1 Introduction
phtttt ("phtttt," "we," "us," or "our") operates the online gaming platform accessible
at phtttt.club (the "Platform"). We are committed to protecting the privacy and personal
data of all individuals who interact with the phtttt Platform, including registered
players, visitors, and prospective users (collectively, "you" or "Data Subject").
This Privacy Policy ("Policy") describes how phtttt collects, uses, stores, shares,
and protects your personal information in the course of providing our gaming services.
It has been prepared in accordance with the Republic Act No. 10173,
also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and
Regulations (IRR) as administered by the National Privacy Commission (NPC) of the
Philippines.
By accessing the Platform or creating a phtttt account, you acknowledge that you have
read and understood this Policy and consent to the collection and processing of your
personal data as described herein. This Policy should be read together with the
phtttt Terms and Conditions.
2 Data Controller
phtttt is the personal information controller responsible for your personal data collected
via the Platform. phtttt determines the purposes and means of processing your personal
information in accordance with this Policy and applicable Philippine law.
For all privacy-related inquiries, requests, or concerns, you may contact phtttt's
designated Data Protection Officer (DPO) at:
- Email: [email protected] (subject line: "Data Privacy Request")
- Platform: phtttt.club
- Response Time: Within 15 business days of receipt of your request
3 Personal Data We Collect
phtttt collects the following categories of personal data from users of the Platform:
A. Identity and Registration Data
- Full legal name as it appears on your government-issued Philippine identification
- Date of birth (for mandatory 21+ age verification)
- Nationality and country of residence
- Government-issued ID type and number (e.g., PhilSys ID, passport, UMID, driver's license)
- Username and account password (stored in encrypted form)
B. Contact Data
- Philippine mobile number (used for account verification, 2FA, and security alerts)
- Email address
- Residential address (for KYC purposes)
C. Financial Data
- Deposit and withdrawal transaction records
- Payment method details (GCash number, Maya account, bank account details as applicable)
- Transaction timestamps, amounts, and reference numbers
- Account wallet balance history
D. Gaming Activity Data
- Game session records including game type, duration, stakes, and outcomes
- Bonus and promotion usage history
- Login timestamps, session durations, and logout events
- Responsible gaming tool usage (deposit limit settings, self-exclusion requests)
E. Technical and Device Data
- IP address and approximate geographic location at the time of login
- Device type, operating system, and browser type
- Cookies and similar tracking identifiers (see Section 10)
F. Communications Data
- Records of communications between you and phtttt support staff, including live chat logs and email correspondence
- Responses to surveys or feedback requests (where voluntarily provided)
4 How We Collect Your Data
phtttt collects your personal data through the following means:
- Directly from you: When you register a phtttt account, complete KYC verification, make a deposit or withdrawal, contact support, or interact with any feature of the Platform.
- Automatically: Through cookies, session tracking, and server logs that capture technical data when you access the Platform.
- From third-party verification services: phtttt may use third-party identity verification providers to validate your government-issued ID during the KYC process. These providers process your data under their own privacy policies and on our behalf.
- From payment processors: Transaction confirmation and fraud-prevention data may be received from GCash, Maya, BPI, BDO, and other supported payment providers when you initiate a deposit or withdrawal.
5 Purposes of Processing
phtttt processes your personal data for the following purposes:
- To create, verify, and maintain your phtttt account
- To verify your age (21+ requirement) and identity (KYC compliance)
- To process deposits, withdrawals, and account transactions securely
- To operate, maintain, and improve the phtttt Platform and game services
- To detect, investigate, and prevent fraud, money laundering, and unauthorized account access
- To comply with legal and regulatory obligations under Philippine law, including PAGCOR-aligned operational requirements and Anti-Money Laundering Act (AMLA) reporting obligations
- To send account-related notifications, security alerts, and transactional communications
- To send promotional communications, bonuses, and marketing materials (where you have consented or where permitted by applicable law)
- To enforce the phtttt Terms and Conditions and resolve disputes
- To provide and improve customer support services
- To monitor and enforce responsible gaming commitments, including self-exclusion and deposit limit management
6 Legal Basis for Processing
phtttt processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:
- Contractual necessity: Processing required to fulfill our obligations to you under the phtttt Terms and Conditions, including account creation, transaction processing, and service delivery.
- Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including identity verification, anti-money laundering obligations, and regulatory reporting.
- Legitimate interests: Processing necessary for phtttt's legitimate business interests, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your rights and freedoms.
- Consent: Where we rely on your consent for specific processing activities, such as marketing communications, you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing.
7 Data Sharing and Disclosure
phtttt does not sell, rent, or trade your personal data to third parties for their
independent commercial purposes. Your data may be shared in the following limited circumstances:
- Service Providers: phtttt engages trusted third-party service providers to assist in platform operations, including payment processors, identity verification providers, customer support software vendors, and cloud hosting providers. These parties are contractually bound to process your data only on phtttt's instructions and in accordance with applicable privacy law.
- Game Providers: Licensed game providers whose products are offered on the phtttt Platform may receive limited session data necessary to operate and audit games.
- Regulatory and Law Enforcement Authorities: phtttt may disclose personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, legal process, or regulatory mandate.
- Business Transfers: In the event of a merger, acquisition, or sale of phtttt's business assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
- With Your Consent: phtttt may share your data in other circumstances where you have given explicit consent to such sharing.
