phcast Privacy Policy

phcast takes data privacy seriously. Every Filipino player who creates a phcast account, visits phcast.org, or interacts with any phcast service entrusts us with personal information. This Privacy Policy is our commitment to you — a clear, honest explanation of how phcast handles that information, consistent with Philippine law and international best practices.

This Policy applies to all personal data processed by phcast in connection with the phcast platform, including the website at phcast.org, any mobile-optimised interfaces, live chat support systems, and payment processing integrations. It should be read together with the phcast Terms & Conditions and Responsible Gaming Policy.

By registering a phcast account or continuing to use phcast services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

phcast collects the following categories of personal data, depending on how you interact with our platform:

phcast does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for identity verification and regulatory compliance purposes.

phcast collects personal data through the following channels:

• Direct submission: Information you provide when registering your phcast account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated technical collection: Data collected automatically as you use the phcast platform, including IP addresses, device identifiers, session data, and game logs via server logs and analytics tools;
• Cookies and similar technologies: Browser cookies, web beacons, and local storage used to maintain session state, remember preferences, and analyse platform usage (see Section 7);
• Third-party payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, and other payment partners when you initiate deposits or withdrawals;
• Identity verification services: Data returned from KYC/AML verification partners when processing account verification requests.

phcast processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your phcast account; authenticating your identity at login; processing phcast Login requests;
• Service delivery: Providing access to games, processing bets, calculating winnings, and operating the phcast platform as described in the Terms & Conditions;
• Financial processing: Processing deposits via GCash, Maya, and other Philippine payment methods; processing withdrawal requests; reconciling account balances;
• Regulatory compliance: Conducting KYC and AML (Anti-Money Laundering) checks as required by Philippine law; reporting to PAGCOR and other relevant authorities where legally required;
• Responsible gaming: Monitoring gaming patterns to detect and address problematic gambling behaviour; enforcing self-exclusion requests; applying deposit and loss limits;
• Customer support: Responding to support queries, resolving disputes, and processing complaints;
• Security: Detecting and preventing fraud, unauthorised account access, and abuse of the phcast platform;
• Marketing (with consent): Sending promotional emails, SMS notifications, or in-platform messages about phcast offers, new games, and promotions — only where you have provided explicit marketing consent;
• Platform improvement: Analysing aggregated, anonymised usage data to improve the phcast user experience, game library, and payment systems.

Under the Philippine Data Privacy Act of 2012 (RA 10173), phcast processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between phcast and you as a registered player (account management, game access, financial transactions);
• Legal obligation: Processing required to comply with Philippine laws, including AMLA obligations, PAGCOR regulatory requirements, and NPC directives;
• Legitimate interests: Processing for fraud detection, platform security, and responsible gaming monitoring — where these interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where you have given explicit, freely-given, specific, informed, and unambiguous consent. You may withdraw marketing consent at any time via your phcast account settings.

phcast does not sell your personal data to third parties. phcast shares personal data only in the following circumstances and only to the extent necessary:

• Payment processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other Philippine payment service providers receive the minimum data required to process your financial transactions;
• KYC/AML service providers: Identity verification partners receive identity documents and biometric data solely for the purpose of verifying your phcast account in compliance with Philippine regulations;
• Game providers: Software providers supplying games to the phcast platform (e.g., Pragmatic Play, PG Soft, Jili) may receive session identifiers and game-play data for game delivery and RNG integrity purposes;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where disclosure is required by law or court order;
• Technology service providers: Cloud hosting, analytics, and customer support technology vendors operating under data processing agreements that bind them to confidentiality and data protection obligations consistent with RA 10173.

All third-party data processors engaged by phcast are required to handle personal data in accordance with this Privacy Policy and applicable Philippine data protection law.

phcast uses cookies and similar technologies on phcast.org to deliver and improve the platform experience. The following types of cookies are used:

• Essential cookies: Strictly necessary for the phcast platform to function — including session management, login authentication, and security tokens. These cannot be disabled without impairing platform functionality;
• Functional cookies: Remember your preferences, language settings, and responsible gaming configurations between sessions;
• Analytics cookies: Collect anonymised, aggregated data about how players use phcast (pages visited, session duration, game preferences) to help phcast improve the platform. No personally identifiable information is shared through analytics cookies;
• Marketing cookies: Used only with your explicit consent to deliver relevant phcast promotions and measure campaign effectiveness.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing phcast, but may affect certain personalisation features.

phcast retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods required by Philippine law and regulation:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by AMLA obligations and PAGCOR regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming and session logs: Retained for a minimum of three (3) years;
• Support communications: Retained for two (2) years from the date of last interaction;
• Marketing consent records: Retained for the duration of your account plus two (2) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

phcast implements technical and organisational security measures proportionate to the risks associated with processing your personal data, including:

• 256-bit SSL/TLS encryption on all data transmitted between your device and phcast servers;
• Encrypted storage of passwords using industry-standard salted hashing algorithms (bcrypt/Argon2);
• Access controls restricting employee access to personal data to those with a legitimate operational need;
• Regular penetration testing and security audits of phcast infrastructure;
• Two-factor authentication options for player accounts;
• Anomaly detection systems monitoring for unusual login patterns and suspicious transaction activity;
• Data breach response procedures, including NPC notification within 72 hours of discovery of a notifiable breach as required by NPC Circular 16-03.

While phcast employs industry-standard security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phcast account credentials and for using secure, private network connections when accessing your account.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by phcast:

• Right to be Informed: The right to know whether phcast is processing your personal data and the basis for such processing — as provided in this Privacy Policy;
• Right to Access: The right to obtain a copy of the personal data phcast holds about you, and information about how it is being used;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly from your phcast account settings;
• Right to Erasure / Blocking: The right to request deletion or blocking of personal data that is no longer necessary, was unlawfully processed, or where consent has been withdrawn — subject to phcast's legal retention obligations;
• Right to Object: The right to object to processing of your personal data for direct marketing purposes, which you may exercise at any time by updating your marketing preferences in your phcast account or by contacting support;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Damages: The right to be compensated for damages sustained due to phcast's inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of personal data;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phcast has violated your data privacy rights.

To exercise any of the above rights, please contact phcast's Data Protection Officer (DPO) using the contact details in Section 14. phcast will respond to verified rights requests within fifteen (15) working days of receipt.

phcast does not knowingly collect personal data from individuals under 21 years of age. The phcast platform is strictly restricted to adults aged 21 and above in accordance with Philippine gaming regulations.

If phcast becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be suspended. If you believe a minor has created a phcast account, please contact phcast support immediately via Live Chat so that appropriate action can be taken.

Some of phcast's technology service providers and game software partners may be located outside the Philippines. Where personal data is transferred to entities in other jurisdictions, phcast ensures that adequate safeguards are in place, including:

• Data processing agreements incorporating NPC-compliant data protection clauses;
• Transfer only to countries or organisations that provide an adequate level of data protection as assessed under RA 10173;
• Application of technical security measures (encryption, pseudonymisation) to minimise privacy risk during transfer.

phcast may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. Material changes will be communicated to registered players via the email address on file or via an in-platform notification prior to the effective date, where reasonably practicable.

The current version of the Privacy Policy is always available at phcast.org/privacy-policy. The "Last updated" date at the top of this page indicates when the most recent revision was published. Your continued use of phcast following any update constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or rights requests relating to this Privacy Policy or phcast's handling of your personal data, please contact phcast's Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 on the phcast platform — please state your request is a Data Privacy matter

phcast acknowledges all privacy-related requests within five (5) business days. If you are not satisfied with phcast's response to a privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC).