phmines Privacy Policy

1. About This Privacy Policy

phmines ("we," "us," or "our") operates the online gaming platform accessible at phmines.one ("Platform"). As a personal information controller under the Philippine Data Privacy Act of 2012 (R.A. 10173), phmines is responsible for the lawful, fair, and transparent processing of personal data belonging to our registered players, prospective players, and website visitors ("Data Subjects" or "you").

This Privacy Policy applies to all personal information collected through the phmines Platform, including account registration, deposits, withdrawals, customer support interactions, marketing communications, and Platform usage analytics. By registering a phmines account or otherwise using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the phmines Terms and Conditions and the Responsible Gaming Policy, both of which form part of your agreement with phmines.

2. Personal Data We Collect

phmines collects personal data through multiple touchpoints on the Platform. The categories of personal data collected are described below:

phmines does not collect sensitive personal information as defined under R.A. 10173 (e.g., racial or ethnic origin, political opinions, religious beliefs, health data) except where strictly necessary to comply with PAGCOR anti-money laundering or responsible gaming obligations, and only with your explicit consent.

3. How phmines Uses Your Personal Data

phmines processes your personal data for the following specific, legitimate purposes:

• Account management: Creating, maintaining, and securing your phmines account; verifying your identity through KYC procedures; processing phmines login authentication including OTP generation.
• Gaming services: Providing access to casino games, live dealer tables, sports betting, and e-sabong; processing wagers and recording game results; calculating and crediting winnings to your account.
• Financial processing: Processing deposits via GCash, Maya, BPI, BDO, UnionBank, and other approved payment channels; processing withdrawal requests; maintaining transaction records for accounting and regulatory purposes.
• Regulatory compliance: Complying with PAGCOR licensing conditions; fulfilling obligations under the Philippine Anti-Money Laundering Act (R.A. 9160, as amended); responding to lawful requests from the National Privacy Commission, PAGCOR, and other competent authorities.
• Responsible gaming: Monitoring gaming patterns for signs of problem gambling behavior; enforcing deposit limits, session limits, and self-exclusion requests; verifying compliance with the 21-year minimum age requirement.
• Customer support: Responding to account inquiries, technical support requests, and complaints; maintaining records of support interactions for quality assurance.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve the phmines Platform, game lobby, and user experience for Filipino players.

phmines will not use your personal data for any purpose incompatible with the purposes described above without providing you with prior notice and, where required, obtaining your consent.

4. Legal Basis for Processing

phmines processes your personal data on the following legal bases under R.A. 10173:

• Contract performance: Processing necessary to perform the phmines Terms and Conditions agreement you enter upon registration, including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR regulations, Anti-Money Laundering Act obligations, and data retention requirements imposed by law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time through your account settings or by contacting support.

5. Data Sharing and Third-Party Disclosure

phmines does not sell, rent, or trade your personal data to third parties for their independent commercial use. Your personal data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash (G-Xchange, Inc.), Maya (Voyager Innovations), BPI, BDO, UnionBank, and 7-Eleven (Philippine Seven Corporation) receive financial data necessary to process your deposits and withdrawals.
• Game providers: Providers such as JILI Gaming, PG Soft, and Pragmatic Play receive anonymized session tokens necessary to deliver game content. They do not receive your identity or financial data.
• Identity verification providers: Third-party KYC service providers may receive identity documents to assist with verification processing, subject to equivalent data protection standards.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities may receive your data pursuant to lawful orders, regulations, or investigations.
• IT and cloud service providers: Platform hosting, database management, and security monitoring providers operate infrastructure that processes personal data, under strict contractual data processing terms.

6. Cookies and Tracking Technologies

phmines uses cookies and similar tracking technologies to operate the Platform, maintain your login session, and analyze Platform performance. The categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function — session management, phmines login authentication, CSRF protection, and load balancing. These cannot be disabled without impairing Platform functionality.
• Performance cookies: Collect anonymized data on how players use the Platform — pages visited, error rates, load times — used to improve the phmines experience. No personal identifiers are included.
• Functional cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming limit configurations.
• Marketing cookies: Used only if you have consented to receiving personalized promotional content. You may withdraw consent at any time through your browser settings or account preferences.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the phmines Platform.

