phspun Casino Privacy Policy

1. Introduction and Scope

This Privacy Policy (hereinafter "Policy") applies to phspun Casino, a licensed online gaming operator under the Philippine Amusement and Gaming Corporation (PAGCOR), operating the website https://phspun.cam and all associated mobile applications and services (collectively, the "Platform"). This Policy explains how phspun Casino (the "Operator," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information and sensitive personal information (collectively, "Personal Data") from users (the "User," "Player," "you," or "your") in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its implementing rules and regulations, and relevant issuances by the National Privacy Commission ("NPC").

By creating an account, accessing our Platform, or using any of our services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your Personal Data as described in this Policy. If you do not agree with this Policy, you must immediately discontinue use of phspun Casino and refrain from providing any Personal Data to us.

2. Data Controller Information

phspun Casino is the data controller responsible for the processing of your Personal Data. We are registered with the National Privacy Commission as required under the Data Privacy Act. For privacy-related inquiries, requests to exercise your data subject rights, or complaints, you may contact our designated Data Protection Officer (DPO):

• Data Protection Officer: phspun Casino DPO
• Email: [email protected]
• Alternative Contact: [email protected] with subject line "ATTN: Data Protection Officer"
• Response Time: We will acknowledge your inquiry within forty-eight (48) hours and provide a substantive response within fifteen (15) business days.

3. Personal Data We Collect

3.1 Information You Provide Directly

When you register for a phspun Casino account, we collect the following categories of Personal Data:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (e.g., Philippine passport number, driver's license number, or Unified Multi-Purpose ID number)
• Contact Information: Residential address, city, province, postal code, email address, mobile phone number, and alternative contact numbers
• Account Credentials: Username, password (stored in hashed and salted format), and security questions/answers
• Financial Information: GCash account details, PayMaya account details, bank account information (account name, account number, bank name, branch), payment card details (card number, expiration date, CVV), and transaction history
• Verification Documents: Copies of government-issued IDs (Philippine passport, driver's license, national ID, voter's ID), proof of address documents (utility bills, bank statements, government correspondence), proof of payment method ownership (bank statements, e-wallet screenshots, payment card photos), and selfie photos for identity verification
• Communication Data: Customer support inquiries, live chat transcripts, email correspondence, phone call recordings (with prior notice and consent), and feedback submitted through our Platform

3.2 Information Collected Automatically

When you access or use phspun Casino, we automatically collect technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, Android ID, IDFA), and mobile network information
• Usage Data: IP address, login timestamps, pages visited, games played, time spent on Platform, click patterns, deposit and withdrawal amounts, betting patterns, bonus claims, and session duration
• Location Data: Approximate geographic location derived from IP address (not precise GPS location) to verify that you are accessing our services from within the Philippines or another jurisdiction where online gambling is lawful
• Cookies and Tracking Technologies: Session cookies, persistent cookies, analytics cookies, and other tracking technologies as detailed in Section 10 (Cookies Policy) below

3.3 Information from Third Parties

In certain circumstances, we may receive Personal Data about you from third-party sources, including:

• Payment Processors: GCash, PayMaya, and banking institutions provide transaction confirmation, account verification, and fraud detection data
• Identity Verification Services: Third-party KYC (Know Your Customer) providers may verify your identity, age, and address against government databases and public records
• Affiliate Partners: If you were referred to phspun Casino by an affiliate or marketing partner, we may receive referral data to properly credit the partner and provide you with applicable bonuses
• Social Media Platforms: If you choose to register or log in using social media accounts (such as Facebook or Google), we may receive basic profile information as permitted by your social media privacy settings

4. Legal Basis and Purposes for Processing

4.1 Lawful Bases for Processing

We process your Personal Data on one or more of the following legal bases recognized under the Data Privacy Act:

• Consent: You have given explicit consent for us to process your Personal Data for specific purposes (e.g., receiving marketing communications, participating in promotions)
• Contract Performance: Processing is necessary to fulfill our contractual obligations to provide casino services to you under our Terms and Conditions
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA), and tax reporting obligations
• Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., fraud prevention, security monitoring, improving our services) provided such interests do not override your fundamental rights and freedoms

4.2 Purposes of Processing

phspun Casino processes your Personal Data for the following specific purposes:

