Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how phkai ("we," "us," "our," or "Company") collects, uses, processes, stores, discloses, and protects personal information obtained from users ("you," "your," or "User") of the phkai.cam website and associated mobile applications (collectively, the "Platform"). This Policy applies to all users who access or use our online casino and gaming services, whether through registration, gameplay, customer support interaction, or any other engagement with our Platform.

phkai is committed to protecting your privacy and ensuring the security of your personal data in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations issued by the National Privacy Commission, and other applicable Philippine laws and regulations governing data protection and online privacy. We recognize that the personal information you entrust to us is sensitive, and we have implemented comprehensive technical, organizational, and administrative safeguards to protect it from unauthorized access, disclosure, alteration, or destruction.

By accessing the Platform, creating an account, or using any of our services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this Policy, you must immediately discontinue use of the Platform and refrain from providing any personal information to us.

2. Data Controller and Contact Information

phkai is the data controller responsible for the collection and processing of your personal information under this Privacy Policy. We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy, ensuring compliance with the Data Privacy Act of 2012, responding to data subject rights requests, and serving as the point of contact for data privacy inquiries and concerns.

If you have any questions, concerns, or requests regarding this Privacy Policy, the processing of your personal data, or the exercise of your data subject rights under Philippine law, you may contact us through the following channels:

• Email: [email protected]
• Data Protection Officer Email: [email protected]
• Customer Support: 24/7 live chat available through the Platform
• Mailing Address: phkai Data Protection Office, Metro Manila, Philippines

We are committed to responding to all privacy-related inquiries and data subject rights requests within the timeframes prescribed by the National Privacy Commission, typically within fifteen (15) business days of receipt of a valid request accompanied by proper identification verification.

3. Personal Information We Collect

phkai collects various categories of personal information from users depending on the nature of your interaction with our Platform. The specific types of personal data we collect include:

3.1 Information You Provide Directly

When you register for an account, use our services, or communicate with us, you may provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (passport, driver's license, UMID, national ID)
• Contact Information: Residential address, email address, mobile phone number, alternative contact details
• Account Credentials: Username, password, security questions and answers, PIN codes
• Financial Information: Bank account details, payment card information, e-wallet account numbers (GCash, Maya), cryptocurrency wallet addresses, transaction history
• Verification Documents: Copies of government-issued IDs, proof of address documents (utility bills, bank statements), selfie photographs for identity verification
• Communication Records: Content of emails, live chat messages, phone call recordings, customer support tickets, feedback and survey responses
• Marketing Preferences: Communication preferences, subscription choices, promotional opt-ins and opt-outs

3.2 Information Collected Automatically

When you access or use the phkai Platform, certain information is automatically collected through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address)
• Connection Information: IP address, internet service provider, geographic location (country, city, region), time zone settings
• Usage Data: Pages visited, features accessed, games played, bet amounts and outcomes, session duration, click patterns, navigation paths
• Technical Data: Log files, error reports, performance metrics, system diagnostics
• Cookies and Tracking Data: Session cookies, persistent cookies, analytics cookies, advertising cookies (see Section 10 for detailed cookie policy)

3.3 Information From Third Parties

We may receive personal information about you from third-party sources, including:

• Payment processors and financial institutions (transaction verification, fraud detection)
• Identity verification service providers (age verification, KYC compliance)
• Credit reference agencies and fraud prevention databases
• Publicly available sources (government registries, social media profiles if you choose to connect them)
• Affiliates and marketing partners who referred you to phkai (with your consent)

Data Category	Purpose	Legal Basis
Identity & Contact	Account creation, KYC compliance	Contractual necessity, legal obligation
Financial Data	Payment processing, AML compliance	Contractual necessity, legal obligation
Usage & Behavioral	Service improvement, fraud detection	Legitimate business interest
Marketing Data	Promotional communications	Consent

4. How We Use Your Personal Information

phkai processes your personal information for the following specific purposes, each of which is necessary for providing our gaming services, complying with legal obligations, or pursuing legitimate business interests:

4.1 Service Delivery and Account Management

• Creating and maintaining your user account on the phkai Platform
• Processing deposits, withdrawals, and other financial transactions
• Providing access to casino games, live dealer tables, sports betting, lottery, and other gaming products
• Calculating winnings, losses, and account balances accurately
• Processing bonus claims, loyalty rewards, and promotional offers you have opted into
• Providing customer support and responding to inquiries, complaints, or technical issues

4.2 Legal and Regulatory Compliance

• Verifying your identity and age to ensure compliance with the 21+ age restriction
• Conducting Know Your Customer (KYC) procedures as required by PAGCOR regulations
• Preventing, detecting, and investigating money laundering and terrorist financing in compliance with the Anti-Money Laundering Act (AMLA)
• Detecting, preventing, and investigating fraud, cheating, collusion, and other prohibited activities
• Complying with reporting obligations to PAGCOR and other regulatory authorities
• Responding to lawful requests from law enforcement, courts, and government agencies
• Enforcing our Terms and Conditions and other policies

