phpreal Privacy Policy

1. Overview

phpreal ("we," "us," "our") is the operator of the online gaming platform accessible at phpreal.org. As a PAGCOR-compliant online gaming operator serving Filipino players, phpreal is required by law to collect and process certain personal information for regulatory, security, and operational purposes.

This Privacy Policy applies to all personal data collected through the phpreal website, mobile platform, customer support channels, and any other touchpoints through which you interact with phpreal. It covers data collected from registered players, prospective players, and visitors to the phpreal platform.

phpreal acts as the Personal Information Controller (PIC) as defined under the Philippine Data Privacy Act of 2012 (RA 10173). We are responsible for ensuring that your personal data is processed lawfully, fairly, and transparently.

2. Personal Data We Collect

phpreal collects the following categories of personal data from players and platform users:

• Identity Data: Full legal name, date of birth, nationality, government-issued ID number (e.g., PhilSys ID, passport, driver's license, SSS/GSIS number), and profile photograph where required for KYC verification;
• Contact Data: Email address, mobile number, and residential address (including barangay, city/municipality, province, and ZIP code);
• Financial Data: GCash account number, PayMaya account details, bank account information (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records, and account balance information;
• Account Data: phpreal username, encrypted password, account registration date, login history, session data, and account preferences;
• Gaming Data: Game history, wagering records, bet amounts, game outcomes, bonus usage, and responsible gaming tool settings;
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, and cookies;
• Communications Data: Records of your communications with phpreal customer support, including chat logs, email correspondence, and support ticket history.

3. How We Collect Your Data

phpreal collects personal data through the following means:

• Direct Collection: Information you provide when registering a phpreal account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated Collection: Technical data collected automatically when you access the phpreal platform, including through cookies, web beacons, log files, and similar tracking technologies;
• Third-Party Sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, and banking partners; fraud prevention data from security service providers; and regulatory data from PAGCOR where required by law;
• Publicly Available Sources: In limited circumstances, phpreal may collect data from publicly available sources for fraud prevention and regulatory compliance purposes.

4. Purpose of Processing

phpreal processes your personal data for the following purposes:

• Account Management: To create, maintain, and manage your phpreal player account, including phpreal login authentication and account security;
• Identity Verification (KYC): To verify your identity and age (21+) as required by PAGCOR regulations and Philippine anti-money laundering laws;
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods;
• Gaming Services: To provide access to phpreal's casino games, sports betting, bingo, slots, and other gaming products;
• Regulatory Compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Responsible Gaming: To monitor gaming activity, enforce deposit limits, process self-exclusion requests, and identify players who may need responsible gaming support;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Marketing: To send you promotional offers, bonus notifications, and platform updates, subject to your communication preferences (you may opt out at any time);
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the phpreal platform;
• Platform Improvement: To analyze usage patterns and improve the phpreal platform's performance, features, and user experience.

5. Legal Basis for Processing

phpreal processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to perform our contract with you (i.e., providing phpreal's gaming services under our Terms & Conditions);
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, and other applicable Philippine laws;
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

phpreal does not sell your personal data to third parties. phpreal may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory direction;
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions;
• KYC & Fraud Prevention Providers: Identity verification and fraud detection service providers engaged by phpreal to fulfill its regulatory obligations;
• Technology Service Providers: Cloud hosting, platform infrastructure, and customer support technology providers who process data on phpreal's behalf under strict data processing agreements;
• Game Software Providers: Licensed game developers whose software is integrated into the phpreal platform, to the extent necessary for game delivery and fairness auditing;
• Law Enforcement: Philippine law enforcement agencies, where phpreal is legally required to disclose data in connection with a criminal investigation or court order.

All third parties with whom phpreal shares personal data are required to maintain appropriate data security standards and to process your data only for the specified purpose.

7. Data Retention

phpreal retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to the following retention periods:

• Active Account Data: Retained for the duration of your phpreal account and for a minimum of five (5) years after account closure, as required by PAGCOR and AMLA regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA requirements;
• KYC Documents: Retained for a minimum of five (5) years after account closure or the last transaction, whichever is later;
• Customer Support Records: Retained for three (3) years from the date of the last interaction;
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications.

After the applicable retention period, phpreal will securely delete or anonymize your personal data in accordance with its data disposal procedures.

8. Data Security

phpreal implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phpreal platform;
• Encryption of sensitive data at rest, including financial information and government ID data;
• Multi-factor authentication options for phpreal account login;
• Regular security audits and penetration testing of the phpreal platform;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Employee data privacy training and confidentiality obligations;
• Incident response procedures for detecting and responding to data breaches.

In the event of a personal data breach that is likely to result in harm to affected players, phpreal will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.

9. Cookies & Tracking Technologies

phpreal uses cookies and similar tracking technologies to enhance your experience on the platform. The following types of cookies are used:

• Essential Cookies: Required for the phpreal platform to function correctly, including session management and phpreal login authentication. These cannot be disabled.
• Performance Cookies: Used to analyze how players use the phpreal platform, helping us identify and fix performance issues. Data collected is aggregated and anonymized.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations.
• Marketing Cookies: Used to deliver relevant promotional content. These are only set with your consent and can be disabled through your browser settings.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core phpreal gaming services, but may limit certain personalization features.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phpreal:

• Right to Be Informed: The right to know how your personal data is being collected and processed — which this Privacy Policy fulfills;
• Right of Access: The right to request a copy of the personal data phpreal holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to phpreal's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe phpreal has violated your data privacy rights.

To exercise any of these rights, please contact phpreal's Data Protection Officer at [email protected]. phpreal will respond to your request within 15 business days.

11. Minors & Age Restriction

The phpreal platform is strictly for individuals aged 21 years and above, as required by Philippine law and PAGCOR regulations. phpreal does not knowingly collect personal data from individuals under the age of 21. If phpreal discovers that personal data has been collected from a person under 21, the account will be immediately suspended and the data will be deleted in accordance with phpreal's data disposal procedures.

If you are a parent or guardian and believe that your child has registered on the phpreal platform, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

phpreal reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. When material changes are made, phpreal will notify registered players via email or a prominent notice on the platform. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the phpreal platform following the posting of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised policy, you must cease using the platform and may request account closure.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or phpreal's data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Support Hours: Daily, 8:00 AM – 12:00 MN Philippine Standard Time (PHT)
• Platform: phpreal.org

phpreal is committed to resolving all data privacy inquiries promptly and transparently. If you are not satisfied with phpreal's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.