phpslots Privacy Policy

1. Introduction

phpslots ("phpslots," "we," "us," "our") is committed to protecting the privacy and personal data of all users of the phpslots platform at phpslots.club (the "Platform"). This Privacy Policy ("Policy") describes how phpslots collects, uses, discloses, stores, and protects personal data in connection with your use of the Platform and all associated services.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). phpslots also operates in accordance with PAGCOR's data governance requirements applicable to regulated online gaming operators.

By registering a phpslots account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

2. Personal Data We Collect

phpslots collects the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, government-issued Philippine ID (e.g., PhilSys, passport, driver's licence, SSS, UMID)	KYC verification, age verification, PAGCOR compliance
Contact Data	Philippine mobile number, email address, residential address	Account communication, OTP delivery, support
Financial Data	GCash number, PayMaya account reference, BPI/BDO/Metrobank account name (not full account numbers), transaction history	Deposit and withdrawal processing, AML compliance
Technical Data	IP address, device type, browser type, operating system, session tokens	Security, fraud prevention, platform optimisation
Usage Data	Games played, wager amounts, session duration, login timestamps, bonus usage	Responsible gaming monitoring, platform improvement, PAGCOR reporting
Communications Data	Support chat logs, email correspondence, feedback submissions	Customer support, dispute resolution, quality assurance

phpslots does not collect sensitive personal information as defined under the DPA (such as health data, political opinions, or religious beliefs) unless specifically required by law or PAGCOR regulation.

3. How We Collect Your Data

phpslots collects personal data through the following means:

• Direct collection: Information you provide when registering a phpslots account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; transaction data from payment processors including GCash and PayMaya; fraud and AML screening data from compliance service providers.

4. How We Use Your Personal Data

phpslots uses your personal data for the following purposes:

• To create, verify, and manage your phpslots account;
• To process deposits, withdrawals, and in-platform transactions in Philippine Peso;
• To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine law;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To comply with anti-money laundering (AML) obligations and report transactions to Philippine authorities as required by law;
• To provide customer support and resolve disputes;
• To administer bonuses, promotions, and loyalty programmes;
• To monitor gaming activity for responsible gaming purposes, including identifying players who may be at risk of problem gambling;
• To send you transactional communications (account notifications, security alerts, withdrawal confirmations);
• To send you marketing communications about phpslots promotions and new games, where you have consented or where permitted by applicable law;
• To improve the Platform through analytics and user behaviour research;
• To comply with PAGCOR reporting requirements and other applicable regulatory obligations.

5. Legal Basis for Processing

phpslots processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and phpslots (i.e., operating your account, processing transactions);
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legal requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where your consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

phpslots does not sell your personal data. We may share your personal data with the following categories of recipients:

• PAGCOR and Philippine government authorities: As required by our operating licence and applicable law, including mandatory reporting of suspicious transactions to the Anti-Money Laundering Council (AMLC);
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your transactions;
• KYC and identity verification providers: Third-party services used to verify your identity and age in compliance with PAGCOR requirements;
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics providers who process data on phpslots' behalf under data processing agreements;
• Legal and professional advisers: Lawyers, auditors, and compliance consultants where necessary for legal proceedings or regulatory compliance;
• Law enforcement: Philippine law enforcement agencies where required by court order, subpoena, or applicable law.

All third-party service providers who process personal data on phpslots' behalf are required to maintain appropriate technical and organisational security measures and to process data only in accordance with phpslots' instructions.

7. Cookies and Tracking Technologies

phpslots uses the following types of cookies and similar technologies on the Platform:

• Strictly necessary cookies: Required for the Platform to function, including session management and security tokens. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Remember your preferences such as language settings and display options.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform to help us improve the user experience.
• Marketing cookies: Used to deliver relevant promotional content about phpslots. These are only set with your consent.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the phpslots Platform. For detailed information on the specific cookies used, please contact our Data Protection Officer.

8. Data Retention

phpslots retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of 5 years from account closure, as required by PAGCOR regulations and Philippine AML law;
• Transaction records: Retained for a minimum of 5 years from the date of each transaction;
• Support communications: Retained for 3 years from the date of the communication;
• Marketing consent records: Retained until consent is withdrawn, plus 1 year for compliance documentation purposes.

After the applicable retention period, phpslots will securely delete or anonymise your personal data unless further retention is required by law.

9. Data Security

phpslots implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data in transit between your device and the phpslots Platform;
• Encryption of sensitive data at rest in phpslots' databases;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform;
• Multi-factor authentication for phpslots administrative systems;
• Incident response procedures for detecting and responding to personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phpslots will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

10. Your Data Protection Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phpslots:

• Right to be informed: The right to know how your personal data is being collected and processed — which this Policy fulfils;
• Right of access: The right to request a copy of the personal data phpslots holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to phpslots' legal retention obligations;
• Right to object: The right to object to processing of your personal data for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact phpslots' Data Protection Officer at [email protected]. phpslots will respond to all data rights requests within 15 business days. Identity verification may be required before processing your request.

11. Children's Privacy

The phpslots Platform is strictly for persons aged 21 years and above. phpslots does not knowingly collect personal data from persons under 21 years of age. If phpslots becomes aware that personal data has been collected from an underage individual, that account will be immediately closed and all associated personal data will be deleted, subject to any legal retention obligations.

If you believe that a person under 21 has registered a phpslots account, please contact us immediately at [email protected].

12. Cross-Border Data Transfers

phpslots primarily processes personal data within the Philippines. Where personal data is transferred to service providers located outside the Philippines (for example, cloud infrastructure providers), phpslots ensures that such transfers are subject to appropriate safeguards, including contractual data protection clauses consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines.

13. Updates to This Privacy Policy

phpslots may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable law. The date of the most recent revision is displayed at the top of this page. Where changes are material, phpslots will notify registered players via the contact details on file. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

14. Contact and Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the phpslots Data Protection Officer:

Email: [email protected]

phpslots is registered with the National Privacy Commission of the Philippines as required under the Data Privacy Act of 2012. If you are not satisfied with phpslots' response to your data protection concern, you have the right to lodge a complaint directly with the NPC.