phmob Privacy Policy

phmob is committed to protecting the privacy and personal data of every Player and visitor who uses the phmob platform. This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the regulations of the National Privacy Commission (NPC) of the Philippines. It also reflects the data handling obligations imposed on phmob as a PAGCOR-licensed online gaming operator.

This Policy applies to all personal data collected from Players based in the Philippines — including Metro Manila, Cebu, Davao, and all other regions — as well as data collected through the phmob website, mobile applications, customer support interactions, and payment processing activities.

phmob encourages all Players to read this Privacy Policy carefully alongside the Terms & Conditions to fully understand how their personal information is handled on the platform.

2.1 For the purposes of the Philippine Data Privacy Act of 2012, phmob acts as the Personal Information Controller (PIC) in respect of personal data collected from Players and website visitors. This means phmob determines the purposes for which your personal data is processed and the means by which it is processed.

2.2 Where phmob engages third-party service providers to process personal data on its behalf — including payment processors, game software providers, and identity verification services — those parties act as Personal Information Processors (PIPs) under applicable Philippine law and are contractually required to handle personal data in accordance with this Policy and the Data Privacy Act.

2.3 phmob has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. The DPO may be contacted via the contact details provided in Section 13 of this Policy.

phmob collects the following categories of personal data from Players:

3.1 Registration Data

• Full legal name
• Date of birth (for age verification — must be 21 years or older)
• Philippine mobile number (used as primary account identifier and for OTP delivery)
• Residential address
• Email address (if provided)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued Philippine identification document (Passport, UMID, SSS ID, PhilHealth ID, Driver's License, or Voter's ID) — including document number, issue date, and expiry date
• Selfie or photograph submitted for facial verification
• Source of funds documentation where required under AML procedures

3.3 Financial Data

• GCash account number or linked bank account details (BPI, BDO, Metrobank, UnionBank, or PayMaya) for deposit and withdrawal processing
• Transaction history — deposits, withdrawals, and game wager records
• Wallet balance and bonus redemption records

3.4 Technical & Usage Data

• IP address and approximate geolocation at the time of login
• Device type, operating system, and browser information
• Session timestamps and duration
• Game history, betting patterns, and platform navigation data
• Customer support chat transcripts and correspondence records

3.5 Cookie Data

phmob uses cookies and similar tracking technologies as described in Section 7 of this Policy.

phmob processes your personal data for the following purposes:

• Account creation and management: To register, maintain, and administer your phmob account, including authentication and security.
• Age and identity verification: To confirm that you are at least 21 years of age and to verify your identity as required by PAGCOR and the Anti-Money Laundering Act.
• Payment processing: To process deposits via GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank, and to process withdrawal requests to your verified payment account.
• Game provision and platform operation: To provide access to all phmob games and to maintain game records, wallet balances, and transaction history.
• Regulatory compliance: To fulfil phmob's obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including mandatory reporting obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the platform.
• Responsible gaming: To monitor player activity for patterns consistent with problem gambling and to administer responsible gaming tools including deposit limits and self-exclusion.
• Customer support: To respond to account queries, resolve disputes, process complaints, and provide assistance to Players.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where this is permitted by applicable Philippine law. You may opt out of marketing communications at any time via your account settings.
• Platform improvement: To analyse usage data and improve the phmob platform experience, including game selection, user interface design, and mobile performance.

Under the Philippine Data Privacy Act of 2012, phmob processes personal data on the following legal grounds:

• Consent: You have given explicit consent to the processing of your personal data upon account registration and acceptance of this Privacy Policy.
• Contract performance: Processing is necessary for the performance of the agreement between you and phmob — including account provision, game access, and payment processing.
• Legal obligation: Processing is required for phmob to comply with its obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and mandatory KYC procedures.
• Legitimate interests: Processing is necessary for phmob's legitimate interests in fraud prevention, platform security, and responsible gaming compliance, where such interests are not overridden by your rights and interests.

