phfun33 Privacy
Policy

01 Introduction & Scope

This Privacy Policy ("Policy") describes how phfun33 ("phfun33", "we", "us", "our") collects, processes, stores, uses, and protects personal information obtained from players, visitors, and users ("you", "your") of the phfun33 online gaming platform accessible at phfun33.org and all associated mobile and web interfaces operated by phfun33.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). phfun33 is also subject to data handling requirements imposed under the PAGCOR regulatory framework governing online gaming operations in the Philippines.

This Privacy Policy is incorporated by reference into the phfun33 Terms & Conditions and forms part of the binding agreement between you and phfun33. If you do not agree with the practices described in this Policy, please do not use the phfun33 platform and close your account.

02 Personal Data We Collect

2.1 Registration & Account Data

When you create a phfun33 account, we collect the following personal information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — players must be 21 years old or above)
• Residential address (including barangay, city/municipality, province)
• Mobile phone number (Philippine mobile number, Globe or Smart)
• Valid email address
• Username and hashed password (passwords are never stored in plain text)
• Security question answers (where applicable)

2.2 Identity Verification (KYC) Data

To comply with PAGCOR KYC requirements and anti-money-laundering obligations under the Philippines' AMLA (Republic Act No. 9160 as amended), phfun33 may collect:

• Scanned or photographed copies of government-issued photo IDs (PhilSys National ID, SSS, UMID, Passport, Driver's License, Voter's ID, or PRC ID)
• Proof of address documents (utility bill, bank statement, or barangay certificate)
• Selfie photographs holding your government-issued ID
• Source of funds declaration for large transaction amounts
• Tax Identification Number (TIN) where required for large winnings reporting

2.3 Financial Transaction Data

When you make deposits or request withdrawals on phfun33, we collect:

• GCash or PayMaya mobile wallet number
• Bank account details (account name, account number, bank name) for BPI, BDO, and Metrobank transfers
• Transaction amounts, timestamps, and reference numbers
• Payment method type and transaction status

phfun33 does not store full credit or debit card numbers. All payment processing is handled through PCI-DSS compliant payment service providers.

2.4 Gaming Activity Data

As part of normal platform operations, phfun33 automatically records:

• Games played, bet amounts, win/loss outcomes, and session durations
• Bonus and promotion usage, wagering history, and loyalty point accumulation
• Responsible gaming tool settings (deposit limits, self-exclusion status, session reminders)
• Customer support communications and chat transcripts

2.5 Technical & Device Data

When you access phfun33, our servers automatically collect certain technical information:

03 How We Use Your Personal Data

phfun33 processes your personal data for the following specific and legitimate purposes:

• Account Management: Creating, maintaining, and securing your phfun33 player account; verifying your identity during login; and managing account preferences and settings.
• KYC & Regulatory Compliance: Verifying your age (21+ requirement), identity, and residential address in compliance with PAGCOR licensing conditions and the Philippines' Anti-Money Laundering Act (AMLA).
• Payment Processing: Processing deposits and withdrawal requests via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, and PESONet; reconciling transactions; and investigating disputed transactions.
• Gaming Services: Delivering the games, live casino, sports betting, e-sabong, bingo, and slot products available on the phfun33 platform; recording game results; and managing bonuses and promotions.
• Responsible Gaming: Monitoring for signs of problem gambling; enforcing deposit limits, session limits, and self-exclusion requests; and contacting players who may need responsible gaming support.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorised account access.
• Customer Support: Responding to your support inquiries, complaints, and feedback through Live Chat and email.
• Service Improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and game selection.
• Marketing Communications: Sending you personalised offers, bonus notifications, and promotional updates — but only where you have provided your consent to receive marketing communications and have not subsequently opted out.