Purpose	Legal Basis	Data Categories
Account registration and management	Contract, Consent	Identity, Contact, Account Credentials
Identity and age verification (KYC)	Legal Obligation, Contract	Identity, Verification Documents
Processing deposits and withdrawals	Contract	Financial Information, Transaction History
Fraud prevention and security monitoring	Legitimate Interest, Legal Obligation	Usage Data, Device Information, Transaction History
Anti-Money Laundering (AML) compliance	Legal Obligation	Identity, Financial Information, Transaction History
Customer support and dispute resolution	Contract, Legitimate Interest	Contact, Communication Data, Account History
Bonus and promotion administration	Contract, Consent	Account Credentials, Usage Data, Transaction History
Marketing communications (opt-in only)	Consent	Contact Information, Usage Preferences
Platform improvement and analytics	Legitimate Interest	Usage Data, Device Information
Compliance with regulatory reporting	Legal Obligation	Identity, Financial, Transaction History
Responsible gaming monitoring	Legal Obligation, Legitimate Interest	Usage Data, Betting Patterns, Account Settings

5. Data Sharing and Disclosure

5.1 Internal Disclosure

Your Personal Data may be accessed by phspun Casino employees and contractors who require such access to perform their duties, including customer support representatives, compliance officers, fraud analysts, technical support staff, and senior management. All internal personnel with access to Personal Data are bound by confidentiality obligations and data protection training requirements.

5.2 Third-Party Service Providers

We engage reputable third-party service providers to assist with casino operations. These processors are contractually obligated to protect your Personal Data and may only use it for the specific purposes we authorize. Categories of third-party processors include:

• Payment Processors: GCash, PayMaya, banking institutions, and payment gateway providers to facilitate deposits and withdrawals
• Identity Verification Services: KYC and AML screening providers to verify your identity, age, and source of funds
• Cloud Hosting Providers: Infrastructure and data storage providers to securely host our Platform and databases
• Email and SMS Services: Communication platform providers to deliver transactional messages, promotional communications, and account notifications
• Analytics Providers: Web analytics and business intelligence tools to understand Platform usage and improve user experience
• Customer Support Tools: Live chat software, helpdesk systems, and CRM platforms to manage customer inquiries and support tickets
• Security Vendors: Cybersecurity firms, fraud detection systems, and penetration testing services to protect against threats

5.3 Regulatory and Legal Disclosure

phspun Casino may disclose your Personal Data to regulatory authorities, law enforcement agencies, courts, and government bodies when required by applicable law or in response to valid legal processes, including:

• Philippine Amusement and Gaming Corporation (PAGCOR) for licensing compliance and regulatory reporting
• National Privacy Commission (NPC) in response to privacy complaints or investigations
• Anti-Money Laundering Council (AMLC) for suspicious transaction reporting under the Anti-Money Laundering Act
• Bureau of Internal Revenue (BIR) for tax reporting and withholding obligations
• Philippine National Police (PNP) or National Bureau of Investigation (NBI) pursuant to court orders, subpoenas, or search warrants
• Other law enforcement or regulatory agencies as required by Philippine law or international legal cooperation agreements

5.4 Business Transfers

In the event of a merger, acquisition, corporate reorganization, sale of assets, or bankruptcy involving phspun Casino, your Personal Data may be transferred to a successor entity. We will provide notice of such transfer and any changes to this Privacy Policy through prominent notice on our Platform or via email.

5.5 No Data Selling

phspun Casino does not sell, rent, lease, or trade your Personal Data to third parties for their marketing purposes. Any data sharing is strictly limited to the purposes described in this Section 5 and subject to appropriate contractual protections and legal safeguards.

6. Data Security Measures

6.1 Technical Security Controls

phspun Casino implements industry-standard technical security measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction, including:

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption. Sensitive data stored in our databases (such as passwords and financial information) is encrypted using AES-256 encryption algorithms.
• Access Controls: Role-based access controls (RBAC) ensure that only authorized personnel can access Personal Data, and all access is logged and monitored for security auditing purposes.
• Firewalls and Intrusion Detection: Network firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) protect our infrastructure from external threats and cyberattacks.
• Secure Authentication: Multi-factor authentication (MFA) is required for administrative access to systems containing Personal Data. Player passwords are hashed using bcrypt or similar secure hashing algorithms with unique salts.
• Regular Security Audits: We conduct quarterly internal security audits, annual penetration testing by independent cybersecurity firms, and vulnerability scanning to identify and remediate security weaknesses.
• Secure Development Practices: Our development team follows secure coding standards, conducts code reviews, and performs security testing before deploying new features or updates.

