phophen is committed to protecting the personal data of every Filipino player who uses our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your own data — in plain, honest language, not buried legalese.
phophen's data practices are designed to comply with Republic Act No. 10173 — the Data Privacy Act of 2012 — and the implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.
All personal data stored by phophen is encrypted at rest using industry-standard AES-256 encryption. All data transmitted between your device and phophen's servers is protected by 256-bit TLS/SSL. Your data cannot be read in transit by any third party.
phophen does not sell, rent, or trade personal data to third-party advertisers or data brokers. Your information is used solely to operate and improve the phophen platform, process your transactions, and fulfill our legal and regulatory obligations.
phophen follows a data minimization approach — we collect only the personal information that is strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data "just in case."
As a data subject under Philippine law, you have the right to access, correct, delete, and object to the processing of your personal data. phophen provides clear mechanisms for exercising all of these rights through your account settings and our support team.
phophen retains personal data only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law. Once data is no longer needed, it is securely deleted or anonymized in accordance with our data retention schedule.
1.1 This Policy applies to all personal data processed by phophen in connection with the operation of the phophen online casino and sports betting platform, including the website phophen.app, any associated mobile-optimized interfaces, customer support channels, and promotional communications.
1.2 phophen's data processing practices are designed to comply with the Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), and the implementing rules and regulations (IRR) issued by the National Privacy Commission (NPC) of the Philippines. Where applicable, phophen also observes international best practices in data protection.
1.3 This Policy does not apply to third-party websites, services, or applications that may be linked from the phophen Platform. phophen is not responsible for the data practices of third parties.
1.4 phophen serves players located in the Philippines. If you access the Platform from outside the Philippines, you do so on your own initiative and responsibility, and phophen makes no representation that the Platform or its data practices are appropriate for use in other jurisdictions.
2.1 For the purposes of the Data Privacy Act of 2012 and this Policy, phophen is the Personal Information Controller (PIC) in respect of all personal data collected through the phophen Platform.
2.2 As Personal Information Controller, phophen determines the purpose and means of processing your personal data, and is responsible for ensuring that processing activities comply with applicable Philippine data privacy law.
2.3 phophen has designated a Data Protection Officer (DPO) responsible for overseeing data protection compliance and serving as the point of contact for data privacy inquiries, requests, and complaints. The DPO may be contacted via the support channel identified in Section 17 of this Policy.
phophen collects the following categories of personal data in the ordinary course of operating the Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID number and type | Age verification (21+), KYC, account creation |
| Contact Data | Philippine mobile number, email address | Account login, OTP delivery, support, notifications |
| Financial Data | GCash / Maya account reference, bank account details (where applicable), transaction history | Deposits, withdrawals, AML compliance |
| KYC Documents | Scanned / photographed government-issued Philippine ID | Identity verification, age confirmation, fraud prevention |
| Gameplay Data | Bet history, game sessions, wins, losses, bonus activity | Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type, operating system, session logs | Security, fraud detection, platform optimization |
| Preference Data | Favourite games, language settings, marketing preferences | Platform personalization, targeted promotions (with consent) |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Support delivery, quality assurance, dispute records |
phophen collects personal data through the following means:
phophen uses the personal data it collects for the following specific purposes:
Under the Data Privacy Act of 2012, phophen processes your personal data on the following legal grounds:
7.1 phophen does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes.
7.2 phophen may share personal data with the following categories of third parties only where necessary and on the basis of appropriate data processing agreements:
8.1 phophen uses cookies and similar tracking technologies on phophen.app to deliver a functional, secure, and personalized experience. Cookies are small text files stored on your device by your browser when you visit a website.
8.2 phophen uses the following categories of cookies:
8.3 phophen does not use third-party advertising or behavioral tracking cookies. Your browsing activity on phophen is not shared with ad networks.
8.4 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the Platform's core functionality. Disabling other cookie categories will not prevent you from using the Platform but may affect some features.
9.1 phophen implements technical and organizational security measures appropriate to the risk presented by the personal data it processes. Key security measures include:
9.2 Data Breach Notification. In the event of a personal data breach that is likely to result in harm to affected Players, phophen will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by NPC Circular No. 16-03. Affected Players will be notified within a reasonable time in accordance with NPC requirements.
10.1 phophen retains personal data only for as long as is necessary to fulfill the purposes described in this Policy, or as required or permitted by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Legal obligation (AML, gaming regulation) |
| KYC Documents | Duration of account + 5 years post-closure | AMLC and PAGCOR regulatory requirements |
| Financial Transaction Records | 5 years from transaction date | Anti-Money Laundering Act of 2001 (RA 9160) |
| Gameplay Records | 3 years from session date | Dispute resolution, regulatory compliance |
| Support Communications | 2 years from last interaction | Quality assurance, dispute resolution |
| Marketing Preferences | Until consent withdrawn or account closed | Consent |
| Technical / Log Data | Up to 12 months | Security and fraud detection |
10.2 Upon expiry of the applicable retention period, personal data is either securely deleted using data-sanitization methods that prevent recovery, or irreversibly anonymized such that it can no longer be attributed to an identifiable individual.
