🔒 phophen Privacy Policy

This Privacy Policy ("Policy") is issued by phophen ("phophen," "we," "us," or "our") and applies to all personal data collected from individuals ("you," "Player," or "User") who access or use the phophen online gaming platform, including the phophen website, any associated mobile interfaces, and all related services (collectively, the "Platform").

phophen is committed to protecting the privacy and security of your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as all other applicable Philippine data protection laws and regulations.

By registering an account on phophen or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the phophen Platform.

phophen collects the following categories of personal data from players and users of the Platform:

phophen does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by applicable law (for example, in connection with responsible gaming assessments).

phophen collects your personal data through the following means:

• Directly from you: When you register an account on phophen, complete identity verification, make deposits or withdrawals, contact our support team, or use any feature of the Platform that requires you to provide information.
• Automatically: When you access and use the phophen Platform, we automatically collect technical data such as your IP address, device identifiers, browser information, and usage patterns through cookies and similar tracking technologies. See Section 7 for more details on cookies.
• From third parties: phophen may receive data about you from third-party identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and regulatory authorities where required by law.
• From public sources: In limited circumstances, phophen may collect data from publicly available sources for the purposes of identity verification or fraud prevention.

phophen processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform the contract between you and phophen — i.e., to provide you with access to the phophen Platform and all associated gaming services, process your deposits and withdrawals, and manage your account.
• Legal obligation: Processing is necessary for phophen to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations under Republic Act No. 9160, know-your-customer (KYC) requirements, and reporting obligations to relevant regulatory authorities.
• Legitimate interests: Processing is necessary for phophen's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided that such interests are not overridden by your privacy rights.
• Consent: Where phophen relies on your consent as the legal basis for processing — for example, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

phophen uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your phophen account, verify your identity, and process your registration.
• Service delivery: To provide you with access to phophen's games — including slots, bingo, lottery, money wheel, and live casino — and to process your deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and other supported payment methods.
• Regulatory compliance: To fulfill phophen's obligations under Philippine AML laws, KYC requirements, and any directives issued by relevant Philippine regulatory authorities.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited conduct on the phophen Platform.
• Responsible gaming: To monitor gaming patterns, identify players who may be at risk of problem gambling, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing communications: Where you have provided consent, to send you promotional offers, bonus notifications, and updates about phophen's services. You may opt out of marketing communications at any time.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the phophen Platform.

phophen does not sell your personal data to any third party. phophen may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers who assist phophen in verifying your identity and screening for sanctions or politically exposed person (PEP) status.
• Technology and infrastructure providers: Cloud hosting providers, cybersecurity firms, and software vendors who support the operation of the phophen Platform under strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine government agencies, regulatory bodies, and law enforcement authorities where phophen is required by law to disclose your data, including in connection with AML investigations, tax reporting, or court orders.
• Professional advisers: Lawyers, auditors, and other professional advisers who provide services to phophen, subject to professional confidentiality obligations.

All third parties with whom phophen shares personal data are required to handle that data in accordance with applicable Philippine data protection laws and phophen's data protection standards. phophen does not permit third-party service providers to use your personal data for their own purposes.

phophen uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain your session, and collect analytical data about how the Platform is used. The types of cookies phophen uses include:

• Strictly necessary cookies: These cookies are essential for the phophen Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Analytical cookies: These cookies help phophen understand how players interact with the Platform by collecting aggregated, anonymized usage data. This information is used to improve the Platform's performance and user experience.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language and display options — to provide a more personalized experience on phophen.
• Marketing cookies: Where you have provided consent, these cookies track your activity on the Platform to enable phophen to deliver relevant promotional content and offers.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phophen Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.

phophen takes the security of your personal data seriously and implements a comprehensive range of technical and organizational measures to protect your data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the phophen Platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Strict role-based access controls limiting access to personal data to authorized phophen personnel on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the phophen Platform.
• Multi-factor authentication requirements for phophen staff accessing systems that process personal data.
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable Philippine law.

While phophen takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phophen account credentials and for notifying phophen immediately if you suspect any unauthorized access to your account.

phophen retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your phophen account and for a period of at least five (5) years following account closure, in accordance with Philippine AML record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML and tax laws.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support communications: Retained for a period of three (3) years from the date of the communication, or longer if the communication relates to an ongoing dispute or legal matter.
• Marketing consent records: Retained for as long as you remain a phophen player and for a reasonable period thereafter to demonstrate compliance with consent requirements.

When personal data is no longer required for any of the above purposes, phophen will securely delete or anonymize it in accordance with phophen's data retention and disposal procedures.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phophen:

• Right to be informed: You have the right to be informed about how phophen collects and uses your personal data, as set out in this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data that phophen holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request that phophen correct any inaccurate or incomplete personal data held about you.
• Right to erasure: You have the right to request that phophen delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to phophen's legal retention obligations.
• Right to object: You have the right to object to phophen's processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that phophen has violated your data privacy rights.

To exercise any of the above rights, please contact phophen's Data Protection Officer using the contact details provided in Section 13 of this Policy. phophen will respond to all valid data subject requests within thirty (30) days of receipt, in accordance with applicable Philippine law.

The phophen Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing online casino-style gaming. phophen does not knowingly collect personal data from any person under the age of 21.

If phophen becomes aware that it has inadvertently collected personal data from a person under the age of 21, phophen will take immediate steps to delete that data and close the associated account. If you believe that phophen may have collected data from an underage individual, please contact our support team immediately.

phophen strongly encourages parents and guardians to monitor their children's online activity and to make use of parental control tools to prevent underage access to online gaming platforms.

phophen reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made to this Policy, phophen will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how phophen protects your personal data.

Your continued use of the phophen Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or phophen's handling of your personal data, please contact phophen's Data Protection Officer:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Time: phophen aims to respond to all privacy-related inquiries within 5 business days

If you are not satisfied with phophen's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Philippine Data Privacy Act of 2012.