4.3 Security and Risk Management

• Protecting the security and integrity of the Platform and our systems
• Preventing unauthorized access, hacking, and cyber attacks
• Detecting and preventing multiple account creation and bonus abuse
• Identifying patterns of problem gambling behavior to implement responsible gaming measures
• Conducting risk assessments and implementing appropriate security controls

4.4 Business Operations and Improvement

• Analyzing usage patterns to improve Platform functionality, user experience, and game selection
• Conducting market research and customer satisfaction surveys
• Developing new products, features, and services tailored to Filipino users
• Generating statistical and analytical reports (aggregated and anonymized data)
• Training staff and improving customer service quality

4.5 Marketing and Communications (With Your Consent)

• Sending promotional offers, bonuses, and special deals via email, SMS, or push notifications
• Personalizing marketing content based on your gaming preferences and activity
• Inviting you to participate in tournaments, competitions, and special events
• Informing you about new games, features, and platform updates

5. Legal Bases for Processing

Under the Data Privacy Act of 2012, phkai must have a lawful basis for processing your personal information. We rely on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services, processing payments, managing your account as outlined in our Terms and Conditions).
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including PAGCOR licensing requirements, Anti-Money Laundering Act obligations, age verification laws, and tax reporting requirements.
• Legitimate Business Interests: Processing is necessary for our legitimate business interests in operating a secure and sustainable online gaming platform, preventing fraud and abuse, improving our services, and conducting business analytics, provided these interests do not override your fundamental rights and freedoms.
• Consent: You have given explicit, informed, and freely given consent for specific processing activities, particularly for marketing communications and certain types of cookies. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Vital Interests: In rare circumstances, processing may be necessary to protect your vital interests or those of another person, such as responding to medical emergencies or preventing harm.

6. Disclosure and Sharing of Personal Information

phkai does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may disclose your personal information to the following categories of recipients in the circumstances described below:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers who perform functions on our behalf and require access to your personal information to provide those services. These include:

• Payment processors and financial institutions (GCash, Maya, banks, cryptocurrency exchanges)
• Identity verification and KYC service providers
• Fraud detection and prevention services
• Cloud hosting and data storage providers
• Customer support platform providers
• Email and SMS communication service providers
• Analytics and market research firms
• IT security and infrastructure providers

All service providers are bound by strict data processing agreements that require them to process your personal information only in accordance with our instructions, maintain appropriate security measures, and comply with applicable data protection laws.

6.2 Regulatory Authorities and Law Enforcement

We may disclose your personal information to regulatory bodies, government agencies, and law enforcement authorities when required by law or when we believe in good faith that such disclosure is necessary to:

• Comply with PAGCOR reporting and compliance obligations
• Report suspicious transactions under the Anti-Money Laundering Act
• Respond to lawful court orders, subpoenas, or legal processes
• Cooperate with law enforcement investigations
• Comply with tax and revenue authority requests
• Respond to National Privacy Commission inquiries or investigations

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other business transaction involving phkai, your personal information may be transferred to the successor entity or acquiring party as part of the transaction, subject to continued protection under this Privacy Policy or a substantially similar policy.

6.4 With Your Consent

We may share your personal information with third parties for purposes not described in this Policy if we have obtained your explicit consent to do so.

7. Data Security Measures

phkai implements comprehensive technical, organizational, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, destruction, loss, or misuse. Our security framework includes:

7.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols (minimum 256-bit encryption). Sensitive data stored in our databases is encrypted at rest.
• Secure Infrastructure: Our Platform is hosted on secure cloud infrastructure with redundant systems, firewalls, intrusion detection systems, and DDoS protection.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal information, and only to the extent necessary for their job functions.
• Authentication: Multi-factor authentication is required for administrative access to systems containing personal data.
• Security Monitoring: Continuous monitoring of systems for suspicious activity, unauthorized access attempts, and security vulnerabilities.

7.2 Organizational Security Measures

• Regular security audits and penetration testing by independent cybersecurity firms
• Comprehensive data protection and information security policies
• Employee training on data protection, privacy, and security best practices
• Confidentiality agreements and data processing agreements with all employees and service providers
• Incident response and data breach notification procedures
• Regular backup procedures and disaster recovery plans

7.3 Your Security Responsibilities

While we implement robust security measures, the security of your account also depends on your actions. You are responsible for:

• Maintaining the confidentiality of your username, password, and other login credentials
• Using strong, unique passwords and changing them regularly
• Not sharing your account access with others
• Logging out of your account after each session, especially on shared devices
• Notifying us immediately if you suspect unauthorized access to your account
• Keeping your contact information up to date for security alerts

8. Data Retention

phkai retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.

