phcity Privacy Policy

phcity is an online gaming platform operated for players in the Philippines. We are committed to protecting the privacy and personal data of every individual who interacts with our platform — whether you are a registered player, a visitor browsing our website, or someone who contacts our support team.

This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. It governs all personal data collected through the phcity website, mobile platform, customer support channels, and any other touchpoints associated with the phcity brand.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and phcity.

If you have any questions about this Privacy Policy or how phcity handles your personal data, please refer to Section 13 for contact details for our Data Privacy Officer.

phcity collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the platform, and from third parties such as payment processors and identity verification services. The categories of personal data we collect include:

phcity does not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless specifically required for responsible gaming assessments and only with your explicit consent.

phcity uses the personal data we collect for the following purposes:

• Account Registration and Management: To create and maintain your phcity account, verify your identity in compliance with Know Your Customer (KYC) requirements, and manage your account settings and preferences.
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate records of all financial transactions on your account.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, age verification requirements (21+), and reporting obligations to relevant authorities.
• Responsible Gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 support team.
• Platform Improvement: To analyze usage patterns, troubleshoot technical issues, and improve the overall performance and user experience of the phcity platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your consent to receive such communications. You may opt out at any time.

phcity will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

Under the Philippine Data Privacy Act of 2012, phcity processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and phcity — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, age verification requirements, and reporting obligations to regulatory authorities.
• Legitimate Interests: Processing is necessary for phcity's legitimate interests in preventing fraud, ensuring platform security, and improving our services — provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, phcity relies on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

phcity does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, and banking partners (BPI, BDO, Metrobank) receive the minimum data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC service providers who assist phcity in verifying player identities and ages in compliance with regulatory requirements.
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, and platform technology providers who process data on phcity's behalf under strict data processing agreements and confidentiality obligations.
• Customer Support Platforms: Third-party live chat and ticketing system providers used to deliver phcity's 24/7 customer support service.
• Regulatory and Law Enforcement Authorities: Philippine government agencies, including the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement authorities, where disclosure is required by law or court order.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties with whom phcity shares personal data are required to handle that data in accordance with applicable Philippine data protection laws and phcity's data security standards.

phcity uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and analyze platform performance. The types of cookies we use are:

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phcity platform. Strictly necessary cookies cannot be disabled as they are essential for the platform to operate securely.

phcity does not use cookies to track your activity on third-party websites outside of the phcity platform.

phcity retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Technical and Usage Data: Retained for up to twelve (12) months for platform analytics and security monitoring purposes, after which it is anonymized or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of your consent decision.

When personal data is no longer required, phcity will securely delete or anonymize it in accordance with industry-standard data destruction practices. Anonymized data — which can no longer be linked to any individual — may be retained indefinitely for statistical and analytical purposes.

phcity takes the security of your personal data seriously and implements a range of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the phcity platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial data cannot be intercepted in transit.
• Password Security: Player passwords are stored using strong one-way cryptographic hashing algorithms. phcity never stores passwords in plain text and will never ask you for your password via email, chat, or any other channel.
• Access Controls: Access to personal data within phcity's systems is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Payment Security: Financial transactions are processed through PCI-DSS compliant payment processors. phcity does not store full payment card numbers or full bank account details on its servers.
• Intrusion Detection and Monitoring: phcity's systems are monitored continuously for suspicious activity, unauthorized access attempts, and potential security incidents.
• Regular Security Audits: phcity conducts regular internal and third-party security assessments to identify and address potential vulnerabilities in our systems and processes.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phcity:

To exercise any of these rights, please contact phcity's Data Privacy Officer using the details provided in Section 13. phcity will respond to all data rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, and you will be notified of any such extension.

Please note that certain rights are subject to limitations under Philippine law — for example, phcity may be required to retain certain data for AML compliance purposes even if you request its deletion.

phcity implements age verification procedures at the point of registration and reserves the right to request government-issued identity documents to confirm a player's age at any time. If phcity discovers or has reason to believe that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all personal data associated with the account will be reviewed, and any funds will be returned to the payment source used for deposits.

If you are a parent or guardian and believe that a minor in your care has registered on the phcity platform, please contact our support team immediately. We will investigate and take appropriate action without delay.

The phcity platform may contain references to third-party services such as payment processors (GCash, PayMaya, BPI, BDO, Metrobank). These third-party services operate under their own privacy policies, which phcity does not control. phcity is not responsible for the privacy practices of any third-party service provider.

We encourage you to review the privacy policies of any third-party services you use in connection with your phcity account, particularly your chosen payment method provider, to understand how they handle your personal data.

phcity reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. When material changes are made, phcity will notify registered players via email or through a prominent notice on the phcity platform prior to the changes taking effect.

The "Last Updated" date at the top of this Privacy Policy reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how phcity protects your personal data. Your continued use of the phcity platform following the posting of any changes constitutes your acceptance of the updated Privacy Policy.

If you disagree with any changes to this Privacy Policy, you have the right to close your phcity account and request deletion of your personal data, subject to any legal retention obligations that may apply.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way phcity handles your personal data, please contact our Data Privacy Officer (DPO). phcity is committed to addressing all privacy-related inquiries promptly and transparently.

If you are not satisfied with phcity's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012.

phcity takes all privacy complaints seriously and will work in good faith to resolve any concerns you raise regarding the handling of your personal data.