8 Data Retention
phtttt retains your personal data only for as long as necessary to fulfill the purposes
outlined in this Policy, or as required by applicable Philippine law.
- Active Account Data: Retained for the duration of your active phtttt account plus a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
- Transaction Records: Retained for a minimum of five (5) years from the date of transaction.
- KYC Documentation: Retained for the period required by applicable Philippine anti-money laundering regulations.
- Support Communications: Retained for a maximum of three (3) years from the date of last communication, unless a longer period is required for dispute resolution.
- Marketing Consent Records: Retained for as long as you remain a registered phtttt user plus two (2) years, to demonstrate compliance with consent requirements.
When personal data is no longer required for its stated purpose, phtttt will securely
delete or anonymize it using industry-standard disposal methods.
9 Security Measures
phtttt implements a comprehensive set of technical and organizational security measures
to protect your personal data against unauthorized access, alteration, disclosure,
or destruction:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the phtttt Platform is encrypted using TLS 1.2 or higher.
- Encrypted Password Storage: Passwords are hashed using industry-standard cryptographic algorithms. phtttt staff cannot view your plain-text password.
- Two-Factor Authentication: phtttt offers and strongly recommends 2FA for all accounts, requiring OTP verification via your registered Philippine mobile number.
- Login Anomaly Detection: Automated systems monitor for unusual login activity and issue security alerts when unrecognized devices or locations are detected.
- Access Controls: Internal access to personal data is restricted to authorized phtttt personnel on a need-to-know basis, governed by role-based access controls.
- Regular Security Audits: phtttt conducts periodic security reviews and vulnerability assessments of its platform infrastructure.
While phtttt takes all reasonable measures to protect your data, no security system
is entirely infallible. You are encouraged to use strong, unique passwords and to
enable 2FA on your phtttt account to maximize your personal account security.
10 Cookies and Tracking Technologies
The phtttt Platform uses cookies and similar tracking technologies to enhance your
experience, maintain login sessions, analyze platform performance, and support
fraud prevention systems. The following types of cookies may be used:
- Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in to phtttt. These cannot be disabled without affecting core Platform functionality.
- Analytics Cookies: Used to collect anonymized data about how users interact with the Platform, including pages visited, session duration, and navigation patterns. This data is used to improve phtttt's services.
- Security Cookies: Used to detect fraudulent activity and protect account security by identifying abnormal session behavior.
- Preference Cookies: Store user preferences such as language settings and display preferences to personalize your Platform experience.
You may manage or disable non-essential cookies through your browser's settings.
Disabling cookies may affect certain Platform features. phtttt does not use cookies
for advertising targeting or retargeting on third-party platforms.
11 Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have
the following rights with respect to your personal data held by phtttt:
👁️
Right to be Informed
You have the right to be informed of how phtttt collects and uses your personal data — which is the primary purpose of this Privacy Policy.
📋
Right of Access
You have the right to request a copy of the personal data phtttt holds about you, along with information about how it is being processed.
✏️
Right to Rectification
If any personal data phtttt holds about you is inaccurate or incomplete, you have the right to request correction. You may update basic account details directly from your phtttt account settings.
🗑️
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to phtttt's legal retention obligations under Philippine law.
🚫
Right to Object
You have the right to object to the processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests.
📦
Right to Data Portability
Where technically feasible, you may request that phtttt provide your personal data in a structured, commonly used, machine-readable format.
To exercise any of these rights, submit a written request to phtttt's Data Protection
Officer at [email protected] with the
subject line "Data Subject Rights Request." phtttt will respond within 15 business days.
If you believe your rights have not been adequately addressed, you may file a complaint
with the National Privacy Commission of the Philippines (privacy.gov.ph).
12 Children's Privacy
The phtttt Platform is strictly intended for individuals who are 21 years of
age or older, in accordance with PAGCOR-aligned age requirements for online
gaming in the Philippines. phtttt does not knowingly collect personal data from
individuals under 21 years of age.
phtttt enforces mandatory age verification during registration and may conduct
re-verification at any point during the account lifecycle. Any account determined to
belong to an individual under 21 years of age will be immediately closed, all associated
funds handled in accordance with applicable law, and the incident reported to the
appropriate authorities where required.
If you believe that phtttt has inadvertently collected personal data from a minor,
please contact us immediately at [email protected].
13 Changes to This Privacy Policy
phtttt reserves the right to update or modify this Privacy Policy at any time to
reflect changes in our data processing practices, legal obligations, or Platform
features. Material changes will be communicated to registered users via email or
through a prominent notice on the Platform prior to the changes taking effect.
The "Last Updated" date at the top of this Policy indicates when it was most recently
revised. We encourage you to review this Policy periodically. Your continued use of
the phtttt Platform following any update constitutes acceptance of the revised Policy.
14 Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the
processing of your personal data by phtttt, please contact:
- Data Protection Officer — phtttt
- Email: [email protected] (subject: "Data Privacy Request")
- Platform: phtttt.club
- Support Hours: 24/7 — English and Filipino
🔒 Your data is safe with phtttt.
We process your personal information only as described in this Policy and as required by
Philippine law. If you are unsatisfied with our response to a privacy concern, you have
the right to lodge a complaint with the National Privacy Commission of the Philippines.
phtttt is committed to resolving all privacy matters fairly and transparently.