phpera Privacy Policy

phpera ("we," "us," "our") is a PAGCOR-licensed online casino and sports betting operator accessible at phpera.net. We are committed to protecting the privacy and personal data of all individuals who interact with our Platform — whether as registered players, prospective account holders, or visitors to our website.

This Privacy Policy is issued pursuant to the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It applies to all personal data we collect, process, and store in connection with the phpera Platform, including through the phpera website, account registration process, customer support interactions, and payment processing systems.

By registering a phpera account or continuing to use the Platform after being notified of this Policy, you acknowledge that you have read and understood how phpera handles your personal data. If you do not agree with the terms of this Policy, you should not use the Platform and should request account closure where applicable.

For the purposes of the Data Privacy Act of 2012 and NPC regulations, phpera is the personal information controller responsible for the personal data processed in connection with the phpera Platform. phpera determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

phpera has designated a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act. The DPO is responsible for ensuring phpera's compliance with the Data Privacy Act, overseeing data protection practices, and serving as the primary contact point for data subject rights requests and NPC inquiries. Contact information for phpera's DPO is provided in Section 14 of this Policy.

phpera collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarizes the main categories of personal data we collect and the context in which each is obtained.

phpera may process sensitive personal information as defined under Section 3(l) of the Data Privacy Act where strictly necessary for compliance purposes. This may include government-issued identification numbers (e.g., SSS, GSIS, TIN, PhilSys number) collected during KYC verification. phpera processes such data only to the extent required by PAGCOR regulations and the Anti-Money Laundering Act and applies enhanced security measures to its storage and transmission.

Certain data fields during registration are marked optional. Failure to provide optional data will not prevent account creation, but may limit access to specific features such as certain promotional offers that require verified address information.

phpera processes your personal data only for specific, legitimate purposes. The primary purposes for which we process personal data are as follows.

• Account Registration and Management: Creating, maintaining, and administering your phpera player account, including managing your balance, transaction history, and account preferences.
• Identity Verification (KYC): Verifying your identity and age in compliance with PAGCOR's player registration requirements and the Anti-Money Laundering Act.
• Payment Processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted Philippine payment channels.
• Game Delivery: Operating and delivering casino games, sports betting services, bingo rooms, and all other gaming content available on the phpera Platform.
• Regulatory Compliance: Meeting phpera's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and other applicable Philippine laws and regulations.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account abuse, money laundering, and other security threats to the Platform and its players.
• Responsible Gaming: Monitoring gaming patterns for indicators of problem gambling and administering player-requested responsible gaming tools including deposit limits and self-exclusion.
• Customer Support: Responding to account queries, payment issues, complaints, and other support requests submitted by players.
• Marketing and Promotions: Sending promotional offers, bonuses, and platform updates to players who have consented to receive marketing communications. Players may withdraw marketing consent at any time via account settings.
• Platform Improvement: Analyzing aggregated and pseudonymized usage data to improve the phpera Platform, identify technical issues, and optimize the player experience.

Under the Data Privacy Act of 2012, phpera processes personal data on the basis of one or more of the following lawful criteria as applicable to each processing activity.

• Contractual Necessity: Processing required to perform our obligations under the phpera Terms & Conditions you accepted upon registration, including account management, gameplay, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing obligations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing necessary for phpera's legitimate business interests in fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential analytics where you have given specific, informed, and voluntary consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

phpera does not sell, rent, or trade personal data. We share personal data only in the limited circumstances described below.

phpera is legally required to share player information with PAGCOR as part of its licensing obligations, with the Anti-Money Laundering Council (AMLC) where transactions meet reportable thresholds under the Anti-Money Laundering Act, and with other Philippine government agencies where compelled by valid legal process. phpera cooperates fully with all such lawful requests.

To process deposits and withdrawals, phpera shares necessary financial and identity data with payment service providers including GCash (G-Xchange, Inc.), PayMaya (Maya Philippines, Inc.), and Philippine banking institutions. Each payment provider processes data under its own privacy policy and applicable financial services regulations.

phpera's game library is operated in partnership with licensed game providers including JILI Games, PG Soft, Pragmatic Play, and Evolution. These providers receive only the technical data necessary to deliver individual game sessions — typically a session token and bet amount — and do not receive full player identity profiles.

phpera engages technology vendors for services including cloud hosting, platform security monitoring, and customer support systems. These vendors process personal data solely as personal information processors acting under phpera's instructions and are contractually bound to the same data protection standards required of phpera under the Data Privacy Act.

phpera retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply.

