phgold
Privacy Policy

This Privacy Policy ("Policy") describes how phgold ("phgold", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "Player") who access or use the phgold online gaming platform at phgold.vip, including all associated game lobbies, payment interfaces, customer support channels, and promotional systems.

phgold takes its obligations under Republic Act No. 10173, the Philippine Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, seriously. This Policy is designed to ensure that every Filipino player on the phgold platform understands clearly how their information is handled — not just in broad strokes, but in specific operational terms. Whether you're logging in from Makati, playing from Cebu, or depositing via GCash from Davao, the same data protection standards apply.

By accessing the phgold platform or creating a phgold account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein, to the extent that such processing is based on consent. Where processing is based on other legal grounds (such as contractual necessity or legal obligation), your consent is not required but you are entitled to be informed, which this Policy provides.

For the purposes of the Philippine Data Privacy Act and associated regulations, phgold is the Personal Information Controller (PIC) in respect of the personal data collected through the phgold.vip platform. phgold is responsible for determining the purposes and means of processing personal data described in this Policy.

phgold has designated a Data Protection Officer (DPO) responsible for overseeing data protection compliance, handling data subject rights requests, and serving as the primary point of contact with the National Privacy Commission (NPC) of the Philippines. Data subjects may contact the phgold DPO as specified in Section 15 of this Policy.

Where phgold engages third-party service providers to process personal data on its behalf — such as payment processors, game software providers, and KYC verification services — those providers act as Personal Information Processors (PIPs) under data processing agreements that require them to process data only in accordance with phgold's instructions and applicable Philippine law.

phgold collects personal data across the following categories, depending on the nature of your interaction with the Platform:

phgold does not intentionally collect sensitive personal information as defined under the DPA (such as religious beliefs, political affiliations, or medical records) unless this information is directly relevant to a responsible gaming assessment requested by the Player.

phgold collects personal data through the following mechanisms:

• Direct Collection: Information you provide during account registration, KYC document submission, deposit and withdrawal requests, customer support interactions, and responsible gaming tool configuration.
• Automated Collection: Technical data collected automatically when you access the phgold Platform, including IP address, browser information, device identifiers, session duration, and in-game activity logs. This collection occurs through standard web server logging and, where applicable, cookies and similar technologies (described further in Section 7).
• Third-Party Sources: Identity and fraud-risk information from KYC verification service providers used to confirm the identity details you have submitted. phgold does not purchase personal data lists from third-party data brokers.
• Payment Providers: Transaction confirmation data from GCash, PayMaya, and Philippine bank payment processors — limited to confirming the execution and amount of deposits and withdrawals and the account name registered to the payment instrument.

phgold processes personal data for the following purposes, each supported by a specified legal basis under the DPA:

5.1 Contract Performance

Processing necessary to operate your phgold account, process deposits and withdrawals, deliver game services, apply bonuses, and provide customer support. Legal basis: performance of the contract between phgold and the Player.

5.2 Legal and Regulatory Compliance

Processing required to comply with Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and any instructions issued by Philippine regulatory authorities. Legal basis: compliance with a legal obligation.

5.3 Fraud Prevention and Security

Processing for the purpose of detecting and preventing fraudulent activity, account takeover, money laundering, and abuse of the phgold Platform. Legal basis: legitimate interests of phgold and protection of the rights and interests of other Players.

5.4 Responsible Gaming

Processing gaming activity data to monitor for signs of problem gambling behaviour, administer self-exclusion and deposit limit tools, and comply with PAGCOR responsible gaming standards. Legal basis: legitimate interests and, in certain cases, vital interests of the data subject.

5.5 Marketing Communications

Sending promotional emails, SMS messages, and in-platform notifications about phgold bonuses, new game releases, and special events — only to Players who have not opted out of such communications. Legal basis: consent, which may be withdrawn at any time.

5.6 Platform Improvement

Analysing aggregated and anonymised data about Platform usage to improve the phgold user experience, game selection, and payment processing performance. Legal basis: legitimate interests. This processing uses anonymised data where possible and does not involve individual profiling.

phgold does not sell or rent personal data to any third party. Personal data may be disclosed in the following circumstances:

• Payment Processors: GCash, PayMaya, and Philippine bank processors receive the minimum personal data necessary to execute deposit and withdrawal transactions — limited to name, account identifier, and transaction amount.
• KYC Verification Providers: Identity verification service providers receive identity documents and biometric reference data solely for the purpose of confirming Player identity in compliance with PAGCOR and AML requirements.
• Game Software Providers: Live dealer and RNG game providers may receive an anonymised session identifier for the purpose of resolving technical disputes or verifying game round outcomes. Providers do not receive your full name, payment details, or contact information.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory authorities may receive personal data as required by law, regulation, or formal legal process.
• Legal Proceedings: Personal data may be disclosed to courts, law enforcement, or legal advisers where necessary for the establishment, exercise, or defence of legal claims involving phgold.
• Corporate Restructuring: In the event of a merger, acquisition, or sale of assets involving phgold, personal data may be transferred to a successor entity, subject to the successor entity maintaining equivalent data protection standards and providing advance notice to affected Players.

All third-party processors engaged by phgold are bound by data processing agreements that require compliance with the Philippine DPA and prohibit use of phgold Player data for any purpose other than the specific service they provide.

phgold uses cookies and similar browser-based technologies on the phgold.vip Platform. Cookies are small text files placed on your device that allow the Platform to function correctly, remember your preferences, and collect usage data.

7.1 Strictly Necessary Cookies

These cookies are essential for the phgold Platform to function. They maintain your login session, prevent cross-site request forgery, and ensure that in-game transactions are correctly attributed to your account. These cookies cannot be disabled without disrupting core Platform functionality.

