phslots Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected by phslots through the phslots.lat website, mobile interface, account registration system, games platform, sportsbook, bingo rooms, payment processing integrations, and customer support channels (collectively, the "Platform").

This Policy applies to all registered Players, prospective Players who have initiated but not completed registration, and visitors who browse the phslots Platform without registering. By accessing the Platform or creating an account, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

phslots is a PAGCOR-licensed online gaming operator serving Filipino players across the Philippines — from Metro Manila and Cebu City to Davao, Cagayan de Oro, Iloilo, and nationwide. All data processing activities described in this Policy are conducted in accordance with applicable Philippine law, including the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations (IRR), and relevant National Privacy Commission (NPC) issuances.

For the purposes of the Data Privacy Act of 2012, the personal information controller for all data collected through the phslots Platform is the phslots operator, operating under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR).

The phslots Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and with applicable data privacy regulations. Contact details for the DPO are provided in Section 15 of this Policy.

phslots collects personal data across several categories depending on the stage of your interaction with the Platform. The following table describes each category and the manner in which it is collected:

3.1 Sensitive Personal Information

Under the Data Privacy Act of 2012, certain categories of data are classified as sensitive personal information and receive heightened protection. phslots processes the following sensitive personal information where required by law or regulatory obligation:

• Government-issued identification numbers (for KYC and AML compliance);
• Financial account information (for payment processing and AML reporting);
• Date of birth (for age verification — 21+ requirement enforcement).

phslots does not collect health data, political opinions, religious affiliations, or other categories of sensitive personal information beyond those listed above, and has no operational purpose requiring such data.

phslots processes personal data only where a valid legal basis exists under Section 12 and Section 13 of the Data Privacy Act of 2012. The applicable legal bases for phslots' processing activities are:

• Contractual Necessity: Processing is required to perform the contract between phslots and the Player — including account creation, gameplay, deposits, withdrawals, and customer support.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act of 2012 itself.
• Legitimate Interests: Processing is carried out for phslots' legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by the Player's rights and freedoms.
• Consent: Where phslots sends marketing communications or processes data for non-essential cookies, processing is based on your freely given, specific, and informed consent, which may be withdrawn at any time.

phslots uses personal data collected from Players for the following purposes:

5.1 Account Management and Platform Provision

To create and maintain your phslots account; to authenticate your identity during login (including 2FA verification); to display your balance, game history, and account settings; to manage your deposit and withdrawal requests; and to provide access to all games, the sportsbook, bingo rooms, and promotional features available on the Platform.

5.2 KYC and Age Verification

To verify your identity and confirm that you meet the minimum age requirement of 21 years as mandated by PAGCOR regulations. Age verification data is processed as a strict legal obligation — no withdrawal may be processed on an unverified account.

5.3 Payment Processing

To process deposits via GCash, Maya, BPI, BDO, Metrobank, Visa, Mastercard, and 7-Eleven; to process withdrawal requests to verified payment methods; to maintain transaction records as required by Philippine financial regulations; and to detect and prevent fraudulent payment activity.

5.4 Fraud Prevention and Platform Security

To detect, investigate, and prevent fraudulent activity including account takeover attempts, multiple account creation, bonus abuse, money laundering, and the use of unauthorised automated tools. Technical data (IP addresses, device fingerprints, session patterns) is used for this purpose.

5.5 Responsible Gaming

To manage and enforce deposit limits, session time limits, cooling-off periods, and self-exclusion requests initiated by Players. Responsible gaming data is processed to protect Player wellbeing as required by PAGCOR's responsible gaming framework.

5.6 Customer Support

To respond to support queries, resolve account issues, and manage formal complaints through phslots' live chat and email support channels. Support communications are recorded and retained for quality assurance and regulatory compliance purposes.

