Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how phmega ("we", "us", "our", or "the Company"), operating the website at https://phmega.cam (the "Website"), collects, uses, processes, stores, shares, and protects the personal information of users ("you", "your", or "User") who access our online casino and sports betting services (the "Services").

This Policy applies to all personal data collected through the Website, mobile applications, customer support communications, and any other channels through which you interact with phmega. By registering an account, accessing the Website, or using our Services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

phmega is committed to protecting your privacy and complying with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as all applicable Philippine laws governing data protection and online privacy. We implement industry-standard security measures to safeguard your personal information from unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

phmega collects various types of personal information necessary to provide our Services, comply with legal and regulatory obligations, prevent fraud, and enhance your gaming experience. The categories of information we collect include:

2.1 Information You Provide Directly

When you register an account or use our Services, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers
• Contact Information: Email address, mobile phone number, residential address, and postal code
• Account Credentials: Username, password, and security questions for account authentication
• Financial Information: Payment method details including GCash account, Maya wallet, bank account numbers, and transaction history
• Verification Documents: Copies of government-issued IDs (passport, driver's license, SSS ID, UMID), proof of address documents, and selfie photographs for Know Your Customer (KYC) verification
• Communication Data: Content of messages, emails, live chat conversations, and customer support interactions
• Preferences and Settings: Gaming preferences, notification settings, language preferences, and marketing communication preferences

2.2 Information Collected Automatically

When you access or use the Website and Services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, device identifiers, and mobile network information
• Connection Data: IP address, geographic location, internet service provider, and connection quality metrics
• Usage Data: Pages visited, games played, betting patterns, session duration, clickstream data, and interaction with promotional content
• Transaction Data: Deposit and withdrawal history, betting activity, winnings, losses, and account balance changes
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 8 for details)

2.3 Information from Third Parties

We may receive additional information about you from third-party sources, including:

• Payment processors and e-wallet providers verifying transaction details
• Identity verification services confirming your identity and age
• Fraud prevention services providing risk assessment data
• Marketing partners and affiliates who referred you to phmega
• Publicly available databases and government registries for compliance purposes

3. How We Use Your Information

phmega processes your personal information for the following legitimate business purposes, legal obligations, and with your consent where required:

3.1 Service Provision and Account Management

• Create, maintain, and manage your phmega account
• Process deposits, withdrawals, and financial transactions
• Provide access to casino games, sports betting, and other gaming services
• Track betting activity, calculate winnings, and update account balances
• Deliver customer support and respond to inquiries
• Send transactional notifications, account alerts, and service updates

3.2 Legal and Regulatory Compliance

• Verify your identity and age to comply with PAGCOR regulations
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Monitor and report suspicious transactions to regulatory authorities
• Maintain records as required by Philippine gaming and financial laws
• Respond to legal requests, court orders, and government inquiries
• Enforce our Terms and Conditions and other policies

3.3 Security and Fraud Prevention

• Detect, prevent, and investigate fraudulent activity, cheating, and bonus abuse
• Protect against unauthorized access, security breaches, and cyber attacks
• Monitor gameplay patterns to ensure fair gaming practices
• Verify the legitimacy of withdrawal requests and payment methods
• Maintain platform integrity and protect all users from malicious actors

3.4 Marketing and Communications

• Send promotional offers, bonuses, and special event notifications (with your consent)
• Personalize marketing messages based on your gaming preferences and activity
• Conduct surveys, research, and gather feedback to improve our services
• Display targeted advertising on the Website and through partner channels
• Communicate responsible gaming messages and player protection information

3.5 Platform Improvement and Analytics

• Analyze user behavior and preferences to enhance the gaming experience
• Optimize website performance, game selection, and platform features
• Develop new products, services, and promotional offerings
• Generate aggregate statistical data and industry reports (anonymized)
• Test new features and conduct A/B testing for platform improvements

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, phmega processes your personal information based on the following legal grounds:

• Consent: You have given explicit consent for specific processing activities, such as receiving marketing communications or participating in promotions
• Contractual Necessity: Processing is necessary to fulfill our contractual obligations under the Terms and Conditions, including providing gaming services and processing transactions
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including PAGCOR licensing requirements, AML laws, and tax obligations
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, platform improvement, and marketing, provided these interests do not override your fundamental rights and freedoms
• Vital Interests: Processing is necessary to protect your vital interests or those of another person, such as in emergency situations

Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. Information Sharing and Disclosure

phmega does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients for the purposes described in this Policy:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating the Website and providing our Services, including:

• Payment Processors: GCash, Maya, banks, and other payment providers that process deposits and withdrawals
• Game Providers: Software developers and game studios providing casino games and betting platforms
• Identity Verification Services: Third-party providers conducting KYC checks and age verification
• Fraud Prevention Vendors: Services that monitor transactions and detect fraudulent activity
• Cloud Service Providers: Hosting and data storage infrastructure providers
• Customer Support Platforms: Live chat, email, and helpdesk service providers
• Marketing and Analytics Tools: Email service providers, analytics platforms, and advertising networks

All service providers are contractually obligated to protect your personal information, use it only for the specified purposes, and comply with applicable data protection laws.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, regulators, and law enforcement authorities when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Cooperate with PAGCOR investigations and compliance audits
• Respond to requests from tax authorities and financial regulators
• Protect our legal rights, property, and safety or that of our users

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you of any such transfer and provide you with choices regarding your information.

