phpark Privacy Policy

This Privacy Policy ("Policy") is issued by phpark ("phpark," "we," "us," or "our") and applies to all personal data collected, processed, and stored in connection with your use of the phpark online casino platform, including the website at phpark.one and all associated services, features, and communications (collectively, the "Platform").

phpark is committed to protecting the privacy and personal data of all players, visitors, and users of the Platform in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

By accessing the phpark Platform, creating an account, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue your use of the Platform.

phpark collects personal data that is necessary for the operation of the Platform, the provision of gaming services, and compliance with applicable legal and regulatory obligations. The categories of personal data we collect include:

phpark does not intentionally collect sensitive personal information as defined under the Data Privacy Act of 2012 (such as health data, religious beliefs, or political affiliations) unless specifically required by law or with your explicit consent. Where such data is collected incidentally, it will be handled with the highest level of protection.

phpark uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your phpark player account, including processing your registration, verifying your identity and age, and managing your account settings and preferences.
• Service Delivery: To provide you with access to phpark's full range of casino games, live dealer tables, bingo rooms, slot machines, and other Platform features.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels, and to maintain accurate records of all financial transactions on your account.
• Identity and Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with PAGCOR regulations and the Anti-Money Laundering Act.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the Platform and to individual players.
• Responsible Gaming: To monitor gameplay patterns and identify signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to provide responsible gaming tools and interventions where appropriate.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 live chat and email support channels.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws and regulations, including reporting obligations under the Anti-Money Laundering Act (AMLA), PAGCOR licensing requirements, and NPC data privacy regulations.
• Marketing and Promotions: To send you information about phpark bonuses, promotions, new games, and phpark Rewards updates, where you have opted in to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the performance, features, and user experience of the phpark Platform.

Under the Data Privacy Act of 2012, phpark processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and phpark – specifically, to provide you with access to the Platform and its services in accordance with our Terms and Conditions.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other regulatory requirements.
• Legitimate Interests: Processing is necessary for phpark's legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, security monitoring, and Platform analytics, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as sending marketing communications or processing sensitive personal information, phpark relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

phpark does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment processors require certain personal and financial data to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC (Know Your Customer) service providers who assist phpark in verifying your identity and age in compliance with regulatory requirements.
• Game Software Providers: Licensed game developers and suppliers whose games are hosted on the phpark Platform may receive limited technical data (such as session tokens and bet data) necessary for game operation and fairness certification.
• IT and Security Service Providers: Cloud hosting providers, cybersecurity firms, and fraud detection services that support the technical operation and security of the phpark Platform.
• Regulatory and Law Enforcement Authorities: The Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law, court order, or regulatory directive.
• Professional Advisers: Lawyers, auditors, and accountants who provide professional services to phpark, subject to strict confidentiality obligations.

phpark retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active phpark account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 and its amendments.
• Identity Verification Documents: Retained for the duration of your account and for five (5) years following account closure, or longer if required by a regulatory investigation or legal proceeding.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing Preferences: Retained until you withdraw your consent or close your account, whichever is earlier.
• Technical and Usage Data: Retained for up to two (2) years for analytics and security purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, phpark will securely delete or anonymise your personal data in accordance with our data disposal procedures. Where data cannot be immediately deleted due to technical constraints, it will be isolated and protected from further processing until deletion is possible.

phpark implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and phpark's servers is encrypted using industry-standard TLS protocols.
• Data Encryption at Rest: Sensitive personal data stored on phpark's servers, including financial data and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to phpark personnel and authorised service providers who have a legitimate need to access it. All access is logged and subject to regular review.
• Multi-Factor Authentication: phpark's internal systems require multi-factor authentication for all staff accessing personal data. Players are also encouraged to enable two-factor authentication on their phpark accounts.
• Regular Security Audits: phpark conducts regular internal and third-party security audits and penetration tests to identify and remediate vulnerabilities in the Platform.
• Incident Response Plan: phpark maintains a documented data breach response plan that enables rapid detection, containment, and notification in the event of a security incident.

While phpark takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your phpark login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

phpark uses cookies and similar tracking technologies to enhance your experience on the Platform, to maintain your session, and to collect analytics data that helps us improve our services. The types of cookies we use include:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the phpark Platform, such as which pages are visited most frequently and how long sessions last. This data helps us identify areas for improvement.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, game settings, and notification preferences, to provide a more personalised experience.
• Security Cookies: These cookies help phpark detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phpark Platform. phpark does not use third-party advertising cookies or share cookie data with external marketing platforms.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phpark. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.

phpark will respond to all data subject rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, and you will be notified of the extension and the reason for it.

The phpark Platform is strictly intended for individuals who are 21 years of age or older 21+. phpark does not knowingly collect personal data from any person under the age of 21. Age verification is conducted during the registration process, and phpark reserves the right to request additional proof of age at any time.

If phpark becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be handled in accordance with applicable PAGCOR regulations.

phpark primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers located outside the Philippines – for example, cloud infrastructure providers or game software suppliers operating internationally.

Where such cross-border transfers occur, phpark ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and NPC regulations. These safeguards may include:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law.
• Transfers to countries or organisations that have been assessed as providing an adequate level of data protection.
• Your explicit consent to the transfer, where required by law.

phpark will not transfer your personal data to any jurisdiction or recipient that does not provide adequate protections for your rights as a data subject under Philippine law.

phpark may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, phpark will notify registered players by email to their registered address and/or by a prominent notice on the Platform at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how phpark protects your personal data. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

If you have any concerns about changes to this Policy, please contact our Data Protection Officer before the changes take effect. If you do not agree with the revised Policy, you may request account closure in accordance with our Terms and Conditions.

phpark has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact us through the following channels:

• Data Protection Officer: [email protected] (plain text – not a clickable link)
• General Support: [email protected] (plain text – not a clickable link)
• Live Chat: Available 24/7 via the phpark Platform, staffed by Filipino-English speaking agents on Philippine Standard Time.
• Office Address: Metro Manila, Philippines

When contacting us about a data privacy matter, please clearly mark your communication as a "Data Privacy Request" and include your registered email address and a description of your request. phpark will acknowledge your request within two (2) business days and provide a substantive response within fifteen (15) business days.

If you are not satisfied with phpark's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.