phpearl Privacy Policy

Welcome to the phpearl Privacy Policy. phpearl ("phpearl," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online gaming platform at phpearl.one. This Privacy Policy explains in clear, straightforward terms what personal information we collect from you, how we use it, who we may share it with, and what rights you have over your own data.

This Privacy Policy applies to all users of the phpearl platform, including registered players, visitors who browse phpearl.one without registering, and anyone who contacts our support team. It covers all personal data collected through our website, mobile browser experience, and any other channel through which you interact with phpearl.

By registering a phpearl account or continuing to use the phpearl platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how phpearl handles your personal data as described in this policy, please discontinue use of the platform and contact our support team to request account closure.

phpearl is an online gaming platform operating at phpearl.one, offering a range of casino-style games including slots, bingo, arcade games, and live dealer experiences to eligible Filipino players. phpearl serves as the data controller for all personal data collected through the phpearl platform.

As data controller, phpearl determines the purposes and means by which your personal data is processed. We are responsible for ensuring that your data is handled lawfully, fairly, and transparently in accordance with the Philippine Data Privacy Act of 2012 and all other applicable data protection laws.

If you have any questions about how phpearl processes your personal data, or if you wish to exercise any of your data subject rights, you may contact our Data Protection Officer directly using the contact details provided in Section 13 of this Privacy Policy.

phpearl collects personal data from you in several ways: directly when you register and use our platform, automatically when you browse our website, and from third parties where necessary for verification and compliance purposes. The categories of personal data we collect include:

Registration & Account Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Email address
• Mobile phone number
• Residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati)
• Username and encrypted password

Identity Verification (KYC) Data

• Government-issued ID (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address documents
• Selfie or facial image for identity matching (where required)
• Source of funds documentation (where required for AML compliance)

Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash account reference, PayMaya reference, BPI/BDO/Metrobank account details — stored in tokenized form only)
• Transaction amounts in Philippine Peso (₱)
• Bonus and promotional activity records

Gaming Activity Data

• Game session history, wager amounts, and outcomes
• Responsible gaming tool usage (deposit limits, self-exclusion activations)
• Session duration and login timestamps

Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Cookie identifiers and session tokens
• Referring URL and pages visited on phpearl.one

Communications Data

• Support chat transcripts and email correspondence
• Feedback and survey responses
• Promotional communication preferences

phpearl uses your personal data only for legitimate, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which phpearl processes your personal data are:

• Account Management: To create, maintain, and manage your phpearl player account, including processing your registration, verifying your identity, and enabling you to log in securely.
• Age & Identity Verification: To verify that you meet the 21+ age requirement for online casino gaming in the Philippines and to confirm your identity as part of our KYC process.
• Service Delivery: To provide you with access to phpearl's games, process your deposits and withdrawals, apply bonuses and promotions to your account, and deliver the full range of phpearl platform features.
• Financial Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records.
• Regulatory Compliance: To comply with our obligations under the Philippine Data Privacy Act, Anti-Money Laundering Act (AMLA), and applicable PAGCOR regulations, including transaction monitoring and suspicious activity reporting.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide responsible gaming interventions where appropriate.
• Customer Support: To respond to your queries, complaints, and support requests through our live chat and email channels.
• Platform Security: To detect, investigate, and prevent fraud, unauthorized account access, money laundering, and other prohibited conduct on the phpearl platform.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the phpearl platform, fix bugs, and develop new features that better serve Filipino players.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012, phpearl must have a lawful basis for processing your personal data. The legal bases on which phpearl relies are:

• Contractual Necessity: Processing your account data, KYC information, and financial transaction data is necessary to perform our contract with you — i.e., to provide you with access to the phpearl platform and its services.
• Legal Obligation: Processing for AML compliance, age verification, regulatory reporting to PAGCOR, and tax record-keeping is required by Philippine law. phpearl cannot waive these obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and anonymized analytics is based on phpearl's legitimate interest in operating a safe, secure, and well-functioning gaming platform. We have assessed that these interests do not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies is based on your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