5.4 Affiliates and Group Companies

We may share personal information with our parent companies, subsidiaries, and affiliated entities for administrative purposes, fraud prevention, and to provide integrated services across our corporate group, subject to the same privacy protections outlined in this Policy.

6. Data Security and Protection

phmega implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, loss, or destruction. Our security practices include:

6.1 Technical Security Measures

• Encryption: All sensitive data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption
• Secure Storage: Personal information is stored on secure servers with restricted access and encrypted databases
• Firewall Protection: Network-level firewalls and intrusion detection systems protect against unauthorized access
• Access Controls: Role-based access controls ensure only authorized personnel can access personal data
• Authentication: Multi-factor authentication and strong password requirements protect account access
• Regular Security Audits: Independent security assessments and penetration testing identify vulnerabilities

6.2 Organizational Security Measures

• Employee training on data protection and confidentiality obligations
• Strict policies governing access to and handling of personal information
• Confidentiality agreements with all employees and service providers
• Incident response procedures for data breaches and security events
• Regular review and updating of security policies and procedures

6.3 Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by law. The notification will include the nature of the breach, the data affected, the potential consequences, and the measures we are taking to address the incident.

While we implement robust security measures, no system is completely secure. You acknowledge that you provide personal information at your own risk and agree to maintain the confidentiality of your account credentials.

7. Data Retention

phmega retains your personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information associated with active accounts is retained for the duration of your relationship with phmega
• Closed Accounts: After account closure, we retain certain information for five (5) years to comply with PAGCOR record-keeping requirements, AML regulations, and tax laws
• Transaction Records: Financial transaction records are retained for seven (7) years as required by Philippine banking and financial laws
• Marketing Communications: If you opt out of marketing, we retain your contact information to honor your opt-out preference and prevent future contact
• Legal Disputes: Information relevant to legal claims or disputes is retained until the matter is fully resolved and any appeal periods have expired

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with data protection best practices. Anonymized data that cannot identify you may be retained indefinitely for statistical and research purposes.

8. Cookies and Tracking Technologies

The phmega Website uses cookies, web beacons, pixels, and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the Website to function properly, including authentication, security, and load balancing
• Performance Cookies: Collect anonymous data on website usage to improve performance and user experience
• Functionality Cookies: Remember your preferences, language settings, and customization choices
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness

8.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. You can also delete cookies that have already been set. However, disabling essential cookies may affect the functionality of the Website and prevent you from accessing certain features.

For more information on managing cookies, visit your browser's help center or visit www.allaboutcookies.org for independent guidance.

9. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request access to the personal information we hold about you, including the purposes of processing, the categories of data, and the recipients of your information. We will provide a copy of your data in a commonly used electronic format.

9.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update your account information directly through your account settings or contact our customer support team for assistance.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information when it is no longer necessary for the purposes for which it was collected, you withdraw your consent, or you object to processing. However, we may retain certain information as required by law or for legitimate business purposes.

9.4 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes or when processing is based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible.

9.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

9.7 Right to Lodge a Complaint

If you believe we have violated your privacy rights or data protection laws, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact information for the NPC is available at privacy.gov.ph.

9.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 12 (Contact Information). We will respond to your request within thirty (30) days and may request additional information to verify your identity before processing your request.

10. International Data Transfers

Your personal information is primarily stored and processed within the Philippines. However, some of our service providers and partners may be located in other countries. When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions confirming equivalent data protection standards
• Binding corporate rules for transfers within our corporate group
• Explicit consent for specific international transfers where required

By using our Services, you acknowledge and consent to the international transfer of your personal information in accordance with this Policy.

11. Children's Privacy

The phmega Services are intended solely for individuals who are at least twenty-one (21) years of age. We do not knowingly collect personal information from individuals under the legal gambling age in the Philippines.

If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information from our systems and terminate the associated account. If you believe we have collected information from a minor, please contact us immediately.

12. Changes to This Privacy Policy

phmega reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.

We will notify you of material changes by posting a prominent notice on the Website, sending an email to the address associated with your account, or through other appropriate communication channels. Your continued use of the Services after such notification constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

13. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

• Data Protection Officer: phmega Privacy Team
• Email: privacy phmega.cam (plain text, not clickable)
• Customer Support Email: support phmega.cam (plain text, not clickable)
• Live Chat: Available 24/7 through the Website
• Mailing Address: phmega Data Protection Officer, Metro Manila, Philippines

We are committed to addressing your privacy concerns promptly and transparently. Our Data Protection Officer will respond to your inquiry within thirty (30) days of receipt.

For general customer support inquiries unrelated to privacy matters, please use our standard support channels available on the Website.