phpiso Privacy Policy

1. Who We Are

phpiso operates the online gaming platform accessible at phpiso.best. We are the data controller responsible for your personal information collected through our website, mobile platform, and all associated services. When this phpiso Privacy Policy refers to "phpiso," "we," "us," or "our," it means the entity operating this platform.

We are committed to handling your data with full respect for your privacy rights as a Filipino consumer, in compliance with Republic Act 10173, also known as the Data Privacy Act of 2012, and the implementing rules and regulations set by the National Privacy Commission of the Philippines.

2. Data We Collect

phpiso collects personal information from you in the following ways:

Information You Provide Directly

• Registration data: Full name, date of birth, gender, nationality, residential address, mobile number, and email address.
• Identity verification documents: Government-issued ID (e.g., PhilSys national ID, passport, driver's licence, SSS/GSIS ID, or PRC ID) and proof of billing or residence.
• Payment information: GCash mobile number, Maya account details, bank account details for BDO, BPI, or UnionBank transfers, or card details for Visa/Mastercard transactions. We do not store full card numbers — these are processed by certified payment gateways.
• Account preferences: Communication preferences, language settings, and responsible gaming limits you set voluntarily.

Information Collected Automatically

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent on the platform, and click-stream data
• Game session data, bet amounts, and transaction history
• Login timestamps and geographic location data (country/region level)

Information from Third Parties

We may receive data from identity verification service providers, payment processors, and fraud prevention agencies to validate your identity and protect the platform from misuse.

3. How We Use Your Personal Data

phpiso uses the data we collect for the following specific purposes, each tied to a legitimate reason:

• Account creation and management: To set up and maintain your phpiso player account.
• KYC and identity verification: To verify your age, identity, and eligibility to use the platform in compliance with Philippine gaming regulations.
• Payment processing: To facilitate deposits and withdrawals through your chosen payment method, including GCash, Maya, bank transfers, and cards.
• Customer support: To respond to your queries, resolve disputes, and provide assistance when you contact us.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other illegal activity.
• Platform improvement: To analyse how players use phpiso and improve our games, features, and overall user experience.
• Promotions and marketing: To send you information about phpiso bonuses, offers, and updates — only if you have opted in to receive marketing communications.
• Regulatory compliance: To meet our obligations under Philippine gaming laws, anti-money laundering regulations, and data protection laws.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, phpiso processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered player, including account management and payment processing.
• Legal obligation: Processing required to comply with Philippine laws, including anti-money laundering requirements and gaming regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications, where you have given us clear, specific consent that you can withdraw at any time.

5. Data Sharing and Disclosure

phpiso does not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• Payment service providers: GCash, Maya, InstaPay/PESONet processors, and card payment gateways require transaction data to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who assist in verifying your identity as required by law.
• Regulatory authorities: Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), and law enforcement agencies when legally required.
• Technology and hosting providers: Cloud infrastructure and IT service providers who process data on our behalf under strict data processing agreements.
• Corporate transactions: In the event of a merger, acquisition, or restructuring, your data may be transferred to the new entity — you will be notified of any such change.

All third parties who process data on phpiso's behalf are required to maintain appropriate security measures and are prohibited from using your data for any purpose other than those specified in their agreement with us.

6. Cookies and Tracking Technologies

phpiso uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse site performance. The types of cookies we use include:

• Essential cookies: Required for the website to function — login sessions, security tokens, and game state preservation. These cannot be disabled without breaking core functionality.
• Analytics cookies: Help us understand how players navigate the platform so we can improve it. Data collected is aggregated and anonymised.
• Preference cookies: Remember your settings such as language preference, display options, and responsible gaming limits.
• Marketing cookies: Used only if you have consented to receive targeted communications from phpiso. You can opt out at any time through your account settings.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality.

7. Data Retention

phpiso retains your personal data for as long as your account is active and for a period afterward as required by law. Specific retention periods include:

• Account and identity records: 5 years after account closure, as required by Philippine AML regulations
• Transaction records: 5 years from the date of each transaction
• Customer support communications: 2 years from the date of the last interaction
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter

Once retention periods expire, your data is securely deleted or anonymised so it can no longer be linked back to you.

8. Security Measures

phpiso implements a range of technical and organisational measures to protect your personal data, including:

• 256-bit TLS/SSL encryption for all data in transit
• AES-256 encryption for sensitive data stored at rest
• Multi-factor authentication options for player accounts
• Regular penetration testing and vulnerability assessments
• Role-based access controls limiting staff access to data on a need-to-know basis
• Continuous monitoring for suspicious activity and data breach indicators

While we take all reasonable steps to protect your data, no internet platform can guarantee 100% security. We encourage you to use a strong, unique password for your phpiso account and to enable two-factor authentication where available.

9. Exercising Your Privacy Rights

As a data subject under Philippine law, you have the right to access, correct, delete, restrict processing of, and port your personal data. To exercise any of these rights, contact our Data Protection Officer at the details in Section 13. We will respond to all verified requests within 30 calendar days. We may ask for identity verification before processing your request to ensure your data is not shared with unauthorised parties.

10. Children's Privacy

phpiso is strictly an adults-only platform. We do not knowingly collect personal information from individuals under the age of 21. If we discover that a minor has registered an account, we will immediately close the account and delete all associated data. If you believe a minor has accessed phpiso, please notify us immediately at support@phpiso.best so we can take swift action.

11. Cross-Border Data Transfers

Some of phpiso's service providers are located outside the Philippines. When we transfer personal data internationally, we ensure that appropriate safeguards are in place — including data processing agreements that require the recipient to maintain protections equivalent to those required under Philippine law. We will always inform you if a transfer to a country with different data protection standards is required.

12. Updates to This Privacy Policy

phpiso may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or Philippine legal requirements. When we make significant changes, we will post a notice on the platform and update the effective date at the top of this page. We recommend reviewing this Privacy Policy periodically. Continued use of phpiso after changes take effect constitutes your acceptance of the updated policy.

13. Contact Us and Data Protection Officer

For any questions, concerns, or requests related to this phpiso Privacy Policy or the handling of your personal data, please contact our Data Protection Officer (DPO):

• Email: privacy@phpiso.best
• General Support: support@phpiso.best
• Live Chat: Available on the phpiso platform, 24 hours a day, 7 days a week

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at www.privacy.gov.ph.

We're here for every Kabayan — your privacy matters to us just as much as your gameplay experience. If something doesn't feel right, don't hesitate to reach out. We'll sort it out.