phpearl does not sell your personal data to any third party. We share your personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: We share necessary financial data with payment service providers (such as GCash, PayMaya, and banking partners) to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC & Identity Verification Providers: We may use third-party identity verification services to assist with KYC processing. These providers process your identity documents under strict data processing agreements and are prohibited from using your data for any other purpose.
• Game Software Providers: phpearl's game library includes titles from third-party game developers. These providers may receive anonymized session data for game performance monitoring purposes. They do not receive your personally identifiable information.
• Regulatory Authorities: phpearl is required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities upon lawful request or as required by applicable regulations.
• IT & Infrastructure Providers: phpearl uses third-party cloud hosting and IT infrastructure providers to operate the platform. These providers act as data processors under our instruction and are contractually bound to protect your data.
• Professional Advisors: phpearl may share data with legal, accounting, or auditing professionals where necessary for the operation of our business, subject to professional confidentiality obligations.

phpearl retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your active phpearl account, plus a minimum of 5 years after account closure, as required by Philippine AML regulations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of verification, in accordance with PAGCOR and AMLC requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Gaming Activity Logs: Retained for 2 years from the date of each session, unless required for longer retention due to an ongoing investigation or dispute.
• Support Communications: Retained for 2 years from the date of the last communication, to allow for follow-up and dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent, plus 1 year after withdrawal of consent, as evidence of your preferences.
• Technical & Device Data: Retained for up to 12 months from collection, after which it is anonymized or deleted.

When personal data is no longer required, phpearl securely deletes or anonymizes it in accordance with our data disposal procedures. Anonymized data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

phpearl implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption: All personal data is encrypted at rest using AES-256 encryption. All data in transit is protected by TLS 1.3.
• Access Controls: Access to personal data within phpearl is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their job functions.
• Two-Factor Authentication: phpearl's internal systems require two-factor authentication for all staff accessing personal data.
• Regular Security Audits: phpearl conducts regular security assessments and penetration testing of our platform to identify and remediate vulnerabilities.
• Staff Training: All phpearl staff who handle personal data receive regular data privacy and security training.
• Incident Response: phpearl maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights, we will notify the National Privacy Commission and affected players within the timeframes required by the Data Privacy Act.

phpearl uses cookies and similar tracking technologies on phpearl.one. A cookie is a small text file placed on your device by a website to remember information about your visit. phpearl uses the following categories of cookies:

phpearl does not use advertising or third-party tracking cookies. You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in to your phpearl account and using the platform's core features.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phpearl:

• Right to Be Informed: You have the right to be informed about how phpearl collects and uses your personal data — which is the purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data phpearl holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data phpearl holds about you. You can update most account information directly through your phpearl account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phpearl's legal retention obligations.
• Right to Object: You have the right to object to phpearl's processing of your personal data for marketing purposes. You may opt out of marketing communications at any time by contacting our support team or using the unsubscribe link in any marketing email.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: If you believe phpearl has not handled your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The phpearl platform is strictly intended for adults aged 21 years and above. phpearl does not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is the minimum legal age for online casino gaming in the Philippines and is strictly enforced by phpearl through our KYC verification process.

If phpearl discovers or is notified that a person under the age of 21 has registered an account or provided personal data to us, we will:

• Immediately suspend the account pending investigation.
• Void any wagers placed and return any deposited funds to the payment method used.
• Permanently close the account.
• Delete all personal data associated with the underage account as soon as practicable, subject to any legal retention obligations.

phpearl reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the phpearl platform informing players of the change.
• Where required by law, seek your renewed consent for any new processing activities.

We encourage you to review this Privacy Policy periodically to stay informed about how phpearl protects your personal data. Your continued use of the phpearl platform after any changes to this Privacy Policy constitutes your acknowledgment of the updated policy.

If you disagree with any changes to this Privacy Policy, you should discontinue use of the phpearl platform and contact our support team to request account closure and deletion of your personal data, subject to our legal retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or phpearl's handling of your personal data, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing phpearl's compliance with the Philippine Data Privacy Act and is your primary point of contact for all privacy-related matters.

• Live Chat: Available 24/7 directly on the phpearl platform — the fastest way to reach our support team for general queries.
• Email (Privacy & DPO): [email protected]

When contacting us about a privacy matter, please include your registered phpearl username and a clear description of your request or concern. We will acknowledge your request within 3 business days and provide a full response within 15 business days.

If you are not satisfied with phpearl's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint channels.