phmoney Privacy Policy – How We Protect Your Data

1. Data Controller

phmoney operates the online gaming platform at https://phmoney.asia and acts as the data controller for all personal information collected through the platform. As data controller, phmoney determines the purposes and means of processing your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

If you have questions about how phmoney handles your data, or if you wish to exercise any of your rights under Philippine data privacy law, you may contact us at support@phmoney.asia. We are committed to responding to all data-related enquiries within 15 business days of receipt.

2. Data We Collect

phmoney collects personal information in the categories described below. We collect only what is necessary for the specific purposes outlined in Section 4.

phmoney does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data such as a government identification number is collected, it is handled with heightened security measures.

3. How Data Is Collected

phmoney collects your personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a promotion.
• Automatically during platform use — through server logs, cookies, and session tracking tools that record your device, IP address, and interaction with the phmoney platform.
• From payment providers — when you initiate a transaction through GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, or a Visa or Mastercard payment. Payment providers share transaction reference data and, where required for verification, limited account holder details.
• From third-party identity verification services — where phmoney uses an authorised KYC or AML screening provider to assist with identity checks.

4. Why We Use Your Data

phmoney processes your personal data for the following purposes. Each processing activity is based on at least one lawful ground under the Data Privacy Act of 2012.

• Account registration and management: To create, maintain, and secure your phmoney account, including verifying your identity and age eligibility.
• Processing transactions: To handle deposits and withdrawals accurately and securely through your chosen local payment method in Philippine pesos.
• Regulatory and legal compliance: To meet anti-money laundering, counter-terrorism financing, and other regulatory obligations applicable to the phmoney platform. This includes maintaining transaction records and reporting to relevant Philippine authorities where required by law.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling behaviour, apply account restrictions set by the player, and comply with responsible gaming obligations.
• Customer support: To respond to account queries, investigate disputes, and maintain records of communications for quality and compliance purposes.
• Security and fraud prevention: To detect and investigate suspicious activity, protect the integrity of the platform, and prevent account compromise.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the phmoney interface, identify technical issues, and develop better services for Filipino players.
• Promotions and communications: To inform you about phmoney offers and promotions relevant to your account, where you have not opted out of such communications.

5. Sharing Your Data

phmoney does not sell, rent, or trade your personal data to third-party marketers or data brokers. Sharing of your data is limited to the following categories of recipients, and only to the extent necessary:

• Payment service providers: GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, Visa, and Mastercard receive the transaction data required to process your payments. Each provider has its own data protection obligations.
• Identity verification providers: Authorised KYC and AML service providers may receive identity document data for verification purposes. These providers process data solely on phmoney's instructions and under appropriate data processing agreements.
• Technology and platform providers: Service providers who support the operation of phmoney's infrastructure, including hosting, game software providers, and customer support tools, may have access to limited data as required to deliver their services.
• Regulatory and law enforcement authorities: phmoney is required under Philippine law to disclose account and transaction information to competent authorities upon lawful request, including the Anti-Money Laundering Council, the National Privacy Commission, and other relevant agencies. Such disclosures may be made without prior notice to the account holder where required by law.
• Business transfers: In the event of a merger, acquisition, or asset sale involving phmoney, personal data may be transferred to the successor entity. Affected players will be notified in advance where practically possible.

6. How Long We Keep Your Data

phmoney retains personal data for as long as your account is active and for a period after account closure as required by applicable law and legitimate business purposes. The following general retention guidelines apply:

• Active account data: Retained for the duration of account activity and for a minimum period after final account closure as required by Philippine AML and gaming regulations.
• Transaction records: Financial transaction records are retained for a minimum of five years following the relevant transaction date, in compliance with anti-money laundering record-keeping requirements.
• KYC and verification documents: Retained for the period required by applicable Philippine regulatory guidance.
• Support communications: Retained for a reasonable period to support dispute resolution and platform quality review.
• Technical and log data: Retained for a shorter period appropriate for security and troubleshooting purposes.

When data is no longer required, phmoney will delete or anonymise it in a secure manner. You may request information about specific retention periods for your data by contacting support@phmoney.asia.