6.2 Organizational Security Measures

In addition to technical controls, phspun Casino maintains organizational security measures including:

• Comprehensive data protection policies and procedures documented and regularly updated
• Mandatory data protection training for all employees and contractors with access to Personal Data
• Confidentiality agreements signed by all personnel
• Incident response plan and data breach notification procedures compliant with NPC Circular No. 16-03
• Regular backups of data with secure off-site storage and tested disaster recovery procedures
• Physical security controls at data center facilities, including 24/7 surveillance, biometric access controls, and environmental monitoring

6.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account. You are responsible for:

• Choosing a strong, unique password and not reusing passwords from other websites
• Keeping your password confidential and not sharing it with anyone
• Logging out of your account when using shared or public devices
• Enabling two-factor authentication (2FA) when available
• Immediately notifying us if you suspect unauthorized access to your account
• Ensuring your device has up-to-date security software and operating system patches

7. Data Retention and Deletion

7.1 Retention Periods

phspun Casino retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, accounting, and reporting requirements. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus five (5) years after account closure to comply with PAGCOR record-keeping requirements and potential dispute resolution
• Transaction Records: Retained for five (5) years after the transaction date as required under Anti-Money Laundering regulations and tax laws
• Verification Documents: Retained for five (5) years after account closure or last verification, whichever is later
• Communication Records: Customer support tickets and correspondence retained for three (3) years for quality assurance and dispute resolution
• Marketing Data: Retained until you withdraw consent or request deletion, subject to legal retention obligations
• Usage Data and Analytics: Aggregated and anonymized usage data may be retained indefinitely for statistical analysis and Platform improvement

7.2 Secure Deletion

Once the retention period expires and there is no longer a legal basis to retain your Personal Data, we securely delete or anonymize it using industry-standard data destruction methods. Deletion includes overwriting data to prevent recovery, securely wiping storage media, and ensuring all backup copies are also destroyed.

8. Your Data Subject Rights

Under the Data Privacy Act, you have the following rights regarding your Personal Data:

8.1 Right to Access (Right to Know)

You have the right to obtain confirmation from phspun Casino whether we are processing your Personal Data and to request access to such data. You may request a copy of your Personal Data in electronic format. To exercise this right, contact our Data Protection Officer at [email protected] with your account information and a valid government-issued ID for identity verification.

8.2 Right to Rectification (Right to Correct)

You have the right to request correction of inaccurate or incomplete Personal Data. You may update certain information directly through your account settings, such as email address, phone number, and password. For changes to identity information (name, date of birth, address), contact customer support with supporting documentation.

8.3 Right to Erasure (Right to Delete or "Right to be Forgotten")

You have the right to request deletion of your Personal Data under certain circumstances, including when the data is no longer necessary for the purposes collected, when you withdraw consent, or when processing is unlawful. However, this right is subject to legal exceptions. We may be required to retain certain data to comply with legal obligations (e.g., PAGCOR record-keeping requirements, AML regulations, tax laws) or to establish, exercise, or defend legal claims. If deletion is not possible due to legal obligations, we will restrict processing to only what is legally required.

8.4 Right to Object

You have the right to object to processing of your Personal Data when we rely on legitimate interests as the legal basis. This includes objecting to direct marketing communications. You can opt out of marketing emails by clicking the "unsubscribe" link in any promotional email or by adjusting your communication preferences in your account settings.

8.5 Right to Data Portability

You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit that data to another data controller when processing is based on consent or contract performance and is carried out by automated means. To request data portability, contact our DPO with specific details about the data you wish to export.

8.6 Right to File a Complaint

If you believe phspun Casino has violated your privacy rights or failed to comply with the Data Privacy Act, you have the right to file a complaint with the National Privacy Commission. NPC contact information: Office of the National Privacy Commission, 5th Floor, Philippine International Convention Center (PICC), CCP Complex, Roxas Boulevard, Pasay City 1307, Philippines. Email: [email protected]. Hotline: (02) 8234-2228.

8.7 Exercising Your Rights

To exercise any of these rights, please submit a written request to [email protected] with:

• Your full name and phspun Casino username
• Clear description of the right you wish to exercise and the specific action requested
• Copy of valid government-issued ID for identity verification
• Any additional supporting documentation relevant to your request

We will respond to your request within fifteen (15) business days. If your request is complex or requires extensive searching, we may extend this period by an additional fifteen (15) days with prior notice. We do not charge a fee for exercising your data subject rights unless your request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or refuse the request.

9. International Data Transfers

phspun Casino primarily stores and processes your Personal Data on servers located within the Philippines. However, certain third-party service providers (such as cloud hosting infrastructure, payment processors, or cybersecurity vendors) may be located in jurisdictions outside the Philippines, including countries that may not have data protection laws equivalent to Philippine standards.

