phgems Privacy Policy

1. Introduction

1.1phgems is committed to protecting the privacy and personal data of all users on the platform. We recognise the trust you place in us when you provide your personal information, and we take our obligations under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations seriously.

1.2This Privacy Policy sets out the types of personal data we collect, the purposes for which we use it, how we secure it, and your rights in relation to that data. Where we act as a data controller, we are responsible for ensuring your personal data is processed lawfully, fairly, and transparently.

2. Scope of This Policy

2.1This Privacy Policy applies to all personal data collected by phgems through the phgems.cam website, any phgems mobile-optimised interface, and all associated gaming, payment, and support services provided by phgems.

2.2This Policy does not extend to third-party websites, applications, or services that may be linked from the phgems platform. We are not responsible for the privacy practices of such external services, and you should review their respective privacy policies before providing any personal information.

3. Information We Collect

3.1phgems collects the following categories of personal information:

3.1.1 Registration & Account Information

• Full legal name;
• Date of birth;
• Residential address;
• Email address;
• Mobile phone number;
• Chosen username and password (password is hashed and not stored in plain text).

3.1.2 Identity Verification (KYC) Information

• Copy of government-issued identification document (e.g., Philippine passport, driver's license, PhilSys National ID);
• Proof of address (e.g., utility bill, bank statement);
• Photographic identity verification (selfie with ID where required by our verification provider).

3.1.3 Payment & Transaction Information

• GCash mobile number, PayMaya account details, bank account information, or card details (last four digits only; full card data is processed by PCI-DSS compliant third-party payment processors);
• Transaction history, including deposits, withdrawals, wagers, and winnings;
• Source of funds documentation where required by Anti-Money Laundering (AML) regulations.

3.1.4 Gameplay & Session Information

• Betting history, game preferences, and session timestamps;
• IP address, device type, browser type, operating system, and screen resolution;
• Cookies and tracking identifiers (see Section 10 for details).

3.1.5 Communications & Support Records

• Correspondence with phgems customer support, including email, live chat transcripts, and any documentation submitted as part of a support query or dispute resolution process.

4. How We Use Your Information

4.1phgems processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your phgems account, including authentication, login security, and password reset services;
• Regulatory Compliance: To comply with KYC, AML, and age verification obligations under PAGCOR regulations and the Anti-Money Laundering Act (AMLA);
• Payment Processing: To process deposits, withdrawals, and refunds via GCash, PayMaya, bank transfers, and card payments;
• Fraud Prevention & Security: To detect and prevent fraudulent activity, duplicate accounts, bonus abuse, collusion, and unauthorised access to the platform;
• Responsible Gaming: To enforce deposit limits, loss limits, self-exclusion requests, and cooling-off periods as part of our Responsible Gaming programme;
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance;
• Platform Improvement: To analyse user behaviour, gameplay patterns, and technical performance data in order to improve the phgems platform and user experience;
• Marketing & Promotions: Where you have provided consent, to send promotional emails, SMS, or in-platform notifications about bonuses, tournaments, and new games (you may opt out at any time);
• Legal Obligations: To comply with court orders, legal processes, or requests from government authorities in the Philippines.

5. Legal Basis for Processing

5.1Under the Data Privacy Act of 2012, phgems processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions you accepted when registering your phgems account;
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including PAGCOR licensing conditions, AML obligations, and tax reporting;
• Legitimate Interests: Processing is necessary for fraud detection, platform security, and improving our services, provided such processing does not override your fundamental rights;
• Consent: Where you have explicitly consented to marketing communications or optional data processing activities (consent may be withdrawn at any time).

6. Disclosure to Third Parties

6.1phgems does not sell, rent, or trade your personal information. We may disclose your personal data to the following third parties under strict contractual confidentiality obligations:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and card processing partners for deposit and withdrawal processing;
• KYC & Verification Services: Third-party identity verification providers used to confirm your age and identity as required by PAGCOR;
• Gaming Software Provid ers: Suppliers of slot games, live casino software, bingo platforms, and sports betting feeds, who may collect limited session data for game integrity and RTP auditing purposes;
• Cloud Hosting & Infrastructure: Secure cloud service providers that host the phgems platform and database infrastructure;
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law;
• Legal & Compliance Advisors: External legal counsel, auditors, and compliance consultants engaged by phgems, subject to professional confidentiality obligations;
• Fraud Prevention Services: Third-party anti-fraud and risk management platforms used to detect duplicate accounts, collusion, and suspicious betting patterns.

6.2All third-party service providers engaged by phgems are required to process your personal data only in accordance with our instructions and to maintain equivalent data protection standards.