7. Security Measures

phmoney applies a combination of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption of data in transit using secure protocols.
• Access controls that restrict employee access to personal data on a need-to-know basis.
• Regular security assessments of the phmoney platform and its infrastructure.
• Incident response procedures for suspected data breaches, including notification obligations under the Data Privacy Act of 2012.
• Secure storage of identity verification documents submitted through the KYC process.

No system can guarantee absolute security. Players also have a role in account security by using strong, unique passwords, enabling available security features, and never sharing phmoney login credentials with another person. If you suspect that your account has been compromised, contact phmoney support immediately at support@phmoney.asia.

8. Cookies and Tracking Technologies

phmoney uses cookies and similar tracking technologies on the platform. A cookie is a small file placed on your device that helps the platform function, remember your preferences, and analyse how the site is used.

The categories of cookies used by phmoney include:

• Essential cookies: Required for the platform to function. These handle session management, login authentication, and security features. They cannot be disabled without affecting platform access.
• Performance and analytics cookies: Used to understand how players interact with phmoney — which pages are visited, where sessions start and end, and what technical issues may arise. Data collected through these cookies is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences such as language settings or previously selected game filters, so you do not have to reconfigure them every session.
• Marketing cookies: Used to tailor promotional content within the phmoney platform. Where these cookies require consent under applicable law, phmoney will request that consent before placing them.

Your browser settings allow you to control or block cookies. However, disabling essential cookies will affect your ability to access and use the phmoney platform normally.

9. Minors

phmoney is strictly an adults-only platform. No person under the age of 21 may register for or use a phmoney account. phmoney does not knowingly collect personal data from minors.

If phmoney becomes aware that personal data has been collected from a person under the minimum age, the relevant account will be closed immediately and the data will be deleted as promptly as technically possible, subject to any legal retention obligations.

Account holders are responsible for ensuring that no minor gains access to their phmoney account or uses the platform through their device. Sharing login credentials with a minor is a serious breach of the phmoney Terms and Conditions.

10. Your Data Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by phmoney. To exercise any of these rights, contact support@phmoney.asia with your request and relevant account details.

phmoney will respond to all data rights requests within 15 business days. In complex cases, this may be extended by a further 15 business days with notice. Some rights are subject to legal limitations — for example, data retained to comply with AML obligations may not be eligible for early deletion even if a deletion request is submitted.

If you believe phmoney has mishandled your personal data, you may lodge a complaint with the National Privacy Commission of the Philippines at www.privacy.gov.ph.

11. Cross-Border Data Transfers

Some phmoney service providers and technology partners may be based outside the Philippines. Where personal data is transferred to a jurisdiction other than the Philippines, phmoney takes steps to ensure that appropriate safeguards are in place to protect your data at a standard consistent with the Data Privacy Act of 2012.

These safeguards may include data processing agreements that require overseas processors to handle data only on phmoney's instructions and to implement security measures equivalent to those required under Philippine law. If you would like information about a specific cross-border data transfer involving your personal data, contact support@phmoney.asia.

12. Changes to This Privacy Policy

phmoney may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our data practices. When material changes are made, phmoney will notify registered players via email or in-platform notification before the changes take effect.

The updated Privacy Policy will always be published on this page with a revised review date at the top. It is your responsibility to check this page periodically. Continuing to use phmoney after a change has been notified constitutes acceptance of the updated policy.

If a proposed change is one that you are not comfortable with, you may close your account and request deletion of your personal data in accordance with Section 10 and Section 6 of this policy.

13. Contact and Complaints

For any question, concern, or request related to your personal data and how phmoney handles it, contact us through the following channels:

• Email: support@phmoney.asia
• Live chat: Available through your logged-in phmoney account, 24 hours a day

phmoney aims to resolve all data-related queries fairly and promptly. If you are not satisfied with our response, you have the right to escalate a complaint to the National Privacy Commission of the Philippines, which is the relevant supervisory authority for data protection matters in the country.

For account-related questions that are not specifically about data privacy, visit the phmoney FAQ or contact support through your account. For responsible gaming tools and self-exclusion requests, visit the Responsible Gaming page.