Privacy Policy — phmalapad

1. Who We Are

phmalapad is an online gaming and sports betting platform serving the Philippines market. We operate the website at phmalapad.asia and all associated subdomains and mobile applications. As the operator of the Platform, phmalapad acts as the data controller responsible for the personal data of registered players and visitors.

For all privacy-related enquiries, you may contact our Data Protection Officer at the email address provided in Section 12 of this Policy. We are committed to handling your personal data in accordance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

2. Data We Collect

phmalapad collects personal data in the following categories:

• Registration Data: Full legal name, date of birth, gender, nationality, residential address, email address, and Philippine mobile number provided when you create a phmalapad account.
• Identity Verification Data: Government-issued ID (e.g., Philippine passport, SSS ID, driver's licence, PhilSys national ID), selfie photographs, and proof of address documents submitted during KYC (Know Your Customer) verification.
• Financial Data: Payment method details (GCash number, PayMaya account, BPI/BDO/Metrobank account information), transaction history, deposit and withdrawal records. We do not store full card numbers or banking credentials — these are handled by our regulated payment processors.
• Gaming Activity Data: Bets placed, games played, session durations, win/loss records, bonus usage, and responsible gaming limit settings.
• Technical Data: IP address, device type, browser type and version, operating system, referring URLs, and session timestamps collected automatically when you access the Platform.
• Communications Data: Records of your interactions with phmalapad customer support, including live chat transcripts, emails, and support ticket history.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications, including SMS, email, and push notifications.

3. How We Use Your Data

phmalapad uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your phmalapad account, including processing deposits, withdrawals, and bonus credits.
• Identity Verification & Compliance: To verify your identity, confirm your age (21+ requirement), and comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Philippine law.
• Service Delivery: To provide access to all phmalapad games and betting markets, including slots, live casino, sports betting, bingo, and the Fruit Shop.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behaviour, enforce self-imposed limits, and identify players who may need responsible gaming support.
• Marketing & Promotions: To send you relevant offers, promotions, and updates about phmalapad — only where you have provided consent or where we have a legitimate interest to do so.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats.
• Platform Improvement: To analyse usage patterns and improve the performance, features, and user experience of the phmalapad Platform.

4. Legal Basis for Processing

phmalapad processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML/CTF regulations, PAGCOR licensing requirements, and tax reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where our interests do not override your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications, where you have explicitly opted in. You may withdraw consent at any time by updating your marketing preferences in your account settings.

5. Data Sharing & Disclosure

phmalapad does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other regulated payment service providers, solely for the purpose of processing your financial transactions.
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist us in verifying player identities and screening against sanctions lists.
• Game Software Providers: Licensed game studios and platform providers whose software powers phmalapad games. These providers may receive anonymised or pseudonymised session data for technical purposes.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where required by law or regulatory obligation.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and analytics providers who process data on our behalf under strict data processing agreements.

6. Cookies & Tracking Technologies

phmalapad uses cookies and similar tracking technologies to enhance your experience on the Platform. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Performance Cookies: Used to collect anonymised data about how players use the Platform, helping us identify and fix technical issues and improve page performance.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming limit configurations.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the phmalapad Platform.

7. Data Retention

phmalapad retains your personal data for as long as necessary to fulfil the purposes outlined in this Policy, subject to the following retention periods:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Retained for the duration of your account and for five (5) years post-closure.
• Support Communications: Retained for three (3) years from the date of the last interaction.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

8. Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmalapad:

• Right to Be Informed: The right to know what personal data we collect and how it is used — as set out in this Policy.
• Right of Access: The right to request a copy of the personal data we hold about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 12. We will respond to all verified requests within thirty (30) days.

9. Data Security

phmalapad implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phmalapad Platform.
• Encrypted storage of sensitive personal data and financial records at rest.
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to -know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure.
• Multi-factor authentication options for player accounts to prevent unauthorised access.
• Strict data processing agreements with all third-party service providers who handle personal data on our behalf.

While phmalapad takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect unauthorised access to your account, contact phmalapad support immediately.

10. Children's Privacy

The phmalapad Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. We do not knowingly collect personal data from individuals under 21 years of age.

If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and return any deposits at our discretion. If you believe a minor has registered on the Platform, please contact us immediately using the details in Section 12.

11. Changes to This Policy

phmalapad reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Your continued use of the phmalapad Platform following the posting of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

12. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the phmalapad Platform
• Response Time: We aim to respond to all privacy-related requests within 30 calendar days.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC and how to file a complaint is available through official Philippine government channels.