phyy Casino
Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by phyy Casino ("phyy," "we," "us," or "our") and applies to all personal information collected through the phyy website (phyy.cam), mobile platforms, customer support channels, and any other services operated under the phyy brand (collectively, the "Platform").

This Policy is intended to comply with the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It governs the collection, use, storage, disclosure, and disposal of personal information relating to players, registered users, and website visitors.

By accessing or using the phyy Platform — whether as a guest, registered player, or otherwise — you acknowledge that you have read and understood this Policy and consent to the processing of your personal information as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

2. Personal Data We Collect

phyy collects personal information that is necessary to provide gaming services, verify player identity, process financial transactions, and comply with regulatory obligations. The categories of personal data we collect include:

2.1 Identity and Account Data

• Full legal name (as it appears on a government-issued ID)
• Date of birth and age verification documentation
• Nationality and country of residence
• Government-issued identification numbers (e.g., Philippine national ID, passport number, driver's license number)
• Username and account credentials (password stored in encrypted form only)
• Profile photograph where submitted for KYC verification

2.2 Contact Information

• Mobile phone number (Philippine format)
• Email address
• Residential address (barangay, city/municipality, province, region)

2.3 Financial and Transaction Data

• GCash or PayMaya registered mobile number and account reference
• Bank account details for BPI, BDO, Metrobank, or other Philippine bank transfers
• Deposit and withdrawal transaction history
• Betting history, game session records, and wagering activity
• Bonus claim history and promotional participation records

2.4 Technical and Usage Data

• IP address and approximate geolocation at the time of access
• Device type, operating system, and browser information
• Session timestamps, login history, and navigation patterns
• Game interaction logs for fairness auditing and dispute resolution

2.5 Communications Data

• Records of customer support interactions via live chat and email
• Feedback, complaint submissions, and survey responses
• Marketing preference settings and communication opt-in or opt-out records

3. How We Collect Your Data

phyy collects personal data through the following methods:

Collection Method	Examples
Direct submission	Account registration form, KYC document upload, customer support contact, withdrawal request form
Automated collection	Cookies, session tracking, device fingerprinting, IP logging during Platform access
Third-party providers	Identity verification partners, payment processors (GCash, PayMaya, BPI, BDO), fraud detection services
Gameplay activity	Bet amounts, game selections, session duration, win/loss records captured automatically by the Platform
Marketing interactions	Email open and click-through data, promotional campaign participation, bonus redemption activity

4. How We Use Your Personal Data

phyy processes personal data for the following purposes:

4.1 Account Management and Service Delivery

To create and maintain your phyy player account, authenticate your identity at login, process deposits and withdrawals in Philippine Peso, deliver gaming services, and provide customer support.

4.2 Identity Verification and Regulatory Compliance

To fulfill Know Your Customer (KYC) obligations, verify that you meet the minimum age requirement of 21 years old, comply with anti-money laundering (AML) regulations, and fulfill any reporting obligations required under Philippine law or by PAGCOR.

4.3 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorized access to player accounts. phyy employs automated monitoring systems that analyze behavioral patterns and flag suspicious activity for human review.

4.4 Personalization and Platform Improvement

To personalize your experience on phyy — including game recommendations, bonus offers, and promotional communications — and to analyze aggregated usage data to improve Platform features, performance, and game offerings.

4.5 Responsible Gaming

To support responsible gaming tools including deposit limit enforcement, self-exclusion processing, session time monitoring, and intervention where patterns indicate problem gambling behavior. phyy may use your gameplay data to identify players who may benefit from responsible gaming support.

4.6 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates via email or SMS, subject to your marketing communication preferences. You may opt out of marketing communications at any time by updating your account settings or contacting our support team.

5. Legal Basis for Processing

phyy processes personal data on the following legal grounds as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the player account agreement, including KYC verification, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, PAGCOR regulations, AML obligations, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming enforcement, where phyy's legitimate interests do not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent that may be withdrawn at any time.

6. Data Sharing and Disclosure

phyy does not sell, rent, or trade your personal information to third parties for commercial purposes. We may share your data in the following limited circumstances:

6.1 Service Providers and Partners

We share personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (GCash, PayMaya, Philippine banks), identity verification providers, RNG certification labs, game technology providers, IT infrastructure suppliers, and customer support platforms. All service providers are contractually obligated to process data only as directed by phyy and in compliance with the Data Privacy Act.

6.2 Regulatory and Law Enforcement Authorities

phyy may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other Philippine government bodies and law enforcement agencies where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and will be documented in accordance with our internal data governance procedures.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of phyy's business, personal data held by phyy may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected players will be notified of any such transfer that materially affects their privacy rights.