7. Data Security Measures

7.1phgems implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted to and from phgems is encrypted using 256-bit SSL/TLS protocols;
• Password Hashing: User passwords are hashed using bcrypt or equivalent one-way cryptographic algorithms and are never stored in plain text;
• Access Controls: Personal data is accessible only to authorised phgems personnel on a need-to-know basis, with role-based access controls and audit logging;
• Firewall & Intrusion Detection: The phgems infrastructure is protected by enterprise-grade firewalls and intrusion detection systems;
• Regular Security Audits: phgems conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities;
• Data Segregation: Sensitive KYC documents and payment information are stored in segregated, encrypted databases with restricted access.

7.2While phgems employs robust security measures, no system is entirely immune to attack. You are responsible for maintaining the confidentiality of your login credentials and for notifying phgems immediately if you suspect unauthorised access to your account.

8. Data Retention Period

8.1phgems retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Philippine law. Typical retention periods are as follows:

• Active Accounts: Personal data is retained for the duration of your active phgems account and for a period of five (5) years following account closure, as required by PAGCOR record-keeping obligations and AML regulations;
• Transaction Records: Financial transaction data, including deposit and withdrawal history, is retained for a minimum of five (5) years from the date of the transaction for tax and audit purposes;
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the last transaction, whichever is later;
• Marketing Communications: If you have opted in to marketing communications, your contact information is retained until you withdraw consent, at which point it is removed from marketing lists within thirty (30) days;
• Dispute & Legal Records: Records related to disputes, complaints, or legal proceedings are retained until the matter is fully resolved and any applicable appeal or limitation period has expired.

8.2Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

9. Your Data Protection Rights

9.1Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phgems:

• Right to Access: You may request a copy of the personal data we hold about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phgems has violated your data protection rights.

9.2To exercise any of these rights, please contact phgems support at [email protected] (plain text, not a clickable link). We will respond to your request within thirty (30) days, or inform you if additional time is required.

10. Cookies & Tracking Technologies

10.1phgems uses cookies and similar tracking technologies to enhance your user experience, maintain session state, and analyse platform usage. Cookies are small text files stored on your device by your web browser.

10.2The types of cookies used by phgems include:

• Essential Cookies: Required for platform functionality, including login authentication, session management, and security features. These cookies cannot be disabled without impairing core platform services;
• Performance Cookies: Collect anonymous data on how users interact with the phgems platform, including page load times, error rates, and popular game categories, to help us improve performance;
• Functional Cookies: Remember your preferences, such as language selection, display settings, and game filters;
• Marketing Cookies: Track your interaction with promotional campaigns and measure the effectiveness of phgems marketing activities (used only with your consent).

10.3You may disable non-essential cookies through your browser settings. Please note that disabling essential cookies will prevent you from accessing certain features of the phgems platform.

11. Minors & Age Verification

11.1phgems does not knowingly collect personal data from individuals under the age of 21 years. Use of the phgems platform is strictly restricted to adults aged 21 and above, in accordance with PAGCOR regulations.

11.2If we become aware that we have inadvertently collected personal data from an individual under the age of 21, we will immediately suspend the account, void any transactions, and delete all associated personal data.

11.3Parents or guardians who believe their child has provided personal information to phgems should contact us immediately at [email protected] (plain text, not a clickable link).

12. International Data Transfers

12.1phgems primarily stores and processes personal data within the Philippines or in secure cloud infrastructure located in jurisdictions with adequate data protection standards recognised by the National Privacy Commission.

12.2Where personal data is transferred outside the Philippines to third-party service providers (such as payment processors or cloud hosting providers), phgems ensures that such transfers are protected by:

• Standard contractual clauses approved by the NPC or equivalent data protection authority;
• Certification under internationally recognised data protection frameworks (e.g., ISO 27001); or
• Other legally recognised safeguards ensuring an adequate level of data protection.

13. Changes to This Privacy Policy

13.1phgems reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. Amended versions will be posted on this page with an updated effective date.

13.2Where amendments are material and affect your rights, phgems will endeavour to notify you via email or in-platform notification at least thirty (30) days before the changes take effect.

13.3Your continued use of the phgems platform following the posting of an amended Privacy Policy constitutes your acceptance of the revised terms.

14. Contact & Data Protection Officer

14.1If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phgems, you may contact us at:

phgems Data Protection Team
Email: [email protected]
Subject Line: Data Privacy Inquiry

14.2phgems has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and handling data subject requests. The DPO may be contacted via the email address above.

14.3If you are not satisfied with phgems' response to your data protection concern, you have the right to lodge a complaint with the National Privacy Commission at:

National Privacy Commission
5th Floor, Philippines International Convention Center (PICC), Vicente Sotto Street, Pasay City, Metro Manila, Philippines
Website: privacy.gov.ph