phsloy Privacy Policy

1. Introduction

phsloy Casino ("phsloy", "we", "us", "our") is committed to protecting the privacy and personal data of all players who use the phsloy platform accessible at phsloy.cam. This Privacy Policy describes the types of personal information we collect, how that information is used, who it may be shared with, and the rights you have regarding your personal data under Philippine law.

This Privacy Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission of the Philippines. By creating a phsloy account, accessing the phsloy platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein.

This Privacy Policy should be read in conjunction with the phsloy Terms and Conditions, which govern the overall use of the phsloy platform. Where there is any conflict between this Privacy Policy and the Terms and Conditions, the provisions of this Privacy Policy shall prevail with respect to matters concerning personal data protection and privacy.

2. Data Controller Information

For the purposes of the Data Privacy Act of 2012, phsloy Casino is the personal information controller responsible for determining the purposes and means of processing your personal data. All inquiries, requests, and complaints regarding the processing of your personal information should be directed to phsloy's Data Protection Officer through the contact channels provided in Section 14 of this Privacy Policy.

As a PAGCOR-regulated gaming operator in the Philippines, phsloy is subject to both data protection law and gaming regulatory requirements. Where these obligations overlap — for example, in the collection of identity documents for KYC verification — phsloy processes your personal data in compliance with both sets of legal requirements.

3. Information We Collect

phsloy collects personal information directly from you during account registration, through your use of the platform, and from third-party sources where necessary for identity verification and fraud prevention purposes. The categories of personal data we collect include:

3.1 Registration and Account Information

When you register for a phsloy account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth
• Registered Philippine mobile phone number
• Email address
• Username and encrypted password
• Preferred currency (PHP)
• Marketing communication preferences

3.2 Know Your Customer (KYC) Verification Data

To comply with PAGCOR regulations and Anti-Money Laundering (AML) law, we collect:

• Copies of government-issued identification documents (PhilSys National ID, UMID, Driver's License, Passport, PRC ID, Voter's ID)
• Proof of residential address (utility bills, bank statements, government correspondence)
• Selfie photographs for biometric face-matching verification
• Source of funds documentation for high-value transactions

3.3 Financial Transaction Data

When you deposit or withdraw funds, we collect:

• Payment method details (GCash mobile number, Maya account, bank account number, cryptocurrency wallet address)
• Transaction amounts, dates, and times
• Transaction reference numbers and payment processor confirmation codes
• Deposit and withdrawal history

3.4 Gaming Activity Data

phsloy automatically logs information about your gaming sessions, including:

• Games played, bet amounts, wins and losses
• Bonus claims and wagering progress
• Session start and end times
• Game-specific data required for responsible gaming monitoring (bet frequency, session length, loss patterns)

3.5 Technical and Device Information

When you access phsloy, we automatically collect:

• IP address and geolocation data (to verify access from permitted jurisdictions)
• Device type, operating system, browser type and version
• Screen resolution and device identifiers
• Referring URLs and pages visited on the phsloy platform
• Session cookies and local storage data

3.6 Communications and Support Data

If you contact phsloy support, we collect and retain:

• Live chat transcripts, email correspondence, and support ticket history
• Voice recordings of phone support calls (where call recording is disclosed and consented to)
• Feedback, survey responses, and complaint documentation

4. How We Use Your Personal Data

phsloy processes your personal information for the following purposes, each of which is necessary for the provision of gaming services or required by law:

phsloy does not use your personal data for automated decision-making or profiling that produces legal effects or similarly significantly affects you, except where such processing is necessary for entering into or performing the contract between you and phsloy (for example, automated fraud detection systems that flag suspicious transactions for manual review).

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, phsloy must have a lawful basis for processing your personal data. The legal bases for phsloy's processing activities are as follows:

• Consent: You have provided explicit consent for phsloy to process your personal data for specific purposes, including marketing communications and certain optional data collection activities.
• Contract Performance: Processing is necessary to fulfil the Terms and Conditions you agreed to when registering your phsloy account, including the provision of gaming services, processing deposits and withdrawals, and managing your account.
• Legal Obligation: Processing is required to comply with PAGCOR regulations, Anti-Money Laundering Act requirements, Data Privacy Act reporting obligations, tax law, and other applicable Philippine legislation.
• Legitimate Interests: Processing is necessary for phsloy's legitimate business interests, including fraud prevention, platform security, network monitoring, dispute resolution, and improvement of services, provided that such interests are not overridden by your fundamental rights and freedoms.

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, and does not exempt phsloy from processing obligations based on other legal grounds such as legal compliance.

6. Data Sharing and Disclosure

phsloy does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, phsloy may share your personal data with the following categories of recipients where necessary for the purposes described in this Privacy Policy:

6.1 Regulatory Authorities

Personal data is disclosed to the Philippine Amusement and Gaming Corporation (PAGCOR) and the Anti-Money Laundering Council (AMLC) as required under gaming regulations and the Anti-Money Laundering Act of 2001 (as amended). Such disclosures are mandatory and not subject to your consent.

6.2 Payment Processors and Financial Institutions

When you make a deposit or request a withdrawal, phsloy shares the necessary transaction information with third-party payment service providers (GCash, Maya, banks, cryptocurrency processors) to complete the transaction. These providers have their own privacy policies governing their use of your data.

6.3 Game Providers

Limited data (username, bet amounts, session tokens) is shared with third-party game studios (JILI, Pragmatic Play, PG Soft, WM Live, etc.) to enable you to play their games on the phsloy platform. Game providers process this data in accordance with their own privacy policies.

6.4 Identity Verification Services

KYC verification is conducted using third-party identity verification services that compare your submitted identification documents against government databases and watchlists. These providers are bound by data protection agreements and process your data solely for verification purposes.

6.5 Cloud Service and Infrastructure Providers

phsloy uses cloud hosting, database, and content delivery network services to operate the platform. These service providers have access to personal data only to the extent necessary to perform their technical functions and are contractually prohibited from using your data for any other purpose.

6.6 Legal and Compliance Disclosures

phsloy may disclose personal data where required by law, court order, subpoena, or lawful request from law enforcement or government authorities. phsloy may also disclose data where necessary to protect the rights, property, or safety of phsloy, its players, or the public.

7. Cookies and Tracking Technologies

phsloy uses cookies, web beacons, and similar tracking technologies to enhance your experience on the platform, analyse usage patterns, and deliver personalised content and advertising. A cookie is a small text file stored on your device that allows phsloy to recognise your browser an d on subsequent visits and maintain your session.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of strictly necessary cookies.
• Functional Cookies: Remember your preferences such as language, currency display, and game lobby layout to personalise your experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the phsloy platform to help us improve performance and user experience.
• Security and Fraud Prevention Cookies: Detect and prevent fraudulent activity, multiple account creation, and other prohibited conduct on the platform.

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of the phsloy platform, including your ability to maintain a logged-in session or access certain game features. Strictly necessary cookies cannot be disabled without preventing access to the platform entirely.

8. Data Security Measures

phsloy implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the phsloy platform is encrypted using Transport Layer Security (TLS 1.2 or higher). Look for the padlock icon in your browser's address bar when accessing phsloy.
• Encryption at Rest: Sensitive data, including identity documents and financial records, is stored using AES-256 encryption in our cloud infrastructure.
• Password Security: Player passwords are never stored in plaintext. phsloy uses industry-standard one-way hashing algorithms with salting to protect your credentials.
• Two-Factor Authentication (2FA): phsloy supports optional OTP-based two-factor authentication via SMS to your registered Philippine mobile number, providing an additional layer of account security.
• Access Controls: Access to player personal data within phsloy's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and audited.
• Penetration Testing and Vulnerability Scanning: phsloy conducts regular security assessments to identify and remediate vulnerabilities in platform infrastructure.

Despite these measures, no internet transmission or electronic storage method is 100% secure. If phsloy becomes aware of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players within seventy-two (72) hours of discovery, in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03.

9. Data Retention

phsloy retains your personal data for as long as your account remains active and for such additional period as is required by law, necessary to resolve disputes, or needed to enforce our agreements. The following retention periods apply:

Upon expiry of the applicable retention period, phsloy will securely delete or anonymise your personal data in accordance with our data disposal procedures. Where data is anonymised rather than deleted, the anonymised dataset no longer constitutes personal data and may be retained indefinitely for analytical purposes.

10. Your Privacy Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by phsloy:

• Right to be Informed: You have the right to know whether phsloy holds personal data about you, and to receive the information set out in this Privacy Policy about how that data is processed.
• Right to Access: You may request a copy of the personal data phsloy holds about you, along with information about the purposes for which it is being processed and any third parties to whom it has been disclosed.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay. For account-related corrections, you may also update certain information directly through your phsloy account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to phsloy's legal retention obligations under PAGCOR regulations and AML law, which may require us to retain certain data beyond your request.
• Right to Data Portability: You may request that phsloy provide your personal data in a structured, commonly used, and machine-readable format, and where technically feasible, transmit that data directly to another data controller.
• Right to Object: You may object to the processing of your personal data where that processing is based on phsloy's legitimate interests. phsloy will cease processing unless it can demonstrate compelling legitimate grounds that override your interests or rights.
• Right to Opt Out of Direct Marketing: You may unsubscribe from phsloy marketing communications at any time by clicking the unsubscribe link in any marketing email or by updating your communication preferences in your account settings.
• Right to Lodge a Complaint: If you believe phsloy has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact phsloy's Data Protection Officer through the contact details provided in Section 14. phsloy will respond to all verified data rights requests within thirty (30) calendar days, as required by the Data Privacy Act of 2012. Complex or high-volume requests may require an extension, which phsloy will communicate to you within the initial 30-day period.

11. International Data Transfers

phsloy's primary operations and data processing infrastructure are located within the Philippines. However, certain service providers — including cloud infrastructure vendors, game studios, and identity verification services — may process your personal data in countries outside the Philippines.

Where phsloy transfers personal data to a country that the National Privacy Commission has not designated as providing an adequate level of data protection, phsloy ensures that appropriate safeguards are in place, including contractual clauses that impose obligations equivalent to the protections afforded under the Data Privacy Act of 2012, prior to the transfer.

You may request information about the specific safeguards applied to your data in connection with any international transfer by contacting phsloy's Data Protection Officer.

12. Children's Privacy and Age Restrictions

In accordance with PAGCOR regulations, the minimum age for participation in any gaming activity on the phsloy platform is twenty-one (21) years. phsloy implements age verification procedures at registration and during KYC review to ensure compliance with this requirement.

If phsloy becomes aware that personal data has been collected from a person under the age of 21 without appropriate verifiable consent, phsloy will immediately suspend the associated account, delete all associated personal data, and return any deposits made to the verified payment source, in accordance with the account termination procedures set out in the Terms and Conditions.

If you are a parent or guardian and believe your child may have registered for a phsloy account, please contact phsloy's Data Protection Officer immediately using the contact details in Section 14.

13. Changes to This Privacy Policy

phsloy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Privacy Policy, phsloy will:

• Update the "Last Updated" date at the top of this page;
• Notify registered players via the email address or mobile number associated with their phsloy account; and
• Where required by law, obtain fresh consent from players before implementing changes that affect the legal basis for processing.

We encourage you to review this Privacy Policy periodically. Your continued use of the phsloy platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any amendments, you must discontinue use of the phsloy platform and may request account closure as described in the Terms and Conditions.

14. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how phsloy handles your personal information, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Data Privacy Request" or "Privacy Complaint" in your email subject line to ensure prompt routing to the Data Protection Officer.
• Response Time: phsloy will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days.

14.1 Complaints to the National Privacy Commission

If you are not satisfied with phsloy's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for enforcing the Data Privacy Act of 2012 and protecting the privacy rights of Filipino citizens. Information on how to file a complaint is available through the NPC's official government website and offices.