8.1 Active Account Data

While your account is active and you continue to use our services, we will retain your personal information to provide ongoing service, maintain your account history, process transactions, and comply with regulatory requirements.

8.2 Closed Account Data

After you close your account (voluntarily or through termination), we will retain certain personal information for the following periods:

• Identity and KYC Documents: Retained for seven (7) years after account closure to comply with PAGCOR regulations and Anti-Money Laundering Act requirements.
• Financial Transaction Records: Retained for seven (7) years to comply with tax laws, accounting standards, and financial reporting obligations.
• Communications and Correspondence: Retained for three (3) years for customer service quality, dispute resolution, and legal defense purposes.
• Marketing and Analytics Data: Anonymized or deleted within one (1) year after account closure unless you have provided separate consent for longer retention.
• Gaming and Betting History: Retained for five (5) years for regulatory compliance, dispute resolution, and responsible gaming monitoring.

8.3 Legal Holds and Extended Retention

In certain circumstances, we may retain personal information for longer periods if required by law, court order, regulatory investigation, pending litigation, or to protect our legal rights. Once the retention period expires and no legal obligation requires further retention, we will securely delete or anonymize your personal information.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information. phkai is committed to facilitating the exercise of these rights in accordance with Philippine law:

9.1 Right to Be Informed

You have the right to be informed about the collection and processing of your personal information, including the purposes of processing, retention periods, and your rights. This Privacy Policy serves to fulfill this obligation.

9.2 Right of Access

You have the right to obtain confirmation of whether we are processing your personal information and, if so, to access that information and receive a copy of it. You may request details about what personal data we hold, how we use it, and with whom we share it.

9.3 Right to Rectification

You have the right to request correction of inaccurate personal information and to have incomplete personal information completed. You can update most of your account information directly through your account settings on the Platform.

9.4 Right to Erasure (Right to Be Forgotten)

You have the right to request deletion of your personal information in certain circumstances, including when the information is no longer necessary for the purposes for which it was collected, when you withdraw consent (where processing was based on consent), or when the processing is unlawful. This right is subject to limitations where we have legal obligations to retain information.

9.5 Right to Object

You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes. If you object to marketing communications, we will cease such processing immediately.

9.6 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the National Privacy Commission if you believe we have violated your data protection rights or failed to respond appropriately to your requests.

9.9 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request. We will require verification of your identity before processing requests to ensure data security. We will respond to valid requests within fifteen (15) business days or as otherwise required by law. Some requests may be subject to legal limitations or may require balancing your rights against our legitimate interests or legal obligations.

10. Cookies and Tracking Technologies

phkai uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, personalize content, and deliver targeted advertising. This section explains what these technologies are, how we use them, and how you can control them.

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device and remember information about your visit, such as your language preference, login status, and browsing behavior.

10.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These cookies enable core functionalities such as security, account authentication, and load balancing. The Platform cannot function properly without these cookies.
• Performance Cookies: Collect information about how you use the Platform, such as which pages you visit most often and whether you encounter error messages. These cookies help us improve Platform performance.
• Functionality Cookies: Remember your preferences and settings (language, currency, time zone) to provide a more personalized experience.
• Analytics Cookies: Allow us to analyze Platform usage, understand user behavior, and improve our services. We use Google Analytics and similar tools for this purpose.
• Advertising Cookies: Used to deliver relevant advertisements based on your interests and to measure the effectiveness of marketing campaigns. These cookies may track your activity across multiple websites.

10.3 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are being set. However, disabling essential cookies may affect the functionality of the Platform and prevent you from using certain features. Refer to your browser's help documentation for specific instructions on managing cookies.

11. Children's Privacy

The phkai Platform is intended solely for adults aged twenty-one (21) years and older. We do not knowingly collect, process, or maintain personal information from individuals under the age of 21. If we become aware that we have inadvertently collected personal information from a person under 21, we will take immediate steps to delete that information and terminate the associated account.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal information to phkai, please contact us immediately at [email protected] so we can take appropriate action to remove the information and prevent future access.

12. Changes to This Privacy Policy

phkai reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes to this Policy, we will notify you by posting the updated Policy on the Platform with a new "Last Updated" date and, where appropriate, by sending you an email notification or displaying a prominent notice on the Platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of the Platform after changes to this Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should discontinue use of the Platform and contact us to close your account.

13. Contact Information and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy, our data processing practices, or the exercise of your data subject rights, please contact us:

• Data Protection Officer: [email protected]
• Privacy Inquiries: [email protected]
• Customer Support: 24/7 live chat through the Platform
• General Email: [email protected]

We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response or believe we have violated your data protection rights, you have the right to lodge a complaint with:

• National Privacy Commission
• Website: www.privacy.gov.ph
• Email: [email protected]
• Complaint Hotline: 1-8888 (Toll-free)