As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phophen:
The right to know what personal data phophen collects about you, how it is used, and with whom it is shared — as set out in this Policy.
The right to request a copy of the personal data phophen holds about you, including information about the categories of data, purposes of processing, and any third parties to whom it has been disclosed.
The right to request correction of inaccurate or incomplete personal data. You may update most account information directly from your phophen account settings.
The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phophen's legal retention obligations.
The right to object to processing based on phophen's legitimate interests, including the right to opt out of marketing communications at any time.
The right to receive a structured, machine-readable copy of personal data you have provided to phophen, where technically feasible and to the extent required by applicable law.
12.1 phophen does not knowingly collect personal data from individuals under 21 years of age. The phophen Platform is strictly prohibited for use by persons under 21 years old, in compliance with applicable Philippine gaming regulations.
12.2 Age verification (KYC) is mandatory for all phophen accounts and is specifically designed to prevent access by minors. Any account determined to belong to an individual under 21 will be immediately suspended and all associated data handled in accordance with applicable law.
12.3 If phophen becomes aware that it has inadvertently collected personal data from a person under 21 years of age without valid parental consent, it will take immediate steps to delete that data and close the associated account.
13.1 Some of phophen's service providers and technology partners may be located outside the Philippines. Where personal data is transferred internationally in connection with such partnerships, phophen ensures that appropriate safeguards are in place as required by Section 21 of the Data Privacy Act of 2012.
13.2 Appropriate safeguards for cross-border transfers include: standard contractual clauses requiring the recipient to process data in accordance with standards equivalent to those imposed by Philippine law; transfers to jurisdictions that have been assessed as providing an adequate level of data protection; or obtaining your explicit consent for specific transfers where required.
13.3 phophen will not transfer personal data to jurisdictions that do not provide adequate data protection safeguards without first implementing appropriate contractual or technical measures to protect your data.
14.1 The phophen Platform may, from time to time, reference or link to third-party content. phophen is not responsible for the privacy practices, data processing activities, or content of third-party websites or services.
14.2 This Policy applies exclusively to the personal data collected and processed by phophen through phophen.app and its associated services. Players who navigate away from phophen.app are encouraged to review the privacy policies of any sites they visit.
15.1 With your consent, phophen may send you promotional communications regarding bonuses, new game releases, tournaments, and other platform updates via SMS, email, or in-platform notifications.
15.2 Consent to receive marketing communications is separate from your agreement to these Terms and to this Privacy Policy. Declining marketing communications does not affect your ability to use the phophen Platform or access your account.
15.3 You may withdraw your consent to receive marketing communications at any time by: updating your notification preferences in your phophen account settings; or contacting phophen support and requesting removal from all marketing lists.
15.4 phophen will process opt-out requests within 5 business days. After opting out, you may continue to receive transactional and account-related communications that are necessary for the operation of your account and are not classified as marketing.
16.1 phophen reserves the right to update or revise this Privacy Policy at any time. The current version of this Policy, together with the date of the most recent revision, will always be available at phophen.app/privacy-policy.
16.2 Where phophen makes material changes to this Policy — for example, changes to the categories of data collected, the purposes of processing, or the rights available to Players — phophen will notify registered Players via the email address or mobile number on file, or via a prominent in-Platform notice, at least seven (7) days before the changes take effect.
16.3 Your continued use of the phophen Platform following notification of material changes constitutes your acknowledgment of the updated Policy. If you do not accept the revised Policy, you should discontinue use of the Platform and may request Account closure.
17.1 Data Privacy Inquiries. For questions, requests to exercise your data rights, or general data privacy inquiries, contact phophen's Data Protection Officer through the following official channels:
17.2 Response Times. phophen will acknowledge all data privacy requests within 3 business days and provide a substantive response within 30 days. For complex requests, the response period may be extended by a further 30 days — phophen will notify you of any extension and the reason for it.
17.3 Complaints to the NPC. If you are not satisfied with phophen's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website. phophen encourages Players to contact phophen directly in the first instance so that we have the opportunity to resolve the matter promptly.
phophen is built on transparency — fair games, honest terms, and responsible data handling. Register today, link your GCash, and start playing at the Philippines' most complete online casino. Players must be 21 or older.
🔞 21+ Only · 🇵🇭 Philippines · 💙 GCash & Maya · 🛡️ Responsible Gaming