phsinag Privacy Policy

This Privacy Policy describes how phsinag ("we," "us," or "our"), the operator of the phsinag platform accessible at phsinag.app, collects, uses, stores, and protects the personal data of individuals ("you" or "your") who access or use the phsinag website, mobile application, and associated services.

phsinag is committed to protecting your privacy and handling your personal data with transparency, integrity, and respect. This Privacy Policy is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).

By registering an account on phsinag, accessing the phsinag platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, please discontinue your use of the phsinag platform immediately.

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection regulations, phsinag is the data controller responsible for the personal data collected through the phsinag platform.

As data controller, phsinag determines the purposes and means of processing your personal data. phsinag has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact the phsinag DPO at any time using the contact details provided in Section 15 of this Privacy Policy.

Where phsinag engages third-party service providers to process personal data on its behalf, those providers act as data processors and are bound by contractual obligations to process your data only in accordance with phsinag's instructions and this Privacy Policy.

phsinag collects the following categories of personal data, depending on how you interact with the phsinag platform:

phsinag does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive data is collected, it is handled with the heightened protections required under Philippine law.

phsinag collects personal data through the following means:

• Direct interactions: Data you provide when registering your phsinag account, completing identity verification, making deposits or withdrawals, contacting phsinag support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the phsinag platform, including cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Third-party sources: Data received from payment processors (such as GCash, Maya, BPI, BDO, and Metrobank), identity verification service providers, fraud prevention partners, and regulatory databases, where permitted by applicable law.
• Publicly available sources: In limited circumstances, phsinag may supplement your data with information from publicly available sources for fraud prevention or regulatory compliance purposes.

phsinag processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and phsinag — including account management, game access, and financial transactions.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, PAGCOR regulatory requirements, and tax reporting obligations.
• Legitimate interests: Processing necessary for phsinag's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional personalization features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phsinag uses your personal data for the following purposes:

• To create, verify, and manage your phsinag account, including identity and age verification to confirm you meet the 21+ eligibility requirement.
• To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods.
• To provide access to phsinag games, including EVO Live, Tower, Dragon Fortune, Monster Mine, Plinko, and Spirit Party.
• To administer bonuses, promotions, and loyalty rewards in accordance with applicable terms.
• To detect, investigate, and prevent fraud, money laundering, and other illegal or prohibited activities on the phsinag platform.
• To comply with PAGCOR regulatory requirements, AML obligations, and other applicable Philippine laws.
• To monitor gaming activity for responsible gaming purposes, including identifying players who may be at risk of problem gambling.
• To communicate with you regarding your account, transactions, security alerts, and platform updates.
• To send you marketing communications about phsinag promotions and offers, where you have opted in to receive them.
• To analyze platform usage and improve the phsinag user experience.
• To resolve disputes and enforce phsinag's Terms & Conditions.

phsinag will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

phsinag does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and age verification service providers engaged by phsinag to verify your identity and confirm your eligibility to use the platform.
• Game technology providers: Licensed game suppliers and platform technology partners who provide the games and software infrastructure underlying the phsinag platform.
• Fraud prevention and security partners: Service providers who assist phsinag in detecting and preventing fraud, money laundering, and other security threats.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Legal and professional advisors: Lawyers, auditors, and other professional advisors engaged by phsinag, subject to professional confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of phsinag's business or assets, your personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

phsinag uses cookies and similar tracking technologies to operate and improve the phsinag platform. Cookies are small text files placed on your device when you visit phsinag. They help us recognize your device, maintain your session, and understand how you use the platform.

phsinag uses the following types of cookies:

• Strictly necessary cookies: Essential for the phsinag platform to function. These cookies enable core features such as login sessions, account security, and transaction processing. They cannot be disabled without affecting platform functionality.
• Performance cookies: Used to collect anonymized information about how players use the phsinag platform, such as which pages are visited most frequently. This data helps phsinag improve platform performance and user experience.
• Functional cookies: Used to remember your preferences and settings on phsinag, such as your preferred language and display options.
• Analytics cookies: Used by phsinag to analyze aggregate usage patterns and measure the effectiveness of platform features and promotions.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phsinag platform. phsinag does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

phsinag retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active phsinag account, plus a minimum of five (5) years following account closure, in accordance with PAGCOR regulatory requirements and AML obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML regulations.
• Identity verification documents: Retained for the duration of your account plus five (5) years following closure, or longer if required by applicable law.
• Support communications: Retained for three (3) years from the date of the last communication, for dispute resolution and service improvement purposes.
• Marketing preferences: Retained until you withdraw your consent or close your phsinag account.
• Technical and usage data: Retained for up to two (2) years from collection, unless required for longer periods for security or regulatory purposes.

Upon expiry of the applicable retention period, phsinag will securely delete or anonymize your personal data in accordance with its data disposal procedures.

phsinag implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• AES-256 encryption for personal data stored on phsinag servers.
• TLS 1.2 or higher encryption for all data transmitted between your device and the phsinag platform.
• Multi-factor authentication options for phsinag player accounts.
• Role-based access controls limiting phsinag staff access to personal data on a strict need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of the phsinag platform.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While phsinag takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your phsinag account credentials and for notifying phsinag immediately if you suspect any unauthorized access to your account.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phsinag:

• Right to be informed: The right to be informed of how your personal data is being collected and processed by phsinag, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data phsinag holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data phsinag holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phsinag's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on phsinag's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phsinag has processed your personal data in violation of applicable data privacy law.

To exercise any of the above rights, please contact the phsinag Data Protection Officer using the contact details in Section 15. phsinag will respond to all data subject requests within thirty (30) days of receipt, or within such other timeframe as required by applicable law. phsinag may request proof of identity before processing your request.

The phsinag platform is strictly intended for individuals who are at least 21 years of age. phsinag does not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is enforced through phsinag's identity and age verification procedures at the time of account registration.

If phsinag becomes aware that personal data has been collected from an individual under the age of 21, phsinag will take immediate steps to delete that data and close the associated account. If you believe that phsinag may have inadvertently collected data from a minor, please contact phsinag support immediately at [email protected].

phsinag uses your gaming activity data — including session duration, wager frequency, deposit patterns, and loss history — to support its responsible gaming program. This data is processed to identify players who may be exhibiting signs of problem gambling and to enable phsinag to intervene appropriately, including by offering responsible gaming tools or initiating contact with at-risk players.

The processing of gaming activity data for responsible gaming purposes is carried out in phsinag's legitimate interest and in fulfillment of its regulatory obligations under PAGCOR guidelines. This data is handled with strict confidentiality and is not used for marketing or profiling purposes unrelated to player welfare.

If you have set deposit limits, loss limits, or a self-exclusion on your phsinag account, phsinag will retain a record of these settings for the duration of the restriction period and for a reasonable period thereafter, to prevent circumvention of responsible gaming measures. For more information on phsinag's responsible gaming tools, please visit our Responsible Gaming page.

phsinag reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes to this Privacy Policy are material, phsinag will notify registered players via email or a prominent notice on the phsinag platform prior to the changes taking effect. Your continued use of the phsinag platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how phsinag is protecting your personal data. If you have any concerns about changes to this Privacy Policy, please contact the phsinag Data Protection Officer before the effective date of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or phsinag's handling of your personal data, please contact the phsinag Data Protection Officer. All privacy-related inquiries are treated with strict confidentiality and will be responded to within the timeframes required by Philippine law.

phsinag is committed to resolving all data privacy concerns promptly and fairly. We encourage you to contact us directly in the first instance so that we have the opportunity to address your concern before you escalate it to the NPC or any other authority.