5.7 Legal and Regulatory Compliance

To fulfil phslots' obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act of 2001 (RA 9160 as amended), the Data Privacy Act of 2012 (RA 10173), and any directives issued by the PAGCOR, the Anti-Money Laundering Council (AMLC), or the National Privacy Commission (NPC).

phslots uses cookies and similar tracking technologies to operate the Platform and enhance your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and last-visited sections. These improve your experience but are not required for core functionality.
• Analytics Cookies: Used to understand aggregate Platform usage patterns (e.g., which games are most popular, where users encounter errors). Analytics data is processed in aggregated, anonymised form where possible.
• Security Cookies: Assist in detecting suspicious login behaviour, automated traffic, and fraudulent activity by establishing consistent device and session profiles.

phslots does not use third-party advertising cookies or sell cookie-derived data to advertising networks. You may manage non-essential cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform.

phslots does not sell, rent, trade, or commercially exploit your personal data to unaffiliated third parties. Personal data is shared only in the following limited circumstances:

7.1 Service Providers (Personal Information Processors)

phslots engages third-party service providers who process personal data on phslots' behalf and under phslots' documented instructions. These processors are contractually bound to process data only for specified purposes and to maintain security standards at least equivalent to those required by the Data Privacy Act of 2012. Categories of processor include:

• Payment gateway and e-wallet providers (GCash/Maya integration partners, banking API providers);
• KYC and identity verification technology providers;
• Game software providers supplying content to the phslots Platform (limited technical session data only, with no marketing or financial data);
• Cloud infrastructure and hosting providers;
• Customer support platform providers (for live chat and ticketing systems).

7.2 Regulatory and Law Enforcement Disclosure

phslots will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities when required by law, court order, regulatory direction, or in connection with the investigation of suspected criminal activity including money laundering and fraud. Such disclosures are made strictly to the extent required by the applicable legal obligation and will be documented in accordance with phslots' internal compliance records.

7.3 Business Transfers

In the event of a merger, acquisition, change of control, or sale of all or substantially all of phslots' assets, personal data held by phslots may be transferred to the acquiring entity, provided that the acquiring entity agrees to be bound by privacy obligations at least equivalent to those in this Policy and subject to any applicable PAGCOR approvals. Players will be notified of any such transfer and their rights in relation to the transferred data.

phslots retains personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable law, whichever is longer. The following retention periods apply:

Upon expiry of the applicable retention period, phslots will securely delete or irreversibly anonymise personal data in accordance with its data disposal procedures.

phslots implements technical and organisational security measures appropriate to the risk level of the data processed, in accordance with Section 20 of the Data Privacy Act of 2012 and NPC Circular 16-03. Security measures in place include:

• Transport Encryption: All data transmitted between your device and the phslots Platform is encrypted using TLS 1.3 (Transport Layer Security). You can verify this by checking for the HTTPS padlock in your browser.
• Data Encryption at Rest: Sensitive personal data — including KYC documents, government ID data, and financial account references — is encrypted at rest using AES-256 standard encryption.
• Access Controls: Access to personal data within phslots' systems is restricted on a strict need-to-know basis using role-based access controls (RBAC). All access events are logged and audited.
• Two-Factor Authentication: phslots' internal administrative systems require 2FA for all privileged access. Players are strongly encouraged to enable 2FA on their own phslots accounts.
• Penetration Testing: phslots' Platform undergoes regular third-party security assessments to identify and address vulnerabilities before they can be exploited.
• Incident Response: phslots maintains a documented personal data breach response procedure. In the event of a breach affecting Filipino Players, phslots will notify the National Privacy Commission and affected individuals within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03.

phslots is strictly a 21+ platform. The collection and processing of personal data from individuals under 21 years of age is neither intended nor permitted. Age verification is enforced through the KYC process before any withdrawal may be processed, and phslots employs technical measures to detect and reject registration attempts by individuals who declare a date of birth indicating they are under 21.

If phslots discovers that personal data has been collected from an individual under 21 years of age, all such data will be deleted immediately, the associated account will be permanently closed, and any deposited funds will be returned to the originating payment method. The matter may be reported to PAGCOR and relevant Philippine child protection authorities.