7.2 Functional Cookies

Functional cookies remember your preferences — such as language settings, responsible gaming reminders, and display preferences — so that you do not need to reconfigure them on every visit. These cookies are set only with your consent, which you may withdraw at any time through your browser settings.

7.3 Analytics Cookies

phgold uses first-party analytics tools to understand how Players navigate the Platform — which game categories are most popular, where navigation friction occurs, and how the deposit process can be improved. Analytics data is processed in aggregated form and does not identify individual Players. Third-party analytics providers do not receive identifying personal data.

7.4 Cookie Management

You may configure your browser to refuse or delete cookies at any time. Note that disabling strictly necessary cookies will prevent phgold from functioning correctly and your session will not be maintained. Most Philippine mobile browsers — including Chrome on Android and Safari on iOS — provide straightforward cookie management controls in their settings menus.

phgold retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any applicable legal retention requirements. The following retention schedules apply:

Following the expiry of the applicable retention period, phgold will securely delete or anonymise personal data so that it can no longer be associated with an identifiable individual.

phgold implements technical and organisational security measures commensurate with the nature and volume of personal data processed. These measures include, but are not limited to:

• Encryption in Transit: All data exchanged between the phgold Platform and your device is protected by TLS 1.3 / SSL 256-bit encryption. This applies to the login page, deposit flow, withdrawal request, and customer support chat.
• Encryption at Rest: Sensitive personal data, including identity document copies and financial details, is stored in encrypted form on phgold's infrastructure.
• Password Security: phgold stores Player passwords using one-way cryptographic hashing. Plain-text passwords are never stored. phgold staff cannot retrieve your password — only reset it.
• Two-Factor Authentication: phgold supports and recommends SMS-based two-factor authentication for all Player accounts, providing an additional layer of protection against unauthorised access.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Staff with access to personal data undergo data privacy training and are bound by confidentiality obligations.
• Vulnerability Management: phgold's technical infrastructure is subject to regular security assessments and penetration testing. Critical security patches are applied on a priority basis.
• Incident Response: phgold maintains a data breach response procedure. In the event of a personal data breach affecting your rights, phgold will notify you and the National Privacy Commission within the timeframes required by the DPA and its Implementing Rules.

As a data subject under Republic Act No. 10173, you have the following rights in relation to your personal data held by phgold:

• Right to be Informed: The right to know what personal data phgold collects, how it is used, and with whom it is shared — fulfilled by this Privacy Policy.
• Right of Access: The right to obtain a copy of the personal data phgold holds about you, along with information about how it is being processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update certain account details directly through your phgold account settings; other corrections may require identity verification.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to phgold's legal retention obligations described in Section 8.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time, and to object to processing based on legitimate interests where your individual circumstances warrant it.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another service provider, where technically feasible.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phgold has processed your personal data in violation of the DPA.

To exercise any of these rights, contact the phgold Data Protection Officer as described in Section 15. phgold will respond to rights requests within the timeframes required by the DPA — generally within 30 calendar days of receipt of a verified request.

If phgold discovers or is notified that it has collected personal data from an individual below 21 years of age, it will immediately suspend the relevant account, delete all associated personal data (except to the extent required by law), and return any deposited funds to the source payment method. If you believe a minor has registered on the phgold Platform, please contact phgold support immediately at the address provided in Section 15.

Age verification is enforced at the KYC stage through government-issued ID checks. phgold will not process withdrawals for any account where age verification has not been completed or where the verified age is below 21 years.

The phgold Platform integrates with third-party services to deliver payment processing, game software, and identity verification. These services operate under their own privacy policies and are subject to contractual obligations imposed by phgold to ensure DPA-compliant data handling.

phgold is not responsible for the privacy practices of third-party services that you access independently and outside of the phgold Platform. This Policy applies only to data processing conducted by phgold or phgold's contracted processors within the scope of operating the phgold.vip platform.

phgold's primary data processing infrastructure is located in the Philippines. Where personal data is transferred to or processed by service providers located outside the Philippines — for example, game software providers or cloud infrastructure partners — phgold ensures that such transfers are made only to entities that provide an adequate level of protection consistent with the Philippine DPA and its Implementing Rules.

Adequate protection is ensured through one or more of the following mechanisms: contractual clauses approved by the National Privacy Commission, the recipient country having been assessed as providing an adequate level of protection, or the recipient organisation being certified under a recognised cross-border data transfer framework.

phgold may update this Privacy Policy from time to time to reflect changes in how personal data is processed, changes in Philippine data privacy law, or changes in phgold's operational practices. When material changes are made — affecting your rights or phgold's core data handling practices — phgold will notify registered Players by email to their registered address and post a notice on the phgold Platform at least fourteen (14) days before the changes take effect.

The most current version of this Privacy Policy will always be available at phgold.vip/privacy-policy. The version date at the top of this Policy indicates when it was last updated. Continued use of the phgold Platform after a revised Policy takes effect constitutes acceptance of the revised terms.

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to raise a data protection concern, contact phgold's Data Protection Officer through the live chat function available in the phgold Platform after login, or by writing to the following email address (displayed as plain text — not a clickable link):

phgold will acknowledge rights requests and data privacy complaints within 5 business days and provide a substantive response within 30 calendar days. Where a matter is complex, phgold may extend this period by a further 30 days with prior notice.

If you are dissatisfied with phgold's handling of your personal data or a rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), the independent supervisory authority responsible for enforcing the Data Privacy Act. Details of the NPC complaint process are available on the NPC's official website.

This Privacy Policy was last reviewed and updated on 1 January 2026. phgold operates in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and PAGCOR guidelines for online gaming in the Republic of the Philippines.