6.4 Consent-Based Disclosures

phyy may share your data with third parties for purposes beyond those listed above only where you have given explicit, written consent to that specific disclosure.

7. Data Retention

phyy retains personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to any longer retention periods required by law. Our general retention periods are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, in accordance with AML record-keeping requirements under Philippine law.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Customer support communications: Retained for 3 years from the date of the interaction, to support dispute resolution and quality assurance.
• Marketing data: Retained until you withdraw consent or opt out of communications, after which it is deleted within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be used to identify an individual.

8. Data Security Measures

phyy implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phyy Platform.
• Encrypted storage for sensitive data fields including passwords, government ID numbers, and payment method details. Passwords are stored using one-way cryptographic hashing and are never stored in plain text.
• Two-factor authentication (2FA) for player account access, using Philippine mobile numbers for OTP verification.
• Role-based access controls limiting internal access to personal data to authorized phyy personnel with a legitimate need to process that data.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Segregated player fund accounts to ensure financial data is not commingled with operational accounts.

9. Cookies and Tracking Technologies

phyy uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyze usage patterns. Cookies are small text files placed on your device when you visit phyy.cam.

9.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function correctly, including session management and authentication. These cannot be disabled.
• Performance and analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help us identify areas for improvement.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming limits you have set.
• Marketing cookies: Used to deliver relevant promotional content based on your activity on the Platform. These are only activated with your explicit consent.

9.2 Managing Cookies

You may control non-essential cookies through your browser settings or through the cookie preference center accessible on the phyy Platform. Disabling certain cookies may affect the functionality of the Platform or your ability to access specific features.

10. Your Privacy Rights as a Data Subject

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phyy:

• Right to be informed: The right to know what personal data phyy collects and how it is processed — this Policy fulfills that obligation.
• Right of access: The right to request a copy of the personal data phyy holds about you.
• Right to rectification: The right to request correction of inaccurate, incomplete, or outdated personal data in your account.
• Right to erasure or blocking: The right to request deletion or blocking of personal data that is unlawfully processed or no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to processing of your personal data for direct marketing, profiling, or other purposes based on legitimate interest.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission if you believe phyy has violated your privacy rights.

To exercise any of the above rights, please contact our Data Protection Officer (DPO) via the details provided in Section 14 of this Policy. phyy will respond to all verified data subject requests within 30 calendar days of receipt.

11. Minors and Age Restriction

phyy Casino is strictly intended for individuals aged 21 years and above in the Philippines, in compliance with PAGCOR regulations governing casino-style online gambling. phyy does not knowingly collect, store, or process the personal data of individuals under the age of 21.

All registered accounts are subject to age verification as part of the KYC process. Where phyy has reason to believe that an account has been registered by or on behalf of a person under the age of 21, that account will be suspended immediately, all associated personal data will be deleted, and any funds held in the account will be handled in accordance with applicable legal requirements.

If you are a parent or guardian and believe that a minor has registered an account on phyy, please contact our support team immediately at [email protected].

12. Cross-Border Data Transfers

phyy's primary operations and data storage infrastructure are based within or proximate to the Philippines. In certain circumstances, personal data may be transferred to, stored in, or processed by third-party service providers located outside the Philippines — for example, cloud infrastructure providers, game technology partners, or fraud detection services operating in other jurisdictions.

Where such cross-border transfers occur, phyy ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that impose privacy obligations consistent with the Data Privacy Act of 2012. phyy will not transfer personal data to a jurisdiction that does not provide an adequate level of protection for data subjects without first obtaining your consent or establishing a lawful transfer mechanism.

13. Changes to This Privacy Policy

phyy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform features. Material changes to this Policy will be communicated to registered players via email notification or a prominent notice on the Platform at least 7 days before the changes take effect, where reasonably practicable.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the phyy Platform following the effective date of any amendments constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.

14. Contact Information and Data Protection Officer

phyy has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week via the phyy Platform — the fastest channel for routine account inquiries.
• Data Privacy Requests (Email): [email protected] — please include "Data Privacy Request" in the subject line and provide your registered account email address to facilitate verification.

For complaints regarding phyy's handling of your personal data that have not been satisfactorily resolved through our internal process, you have the right to file a formal complaint with the National Privacy Commission of the Philippines (NPC) through the NPC's official channels.

For information relating to your Responsible Gaming settings and self-exclusion options, please visit our dedicated Responsible Gaming page. For the full terms governing your use of the Platform, please review our Terms & Conditions.