phplush Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected and processed by phplush ("we," "us," "our") through the phplush website, mobile-optimized interface, and any related services (collectively, "the Platform"). This policy is written in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (NPC). By accessing or using the phplush platform, you ("the Player," "you," "your") acknowledge that you have read, understood, and consent to the collection, use, storage, and processing of your personal data as described herein.

phplush is committed to protecting the privacy and security of every Filipino player who trusts our platform with their personal information. We only collect data that is necessary for delivering our services, enhancing your experience, and complying with our legal and regulatory obligations. If you do not agree with any part of this Privacy Policy, please do not register for or use the phplush platform.

2. Information We Collect

phplush collects several categories of personal and non-personal information in the course of providing our services. The table below summarizes the types of data we collect, the sources from which we obtain it, and examples of specific data points within each category.

2.1 Sensitive Personal Information

phplush does not intentionally collect sensitive personal information as defined under the Data Privacy Act of 2012, including but not limited to race, ethnic origin, marital status, religious or political affiliations, health data, or genetic data. If we inadvertently receive such information (for example, through an unsolicited customer support message), it will be deleted promptly and will not be processed for any purpose.

3. How We Use Your Information

phplush processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your phplush account; to verify your identity through KYC procedures; to enable login and authentication; and to communicate with you regarding your account status.
• Service Delivery: To process deposits and withdrawals; to enable gameplay and record gaming activity; to calculate and credit bonuses, promotions, and loyalty rewards; and to provide customer support.
• Security and Fraud Prevention: To detect and prevent unauthorized access, fraud, money laundering, and other illicit activities; to monitor accounts for suspicious behavior; to enforce our Terms and Conditions; and to protect the integrity of the phplush platform.
• Platform Improvement: To analyze usage patterns and player preferences in order to improve the phplush user experience, optimize game recommendations, and develop new features and services.
• Responsible Gaming: To monitor for signs of problematic gambling behavior; to enforce deposit limits, session reminders, cooling-off periods, and self-exclusion requests; and to implement age verification procedures. For more information, visit our Responsible Gaming page.
• Legal Compliance: To comply with applicable Philippine laws and regulations, including the Data Privacy Act of 2012, anti-money laundering regulations, and tax reporting requirements; and to respond to lawful requests from Philippine government authorities and regulatory bodies.
• Communications: To send you service-related notifications (such as account alerts, deposit confirmations, withdrawal updates, and security notices). Marketing communications will only be sent with your explicit opt-in consent and will always include an unsubscribe option.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phplush processes your personal data based on one or more of the following legal grounds:

• Consent: You have given your informed and voluntary consent to the processing of your personal data for the purposes described in this Privacy Policy. You provided this consent when you registered for a phplush account and accepted our Terms and Conditions. For marketing communications, separate opt-in consent is obtained.
• Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party — namely, the phplush Terms and Conditions that govern your use of the platform. Without processing certain data (such as your identity, contact, and financial information), we cannot provide our services to you.
• Legitimate Interest: Processing is necessary for the legitimate interests of phplush, provided that such interests are not overridden by your fundamental rights and freedoms. Legitimate interests include fraud prevention, platform security, service improvement, and business analytics.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which phplush is subject, including anti-money laundering laws, tax regulations, and lawful orders from Philippine government authorities.

5. Data Sharing and Disclosure

phplush does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal information only in the following limited circumstances:

• Payment Processors: We share necessary financial data with our payment processing partners (including GCash, Maya, and Philippine banking partners such as BPI, BDO, Metrobank, UnionBank, Landbank, PNB, and Security Bank) solely for the purpose of processing your deposits and withdrawals. These partners are bound by their own privacy and security obligations.
• Game Providers: We share limited account and gameplay data with our licensed third-party game providers to facilitate gameplay, resolve technical issues, and ensure fair play.
• KYC and Verification Services: We may share identity data with third-party verification service providers to perform Know Your Customer (KYC) checks, age verification, and identity authentication.
• Legal and Regulatory Authorities: We may disclose your personal data to Philippine government authorities, regulatory bodies, or law enforcement agencies when required by law, regulation, or legal process, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of phplush, our players, or the public.
• Professional Advisors: We may share data with our legal counsel, auditors, and consultants in the course of receiving professional advice, subject to appropriate confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of phplush's assets, your personal data may be transferred to the successor entity, provided that the successor is bound by privacy obligations at least as protective as those in this Privacy Policy.

All third parties with whom phplush shares personal data are required to maintain appropriate security measures and to process such data only for the specified purposes and in accordance with applicable Philippine data privacy laws.

6. Cookies and Tracking Technologies

The phplush platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session, and gather analytics data. The following types of cookies are employed:

• Essential Cookies: These cookies are strictly necessary for the operation of the phplush platform. They enable core functionality such as login authentication, session management, security features, and load balancing. Essential cookies cannot be disabled without impairing platform functionality.
• Performance Cookies: These cookies collect aggregated, anonymized data about how players interact with the phplush platform, such as which pages are visited most frequently, session duration, and navigation patterns. This data helps us identify and resolve performance issues and improve the overall user experience.
• Functional Cookies: These cookies remember your preferences and settings, such as language preferences, display options, and recently played games, to provide a personalized experience when you return to the phplush platform.
• Analytics Cookies: These cookies help phplush understand player behavior at an aggregate level, informing decisions about platform design, feature development, and content strategy. Analytics data is processed in an anonymized or pseudonymized form wherever possible.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the phplush platform. phplush does not use cookies for third-party advertising or cross-site behavioral tracking.

7. Data Security Measures

phplush implements a multi-layered approach to data security designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Our security measures include but are not limited to:

• Encryption: All data transmitted between your device and the phplush servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored at rest (including financial information and passwords) is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within phplush is restricted to authorized personnel on a strict need-to-know basis. All staff with data access undergo background checks and are bound by confidentiality agreements.
• Two-Factor Authentication (2FA): phplush offers and strongly recommends two-factor authentication for player accounts, providing an additional layer of security beyond the password.
• Monitoring and Auditing: phplush employs 24/7 security monitoring, intrusion detection systems, and regular security audits to identify and address potential vulnerabilities.
• Incident Response: phplush maintains a documented data breach response plan. In the event of a data breach that poses a real risk to your rights and freedoms, we will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Data Privacy Act of 2012.

While phplush takes extensive measures to protect your data, no method of electronic transmission or storage is 100% secure. We encourage all players to protect their own accounts by using strong, unique passwords, enabling 2FA, and never sharing login credentials with others.

8. Data Retention

phplush retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Accounts: Personal data associated with your phplush account is retained for the duration of your active membership. If you request account closure, your data will be retained for a minimum period following closure as described below.
• Closed Accounts: Following account closure (whether initiated by you or by phplush), core account data (identity, financial, and gaming records) is retained for a period of five (5) years to comply with anti-money laundering regulations, tax reporting obligations, and potential regulatory inquiries.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, in accordance with Philippine regulatory requirements.
• Communication Records: Customer support correspondence and chat transcripts are retained for two (2) years from the date of the last interaction to support dispute resolution and quality assurance.
• Technical and Usage Data: Anonymized or aggregated technical and usage data may be retained indefinitely for analytics and platform improvement purposes, as such data does not constitute personal information.

Upon expiration of the applicable retention period, your personal data will be securely deleted or irreversibly anonymized. phplush will not retain personal data beyond the periods stated above unless required to do so by a specific legal obligation or ongoing legal proceeding.

9. Your Rights Under Philippine Law

Under the Data Privacy Act of 2012, you are entitled to the following rights with respect to your personal data held by phplush:

• Right to Be Informed: You have the right to be informed about the collection and processing of your personal data, including the purposes, the legal basis, the scope and method of processing, and the recipients of your data. This Privacy Policy serves as the primary means of fulfilling this obligation.
• Right to Access: You have the right to request access to your personal data held by phplush, including a summary of how it has been processed and to whom it has been disclosed.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data. You may update certain personal information directly through your phplush account settings, or by contacting our customer support team.
• Right to Erasure or Blocking: You have the right to request the suspension, withdrawal, blocking, removal, or destruction of your personal data, subject to the limitations imposed by legal and regulatory retention requirements.
• Right to Object: You have the right to object to the processing of your personal data, including processing for direct marketing purposes. If you object to marketing communications, phplush will cease such communications promptly.
• Right to Data Portability: You have the right to obtain a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit such data to another controller, where technically feasible.
• Right to Lodge a Complaint: If you believe that phplush has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact the phplush Data Protection Officer at the contact details provided in Section 12 below. phplush will respond to all legitimate requests within fifteen (15) business days. We may request additional information to verify your identity before processing your request.

10. Minors and Age Restrictions

The phplush platform is intended exclusively for individuals who are at least twenty-one (21) years of age, in compliance with Philippine gambling regulations. phplush does not knowingly collect personal data from individuals under 21 years of age. If we become aware that we have collected personal data from a minor, we will take immediate steps to delete such data and terminate the associated account. If you believe that a person under the age of 21 has provided personal data to phplush, please contact us immediately so that we can take appropriate action.

11. Updates to This Privacy Policy

phplush reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you by posting the revised policy on the phplush platform with an updated effective date, and we may additionally notify you via email or in-platform notification. We encourage you to review this Privacy Policy periodically to stay informed about how phplush protects your personal data. Your continued use of the phplush platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phplush, please contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the phplush platform
• Response Time: We aim to respond to all privacy-related inquiries within fifteen (15) business days

By using the phplush platform, you confirm that you have read this Privacy Policy in full, that you understand its contents, and that you consent to the collection, use, storage, and processing of your personal data as described herein. Thank you for trusting phplush with your information.