PHCAH Privacy Policy – How We Protect Your Personal Data

1Introduction

PHCAH ("we," "our," "us," "PHCAH") is committed to protecting the privacy and personal information of every player who uses our platform at phcah.best. This Privacy Policy explains in plain language how we collect your information, what we do with it, who might see it, how long we keep it, and what control you have over it.

This policy applies to all personal data collected from individuals who register an account on PHCAH, deposit or withdraw funds, use any game or betting feature on the platform, contact customer support, or browse the PHCAH website. If you are a player in the Philippines, your data is handled in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

PHCAH acts as the data controller for personal information collected through the platform. Our data protection contact is reachable at support@phcah.best for any privacy-related inquiry or request.

2Personal Data We Collect

PHCAH collects personal data through several channels — directly from you during registration and account use, automatically via technical systems as you interact with the platform, and in limited cases from third-party service providers.

3Why We Collect Your Personal Data

Every category of data that PHCAH collects serves at least one specific, legitimate purpose. We do not collect data speculatively. The primary purposes for which we collect and process your personal information are:

• Account creation and management — your name, email, and contact details are required to establish and maintain your PHCAH account.
• Age and identity verification (KYC) — required to confirm that you are 18 or older and that the account belongs to who it says it belongs to. This is a legal and regulatory requirement.
• Payment processing — your payment method references are needed to execute deposits, withdrawals, and to verify that payments come from accounts in your name.
• Anti-money laundering (AML) compliance — transaction records and identity data are retained as required by applicable regulations to detect and prevent financial crime.
• Fraud prevention and platform security — technical data including IP address, device information, and behavioural patterns are analysed to identify and respond to suspicious activity.
• Responsible gaming — gaming activity data is used to monitor for patterns consistent with problem gambling and to enable the operation of deposit limits, loss limits, and self-exclusion tools.
• Customer support — communication records are retained to provide consistent, accountable support and to resolve disputes.
• Platform improvement — aggregated and anonymised technical and usage data helps us improve platform performance, game selection, and user experience.
• Marketing (with consent only) — where you have opted in, your contact details and gameplay preferences are used to send relevant promotional messages from PHCAH.

4Legal Basis for Processing

Under the Data Privacy Act of 2012 and general data protection principles, PHCAH processes your personal data on the following legal grounds depending on the purpose:

• Contractual necessity — processing required to fulfil the Terms and Conditions you agreed to when registering an account (e.g., processing deposits, settling bets, paying winnings).
• Legal obligation — processing required to comply with applicable laws including KYC, AML, and age verification obligations.
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests do not override your privacy rights.
• Consent — processing for marketing communications, where you have explicitly opted in. Consent may be withdrawn at any time without affecting other processing based on different legal grounds.

5How We Use Your Data

Beyond the collection purposes listed in Section 3, your data informs specific operational processes at PHCAH:

Responsible Gaming Monitoring

PHCAH uses your gaming activity data — session duration, deposit frequency, loss patterns, and wagering behaviour — to operate responsible gaming tools and to identify accounts that may show signs of problem gambling. Where such patterns are identified, PHCAH may proactively contact you to prompt self-assessment or remind you of available limits and self-exclusion tools. This use of your data is in your interest, not commercial.

Personalisation

With your consent, PHCAH may use your game history and preferences to surface relevant game recommendations or personalised promotions within your account. This personalisation does not involve automated decision-making that produces legal or significant effects — it is equivalent to a platform surfacing content based on your known preferences. You can opt out of personalisation from your account settings at any time.

Dispute Resolution

Bet records, account activity logs, support chat transcripts, and payment transaction references are all retained and used to investigate and resolve account disputes. When you raise a complaint with PHCAH, the relevant records are reviewed by our team to establish what occurred.

6Sharing Your Personal Data

PHCAH does not sell, rent, or trade your personal data to third parties. We share your data only in the following circumstances, and only to the extent necessary for each purpose:

Service Providers (Data Processors)

PHCAH engages third-party service providers who process data on our behalf under strict contractual obligations. These include:

• Payment processors — GCash, Maya, GrabPay, Coins.ph, Visa/Mastercard acquiring banks, and InstaPay/PESONet network providers receive the transaction data necessary to process your payments.
• KYC and identity verification providers — third-party services that verify identity documents and age on our behalf. These providers receive your identity data only for verification purposes and are contractually prohibited from using it for any other purpose.
• Game studio partners — certified game studios that supply games to PHCAH receive a player session token and account currency during gameplay. They do not receive your name, contact details, or payment information.
• Cloud infrastructure and hosting providers — PHCAH's platform operates on certified cloud infrastructure. Servers handling personal data are located in jurisdictions with adequate data protection standards.
• Customer support tools — live chat and email support systems process communication records on behalf of PHCAH.

