phnice Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") describes how phnice ("we," "us," "our," or the "Company"), operator of the website https://phnice.cam and associated mobile applications (collectively, the "Platform" or "Service"), collects, uses, discloses, stores, and protects the personal information of our users ("you," "your," or "User"). This Policy applies to all personal data processed through the phnice Platform, whether collected directly from you or obtained from third-party sources in connection with your use of our online casino and sports betting services.

By accessing or using the phnice Platform, creating an account, or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with the terms of this Policy, you must immediately discontinue use of our Service.

phnice is committed to protecting your privacy and complying with all applicable data protection laws, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), relevant National Privacy Commission (NPC) circulars and advisories, and industry-specific regulations issued by the Philippine Amusement and Gaming Corporation (PAGCOR). We implement appropriate technical, organizational, and administrative safeguards to ensure the confidentiality, integrity, and security of your personal information.

2. Data Controller and Contact Information

phnice acts as the data controller for all personal information collected through the Platform. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws. For questions, concerns, or requests regarding this Privacy Policy or our data processing practices, you may contact us through the following channels:

• Data Protection Officer Email: [email protected]
• General Customer Support: [email protected]
• Privacy Inquiry Response Time: Within 7 business days for general inquiries; within 15 days for data subject access requests under the Data Privacy Act
• Mailing Address: phnice Data Protection Officer, [Business Address], Philippines

Our Data Protection Officer (DPO) is responsible for overseeing our data protection strategy, monitoring compliance with privacy laws, conducting data protection impact assessments, and serving as the primary point of contact for data subjects and regulatory authorities regarding privacy matters.

3. Categories of Personal Information Collected

phnice collects various categories of personal information necessary to provide our services, comply with legal obligations, and improve your user experience. The types of personal data we collect include:

3.1 Account Registration Information

When you create a phnice account, we collect:

• Full legal name (first name, middle name, surname as appearing on government-issued identification)
• Date of birth (to verify you meet the minimum age requirement of 21 years)
• Gender
• Email address
• Mobile phone number
• Residential address (street address, barangay, city/municipality, province, postal code)
• Username and password (password is stored in encrypted form and is not visible to phnice personnel)
• Security questions and answers (encrypted)
• Preferred language and communication preferences

3.2 Identity Verification and KYC Information

To comply with Know Your Customer (KYC) requirements, Anti-Money Laundering (AML) regulations under Republic Act No. 10365, and PAGCOR licensing requirements, we collect:

• Government-issued identification documents (Philippine National ID, passport, driver's license, SSS/GSIS ID, postal ID, voter's ID)
• Photographs or scanned copies of identification documents showing photo, full name, date of birth, and document number
• Selfie photographs holding identification documents (for enhanced verification)
• Proof of address documents (utility bills, bank statements, government correspondence dated within 3 months)
• Tax Identification Number (TIN) for high-value transactions and tax reporting compliance
• Source of funds information for deposits exceeding PHP 500,000

3.3 Financial and Payment Information

When you conduct financial transactions on the phnice Platform, we collect:

• Payment method details (GCash account name, bank account numbers, cryptocurrency wallet addresses)
• Transaction history (deposits, withdrawals, wagers, winnings, bonuses)
• Payment processor transaction IDs and reference numbers
• Billing addresses associated with payment methods
• Payment card information (processed and stored by third-party payment processors compliant with PCI-DSS standards; phnice does not store complete card numbers)

3.4 Gaming and Betting Activity Data

To provide gaming services and detect fraudulent activity, we collect:

• Games played, betting history, stake amounts, outcomes, and winnings
• Bonus claims, wagering requirements progress, and bonus conversion details
• Session duration, frequency of play, and betting patterns
• Responsible gaming tool usage (deposit limits, session limits, self-exclusion requests)
• In-game communications in multiplayer or live dealer environments

3.5 Technical and Device Information

When you access the phnice Platform, we automatically collect:

• IP address and geolocation data (to verify you are located in an authorized jurisdiction)
• Device type, model, operating system, and unique device identifiers
• Browser type, version, and language settings
• Screen resolution and device capabilities
• Referring website or source of traffic
• Pages visited, features used, and time spent on the Platform
• Cookies and similar tracking technologies (see Section 8 for details)

3.6 Communications and Customer Support Data

When you contact phnice Customer Support, we collect:

• Contents of your inquiries, complaints, and support requests
• Email correspondence, live chat transcripts, and phone call recordings
• Feedback, reviews, and survey responses
• Attachments or documents you provide to support tickets

4. Lawful Basis and Purposes of Data Processing

phnice processes your personal information based on the following lawful grounds and for the specified purposes:

4.1 Performance of Contract

We process your personal data to fulfill our contractual obligations under the Terms and Conditions, including:

• Creating and maintaining your phnice account
• Processing deposits, withdrawals, and financial transactions
• Providing access to casino games, sports betting, and other gaming services
• Calculating and crediting winnings, bonuses, and loyalty rewards
• Providing customer support and responding to inquiries
• Enforcing Terms and Conditions, including investigating suspected violations