6.1 phmob does not sell your personal data to third parties. phmob may share your personal data only in the following circumstances:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank receive the minimum data necessary to process your deposit and withdrawal transactions.
• Game software providers: Licensed game studios (such as JILI, PG Soft, and Pragmatic Play) receive anonymised or pseudonymised game session data necessary for game delivery and integrity monitoring.
• Identity verification providers: Third-party KYC and AML compliance service providers receive identity documents and verification data solely for the purpose of conducting mandated verification checks.
• PAGCOR and regulatory authorities: phmob is obligated to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities when required by law, court order, or regulatory direction.
• Law enforcement: phmob will disclose personal data to Philippine law enforcement agencies where legally compelled to do so or where disclosure is necessary to prevent, detect, or investigate criminal activity.

6.2 All third-party processors engaged by phmob are contractually bound to process personal data solely in accordance with phmob's instructions, this Privacy Policy, and applicable Philippine data protection law.

6.3 Cross-border transfers. Where personal data is transferred to service providers located outside the Philippines, phmob ensures that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers, including contractual protections equivalent to those required under the Data Privacy Act of 2012.

7.1 phmob uses cookies and similar technologies (such as web beacons and local storage) to operate the platform, maintain your session, and improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for platform operation, including authentication tokens, session management, and security features. These cannot be disabled without affecting core platform functionality.
• Functional cookies: Remember your preferences, language settings, and login state to provide a personalised experience on phmob.
• Analytics cookies: Collect aggregated, anonymised data about how Players use the phmob platform — pages visited, session duration, device type — to help phmob identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of phmob marketing campaigns, where you have consented to such use.

7.2 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use core phmob features including login and game play.

8.1 phmob retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transaction records: Retained for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing requirements and AMLA record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, in compliance with AMLA requirements.
• Customer support records: Retained for a minimum of three (3) years following the resolution of the relevant query or complaint.
• Marketing data: Retained until consent is withdrawn or the Player opts out, whichever is earlier.

8.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised unless further retention is required by law or legitimate business necessity.

9.1 phmob implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it holds, including:

• 256-bit SSL/TLS encryption for all data transmitted between Players and the phmob platform;
• Encryption of sensitive data at rest, including KYC documents and payment credentials;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Two-factor authentication (OTP via registered Philippine mobile number) for Player accounts;
• Regular security assessments and penetration testing of the phmob platform;
• Automatic session timeout to protect idle accounts on shared devices.

9.2 Data Breach Notification. In the event of a personal data breach that poses a risk to Players' rights, phmob will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under the Data Privacy Act. Affected Players will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

9.3 While phmob takes all reasonable precautions to protect your data, no data transmission over the internet or storage system can be guaranteed as completely secure. Players are also responsible for maintaining the confidentiality of their own account credentials.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phmob:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, stored, and shared — as set out in this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data phmob holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate, incomplete, or outdated personal data in your phmob account.
• Right to erasure or blocking: You have the right to request deletion or blocking of your personal data where processing is no longer necessary, where consent has been withdrawn, or where processing is unlawful — subject to phmob's legal data retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, machine-readable format for personal use or transfer to another service provider.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phmob has violated your rights under the Data Privacy Act.

To exercise any of the above rights, please contact phmob via the details in Section 13 of this Policy. phmob will respond to all data rights requests within the period required by applicable law.

The phmob platform is intended solely for use by persons aged 21 years and older. phmob does not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted as part of the KYC process for all registered Players.

If phmob discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately, the associated account will be closed, and any winnings accrued will be forfeited in accordance with phmob's Terms & Conditions and PAGCOR requirements.

If you believe that a minor has registered a phmob account, please contact phmob customer support immediately at [email protected].

12.1 phmob reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or phmob's data processing practices. The updated effective date will be displayed at the top of this Policy.

12.2 Where changes are material, phmob will notify registered Players via their registered Philippine mobile number or in-platform notification prior to the changes taking effect. Continued use of the phmob platform following notification of material changes constitutes acceptance of the updated Privacy Policy.

12.3 Players are encouraged to review this Privacy Policy periodically. The current version is always available at phmob.club/privacy-policy.

For any questions, requests, or complaints regarding this Privacy Policy or phmob's handling of your personal data, please contact phmob's Data Protection Officer via the following:

• Email: [email protected]
• Platform: Via the live chat support feature within the phmob platform
• Subject line: Please use "Privacy / Data Rights Request" to ensure your message reaches the DPO promptly

If you are not satisfied with phmob's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.