Legal and Regulatory Disclosure

PHCAH may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by law, by a valid legal process, or to protect the rights, property, or safety of PHCAH, its players, or the public. PHCAH will inform you of such disclosures where legally permitted to do so.

7Data Retention

PHCAH retains your personal data only for as long as is necessary for the purpose it was collected, or as required by law. The following retention periods apply:

• Account data and gaming records — retained for the duration of your active account plus a minimum of 5 years after account closure, as required for AML compliance and potential regulatory audit.
• Financial transaction records — retained for 7 years from the transaction date in accordance with standard financial record-keeping requirements.
• KYC/identity documents — retained for the duration of your account plus 5 years after closure, or longer if required by applicable law.
• Customer support communications — retained for 3 years from the date of the interaction.
• Marketing preferences and consent records — retained while your account is active and for 1 year after its closure for audit purposes.
• Technical logs (IP, session data) — retained for up to 2 years for security and fraud prevention purposes.

After the applicable retention period, data is securely deleted or anonymised such that it can no longer be linked to you as an individual.

8Data Security

PHCAH applies appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• TLS encryption on all data transmitted between your device and PHCAH servers.
• Encryption at rest for sensitive stored data including payment tokens and identity document copies.
• Access controls that restrict internal access to personal data to authorised staff with a legitimate operational need, on a least-privilege basis.
• Regular security assessments including penetration testing and vulnerability scanning of platform infrastructure.
• Incident response procedures for detecting, containing, and reporting data breaches in a timely manner. In the event of a breach that poses a risk to your rights, PHCAH will notify you and the relevant supervisory authority within the timeframes required by applicable law.

While PHCAH applies robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own device and account credentials. See the PHCAH Terms and Conditions for your obligations regarding account security.

9Cookies and Tracking Technologies

PHCAH uses cookies and similar technologies on our website to provide a functional, secure, and personalised platform experience. A cookie is a small data file stored on your browser or device when you visit a website. Below is a summary of the cookies PHCAH uses and why.

You can manage or withdraw cookie consent (except for essential cookies) through your browser settings or any cookie preference tool provided on the PHCAH website. Blocking essential cookies will impair the functionality of your account.

10Your Data Rights

As a player in the Philippines, you have specific rights over your personal data under the Data Privacy Act of 2012. PHCAH supports the exercise of all these rights. Here is what you are entitled to and how to exercise each right:

11Children's Privacy

PHCAH is strictly an adult platform. We do not knowingly collect personal data from individuals under 18 years of age. Our registration process includes age verification steps to prevent underage access. If PHCAH discovers that a registered account belongs to a person under 18, the account will be closed immediately, all associated data will be deleted to the extent permitted by law, and funds may be forfeited in accordance with our Terms and Conditions.

If you are a parent or guardian and believe your child has registered an account on PHCAH, please contact us immediately at support@phcah.best with the account email address so we can investigate and take action promptly.

12Marketing Communications

PHCAH will only send you marketing communications — including promotional emails, SMS messages, push notifications, and in-platform promotional messages — where you have provided explicit consent to receive them. Consent is obtained during the registration process and can be managed at any time from your account settings under Communication Preferences.

Withdrawing Marketing Consent

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any PHCAH marketing email.
• Toggling marketing preferences off in your PHCAH account settings.
• Contacting PHCAH support via live chat or email requesting removal from marketing lists.

Opting out of marketing communications does not affect the delivery of transactional communications — such as account security alerts, deposit confirmations, withdrawal status updates, and important service notifications. These are sent regardless of marketing preferences because they are operationally necessary for your account.

13Changes to This Privacy Policy

PHCAH reserves the right to update or revise this Privacy Policy at any time. When we make changes, we will update the effective date at the top of this document and publish the revised policy at phcah.best/privacy-policy. For material changes that significantly affect your rights or how we process your data, PHCAH will make reasonable efforts to inform active account holders via email or in-platform notification prior to the change taking effect.

Your continued use of the PHCAH platform after any update to this Privacy Policy constitutes your acknowledgement of the updated document. We recommend bookmarking this page and checking it periodically, especially before any significant account activity.

14Contact PHCAH About Privacy

For any question, concern, or formal request related to this Privacy Policy or to how PHCAH handles your personal data, please contact us through any of the following channels:

• Email: support@phcah.best — for formal data rights requests, privacy complaints, and written correspondence, please use this channel. Include "Privacy" or "Data Rights Request" in your subject line for faster routing.
• Live Chat: Available 24/7 from any page on the PHCAH platform when you are logged in. For general privacy questions, live chat is the quickest route to an answer.

PHCAH aims to respond to all privacy-related inquiries within 15 business days. Complex requests — such as data subject access requests — will be acknowledged within 3 business days and fulfilled within 30 days. If we are unable to fulfil a request in full, we will explain the reason in our response.