phfairy Casino – Privacy Policy

This Privacy Policy applies to phfairy ("Company," "we," "us," "our") and governs the collection, processing, storage, and disclosure of personal data obtained through https://phfairy.vip (the "Platform") and any related phfairy mobile applications, communications, or services.

phfairy operates as a PAGCOR-licensed online casino and sports betting platform serving Filipino players across the Philippines. As a regulated gaming operator, phfairy is required to collect and process certain personal data to comply with PAGCOR licensing conditions, anti-money-laundering obligations under Republic Act No. 9160 (AMLA), and the Data Privacy Act of 2012 (Republic Act No. 10173).

This Policy applies to all registered players, prospective players, and visitors to the Platform regardless of their location within the Philippines. It does not apply to third-party websites, services, or platforms that may be linked to or from phfairy.

phfairy collects personal data in the following categories:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued Philippine ID;
• Date of birth (for age verification — 21+ mandatory);
• Residential address (barangay, city/municipality, province);
• Philippine mobile number (primary account identifier);
• Email address (optional, for account communications);
• Government ID type, number, and uploaded image (for PAGCOR-mandated KYC verification).

2.2 Financial & Transaction Data

• GCash or PayMaya wallet number linked to your phfairy account;
• BPI, BDO, Metrobank, or other bank account details provided for deposits or withdrawals;
• Visa/Mastercard details where applicable;
• Complete deposit, withdrawal, and wagering transaction history.

2.3 Technical & Usage Data

• IP address and geolocation data at time of login and transaction;
• Device type, operating system, browser type and version;
• Session duration, page navigation, and feature interaction logs;
• Game session data including bets placed, outcomes, and RNG seed records.

2.4 Communication Data

• Records of all customer support interactions including live chat transcripts, emails, and SMS correspondence;
• Complaint and dispute records.

phfairy processes your personal data for the following purposes:

• Account registration and management: Creating, maintaining, and administering your phfairy account;
• Identity and age verification: Fulfilling PAGCOR-mandated Know Your Customer (KYC) obligations and confirming you are 21 or older;
• Payment processing: Facilitating deposits and withdrawals via GCash, PayMaya, and partner banks;
• Regulatory compliance: Meeting PAGCOR reporting requirements, AMLC obligations, and NPC data protection standards;
• Fraud prevention and security: Detecting and preventing unauthorized access, bonus abuse, collusion, and financial crime;
• Customer support: Responding to inquiries, resolving disputes, and providing account assistance;
• Platform improvement: Analyzing usage patterns to improve game performance, interface design, and feature development;
• Responsible gaming: Identifying patterns that may indicate problem gambling and administering self-exclusion or limit tools;
• Marketing communications: Sending promotional offers, bonus notifications, and news — only where you have explicitly opted in.

Under the Data Privacy Act of 2012, phfairy processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and maintain your account, process transactions, and deliver gaming services under our Terms & Conditions;
• Legal obligation: Processing mandated by PAGCOR licensing conditions, AMLA, the DPA's NPC registration requirements, and other applicable Philippine laws;
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring, and platform analytics — provided these interests do not override your privacy rights;
• Consent: Marketing communications and optional data uses — where we rely on your explicit, freely given consent, which you may withdraw at any time.

phfairy does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• PAGCOR: As required by our operating license, including player activity reports, suspicious transaction reports, and regulatory audits;
• Anti-Money Laundering Council (AMLC): As required by Republic Act No. 9160 and its amendments;
• Payment processors: GCash (Mynt), PayMaya (PayMongo), BancNet, and Visa/Mastercard network operators — strictly for the purpose of processing your financial transactions;
• KYC and identity verification providers: Third-party vendors engaged to verify your identity and age as part of phfairy's PAGCOR-mandated KYC program;
• Game software providers: Technical game outcome and session data shared with certified game providers for fairness auditing and dispute resolution purposes;
• Philippine law enforcement and courts: Where required by valid legal process, court order, or law enforcement request under Philippine law;
• Corporate successors: In the event of a merger, acquisition, or sale of substantially all of phfairy's assets, subject to equivalent privacy protections.

