary to verify your identity or comply with our legal obligations.

5. Legal Basis for Processing

phcast processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you, including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including PAGCOR requirements, anti-money laundering (AML) obligations, and know-your-customer (KYC) requirements.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, where these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as sending you marketing communications. You may withdraw consent at any time by contacting phcast support or updating your account preferences.

6. How We Use Your Personal Data

phcast uses your personal data for the following purposes:

• To create, verify, and manage your phcast account.
• To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• To verify your identity and age (21+) in compliance with Philippine gaming regulations and PAGCOR requirements.
• To provide customer support in Filipino and English, including resolving account queries, payment issues, and game disputes.
• To monitor gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling and activating protective measures where appropriate.
• To detect, investigate, and prevent fraud, money laundering, and other unlawful activity.
• To send you transactional communications, including account notifications, payment confirmations, and security alerts.
• To send you marketing communications about phcast promotions, bonuses, and new games, where you have consented to receive such communications.
• To analyse Platform usage and improve the phcast user experience for Filipino players.
• To comply with our legal and regulatory obligations, including reporting requirements under applicable Philippine law.

7. Data Sharing & Disclosure

phcast does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers used to verify your identity and comply with regulatory requirements.
• Regulatory authorities: PAGCOR and other Philippine government agencies, where disclosure is required by law or regulation.
• Law enforcement: Philippine law enforcement agencies, courts, or other public authorities, where disclosure is required by a valid legal order or where necessary to prevent or investigate unlawful activity.
• IT and platform service providers: Cloud hosting, data storage, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for the conduct of our business and subject to professional confidentiality obligations.

All third parties with whom phcast shares personal data are required to handle that data in accordance with applicable privacy laws and our data protection standards. phcast remains responsible for ensuring that any third-party processing of your data is conducted lawfully and securely.

8. Cookies & Tracking Technologies

phcast uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in to your phcast account. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Analytics cookies: Used to collect anonymised data about how players use the Platform, including which pages are visited most frequently and how long sessions last. This data helps us improve the Platform for Filipino players.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns and suspicious account behaviour.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to stay logged in to your phcast account. phcast does not use cookies to track your activity on third-party websites.

9. Data Retention

phcast retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR requirements and applicable Philippine anti-money laundering regulations.
• Transaction data: Retained for a minimum of five (5) years from the date of the transaction.
• Identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Support communications: Retained for a minimum of two (2) years from the date of the communication.
• Technical and usage data: Retained for up to twelve (12) months, after which it is anonymised or deleted.

Where personal data is no longer required for any lawful purpose, phcast will securely delete or anonymise it in accordance with our data destruction procedures.

10. Data Security

phcast implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the phcast Platform.
• AES-256 encryption for sensitive personal data stored on our systems.
• Multi-factor authentication requirements for phcast staff accessing personal data systems.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a documented need to access it.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Incident response procedures for detecting, reporting, and responding to personal data breaches.

While phcast takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, phcast will notify you and the relevant authorities in accordance with applicable law.

You are responsible for maintaining the security of your phcast account credentials. phcast will never ask for your password via email, live chat, or telephone. If you suspect that your account has been compromised, contact phcast support immediately.

11. Your Privacy Rights

As a phcast player, you have the following rights in relation to your personal data, subject to applicable legal limitations:

• Right of access: You have the right to request a copy of the personal data phcast holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data be corrected or updated.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.

To exercise any of these rights, please contact phcast support using the details in Section 16. phcast will respond to all valid requests within thirty (30) days. We may need to verify your identity before processing your request.

12. Children and Minors

The phcast Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. phcast does not knowingly collect personal data from persons under the age of 21.

If phcast becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the phcast Platform, please contact us immediately using the details in Section 16.

phcast employs age verification procedures during account registration to prevent access by minors. These procedures include the collection and verification of government-issued identity documents confirming date of birth.

13. International Data Transfers

phcast primarily processes and stores personal data within the Philippines. In some cases, personal data may be transferred to and processed in countries outside the Philippines, for example where we use cloud infrastructure or third-party service providers located in other jurisdictions.

Where personal data is transferred outside the Philippines, phcast ensures that appropriate safeguards are in place to protect your data, including contractual protections with the receiving party that require them to handle your data to a standard equivalent to that required under Philippine law.

By using the phcast Platform, you acknowledge and consent to the transfer of your personal data as described in this section.

14. Third-Party Links

The phcast Platform may contain links to third-party websites or services. This Policy applies only to the phcast Platform and does not cover the privacy practices of any third-party websites. phcast is not responsible for the content or privacy practices of any third-party sites, and we encourage you to review the privacy policies of any third-party sites you visit.

15. Amendments to This Policy

phcast reserves the right to update or amend this Privacy Policy at any time. Where changes are material, phcast will provide reasonable notice by posting a prominent notice on the Platform or by sending an email to the address registered on your account prior to the changes taking effect.

The "Effective Date" at the top of this page indicates when the current version of this Policy was last updated. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how phcast protects your personal data.

16. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way phcast handles your personal data, please contact our support team:

• Email: [email protected]
• Live Chat: Available 24/7 via the phcast Platform
• Languages: Filipino and English

phcast aims to respond to all privacy-related enquiries within thirty (30) days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), the regulatory body responsible for enforcing the Data Privacy Act of 2012 (Republic Act No. 10173).

phcast takes all privacy complaints seriously and will work with you in good faith to resolve any concerns about the handling of your personal data.