phgreat Privacy Policy

This Privacy Policy ("Policy") describes how phgreat ("phgreat," "we," "us," or "our") collects, processes, stores, and protects the personal information of individuals ("you," "User," or "Player") who access or use the phgreat online gaming platform available at phgreat.xyz, including all associated games, features, promotions, and support services.

This Policy applies to all personal data collected through the phgreat website, mobile application, customer support channels, and any other touchpoint through which you interact with phgreat. It does not apply to third-party websites, services, or platforms that may be referenced in our content — you should review the privacy policies of those services independently.

If you do not agree with any part of this Privacy Policy, please discontinue your use of the phgreat platform. For questions or concerns about how we handle your personal data, please refer to Section 14 (Contact & DPO) of this Policy.

For the purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller responsible for your data is:

phgreat has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and this Policy. You may contact the DPO directly for privacy-related inquiries as described in Section 14.

phgreat collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the platform, and from third parties such as payment processors and identity verification services. The categories of personal data we collect include:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Valid email address and mobile number (Philippine format);
• Username and encrypted password;
• Residential address, including city (e.g., Manila, Cebu, Davao, Quezon City, Makati).

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., SSS ID, PhilHealth ID, Passport, Driver's License, UMID, Postal ID);
• Proof of address documents (e.g., utility bills, bank statements);
• Selfie or facial image submitted for liveness verification purposes.

3.3 Financial & Transaction Data

• Payment method details (e.g., GCash account number, PayMaya account, BPI, BDO, or Metrobank account identifiers — we do not store full bank account numbers or card numbers);
• Deposit and withdrawal transaction history, including amounts in Philippine Peso (₱), timestamps, and payment method used;
• Bonus and promotional credit history.

3.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, outcomes, and session duration;
• Betting history across all phgreat games including Mines Grand, Baseball, Fishing Yi Lu Fa, Crazy 777, Playtech Live, Jacks or Better, and Star Fishing;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

3.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session identifiers, login timestamps, and access logs;
• Cookie and tracking data as described in Section 9.

3.6 Communications Data

• Records of your communications with phgreat's customer support team, including chat transcripts and email correspondence;
• Survey responses and feedback submitted voluntarily.

phgreat uses your personal data only for the purposes described in this Policy. We do not sell your personal data to third parties. The primary purposes for which we process your data are set out in the table below:

Where phgreat uses your personal data for direct marketing purposes (such as sending promotional emails or SMS notifications about bonuses and new games), we will do so only with your prior consent. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting our support team.

Under the Data Privacy Act of 2012, phgreat processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the phgreat Terms and Conditions, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) requirements, PAGCOR regulatory obligations, and tax reporting;
• Legitimate interests: Processing necessary for phgreat's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phgreat does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Payment Processors

We share financial data with payment service providers (including GCash, PayMaya, and partner banks such as BPI, BDO, and Metrobank) to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.

6.2 Identity Verification Providers

We engage third-party KYC and identity verification service providers to assist with age verification and document authentication. These providers process your identity documents solely for verification purposes and are contractually prohibited from using your data for any other purpose.

6.3 Game Technology Providers

Certain games on the phgreat platform are powered by third-party game providers (such as Playtech for Playtech Live). These providers may receive limited gaming session data necessary to deliver the game experience. They are bound by data processing agreements with phgreat.

6.4 Regulatory & Law Enforcement Authorities

phgreat may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive.

6.5 Professional Advisors

We may share data with our legal counsel, auditors, and compliance consultants where necessary for the conduct of their professional services, subject to strict confidentiality obligations.

phgreat retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• Gaming activity logs: Retained for three (3) years from the date of each session;
• Customer support communications: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, phgreat will securely delete or anonymize your personal data in accordance with our data disposal procedures.

phgreat implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the phgreat platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest is encrypted using AES-256 encryption;
• Access controls: Access to personal data is restricted to authorized phgreat personnel on a strict need-to-know basis. All staff with access to personal data undergo regular data privacy training;
• Secure infrastructure: phgreat's platform is hosted on secure, regularly audited server infrastructure with firewalls, intrusion detection systems, and continuous security monitoring;
• Password security: User passwords are stored using one-way cryptographic hashing. phgreat staff cannot view your password in plain text;
• Incident response: phgreat maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected users within the timeframes prescribed by RA 10173.

phgreat uses cookies and similar tracking technologies to operate and improve the platform, personalize your experience, and analyze usage patterns. A cookie is a small text file placed on your device when you visit the phgreat website.

Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting platform functionality;
• Functional cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations;
• Analytics cookies: Help us understand how players use the phgreat platform so we can improve performance and user experience. Data collected is aggregated and anonymized where possible;
• Marketing cookies: Used to deliver relevant promotional content based on your gaming preferences. These are only set with your prior consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phgreat platform. For marketing cookies, you may withdraw your consent at any time through your account settings.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phgreat:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed, as set out in this Policy;
• Right of access: You may request a copy of the personal data phgreat holds about you, along with information about how it is being processed;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please submit a written request to phgreat's Data Protection Officer using the contact details in Section 14. We will respond to all verified requests within fifteen (15) business days, as required by the NPC's guidelines.

phgreat employs age verification procedures at the point of registration and during ongoing KYC reviews to enforce this requirement. If you are a parent or guardian and believe that a minor has registered on the phgreat platform, please contact us immediately at the details provided in Section 14 so that we can take prompt corrective action.

In certain circumstances, phgreat may transfer your personal data to service providers or partners located outside the Philippines — for example, where game technology providers or cloud infrastructure providers operate servers in other jurisdictions. Any such cross-border transfer of personal data will be conducted in accordance with the requirements of the Data Privacy Act of 2012 and the NPC's guidelines on cross-border data transfers.

phgreat ensures that all cross-border data transfers are protected by appropriate safeguards, including contractual data processing agreements that require recipient parties to maintain data protection standards equivalent to those required under Philippine law. We will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate additional safeguards.

phgreat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, phgreat will notify registered users via the email address associated with their account and/or through a prominent notice on the phgreat platform prior to the changes taking effect. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Your continued use of the phgreat platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with the amended Policy, you may close your account in accordance with the phgreat Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phgreat, please contact our Data Protection Officer (DPO) using the details below:

If you are not satisfied with phgreat's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.

For responsible gaming concerns or self-exclusion requests, please visit our Responsible Gaming page. For general platform questions, please visit our FAQ page.