04 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its IRR, phfun33 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing that is necessary to perform the contract between you and phfun33 — including operating your player account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including the Data Privacy Act (RA 10173), AMLA (RA 9160), PAGCOR regulations, and National Internal Revenue Code tax reporting obligations.
• Legitimate Interest: Processing carried out for the legitimate interests of phfun33 in preventing fraud, securing the platform, detecting multi-accounting and bonus abuse, and improving platform services — provided such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookie usage, where you have provided explicit, freely given, specific, informed, and unambiguous consent.

05 Data Sharing & Disclosure

5.1 We Do Not Sell Your Data

phfun33 does not sell, rent, license, or trade your personal data to any third party for their own commercial or marketing purposes. Full stop.

5.2 Authorised Third-Party Service Providers

phfun33 shares personal data with carefully selected third-party service providers who assist us in operating the phfun33 platform. These providers act as data processors under phfun33's instructions and are contractually bound to process data only for the specified purpose and in accordance with applicable Philippine privacy law. They include:

• Payment Processors: GCash (G-Xchange Inc.), PayMaya (Maya Philippines Inc.), InstaPay and PESONet operator banks — for processing deposits and withdrawals
• KYC & Identity Verification Providers: Third-party KYC platforms used to verify government-issued IDs and liveness checks
• Cloud Infrastructure Providers: Server hosting and database management services used to store player data securely
• Game Software Providers: Licensed game studios whose software powers games on the phfun33 platform — these providers may receive anonymised session data for game performance purposes only
• Anti-Fraud & Security Providers: Cybersecurity and fraud detection platforms used to protect player accounts and detect suspicious activity

5.3 Regulatory & Legal Disclosures

phfun33 may disclose your personal data to government authorities, regulators, or law enforcement agencies where required or permitted by Philippine law, including but not limited to:

• PAGCOR, in connection with regulatory audits, investigations, or compliance reporting
• The Anti-Money Laundering Council (AMLC), for suspicious transaction reporting under the AMLA
• The Bureau of Internal Revenue (BIR), for tax reporting obligations on large winnings
• Philippine National Police (PNP) or National Bureau of Investigation (NBI), pursuant to a valid court order or subpoena
• The National Privacy Commission (NPC), in connection with a data breach notification or investigation

06 Cookies & Tracking Technologies

6.1 What Cookies We Use

phfun33 uses the following types of cookies on the platform:

6.2 Managing Cookies

You can control cookie settings through your browser's privacy settings. Note that disabling essential cookies will prevent you from logging into your phfun33 account and using core platform features. phfun33 does not use third-party advertising cookies, retargeting pixels, or social media tracking widgets.

07 Data Retention

phfun33 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your active phfun33 account plus five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of last transaction, as required by the AMLC.
• Financial Transaction Records: Retained for ten (10) years in accordance with Philippine tax and financial reporting obligations.
• Customer Support Records: Retained for three (3) years from the date of the support interaction.
• Marketing Consent Records: Retained for the duration of your marketing consent plus two (2) years to demonstrate compliance.
• Self-Exclusion Records: Retained for five (5) years following the end of a self-exclusion period to prevent re-registration during any cooling-off period.

Upon expiry of the applicable retention period, phfun33 will securely delete or anonymise your personal data in accordance with industry-standard data destruction practices.

08 Data Security Measures

phfun33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and the phfun33 platform is encrypted using industry-standard TLS 1.3 protocols.
• Encryption at Rest: Personal data stored in phfun33 databases is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data is restricted to authorised phfun33 personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Multi-Factor Authentication: All phfun33 staff with access to personal data systems are required to use multi-factor authentication (MFA) for system login.
• Penetration Testing: phfun33 conducts regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses.
• Intrusion Detection Systems: Real-time intrusion detection and prevention systems monitor phfun33 infrastructure for suspicious activity around the clock.
• Staff Training: All phfun33 personnel handling personal data are required to complete data privacy and security training as part of their onboarding and annual refresher programmes.

09 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phfun33. phfun33 is committed to facilitating the exercise of these rights promptly and without undue barriers.

