Privacy Policy — phcash.con

phcash.con ("phcash.con", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the phcash.con platform located at phcashcon.org (the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, disclose, store, and safeguard your personal information when you register an account, use our gaming services, or otherwise interact with us.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

By registering an account or continuing to use the phcash.con Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated to you via your registered email address or through a prominent notice on the Platform. Your continued use of the Platform after any such update constitutes your acceptance of the revised Policy.

For the purposes of the Data Privacy Act of 2012 and this Policy, phcash.con acts as the Personal Information Controller (PIC) in respect of the personal data you provide to us or that we collect about you through your use of the Platform.

Our designated Data Protection Officer (DPO) oversees compliance with applicable data privacy laws and this Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, you may contact our DPO through the support email address displayed in the footer of this page. We aim to respond to all data privacy enquiries within five (5) business days.

phcash.con collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected and processed. The categories of personal data we collect include:

3.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, gender, nationality;
• Contact Data: Email address, Philippine mobile number, residential address;
• Account Credentials: Username and encrypted password;
• Verification Documents: Government-issued ID (e.g., PhilSys ID, passport, driver's licence), proof of address, selfie photographs submitted for KYC purposes;
• Financial Data: GCash account details, Maya account details, bank account information, debit card details (where applicable) — used solely for processing deposits and withdrawals;
• Communications Data: Records of your correspondence with our customer support team, including chat logs and email exchanges.

3.2 Data We Collect Automatically

• Technical Data: IP address, device type, operating system, browser type and version, device identifiers;
• Usage Data: Pages visited, games played, session duration, click-stream data, login timestamps;
• Transaction Data: Deposit and withdrawal history, game wager history, bonus usage records;
• Location Data: General geographic location derived from your IP address (country and region level only).

3.3 Data from Third Parties

We may receive personal data about you from third-party identity verification providers, payment processors, fraud prevention services, and regulatory bodies where we are required or permitted to do so by applicable law.

phcash.con processes your personal data only for specified, explicit, and legitimate purposes. The table below summarises the primary purposes for which we use your data and the legal basis for each:

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

phcash.con uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the Platform, maintain session security, and gather analytics data that helps us improve our services.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform to help us identify areas for improvement.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your interests and Platform activity, subject to your consent.

5.2 Managing Cookies

You can manage your cookie preferences through the cookie settings panel available on the Platform. You may also configure your browser to refuse or delete cookies; however, disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in and play games.

phcash.con does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers and Processors

We engage trusted third-party service providers who process personal data on our behalf, including payment processors (GCash, Maya, Philippine banks), identity verification providers, cloud hosting providers, customer support platform operators, and analytics providers. All such providers are contractually bound to process your data only on our instructions and in accordance with applicable data privacy laws.

6.2 Regulatory and Law Enforcement Authorities

We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other government bodies where we are required to do so by applicable Philippine law, court order, or regulatory directive.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phcash.con's business, your personal data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy.

6.4 Cross-Border Data Transfers

Where personal data is transferred outside the Philippines (for example, to cloud infrastructure providers), phcash.con ensures that appropriate safeguards are in place in accordance with NPC guidelines, including contractual data protection clauses that provide a level of protection equivalent to that afforded under the DPA.

phcash.con retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation.

The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements;
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine anti-money laundering regulations;
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer Support Communications: Retained for three (3) years from the date of the last interaction;
• Technical and Usage Data: Retained for up to twenty-four (24) months from collection, after which it is anonymised or deleted;
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised, or disposed of in accordance with NPC-prescribed standards for data disposal.

phcash.con implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including financial account details and government ID information;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments, vulnerability scanning, and penetration testing;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures aligned with NPC breach notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phcash.con will notify the NPC within seventy-two (72) hours of becoming aware of the breach and will inform affected individuals without undue delay, in accordance with the DPA and NPC Circular No. 16-03.

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phcash.con:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy;
• Right of Access: The right to obtain confirmation of whether we hold personal data about you and to receive a copy of that data;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected or completed;
• Right to Erasure or Blocking: The right to request the deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, or where processing is unlawful — subject to our legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interest;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller, where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer via the support email address in the footer. We will respond to all verified requests within fifteen (15) business days. We may require you to verify your identity before processing your request.

Please note that certain rights are subject to limitations under the DPA — for example, we may be unable to delete data that we are legally required to retain for regulatory compliance purposes.

With your consent, phcash.con may send you promotional communications about our games, bonuses, and special offers via email or SMS to your registered Philippine mobile number. You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Replying "STOP" to any promotional SMS;
• Updating your communication preferences in your account settings.

Withdrawal of marketing consent will not affect the lawfulness of any processing carried out prior to withdrawal, nor will it affect the processing of your data for non-marketing purposes (such as transactional notifications and account security alerts), which we may continue to send as they are necessary for the performance of our contract with you.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact our support team immediately so that we can investigate and take appropriate action.

The phcash.con Platform may contain links to third-party websites or services (for example, payment provider portals). This Policy applies solely to personal data collected and processed by phcash.con. We are not responsible for the privacy practices of third-party websites and encourage you to review the privacy policies of any third-party services you access.

phcash.con reserves the right to update or modify this Privacy Policy at any time. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Where changes are material, we will provide prominent notice via email or an in-platform notification at least seven (7) days before the changes take effect. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.