phfairy retains your personal data for as long as your account is active and for a period thereafter as required by law and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA;
• Transaction records: Retained for a minimum of ten (10) years in accordance with AMLA record-keeping obligations;
• Customer support communications: Retained for three (3) years following resolution of the relevant interaction or dispute;
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, phfairy will securely delete or anonymize your personal data in a manner that prevents reconstruction of individually identifiable information.

phfairy implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phfairy's servers;
• Encryption of sensitive data fields (including payment credentials and ID document images) at rest using AES-256;
• Role-based access controls limiting phfairy staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for all phfairy administrative and operational systems;
• Regular third-party penetration testing and security audits;
• Intrusion detection and real-time anomaly monitoring across all platform infrastructure.

While phfairy employs industry-standard security measures, no system is completely immune to breach. In the event of a personal data breach affecting your rights and freedoms, phfairy will notify the National Privacy Commission (NPC) within 72 hours of discovery and will inform affected players as required under the DPA's implementing rules.

phfairy uses cookies and similar tracking technologies to operate the Platform, personalize your experience, and analyze usage patterns. The types of cookies we use are:

• Strictly necessary cookies: Required for core Platform functionality including login session management, security tokens, and GCash wallet state — these cannot be disabled without impairing Platform functionality;
• Functional cookies: Remembering your language preferences, game lobby layout settings, and "Remember Me" login state;
• Analytics cookies: Collecting anonymized data on page views, navigation paths, and feature usage to improve the Platform — you may opt out of these through your browser settings;
• Marketing cookies: Tracking whether you have been shown a particular promotion — only used where you have consented to marketing communications.

You may manage cookie preferences through your browser's settings. Please note that disabling strictly necessary cookies will prevent phfairy from functioning correctly. phfairy does not use third-party advertising networks or tracking pixels for external retargeting.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phfairy:

If phfairy determines or is notified that personal data has been collected from a person under 21 years of age, phfairy will immediately suspend the relevant account, delete all associated personal data to the extent permitted by legal retention obligations, and report the incident to PAGCOR as required. If you believe a minor has registered with phfairy, please contact us immediately at [email protected].

phfairy primarily stores and processes personal data within the Philippines. In limited circumstances, phfairy may transfer personal data to overseas third-party service providers — for example, certified game testing laboratories or cloud infrastructure providers — where such transfers are necessary to deliver our services.

Any cross-border transfer of personal data by phfairy will only be made where:

• The recipient country provides an adequate level of protection consistent with the Philippine Data Privacy Act; or
• Appropriate contractual safeguards — including NPC-compliant data transfer agreements — are in place with the overseas recipient; or
• The transfer is required for the performance of a contract with you or for the implementation of pre-contractual measures at your request.

The phfairy Platform may contain references or functional integrations with third-party services — including GCash (operated by Mynt), PayMaya (operated by PayMongo), and game software studios. phfairy is not responsible for the privacy practices of these third parties.

When you use GCash or PayMaya to transact with phfairy, your use of those payment applications is governed by GCash's and PayMaya's respective privacy policies. phfairy only receives the transaction confirmation and wallet identifier necessary to credit your phfairy account — phfairy does not have access to your full GCash or PayMaya account details.

phfairy reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulatory guidance, phfairy's data practices, or Platform features. Material changes will be communicated to registered players via email or in-platform notification at least 14 days before taking effect.

The effective date of the most recent version is displayed at the top of this page. Continued use of phfairy following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you object to any change, you may request account closure before the change takes effect.

phfairy has designated a Data Protection Officer (DPO) in compliance with Section 21 of the Data Privacy Act. For all data privacy inquiries, subject access requests, or complaints, contact the phfairy DPO using the details below:

You also have the right to contact the National Privacy Commission (NPC) of the Philippines directly if you believe your data privacy rights have not been respected. Information on filing a complaint with the NPC is available on the NPC's official website.