9.1 How to Exercise Your Rights

To exercise any of the rights listed above, submit a written request to phfun33 via email at [email protected] with the subject line "Data Subject Rights Request — [Your Account Username]". phfun33 will acknowledge your request within forty-eight (48) hours and respond substantively within fifteen (15) business days. In complex cases, phfun33 may extend the response period by a further fifteen (15) business days, with prior written notice to you.

phfun33 may require you to verify your identity before processing a data subject rights request, to prevent unauthorised access to another player's personal data. Identity verification will typically involve confirming registered account details or providing a copy of your government-issued ID.

10 Children & Minors

The phfun33 platform is strictly for adults. In accordance with Philippine law governing casino-style gambling and PAGCOR licensing conditions, players must be at least 21 years of age to register and play on the phfun33 platform. phfun33 does not knowingly collect, process, or store personal data from individuals under the age of 21.

All phfun33 account registrations require date of birth submission and are subject to mandatory age verification as part of the KYC process. If phfun33 discovers that a player account has been registered by an individual under 21 years of age, the account will be immediately suspended, all funds will be forfeited in accordance with phfun33 Terms & Conditions, and all personal data associated with the account will be securely deleted from phfun33 systems, subject only to any retention obligations required by law.

11 International Data Transfers

phfun33 is a Philippines-based platform and processes personal data primarily within the Philippines. However, certain third-party service providers engaged by phfun33 — such as cloud infrastructure providers, game software studios, and KYC technology vendors — may process personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, phfun33 ensures that adequate safeguards are in place, including:

• Entering into data processing agreements with third-party providers that include data protection clauses equivalent to those required under Philippine law
• Transferring data only to providers located in countries or operating under frameworks recognised by the NPC as providing adequate data protection
• Limiting the scope of data transferred to only what is strictly necessary for the service being provided

By using the phfun33 platform and agreeing to this Privacy Policy, you acknowledge and consent to the transfer of your personal data to these carefully selected international service providers under the safeguards described above.

12 Third-Party Links & Services

The phfun33 platform may contain links to third-party websites, payment portals, or service providers (such as GCash and PayMaya login interfaces) that are not operated by phfun33. Once you leave the phfun33 platform and visit a third-party website, this Privacy Policy no longer applies. phfun33 has no control over and accepts no responsibility for the privacy practices of any third-party website or service provider.

phfun33 encourages you to review the privacy policies of any third-party services you access in connection with your phfun33 account — particularly the privacy policies of your payment service providers (GCash, PayMaya, BPI, BDO, Metrobank) when conducting financial transactions.

13 Updates to This Privacy Policy

phfun33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC issuances, PAGCOR regulatory requirements, or phfun33 platform operations. When material changes are made to this Policy, phfun33 will notify registered players via email to their registered email address and/or via a prominent notice on the phfun33 platform, at least seven (7) days before the updated Policy takes effect.

Your continued use of the phfun33 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. The current version of this Privacy Policy is always available on this page at phfun33.org/privacy-policy and is identified by the "Last Updated" date at the top of this document.

14 Contact Us & Data Protection Officer

14.1 Data Protection Officer

In compliance with Section 21 of the Philippine Data Privacy Act and NPC Circular No. 16-01, phfun33 has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy and compliance across the phfun33 platform. The phfun33 DPO is registered with the National Privacy Commission.

To contact the phfun33 Data Protection Officer for privacy-related inquiries, data subject rights requests, or data breach concerns, please use the following contact details:

• Email: [email protected] — subject line: "Data Privacy Inquiry — DPO"
• Live Chat: Available 24/7 inside your phfun33 account dashboard — request to speak with the Data Privacy team

14.2 National Privacy Commission

If you are not satisfied with phfun33's response to a data privacy concern or rights request, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. The NPC is the regulatory body responsible for enforcing the Data Privacy Act of 2012 and protecting the rights of Filipino data subjects.