7. Data Retention

phmines retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Financial transaction records: Retained for a minimum of ten (10) years from the date of the transaction, as required under the AMLA and its implementing regulations.
• Gaming history: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Support communications: Retained for two (2) years from the date of the last interaction for quality assurance and dispute resolution.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. You may request earlier deletion of certain data where no legal retention obligation applies — see Section 9 for your data rights.

8. Data Security Measures

phmines implements technical and organizational security measures appropriate to the risk associated with processing player personal data on a real-money gaming platform. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phmines Platform
• AES-256 encryption at rest for sensitive personal and financial data stored in phmines databases
• OTP-based multi-factor authentication for all player account logins
• Role-based access controls limiting staff access to personal data to those with a documented business need
• 24/7 automated intrusion detection and security monitoring systems
• Regular third-party security audits and penetration testing
• Data breach response procedures compliant with NPC notification requirements under R.A. 10173

In the event of a personal data breach that poses a real risk to the rights and freedoms of affected data subjects, phmines will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay.

9. Your Rights Under the Data Privacy Act of 2012

As a data subject under R.A. 10173, you have the following rights with respect to your personal data processed by phmines:

• Right to be informed: The right to know what personal data phmines holds about you, why it is being processed, and how it is being used. This Privacy Policy fulfills this obligation.
• Right of access: The right to request a copy of the personal data phmines holds about you, the purposes of processing, and the recipients to whom your data has been disclosed.
• Right to rectification: The right to request correction of inaccurate, incomplete, or outdated personal data in your phmines account.
• Right to erasure or blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary, consent has been withdrawn, or processing is unlawful — subject to overriding legal retention obligations.
• Right to object: The right to object to processing of your personal data for marketing purposes or where processing is based on legitimate interests. You may withdraw marketing consent at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, or unlawfully obtained personal data, pursuant to R.A. 10173.
• Right to complain: The right to lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe phmines has violated your data privacy rights.

To exercise any of these rights, contact the phmines Data Protection Officer via the contact details in Section 13. phmines will respond to verified requests within fifteen (15) business days.

10. Children's and Minors' Privacy

phmines strictly prohibits access to the Platform by individuals under 21 years of age, consistent with PAGCOR regulations governing online gaming in the Philippines. The minimum legal age for online gambling participation in the Philippines is 21 years.

phmines does not knowingly collect, process, or retain personal data from individuals below the age of 21. Age verification is a mandatory step in the KYC process. If phmines becomes aware that personal data has been collected from an individual below the age of 21, the account will be immediately suspended, any funds held will be returned, and the personal data will be securely deleted.

If you believe that a minor has registered on phmines, please contact our support team immediately at [email protected].

11. Cross-Border Data Transfers

The phmines Platform's primary infrastructure is hosted within the Philippines. Where operational requirements necessitate the transfer of personal data to servers or service providers located outside the Philippines (for example, international game provider integrations or cloud infrastructure), phmines ensures that:

• The receiving jurisdiction provides an adequate level of protection for personal data, or
• Appropriate safeguards are in place through contractual data processing agreements that impose data protection obligations equivalent to those required under R.A. 10173, or
• The transfer is necessary for the performance of the phmines Terms and Conditions agreement between phmines and the data subject

phmines does not transfer player financial data, government-issued identification documents, or gaming history to jurisdictions outside the Philippines except where required by law or PAGCOR regulation.

12. Amendments to This Privacy Policy

phmines reserves the right to update or amend this Privacy Policy to reflect changes in Philippine data protection law, NPC regulations, PAGCOR requirements, or phmines' operational practices. Material amendments will be communicated to registered players by email or through a prominent on-site notice at least fourteen (14) days before taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Continued use of the phmines Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with the amended Policy, you may request account closure in accordance with the phmines Terms and Conditions.

13. Contact the phmines Data Protection Officer

For all privacy-related inquiries, requests to exercise your data rights, or to report a data privacy concern, please contact the phmines Data Protection Officer (DPO):

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 via the on-site chat widget — select "Privacy & Data" as your inquiry type
• Response time: phmines DPO responds to verified data rights requests within fifteen (15) business days

If you are unsatisfied with phmines' response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.