4.2 Legal Obligation and Regulatory Compliance

We are required by Philippine law to process certain personal data for compliance purposes:

• Verifying your age (21 years or older) to prevent underage gambling
• Conducting Know Your Customer (KYC) and identity verification procedures
• Complying with Anti-Money Laundering (AML) laws under RA 10365 and AMLC regulations
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Maintaining transaction records for audit and tax reporting purposes
• Responding to lawful requests from law enforcement, courts, and regulatory authorities
• Complying with PAGCOR licensing requirements and responsible gaming obligations

4.3 Legitimate Interests

We process your personal data based on our legitimate business interests, balanced against your privacy rights:

• Preventing fraud, money laundering, and other illegal activities
• Detecting and preventing bonus abuse, collusion, and Terms violations
• Ensuring Platform security and protecting against cyber attacks
• Improving user experience through analytics and optimization
• Developing new features, games, and services based on usage patterns
• Conducting risk assessment and responsible gaming monitoring
• Protecting our legal rights and defending against claims

4.4 Consent

With your explicit consent, we process personal data for:

• Sending promotional emails, SMS messages, and push notifications about bonuses, tournaments, and special offers
• Personalizing marketing content based on your gaming preferences and activity
• Placing non-essential cookies and tracking technologies for analytics and advertising
• Processing sensitive personal information beyond what is required for service provision

You may withdraw your consent at any time by adjusting your account preferences, unsubscribing from marketing communications, or contacting our Data Protection Officer. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

5. Data Sharing and Third-Party Disclosures

phnice does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we may share your personal data with the following categories of third parties as necessary to provide our services and comply with legal obligations:

5.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, banking partners, and cryptocurrency payment gateways to process deposits and withdrawals
• Game Providers: Third-party game studios and software providers whose games are featured on the phnice Platform
• Identity Verification Services: KYC and AML compliance providers to verify your identity and screen for sanctions lists
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers where our systems and databases are hosted
• Customer Support Tools: Help desk software, live chat platforms, and CRM systems used to manage support tickets
• Marketing Service Providers: Email marketing platforms, SMS gateways, and advertising networks (only if you have consented to marketing)
• Analytics Providers: Web analytics and business intelligence tools to understand Platform usage and performance

All third-party service providers are contractually bound to process your personal data only as instructed by phnice, maintain appropriate security measures, and comply with applicable data protection laws. We conduct due diligence to ensure third parties implement adequate safeguards for personal information.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, courts, and regulatory bodies when:

• Required by Philippine law, court order, subpoena, or other legal process
• Necessary to comply with Anti-Money Laundering Council (AMLC) reporting requirements
• Requested by the National Privacy Commission (NPC) during investigations
• Required by PAGCOR or other gaming regulators for licensing compliance
• Necessary to protect our legal rights, prevent fraud, or ensure Platform security
• Required to investigate or respond to claims of illegal activity or Terms violations

5.3 Corporate Transactions

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate restructuring, your personal information may be transferred to the acquiring entity or successor organization. We will notify you of such transfers and provide information about the new data controller's privacy practices.

5.4 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized data that does not personally identify you with business partners, advertisers, researchers, or other third parties for analytical, statistical, or business intelligence purposes. Such data cannot be used to re-identify you and is not considered personal information under the Data Privacy Act.

6. International Data Transfers

Your personal information is primarily stored on servers located within the Philippines or in secure data centers in jurisdictions with adequate data protection laws. However, some of our third-party service providers (such as cloud hosting providers, payment processors, and game suppliers) may be located outside the Philippines.

When we transfer personal data internationally, we ensure compliance with the Data Privacy Act by implementing appropriate safeguards including:

• Standard contractual clauses approved by the National Privacy Commission
• Transferring data only to countries with adequate data protection standards as determined by the NPC
• Implementing binding corporate rules for intra-group data transfers
• Obtaining your explicit consent for international transfers where required

We maintain records of all international data transfers and can provide information about the safeguards in place upon request to our Data Protection Officer.

7. Data Retention and Deletion

phnice retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus 5 years after account closure (AML/KYC compliance requirement)
• Transaction Records: Retained for 5 years from the date of transaction (tax and financial audit requirements under Philippine law)
• Identity Verification Documents: Retained for 5 years after last transaction or account closure (PAGCOR and AML compliance)
• Gaming Activity Logs: Retained for 3 years (regulatory audit and dispute resolution purposes)
• Marketing Communications: Retained until you withdraw consent or unsubscribe, then deleted within 30 days
• Customer Support Records: Retained for 2 years after case closure
• Technical Logs: Retained for 12 months (security incident investigation and Platform optimization)

After the applicable retention period expires, we securely delete or anonymize your personal information using industry-standard data destruction methods. Backups containing personal data are retained for disaster recovery purposes but are subject to the same retention limits and are securely deleted when backup rotation cycles complete.

