phgrate Privacy Policy

1 Data Controller

phgrate operates as the data controller for all personal information collected through the phgrate platform at phgrate.com. As data controller, phgrate determines the purposes and means by which your personal data is processed.

phgrate is committed to processing personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC). Where phgrate engages third-party service providers to process data on its behalf, those providers act as data processors and are contractually bound to handle your data only as directed by phgrate and in compliance with applicable law.

2 Personal Data We Collect

phgrate collects the following categories of personal data from players and platform users:

phgrate does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive information is collected (such as government ID numbers), it is handled with heightened security controls.

3 How We Collect Your Data

phgrate collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the phgrate platform, including through cookies, web beacons, and server logs. This data is collected to ensure platform security, prevent fraud, and improve user experience.
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-money laundering (AML) compliance tools; payment verification data from payment processors such as GCash and PayMaya.

4 Purposes of Processing

phgrate processes your personal data for the following purposes:

1. Account management: To create, maintain, and administer your phgrate player account, including processing deposits and withdrawals.
2. Identity and age verification: To verify that you are who you say you are and that you meet the minimum age requirement of 21 years, as required by PAGCOR regulations.
3. Regulatory compliance: To comply with anti-money laundering (AML) obligations, PAGCOR reporting requirements, and other applicable Philippine laws and regulations.
4. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the phgrate platform.
5. Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
6. Responsible gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to administer self-exclusion and limit-setting tools.
7. Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and security of the phgrate platform.
8. Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where permitted by applicable law. You may opt out at any time.

5 Legal Basis for Processing

phgrate processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and phgrate — including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legal requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

phgrate does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• KYC and AML providers: Third-party identity verification and anti-money laundering screening services engaged by phgrate to fulfill regulatory obligations.
• Game software providers: Licensed game developers whose titles are available on the phgrate platform may receive anonymized or pseudonymized gameplay data for technical and audit purposes.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where disclosure is required by law or court order.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and technical support providers who process data on phgrate's behalf under strict data processing agreements.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

7 Data Retention

phgrate retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your account's existence on the phgrate platform.
• Transaction and financial records: Retained for a minimum of five (5) years following the transaction date, in compliance with PAGCOR and AMLC record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted or anonymized within thirty (30) days.

Upon expiry of the applicable retention period, phgrate will securely delete or anonymize your personal data so that it can no longer be associated with you.

8 Security Measures

phgrate implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and phgrate servers.
• AES-256 encryption for sensitive data stored in phgrate databases.
• Multi-factor authentication (MFA) options for player accounts.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Role-based access controls ensuring that only authorized personnel can access personal data, limited to what is necessary for their role.
• 24/7 security monitoring and intrusion detection systems.
• Regular staff training on data protection and information security best practices.

Despite these measures, no system is completely impenetrable. phgrate encourages players to use strong, unique passwords for their phgrate accounts and to enable all available security features.

9 Cookies and Tracking Technologies

phgrate uses cookies and similar tracking technologies to enhance your experience on the platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These cannot be disabled as they are required for login sessions, security, and basic platform operations.
• Performance cookies: Collect anonymized data about how players use the phgrate platform, helping us identify and fix performance issues and improve the user experience.
• Functional cookies: Remember your preferences such as language settings, display options, and game history to provide a more personalized experience.
• Analytics cookies: Used to understand aggregate usage patterns on the phgrate platform. Data collected is anonymized and used solely for internal analytics purposes.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phgrate platform. phgrate does not use third-party advertising cookies or behavioral tracking cookies for external advertising purposes.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phgrate:

To exercise any of these rights, please contact phgrate's Data Protection Officer using the contact details in Section 14. phgrate will respond to all verified requests within fifteen (15) business days, as required by the Data Privacy Act.

11 Minors and Age Restriction

The phgrate platform is strictly intended for individuals aged 21 years and above. phgrate does not knowingly collect personal data from individuals under the age of 21. If phgrate becomes aware that personal data has been collected from a minor, it will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on the phgrate platform, please contact our support team immediately so that we can investigate and take appropriate action.

12 International Data Transfers

phgrate primarily stores and processes player data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or international game software developers — phgrate ensures that such transfers are conducted in compliance with the Data Privacy Act and that the recipient provides an adequate level of data protection through contractual safeguards, including standard data protection clauses approved by the National Privacy Commission.

13 Changes to This Privacy Policy

phgrate reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via email or a prominent notice on the phgrate platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the phgrate platform after the effective date of any update constitutes your acceptance of the revised policy.

14 Contact Us & Data Protection Officer

phgrate has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

• Data Protection Officer, phgrate
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the phgrate platform

phgrate aims to resolve all privacy-related inquiries within fifteen (15) business days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.