phplush Privacy Policy

1. Introduction

phplush ("we", "us", "our", "the Company") is committed to protecting the privacy and personal data of all users ("you", "Player", "User") who access and use the phplush online gaming platform at https://phplush.net (the "Platform"). This Privacy Policy explains in detail how phplush collects, processes, stores, shares, and protects your personal information in connection with your use of our services.

This Privacy Policy is drafted in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). By registering an account or using any phplush service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

We encourage you to read this Privacy Policy carefully and in its entirety. If you do not agree with any part of this policy, you should discontinue use of the phplush Platform immediately. This Privacy Policy should be read alongside our Terms and Conditions, which govern your use of phplush services.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you register an account, use phplush services, or communicate with us, we collect personal data that you voluntarily provide, including:

• Identity Information: Full legal name, date of birth, gender, and nationality
• Contact Information: Email address, mobile phone number, and residential address (including city, province, and postal code)
• Account Credentials: Username and encrypted password
• Financial Information: Payment method details including GCash account numbers, PayMaya account details, bank account information for BPI, BDO, Metrobank, UnionBank, and other approved Philippine financial institutions
• Identity Verification Documents: Government-issued identification such as Philippine passport, driver's license, SSS ID, UMID, PhilHealth ID, or Voter's ID; proof of address documents; and selfie photographs for identity verification
• Communications: Records of your correspondence with phplush customer support, including chat transcripts and email exchanges

2.2 Information Collected Automatically

When you access and use the phplush Platform, we automatically collect certain technical and behavioral data, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers
• Network Information: IP address, internet service provider, and approximate geographic location derived from IP address
• Usage Data: Pages visited, games played, session duration, betting history, deposit and withdrawal history, and feature interactions
• Log Data: Server logs recording access times, error logs, and security event logs
• Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 5

2.3 Information from Third Parties

We may receive personal data about you from third-party sources, including:

• Payment processors and financial institutions for transaction verification and fraud prevention
• Identity verification service providers for KYC (Know Your Customer) compliance
• Regulatory authorities including PAGCOR for compliance and licensing purposes
• Anti-fraud and anti-money laundering screening services

3. How We Use Your Personal Data

phplush processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

Purpose	Data Used	Lawful Basis
Account registration and management	Identity, contact, credentials	Contract performance
Identity verification and KYC compliance	Identity documents, selfie photos	Legal obligation
Processing deposits and withdrawals	Financial information, identity	Contract performance
Fraud prevention and security	All categories	Legitimate interest
Regulatory compliance and reporting	Identity, financial, usage data	Legal obligation
Customer support and communications	Contact, communications	Contract performance
Responsible gaming monitoring	Usage, financial data	Legal obligation / Legitimate interest
Marketing and promotional communications	Contact, preferences	Consent
Platform improvement and analytics	Usage, device, log data	Legitimate interest

We will not use your personal data for purposes incompatible with those listed above without first obtaining your explicit consent or as otherwise required by law.

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

phplush shares personal data with carefully selected third-party service providers who assist us in operating the Platform and delivering our services. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws. Categories of service providers include:

• Payment processors and e-wallet providers (GCash, PayMaya, and Philippine banking partners)
• Identity verification and KYC service providers
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Anti-fraud and cybersecurity service providers
• Game software providers and content delivery networks
• Analytics and platform performance monitoring services

4.2 Regulatory and Legal Disclosures

phplush may disclose your personal data to regulatory authorities, law enforcement agencies, or other government bodies when required to do so by law, court order, or regulatory directive. This includes disclosures to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other relevant Philippine government agencies. We will notify you of such disclosures where legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phplush's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the privacy practices of the acquiring entity before your data is transferred and becomes subject to a different privacy policy.

4.4 No Sale of Personal Data

phplush does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Any sharing of data is strictly limited to the purposes described in this Privacy Policy.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device when you visit the phplush Platform. They help us recognize your device, remember your preferences, maintain your session, and analyze how you use our services. We also use similar technologies such as web beacons, pixel tags, and local storage.

5.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent fraudulent use. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game preferences, and display options to provide a personalized experience.
• Analytics Cookies: Help us understand how players use the Platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymized.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only placed with your consent.

5.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when cookies are set. Please note that disabling certain cookies may affect the functionality of the phplush Platform, including your ability to log in and access gaming features.

6. Data Security

phplush implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and phplush servers is encrypted using industry-standard 256-bit SSL/TLS encryption. Sensitive data including passwords and financial information is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized phplush personnel on a strict need-to-know basis. All staff with data access undergo background checks and regular data protection training.
• Infrastructure Security: Our servers are hosted in secure, access-controlled data centers with physical security measures, redundant systems, and regular security audits.
• Monitoring: We continuously monitor our systems for suspicious activity, unauthorized access attempts, and potential security breaches using automated detection tools and manual review processes.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within the timeframes required by the Data Privacy Act of 2012.

While we take all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

7. Your Data Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by phplush:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, processed, and used, as described in this Privacy Policy.
• Right of Access: You may request a copy of the personal data phplush holds about you, including information about how it is processed and with whom it is shared.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most account information directly through your phplush account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain data.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing conducted before withdrawal.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe phplush has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 10. We will respond to your request within the timeframes required by Philippine law, typically within 15 days of receipt.

8. Data Retention

phplush retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active account and for 5 years after account closure to comply with anti-money laundering regulations and financial record-keeping requirements.
• Transaction Records: Retained for 5 years from the date of transaction as required by Philippine financial regulations and tax laws.
• Identity Verification Documents: Retained for 5 years after account closure to comply with KYC and AML regulatory requirements.
• Communications: Customer support records retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Consent: Retained until you withdraw consent or for 2 years of inactivity, whichever comes first.
• Log Data: Server and security logs retained for 12 months for security monitoring and incident investigation.

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you.

9. Protection of Minors

phplush services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal data from minors under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information and terminate the associated account.

Parents or legal guardians who believe their child has provided personal data to phplush should contact us immediately using the contact information in Section 10. We will promptly investigate and take appropriate action.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how phplush processes your personal data, please contact our Data Protection Officer:

You may also contact the National Privacy Commission of the Philippines if you have concerns about how phplush handles your personal data:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City, Metro Manila, Philippines
Website: privacy.gov.ph

11. Changes to This Privacy Policy

phplush reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on the Platform or by sending an email to your registered email address at least 30 days before the changes take effect.

Your continued use of phplush services after the effective date of any Privacy Policy changes constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

12. International Data Transfers

phplush primarily operates within the Philippines and stores personal data on servers located in the Philippines or in jurisdictions with adequate data protection standards. In some cases, your personal data may be transferred to and processed by service providers located outside the Philippines. When such transfers occur, we ensure that appropriate safeguards are in place, including standard contractual clauses and adequacy determinations, to protect your data in accordance with Philippine data protection laws.