When we transfer Personal Data internationally, we ensure appropriate safeguards are in place as required by the Data Privacy Act and NPC Circular No. 16-03 on Security of Personal Data in Government, including:

• Execution of Standard Contractual Clauses (SCCs) or Data Processing Agreements that mandate equivalent data protection standards
• Selection of service providers certified under recognized international security standards (ISO 27001, SOC 2, etc.)
• Implementation of technical and organizational measures to protect data during transfer and storage
• Conducting due diligence on the privacy laws and enforcement mechanisms in the recipient country

By using phspun Casino, you consent to these international data transfers subject to the safeguards described above.

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

phspun Casino uses cookies and similar tracking technologies to enhance your user experience and improve Platform functionality. A cookie is a small text file stored on your device that allows us to recognize your browser and remember certain information. We use the following categories of cookies:

• Essential Cookies: Necessary for the Platform to function properly. These cookies enable core functionality such as security, account authentication, session management, and load balancing. You cannot opt out of essential cookies.
• Functional Cookies: Remember your preferences and settings (such as language preference, currency, and favorite games) to provide a more personalized experience.
• Performance and Analytics Cookies: Collect information about how you use our Platform, such as pages visited, time spent on pages, and error messages encountered. This data is aggregated and anonymized and used to improve Platform performance and user experience. We use Google Analytics and similar services.
• Marketing and Advertising Cookies: Track your browsing activity across websites to deliver targeted advertisements and measure the effectiveness of marketing campaigns. These cookies are only set with your consent.

10.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, although this may affect your ability to use certain features of our Platform. You can also opt out of performance and marketing cookies through our cookie consent banner when you first visit phspun.cam. To opt out of Google Analytics specifically, you may install the Google Analytics Opt-out Browser Add-on.

10.3 Other Tracking Technologies

In addition to cookies, we may use web beacons (also called pixel tags or clear GIFs), local storage objects, and mobile advertising identifiers (such as Apple's IDFA or Google's Advertising ID) for similar purposes. These technologies are subject to the same consent and control mechanisms as cookies.

11. Children's Privacy

phspun Casino services are strictly prohibited for individuals under the age of twenty-one (21) years. We do not knowingly collect Personal Data from minors. Our account registration process includes age verification mechanisms, and all new accounts are subject to identity verification to confirm the user's age.

If we become aware that we have inadvertently collected Personal Data from an individual under the age of 21, we will immediately delete such data from our systems, close the associated account, void all bets and transactions, and forfeit any winnings or deposits. Parents or guardians who believe their child has registered an account on phspun Casino should immediately contact us at [email protected] so we can take appropriate action.

12. Third-Party Links and Services

Our Platform may contain links to third-party websites, applications, or services (such as payment processor login pages or social media platforms). This Privacy Policy applies only to phspun Casino and does not govern the privacy practices of third-party sites. We are not responsible for the privacy policies or data handling practices of external websites or services. We encourage you to review the privacy policies of any third-party site before providing Personal Data.

13. Changes to This Privacy Policy

phspun Casino reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. All changes will be effective immediately upon posting the updated Policy on our Platform. The "Last Updated" date at the top of this document will be revised to reflect the date of the most recent changes.

If we make material changes that significantly affect your privacy rights or how we process your Personal Data, we will provide prominent notice on our Platform or send you an email notification (to the email address associated with your account) at least thirty (30) days before the changes take effect. Your continued use of phspun Casino following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you must discontinue use of our services and may request account closure and data deletion subject to legal retention obligations.

14. Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, phspun Casino will notify affected users and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03. Our notification will include:

• Description of the nature of the breach and categories of data affected
• Number of users potentially affected
• Likely consequences of the breach
• Measures taken or proposed to address the breach and mitigate its effects
• Recommended steps you should take to protect yourself

We maintain a comprehensive incident response plan and regularly conduct tabletop exercises to ensure our team is prepared to respond swiftly and effectively to any security incident.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact:

• Data Protection Officer: phspun Casino DPO
• Email: [email protected]
• Customer Support Email: [email protected] (with subject line "ATTN: Privacy Inquiry")
• Live Chat: Available 24/7 through the phspun Casino Platform for urgent privacy matters

phspun Casino Privacy Policy – Last Updated: January 2026
Compliant with Republic Act No. 10173 (Data Privacy Act of 2012) and NPC Regulations
Registered with the National Privacy Commission – PAGCOR Licensed Operator