phcast Privacy Policy

phcast ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access or use the phcast platform at phcast.club ("the Platform"). This Privacy Policy has been prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as well as applicable PAGCOR data governance standards.

By registering a phcast account or using any part of the phcast platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, please do not use phcast.

1. Who We Are (Data Controller)

For the purposes of the Data Privacy Act of 2012, phcast is the personal information controller in respect of personal data collected through the phcast platform. phcast is responsible for ensuring that your personal data is processed lawfully, fairly, and transparently in accordance with this Privacy Policy and applicable Philippine law.

If you have any questions about how phcast handles your personal data, you may contact our Data Protection Officer via live chat at phcast.club or by email at [email protected].

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register for a phcast account, use phcast services, or contact phcast support, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued Philippine ID details (e.g., PhilSys National ID, passport number, driver's licence number, SSS/GSIS number);
• Contact Data: Email address, Philippine mobile number, and residential address;
• Financial Data: GCash account details, PayMaya account details, bank account details (BPI, BDO, Metrobank), and transaction history on the phcast platform;
• Account Data: phcast username, encrypted password, account preferences, and communication opt-in choices;
• Verification Data: Copies of government-issued IDs, selfies, or proof-of-address documents submitted during KYC verification.

2.2 Data Collected Automatically

When you access phcast, we automatically collect certain technical data, including:

• Device and Technical Data: IP address, device type, operating system, browser type and version;
• Usage Data: Pages visited, games played, session duration, login timestamps, and in-game actions;
• Cookie Data: Session identifiers, authentication tokens, and platform preference data stored via cookies (see Section 8).

3. How We Use Your Personal Data

phcast uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Identity, Contact, Account Data
Processing deposits and withdrawals	Financial, Identity Data
KYC identity verification (PAGCOR requirement)	Identity, Verification Data
Preventing fraud, money laundering, and cheating	Identity, Financial, Usage, Device Data
Providing customer support	Identity, Contact, Account Data
Sending transactional communications (deposit confirmations, withdrawal status)	Contact Data
Sending promotional communications (with your consent)	Contact Data
Responsible gaming monitoring and enforcement	Usage, Financial Data
Improving platform performance and user experience	Usage, Device, Cookie Data
Legal and regulatory compliance	All categories as required

4. Legal Basis for Processing

phcast processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to perform the phcast Terms & Conditions contract with you (account operation, payment processing, game delivery);
• Legal Obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine law;
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement — provided such interests are not overridden by your rights;
• Consent: Processing for marketing communications, which you may withdraw at any time.

5. Data Sharing and Disclosure

phcast does not sell, rent, or trade your personal data to third parties for commercial purposes. phcast may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing your financial transactions;
• KYC and Identity Verification Providers: Third-party identity verification services engaged by phcast to fulfil PAGCOR and AMLA compliance obligations;
• Game Content Providers: Licensed game software providers who may process limited technical data to deliver their games on the phcast platform;
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies where disclosure is required by law or court order;
• Cloud Infrastructure Providers: Data hosting and cloud service providers who process data solely on phcast's instructions under strict data processing agreements.

All third parties who process personal data on phcast's behalf are required to comply with the Data Privacy Act of 2012 and to implement appropriate technical and organisational security measures.

6. Data Retention

phcast retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Specific retention periods include:

• Account Data: Retained for the duration of your phcast account and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, as required by the Anti-Money Laundering Act;
• KYC Verification Documents: Retained for a minimum of five (5) years following the completion of verification or account closure, whichever is later;
• Usage and Technical Logs: Retained for up to twenty-four (24) months for platform security and performance analysis purposes;
• Marketing Consent Records: Retained for the duration of your account and for twelve (12) months following any opt-out.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

7. Data Security

phcast implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data transmitted to and from the phcast platform;
• Encrypted storage for sensitive personal data, including passwords (stored as salted cryptographic hashes) and financial credentials;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Two-factor authentication available for all phcast accounts;
• Regular security audits and penetration testing of the phcast platform;
• Formal data breach response procedures with notification timelines consistent with the Data Privacy Act of 2012.

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, phcast will notify you and the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by Philippine law.

8. Cookies and Tracking Technologies

phcast uses cookies and similar tracking technologies to operate and improve the platform. The cookies used by phcast fall into the following categories:

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without disrupting your phcast experience;
• Functional Cookies: Used to remember your preferences, such as language settings and game lobby layout;
• Analytics Cookies: Used by phcast's internal analytics tools to understand how users interact with the platform, for the purpose of improving service quality. Data collected is aggregated and not linked to individual identities for analytics purposes.

phcast does not use third-party behavioural advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies may prevent access to certain phcast features.

9. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phcast:

• Right to be Informed: The right to know what personal data phcast holds about you and how it is used (fulfilled by this Privacy Policy);
• Right to Access: The right to request a copy of the personal data phcast holds about you;
• Right to Correction: The right to request correction of inaccurate, incomplete, or outdated personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to phcast's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact phcast via live chat at phcast.club or by email at [email protected]. phcast will respond to valid data rights requests within fifteen (15) business days. Some requests may be subject to verification of your identity before processing.

10. Third-Party Links

The phcast platform does not contain links to third-party websites beyond those necessary to operate the platform's payment and verification functions. This Privacy Policy applies solely to personal data processed by phcast at phcast.club. phcast is not responsible for the privacy practices of any third-party service providers, though all processors engaged by phcast are subject to contractual data protection obligations consistent with this Policy.

11. Children's Privacy and Age Restriction

phcast is strictly prohibited for use by individuals under the age of 21, in accordance with PAGCOR regulations. phcast does not knowingly collect personal data from individuals under 21. If phcast becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately closed and all personal data will be securely deleted, subject to any mandatory regulatory retention requirements.

If you believe a person under the age of 21 has accessed phcast, please contact phcast support immediately via live chat or at [email protected].

12. Changes to This Privacy Policy

phcast may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered phcast users via the email address on file, or through a prominent notice on the phcast platform, at least fourteen (14) days before the change takes effect.

Your continued use of phcast following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you may request voluntary account closure by contacting phcast support.

13. Contact and Data Protection Officer

For any privacy-related enquiry, data rights request, or concern about how phcast handles your personal data, please contact:

• Live Chat: Available 24/7 on the phcast platform at phcast.club
• Email: [email protected]

phcast aims to respond to all privacy enquiries within five (5) business days. For complaints that cannot be resolved through phcast's internal process, you may escalate the matter to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.