Privacy Policy

1. Who We Are

phgreat48 ("we," "us," or "our") operates the online casino platform accessible at phgreat48.vip. We are the data controller responsible for the personal data you provide when using our Platform. We operate in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection practices and serving as the primary point of contact for data privacy matters. Contact details for our DPO are provided in Section 14 of this Policy.

2. Personal Data We Collect

Depending on how you interact with the phgreat48 Platform, we may collect the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, government-issued ID number, selfie/photo for KYC	Account registration, age verification (21+), KYC compliance
Contact Data	Philippine mobile number, email address, residential address	Account communications, support, withdrawal verification
Financial Data	GCash number, PayMaya account, bank account details, transaction history	Processing deposits and withdrawals, AML compliance
Technical Data	IP address, device type, browser type, operating system, session timestamps	Platform security, fraud detection, technical support
Usage Data	Games played, bet amounts, win/loss history, session duration, feature usage	Responsible gaming monitoring, platform improvement, personalisation
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support, dispute resolution, quality assurance
Marketing Preferences	Opt-in/opt-out status for promotional communications	Sending relevant promotions and offers (with your consent)

We do not collect sensitive personal information (as defined under RA 10173) unless strictly required for regulatory compliance, in which case we will obtain your explicit consent and implement additional safeguards.

3. How We Collect Your Data

phgreat48 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 7 for details.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from GCash, PayMaya, and banking partners.

4. How We Use Your Personal Data

phgreat48 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your phgreat48 account; verifying your identity and age (21+ requirement); processing your login and authentication.
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers; verifying payment method ownership; maintaining transaction records.
• Regulatory compliance: Fulfilling our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act, including KYC verification, transaction monitoring, and record-keeping.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour; administering deposit limits, self-exclusion, and cooling-off periods; enforcing the 21+ age restriction.
• Platform security: Detecting and preventing fraud, cheating, money laundering, and other prohibited activities; investigating security incidents; protecting the integrity of our games.
• Customer support: Responding to your inquiries, complaints, and requests; resolving disputes; improving our support services.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: Analysing usage patterns to improve game offerings, platform performance, and user experience.

5. Legal Bases for Processing

Under the Philippine Data Privacy Act, phgreat48 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to provide the Platform services you have registered for, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR requirements, AMLA obligations, and NPC guidelines.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and certain optional features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

phgreat48 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, PayMaya, and Philippine banking partners, to process your deposits and withdrawals.
• KYC and compliance providers: Third-party identity verification and AML screening services engaged to help us meet our regulatory obligations.
• Technology service providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Game software providers: Licensed game developers whose software is integrated into the phgreat48 Platform, to the extent necessary for game operation and fairness auditing.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

All third-party service providers who process personal data on our behalf are required to implement appropriate technical and organisational security measures and to process data only in accordance with our instructions.

7. Cookies & Tracking Technologies

phgreat48 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences (e.g., language settings, game display preferences) to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how users interact with the Platform to help us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. phgreat48 does not use third-party advertising or tracking cookies.

8. Data Security

phgreat48 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Sensitive data at rest is encrypted using AES-256.
• Access controls: Personal data is accessible only to authorised personnel who require it to perform their job functions. Access is governed by role-based permissions and multi-factor authentication.
• Security monitoring: Our systems are monitored 24/7 for suspicious activity, intrusion attempts, and anomalous behaviour.
• Regular audits: We conduct regular internal and third-party security audits and penetration tests to identify and remediate vulnerabilities.
• Staff training: All phgreat48 staff who handle personal data receive regular data privacy and security training.

While we take all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials. Please refer to Section 4 of our Terms & Conditions for your account security obligations.

9. Data Retention

phgreat48 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account data: Retained for the duration of your account and for five (5) years after account closure, as required by PAGCOR regulations and AMLA record-keeping obligations.
• Transaction records: Retained for five (5) years from the date of the transaction, in compliance with AMLA requirements .
• KYC documents: Retained for five (5) years after account closure or the completion of the relevant transaction, whichever is later.
• Support communications: Retained for two (2) years from the date of the interaction, unless the matter is subject to ongoing dispute or legal proceedings.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and usage data: Retained for twelve (12) months in identifiable form, after which it is anonymised for aggregate analytics purposes.

Where retention beyond these periods is required by a court order, regulatory direction, or ongoing legal proceedings, phgreat48 will retain the relevant data until the matter is resolved.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phgreat48:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed. This Privacy Policy fulfils that obligation.
• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain information directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our overriding legal obligations.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to lodge a complaint: If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Children's Privacy

phgreat48 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. The minimum age to register and use the Platform is 21 years, in accordance with Philippine law governing casino-style gambling.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and report the matter to the appropriate authorities where required. If you believe a minor has registered on our Platform, please contact us immediately at the details provided in Section 14.

12. International Data Transfers

phgreat48 primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software developers with international operations.

Where such transfers occur, phgreat48 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act and NPC guidelines, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law.
• Transfers only to countries or organisations that provide an adequate level of data protection as recognised by the NPC.
• Your explicit consent, where required by applicable law.

13. Changes to This Privacy Policy

phgreat48 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the Platform informing users of the changes.
• Where practicable, notify registered users via their registered contact details.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your data.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phgreat48, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated: