phpvio Casino Privacy Policy

The following terms carry the meanings given below throughout this Privacy Policy:

• "phpvio," "we," "us," "our" — phpvio Casino, its operating entity, and affiliated service providers involved in data processing.
• "Platform" — the phpvio website, mobile-optimised web application, and all associated services accessible at phpvio.cam.
• "Player," "you," "your" — any individual who accesses, registers on, or uses the phpvio Platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a specific individual, as defined under Republic Act No. 10173 (Data Privacy Act of 2012).
• "Sensitive Personal Information" — a category of Personal Data affording heightened protection under RA 10173, including government-issued ID numbers, financial account details, and health information.
• "Processing" — any operation performed on Personal Data, including collection, recording, organisation, storage, use, disclosure, and deletion.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. phpvio acts as the Data Controller for all player data collected on the Platform.
• "NPC" — the National Privacy Commission of the Philippines, the independent authority responsible for enforcing RA 10173.
• "DPO" — Data Protection Officer, phpvio's designated officer responsible for overseeing compliance with data privacy obligations.
• "PAGCOR" — the Philippine Amusement and Gaming Corporation, phpvio's licensing and regulatory authority.

This Privacy Policy applies to all Personal Data collected, processed, or stored by phpvio in connection with the operation of the Platform and the provision of online gaming services to players in the Philippines. It covers all data collected through account registration, gameplay, financial transactions, customer support interactions, and the phpvio website itself.

phpvio acts as the Data Controller for Personal Data collected directly from Players through the Platform. Where phpvio engages third-party service providers to process data on its behalf (for example, payment processors, game software providers, or fraud detection services), those parties act as Data Processors operating under written data processing agreements that impose obligations consistent with this Privacy Policy and RA 10173.

This Policy does not apply to third-party websites, applications, or services that may be linked from the phpvio Platform. phpvio is not responsible for the privacy practices of any third party.

phpvio collects the following categories of Personal Data in the course of providing its services. We collect only what is necessary for the purposes described in this Policy.

phpvio collects Personal Data through the following channels:

• Direct Collection: Information you provide when creating a phpvio account, completing KYC verification, making deposits or withdrawals, participating in promotions, or contacting customer support.
• Automated Collection: Technical data collected automatically when you access the phpvio Platform, including IP address, device identifiers, session timestamps, and browsing behaviour within the Platform, via cookies and server logs.
• Third-Party Sources: Identity and financial verification data received from KYC/AML service providers, payment processors (e.g., GCash, Maya, BPI), and fraud detection services for the purposes of verifying your identity and preventing financial crime.
• Regulatory Reporting: Data received from PAGCOR or other competent Philippine authorities in connection with regulatory compliance obligations or investigations where phpvio is required to act.

phpvio processes your Personal Data on the following legal bases under Republic Act No. 10173:

• Contractual Necessity: Processing required to perform our contract with you — operating your account, processing deposits and withdrawals, delivering game access, and providing customer support.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, and reporting requirements mandated by the NPC or other competent authorities.
• Legitimate Interests: Processing for purposes such as fraud detection, platform security, responsible gaming monitoring, and business analytics, where our legitimate interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications and personalised promotions, where we have obtained your explicit, informed, and freely given consent. You may withdraw such consent at any time via your Account Settings.

phpvio uses collected Personal Data for the following specific purposes:

• Creating and managing your phpvio account and verifying your identity and age eligibility (21+ requirement)
• Processing deposits and withdrawals via GCash, Maya, and other Philippine payment channels
• Detecting and preventing fraud, money laundering, cheating, and other prohibited activities on the Platform
• Fulfilling PAGCOR licensing obligations, including player activity reporting and AML/CFT compliance
• Operating and maintaining the phpvio Platform, including game delivery, technical support, and performance monitoring
• Monitoring player activity for responsible gaming purposes and applying protective measures where necessary
• Communicating with you about your account, transactions, promotions (where consented), and policy updates
• Resolving disputes, investigating complaints, and enforcing phpvio's Terms and Conditions
• Improving the phpvio Platform through analytics, user experience research, and service development
• Complying with any applicable Philippine law, court order, or regulatory direction

phpvio does not sell, rent, or commercially transfer your Personal Data to third parties. We share data only in the following circumstances, and only to the extent necessary for the stated purpose:

• Service Providers: Trusted third-party vendors who provide services integral to phpvio's operations, including KYC/AML verification providers, payment processors (GCash, Maya, BPI, BDO, Metrobank), game software providers, cloud infrastructure providers, and customer support platforms. All service providers operate under written data processing agreements with data protection obligations equivalent to this Policy.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where phpvio is required to disclose data by law, regulation, or lawful order.
• Law Enforcement: Philippine law enforcement agencies where phpvio is required by law to disclose data in connection with the investigation or prosecution of criminal offences.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of business assets, your Personal Data may be transferred to the acquiring entity. phpvio will notify you prior to any such transfer taking effect and ensure the receiving entity maintains equivalent data protection standards.

The phpvio Platform uses cookies and similar tracking technologies to deliver and improve the Platform, analyse usage patterns, and support security operations. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences (e.g., language settings, game lobby layout preferences) to personalise your phpvio experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised information about how Players use the Platform to help phpvio improve performance and user experience. These require your consent and may be declined.
• Security Cookies: Support fraud detection and account security monitoring, including device fingerprinting to identify suspicious login attempts.

You may manage non-essential cookie preferences through your browser settings or the phpvio cookie preference panel. Note that disabling certain cookies may affect the functionality of the Platform.

phpvio retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable Philippine law.

• Account Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the AMLA.
• KYC/Identity Verification Documents: Retained for a minimum of five (5) years following the conclusion of the business relationship, in accordance with AMLC requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLA and PAGCOR reporting obligations.
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each gaming session for regulatory reporting, dispute resolution, and responsible gaming monitoring purposes.
• Communications Data: Live chat transcripts and email correspondence are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever occurs first.

Upon expiry of the applicable retention period, phpvio will securely delete or anonymise your Personal Data in a manner that ensures it cannot be re-identified.

phpvio implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phpvio's servers
• AES-256 encryption for Personal Data stored in phpvio's databases
• Role-based access controls limiting data access to authorised personnel with a demonstrated operational need
• Regular penetration testing and third-party security audits conducted by independent cybersecurity firms
• Multi-factor authentication for all administrative access to phpvio's data processing systems
• Incident response procedures for detecting, assessing, and reporting Personal Data breaches

In the event of a Personal Data breach that is likely to result in a risk to the rights and freedoms of affected individuals, phpvio will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required under RA 10173 and NPC Circular No. 16-03. Affected Players will be notified without undue delay where the breach is likely to result in a high risk to their rights.

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your Personal Data held by phpvio. You may exercise these rights at any time by contacting phpvio's Data Protection Officer using the contact details in Section 15.