You may request deletion of your personal data before the retention period expires by contacting our Data Protection Officer. However, we may be unable to delete certain data if retention is required by law or necessary to defend legal claims.

8. Cookies and Tracking Technologies

The phnice Platform uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance user experience, analyze Platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for Platform functionality, including session management, authentication, security, and load balancing. These cookies cannot be disabled without affecting Platform operation.
• Performance Cookies: Collect information about how you use the Platform, including pages visited, errors encountered, and navigation patterns. Used for analytics and optimization.
• Functional Cookies: Remember your preferences such as language, currency, and display settings to provide a personalized experience.
• Advertising Cookies: Track your browsing activity across websites to deliver targeted advertisements based on your interests. Placed by third-party advertising networks with your consent.

8.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to block cookies, delete existing cookies, or receive warnings before cookies are stored. However, disabling essential cookies will prevent you from using certain Platform features. To manage cookies:

• Access your browser settings (usually under Privacy or Security sections)
• Adjust cookie preferences to block third-party cookies or all cookies
• Visit the phnice cookie preference center in your account settings to customize non-essential cookie consent

Note that disabling advertising cookies will not stop you from seeing advertisements; they will simply be less relevant to your interests.

9. Data Security Measures

phnice implements comprehensive technical, organizational, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, destruction, or loss. Our security practices include:

9.1 Technical Security Controls

• Encryption: All data transmitted between your device and phnice servers is encrypted using TLS 1.2 or higher. Sensitive data at rest (passwords, payment information, identification documents) is encrypted using AES-256 encryption.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical access controls, environmental monitoring, and redundant power and network connectivity.
• Firewalls and Intrusion Detection: Multi-layered firewall architecture and real-time intrusion detection systems monitor and block suspicious network activity.
• Access Controls: Role-based access controls (RBAC) ensure that only authorized personnel can access personal data, limited to what is necessary for their job functions.
• Authentication Security: Account passwords are hashed using bcrypt with salt. Two-factor authentication (2FA) is available and recommended for all users.
• Regular Security Audits: Independent third-party security firms conduct annual penetration testing and vulnerability assessments.

9.2 Organizational Security Measures

• All employees and contractors with access to personal data sign confidentiality agreements and undergo data protection training
• Incident response procedures are in place to detect, respond to, and recover from data breaches
• Data protection impact assessments (DPIAs) are conducted for high-risk processing activities
• Privacy-by-design principles are integrated into system development and business processes

9.3 Data Breach Notification

In the event of a data breach that is likely to result in risk to your rights and freedoms, phnice will notify affected users and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the Data Privacy Act. Notifications will include the nature of the breach, categories of data affected, likely consequences, and measures taken to mitigate harm.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

10.1 Right to Information

You have the right to be informed about the collection and processing of your personal data, including the purposes, legal basis, recipients, and retention periods. This Privacy Policy fulfills this obligation.

10.2 Right to Access

You may request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format within 15 days of your request. You can submit access requests by contacting [email protected].

10.3 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most account information directly through your phnice account dashboard. For changes to verified identification information, contact Customer Support with supporting documentation.

10.4 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

However, we may be required to retain certain data to comply with legal obligations (such as AML record-keeping requirements) or to establish, exercise, or defend legal claims.

10.5 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications by clicking unsubscribe links in emails, adjusting notification preferences in your account, or contacting Customer Support.

10.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another controller. This right applies to data processed by automated means based on your consent or for performance of contract.

10.7 Right to File a Complaint

If you believe phnice has violated your data protection rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines:

• National Privacy Commission
• Address: 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City 1308, Philippines
• Email: [email protected]
• Telephone: +63 (2) 8234-2228
• Website: https://www.privacy.gov.ph

10.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your full name, registered email address, and a description of your request. We may request additional information to verify your identity before processing your request. We aim to respond to all requests within 15 days, though complex requests may require up to 30 days with an explanation for the delay.

11. Children's Privacy

The phnice Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, use, or disclose personal information from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such information from our systems and close the associated account.

Parents or legal guardians who believe their child has provided personal information to phnice should contact our Data Protection Officer immediately at [email protected]. We will investigate the matter and take appropriate action, including account closure and data deletion, within 48 hours.

12. Changes to This Privacy Policy

phnice reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to registered users at least 30 days before changes take effect
• Prominent notice displayed on the phnice Platform upon login
• Updated "Last Updated" date at the top of this Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of the phnice Platform after changes take effect constitutes acceptance of the updated Policy.

13. Contact Information for Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy, our data processing practices, or exercising your data subject rights, please contact:

• Data Protection Officer: [email protected]
• Customer Support: [email protected] (24/7 availability)
• Privacy Inquiry Response Time: Within 7 business days for general questions; within 15 days for formal data subject requests

We take your privacy seriously and are committed to addressing all inquiries promptly and transparently. Our Data Protection Officer oversees compliance with the Data Privacy Act and serves as your primary point of contact for all privacy-related matters.