At phmacau, your privacy matters as much as your gameplay. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have as a player on our platform.
Summary for Filipino Players: phmacau collects only the personal data necessary to operate your account, process your GCash or bank transactions, verify your identity as required by Philippine regulations, and keep your account secure. We do not sell your personal data to third parties. You have the right to access, correct, and request deletion of your data at any time. This policy is written in plain English so you actually understand it — not just to tick a legal box.
This Privacy Policy ("Policy") describes how phmacau ("phmacau," "we," "us," "our") collects, processes, stores, and protects the personal information of users ("Player," "you," "your") who access or use the phmacau online gaming platform at phmacau.one.
phmacau is committed to protecting the privacy and personal data of all players, in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations as enforced by the National Privacy Commission (NPC).
By registering an account on phmacau, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register or continue using the phmacau platform.
This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of phmacau.
For the purposes of the Data Privacy Act of 2012 and this Policy, phmacau acts as the Personal Information Controller (PIC) in respect of the personal data you provide when using the phmacau platform. As PIC, phmacau determines the purposes and means of processing your personal data.
Where phmacau engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or customer support platforms), those providers act as Personal Information Processors (PIPs) and are contractually bound to process your data only in accordance with phmacau's instructions and this Policy.
Data Protection Officer: phmacau has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at [email protected] with the subject line "Data Privacy Inquiry."
phmacau collects the following categories of personal data from players:
Data Minimization Principle: phmacau collects only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect sensitive personal information (such as health data, political opinions, or religious beliefs) unless specifically required by law or with your explicit consent.
phmacau collects your personal data through the following means:
| Collection Method | Examples |
|---|---|
| Direct submission | Registration form, KYC document upload, deposit/withdrawal requests, support inquiries |
| Automated collection | Cookies, session logs, IP address capture, device fingerprinting during platform use |
| Third-party providers | Identity verification services, payment processors (GCash, Maya, banks), fraud detection tools |
| Publicly available sources | Sanctions lists, politically exposed persons (PEP) databases, as required for AML compliance |
phmacau uses your personal data for the following purposes:
Under the Data Privacy Act of 2012, phmacau processes your personal data on the following legal bases:
phmacau does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
GCash, Maya, and partner banks receive the minimum data necessary to process your deposit and withdrawal transactions. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
Third-party KYC and identity verification services receive your ID documents and biometric data solely for the purpose of verifying your identity. These providers are contractually prohibited from using your data for any other purpose.
phmacau may be required to disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities in response to lawful requests, court orders, or regulatory requirements.
We share limited technical data (such as IP addresses and device identifiers) with fraud detection and cybersecurity service providers to protect the integrity of the phmacau platform and all player accounts.
Our customer support tools may process your contact data and communication history to enable our support team to assist you effectively. These platforms operate under strict data processing agreements with phmacau.
No Third-Party Marketing: phmacau will never share your personal data with advertisers, data brokers, or any third party for marketing or profiling purposes without your explicit prior consent.
phmacau retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | AML/KYC regulatory requirements |
| Transaction records | 10 years from transaction date | AMLC reporting obligations (RA 9160) |
| KYC documents | 5 years after account closure | Regulatory compliance |
| Gaming history | 5 years from last activity | Dispute resolution, responsible gaming |
| Support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of lawful processing |
| Technical/device logs | 12 months from collection | Security monitoring, fraud detection |
Upon expiry of the applicable retention period, phmacau will securely delete or anonymize your personal data in accordance with industry-standard data destruction practices.
phmacau implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:
Your Responsibility: While phmacau takes every reasonable measure to protect your data, you are responsible for maintaining the confidentiality of your account credentials. Never share your password or OTP codes with anyone — phmacau staff will never ask for your password.
phmacau uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The following types of cookies are used:
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the phmacau platform. For detailed information on the specific cookies we use, please contact our Data Protection Officer.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmacau:
Request a copy of the personal data phmacau holds about you, including information on how it is being processed.
Request correction of inaccurate or incomplete personal data in your phmacau account.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Request that phmacau restrict the processing of your data while a complaint or rectification request is being resolved.
To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond within 15 business days as required by the Data Privacy Act of 2012. We may need to verify your identity before processing your request.
If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
⚠️ 21+ Only. phmacau does not knowingly collect personal data from individuals under 21 years of age. The phmacau platform is strictly for adults aged 21 and above, in accordance with Philippine gaming regulations. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data and close the associated account.
If you are a parent or guardian and believe your child has registered on phmacau, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act promptly on all such reports.
phmacau primarily stores and processes your personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud detection services.
Where such transfers occur, phmacau ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require the recipient to maintain data protection standards equivalent to those required under the Data Privacy Act of 2012. phmacau will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or a lawful basis for doing so.
phmacau reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent revision is displayed at the top of this page. For material changes that significantly affect your privacy rights, phmacau will notify registered players via email or an in-platform notification prior to the changes taking effect.
Your continued use of the phmacau platform following the effective date of any updated Policy constitutes your acknowledgment of the changes. We encourage you to review this page periodically.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phmacau, please contact our Data Protection Officer:
Data Protection Officer — phmacau
Email: [email protected]
Subject line: Data Privacy Inquiry
Response time: Within 15 business days as required by RA 10173
National Privacy Commission (NPC): If you are not satisfied with our response, you may file a complaint with the NPC, the Philippine government body responsible for enforcing the Data Privacy Act of 2012.
Six commitments every phmacau player can count on.
Every connection to phmacau is protected by bank-grade SSL encryption. Your login credentials, payment details, and personal data are never transmitted in plain text.
phmacau fully complies with the Philippine Data Privacy Act of 2012. We have a registered Data Protection Officer and follow NPC guidelines for data handling and breach notification.
phmacau never sells, rents, or trades your personal data to advertisers or data brokers. Your information is used only to operate your account and comply with Philippine regulations.
We collect only what we need. No unnecessary data collection, no storing information beyond its required retention period. Less data collected means less risk for you.
Access, correct, or request deletion of your data at any time. Opt out of marketing communications with a single click. Your privacy rights are real and enforceable under Philippine law.
Your ID documents are processed by certified identity verification providers and stored with encryption. KYC data is never shared beyond what is required for regulatory compliance.
Your personal data is protected by Philippine law, 256-bit encryption, and our commitment to transparency. Join thousands of Filipino players who trust phmacau. Must be 21 or older.
Must be 21 or older. Responsible Gaming | Terms & Conditions