Parents, guardians, or persons with supervisory responsibility over minors who become aware that a minor has accessed the phslots Platform should contact support immediately at [email protected].

Under the Data Privacy Act of 2012 (RA 10173), registered Players and other data subjects have the following rights in relation to their personal data held by phslots:

To exercise any of these rights, submit your request in writing to the phslots DPO at [email protected]. phslots will acknowledge your request within 5 business days and respond substantively within 30 calendar days. Where requests cannot be fulfilled (e.g., due to overriding legal obligations), phslots will provide a written explanation of the basis for refusal.

Some of phslots' third-party service providers (including cloud infrastructure and game software providers) may be located outside the Philippines. Where personal data is transferred outside the Philippines, phslots ensures that appropriate safeguards are in place in accordance with NPC rules on cross-border data flow, including:

• Contractual clauses requiring the receiving entity to implement data protection standards equivalent to those under Philippine law;
• Processing only in countries where data protection frameworks have been assessed as providing adequate protection for Filipino data subjects;
• Processing agreements that restrict the recipient's use of data to the specific service being provided to phslots.

phslots will not transfer personal data internationally where adequate safeguards cannot be established without the express consent of the affected data subject or a clear legal obligation to do so.

As a PAGCOR-licensed gaming operator, phslots is a covered person under the Anti-Money Laundering Act of 2001 (RA 9160 as amended by RA 10365) and is subject to mandatory reporting obligations to the Anti-Money Laundering Council (AMLC).

phslots is legally required to submit Covered Transaction Reports (CTRs) and Suspicious Transaction Reports (STRs) to the AMLC where transactions meet the prescribed thresholds or display characteristics indicative of money laundering or terrorism financing.

These disclosures are mandatory legal obligations and cannot be waived by Player consent or request. phslots is further prohibited by law from notifying a Player that their transactions have been the subject of an AMLC report (the "tipping-off" prohibition under RA 9160). This Policy cannot and does not override these statutory obligations.

phslots may send you promotional communications about available bonuses, new games, sportsbook promotions, and phslots platform updates — via email and SMS — where you have provided your consent to receive such communications during registration or at a later point.

Marketing communications are always optional. You may opt out at any time by:

• Updating your communication preferences in your phslots account settings;
• Clicking the unsubscribe link at the bottom of any phslots marketing email;
• Contacting the phslots support team at [email protected] with a written opt-out request.

Opting out of marketing communications will not affect your receipt of transactional communications — including deposit confirmations, withdrawal notifications, KYC status updates, account security alerts, and mandatory responsible gaming notifications.

If you believe that phslots has processed your personal data in a manner inconsistent with this Privacy Policy or in breach of applicable Philippine privacy law, you have the right to lodge a formal complaint.

15.1 Internal Complaint Process

In the first instance, please submit your complaint in writing to the phslots Data Protection Officer at [email protected], clearly identifying the nature of your concern, the data involved, and the relief you are seeking. phslots will acknowledge your complaint within 5 business days and provide a substantive response within 30 calendar days.

15.2 NPC Complaint

If your complaint is not resolved to your satisfaction through phslots' internal process, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information on the NPC's complaint process is available through the NPC's official channels.

phslots reserves the right to amend this Privacy Policy at any time to reflect changes in Philippine law (including NPC issuances and PAGCOR directives), changes in phslots' data processing activities, or improvements to the clarity and completeness of this Policy.

Material changes to this Policy will be communicated to registered Players by email and/or by prominent notice on the phslots Platform at least 14 days before the changes take effect, unless a shorter notice period is required by law. Non-material clarifications may be updated without advance notice. Continued use of the Platform after an amendment's effective date constitutes acceptance of the revised Policy.

The current version of this Privacy Policy, clearly marked with its effective date, is always available at phslots.lat/privacy-policy.