Upon expiry of the applicable retention period, phpera will securely delete or anonymize personal data unless extended retention is required by a specific legal obligation or ongoing regulatory investigation.

phpera implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental or unlawful destruction, loss, alteration, disclosure, or any other form of unlawful processing. These measures include the following.

• Encryption in Transit: All data transmitted between your device and phpera's servers is encrypted using 256-bit TLS/SSL — the same standard applied to Philippine commercial banking portals.
• Encryption at Rest: Sensitive data stored on phpera's servers, including identity documents and financial records, is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. phpera staff members are granted access only to the data categories required for their specific job function.
• Password Security: Player passwords are stored using one-way cryptographic hashing. phpera staff cannot view plaintext passwords and cannot access your account using your password.
• Two-Factor Authentication: Optional two-factor authentication is available for all phpera player accounts, adding an additional layer of protection against unauthorized access.
• Security Monitoring: phpera employs continuous monitoring of access logs and system activity to detect and respond to unauthorized access attempts, unusual login patterns, and potential data security incidents.
• Incident Response: phpera maintains a documented personal data breach response procedure in compliance with the NPC's mandatory breach notification requirements under the Data Privacy Act.

phpera uses cookies and similar web technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a website. The following categories of cookies are used on phpera.net.

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby view, and responsible gaming limit configurations to improve your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymized data about how players navigate the Platform — which pages are visited most frequently, where players encounter errors, and how the lobby is used. This data is used exclusively for Platform improvement and is not linked to individual player identities.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These cookies analyze behavioral signals associated with your session.

You may manage non-essential cookies through your browser's settings. Most modern browsers provide controls to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phpera. To exercise any of these rights, contact phpera's Data Protection Officer at the details in Section 14.

phpera will respond to all data subject rights requests within thirty (30) calendar days of receipt in accordance with the NPC's prescribed timelines. Where a request cannot be fulfilled within this period due to complexity, phpera will notify you of the extension and the reasons for it. Rights requests may be subject to identity verification before phpera can act on them.

If you are not satisfied with phpera's response to your data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

phpera Casino is strictly intended for adults aged 21 years and older, in compliance with PAGCOR's minimum age requirement for online gambling in the Philippines. phpera does not knowingly collect personal data from individuals under the age of 21.

All account registrations are subject to mandatory KYC age verification using government-issued Philippine identification documents. Any account found to belong to a person under 21 years of age will be immediately and permanently suspended. Any personal data collected from an underage individual will be securely deleted upon discovery, subject to any mandatory retention obligations under Philippine law.

If you believe that a minor may have accessed or registered on the phpera Platform using false age information, please contact phpera's Data Protection Officer or customer support team immediately.

phpera's primary operations and data processing infrastructure are based in the Philippines. In the course of operating the Platform, certain personal data may be transferred to or accessed by technology service providers or game providers whose infrastructure is located outside the Philippines — for example, cloud computing infrastructure or game server networks operated by international game providers.

Where such transfers occur, phpera ensures that adequate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law. These safeguards may include contractual clauses compliant with NPC standards for cross-border data transfers, and phpera maintains records of all such transfers as required by the Data Privacy Act.

phpera may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy — those that significantly affect how we process your personal data or alter your rights — will be communicated to registered players via the email address associated with their account and through a notice on the Platform at least seven (7) calendar days before the changes take effect.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acknowledgment of and agreement to the updated terms. The date of the most recent revision is indicated at the top of this Policy. We encourage you to review this Policy periodically.

For any questions, concerns, or requests relating to this Privacy Policy or to exercise your data subject rights, please contact phpera's Data Protection Officer using the details below. All data rights requests and privacy-related inquiries are handled by the DPO's office.

If you believe phpera has not adequately addressed your privacy concern, you may file a complaint with the National Privacy Commission of the Philippines, which is the regulatory authority responsible for enforcing the Data Privacy Act.

This Privacy Policy was last reviewed and updated effective January 1, 2026.