phpar is committed to protecting your personal data. This Privacy Policy explains exactly what information we collect when you use the phpar platform, why we collect it, how we protect it, who we share it with, and what rights you have as a data subject under Philippine law.
Six key principles that define how phpar handles your personal data.
phpar processes all personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and the implementing rules and regulations issued by the National Privacy Commission (NPC). Your rights as a Philippine data subject are fully recognised and enforceable.
phpar follows the principle of data minimisation. We collect only the personal information that is necessary for the specific purpose it is being collected for — account registration, payment processing, KYC compliance, responsible gaming, and regulatory reporting. We do not collect data speculatively or beyond what is required.
phpar does not sell, rent, or trade your personal data to third-party marketers or data brokers. Your personal information is used to operate the phpar platform and meet our legal obligations — nothing else. Third-party sharing is limited strictly to service providers and regulatory authorities as described in this Policy.
Personal data held by phpar is stored on secured servers protected by industry-standard encryption, access controls, and security monitoring. phpar regularly reviews its data security practices and implements technical and organisational measures appropriate to the risk level of each category of personal data processed.
As a data subject under the Philippines Data Privacy Act, you have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to object, the right to data portability, and the right to lodge a complaint with the NPC. phpar makes exercising these rights straightforward through our support channels.
phpar has designated a Data Protection Officer (DPO) as required by the Data Privacy Act. You can contact the phpar DPO directly regarding any data privacy concern, access request, or complaint. Contact details are provided in Section 13 of this Policy. phpar aims to respond to all data privacy requests within 15 business days.
This Privacy Policy (the "Policy") is issued by phpar, the operator of the online gaming platform accessible at https://phpar.org (the "Platform"). This Policy describes how phpar collects, uses, stores, discloses, and otherwise processes personal data relating to registered players, prospective players, and visitors to the Platform (collectively, "Data Subjects" or "you").
phpar is committed to processing personal data in a manner that is lawful, fair, and transparent, consistent with the requirements of Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.
This Policy applies to all personal data processed by phpar in connection with the operation of the Platform, including data collected through the website, mobile browsers, customer support channels, and payment processing integrations.
Scope Note: This Policy covers personal data held by phpar as the personal information controller. Where phpar uses third-party service providers (such as payment processors or game suppliers) who process data on phpar's behalf, those providers act as personal information processors and are bound by data processing agreements consistent with the DPA.
By registering an account with phpar or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
For the purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller is:
phpar has registered its data processing systems with the NPC as required under the DPA and its IRR. phpar has appointed a Data Protection Officer (DPO) whose contact details are provided in Section 13 of this Policy.
phpar collects the following categories of personal data in connection with the registration, operation, and closure of player accounts and related activities:
Sensitive Personal Information: Where phpar collects sensitive personal information as defined under Section 3(l) of the DPA (such as identification documents containing biometric data), such data is processed solely for the purposes of identity verification and PAGCOR regulatory compliance, and is subject to enhanced security controls.
phpar collects personal data through the following means:
phpar processes your personal data on one or more of the following legal bases as provided under Section 12 and Section 13 of the Data Privacy Act of 2012:
| Legal Basis | When It Applies |
|---|---|
| Consent | Where you have given your express consent to processing for a specific purpose, such as receiving marketing communications or promotional offers from phpar. |
| Performance of Contract | Processing necessary to perform the contract between you and phpar — including account registration, facilitating gameplay, processing deposits and withdrawals, and providing customer support. |
| Legal Obligation | Processing required to comply with phpar's legal obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws. |
| Legitimate Interests | Processing for phpar's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your rights and interests. |
| Vital Interests | In exceptional circumstances, where processing is necessary to protect a person's life or safety. |
phpar will identify the applicable legal basis for each processing activity in the data processing records maintained by its Data Protection Officer.
phpar processes your personal data for the following specific, legitimate purposes:
phpar does not sell, rent, or trade your personal data to third parties for commercial purposes. phpar shares personal data only in the following circumstances and only to the extent necessary for the stated purpose:
phpar engages the following categories of third-party service providers who process personal data on phpar's behalf as personal information processors, subject to written data processing agreements consistent with the DPA:
phpar is required by law to share certain personal data and transaction records with:
In the event of a merger, acquisition, or sale of all or part of phpar's business, personal data held by phpar may be transferred to the acquiring entity as part of the transaction, subject to the same protections described in this Policy. phpar will notify affected players of any such transfer through the Platform or by email prior to completion where reasonably practicable.
No Sale of Data: phpar does not and will not sell your personal data to any third party for commercial or marketing purposes. This commitment applies regardless of any changes in phpar's ownership or structure.
Some of phpar's third-party service providers — particularly game software suppliers and certain IT infrastructure providers — may be located outside the Philippines. Where personal data is transferred to countries that the NPC has not determined to offer an adequate level of personal data protection, phpar ensures that appropriate safeguards are in place before the transfer takes place.
These safeguards include:
phpar will not transfer personal data internationally where no adequate safeguard can be put in place. Where you have questions about specific international transfers or wish to obtain a copy of the applicable safeguards, please contact our Data Protection Officer using the details in Section 13.
phpar retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and identity data | Duration of account + 5 years after closure | PAGCOR regulatory requirements; AMLA obligations |
| KYC verification documents | Duration of account + 5 years after closure | AMLA; PAGCOR compliance; DPA |
| Financial transaction records | 5 years from date of transaction | AMLA; PAGCOR; Tax regulations |
| Gaming activity and session data | 3 years from date of activity | Dispute resolution; regulatory audit |
| Customer support records | 3 years from date of interaction | Dispute resolution; quality assurance |
| Marketing communications consent records | Until consent withdrawn + 1 year | DPA; evidence of consent |
| Technical and access logs | 12 months from creation | Security monitoring; fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where retention beyond these periods is required by a specific legal obligation or ongoing legal proceedings, phpar will retain the relevant data until that obligation is discharged.
phpar implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:
Your Role in Security: phpar's security measures protect data held on our systems, but you also play an important role in protecting your own account. Use a strong, unique password for your phpar account, enable two-factor authentication, and never share your login credentials with anyone. Report suspected unauthorised access to your account to phpar support immediately.
phpar uses cookies and similar tracking technologies on the Platform to support essential functionality, improve performance, and — where you have consented — deliver relevant promotional content. The following categories of cookies are used:
These cookies are essential for the Platform to function correctly. They enable core functions such as keeping you logged in during a session, maintaining your game state, processing transactions, and enforcing security measures. These cookies cannot be disabled without impairing Platform functionality. No consent is required for strictly necessary cookies under the DPA.
Functional cookies remember your preferences — such as your preferred language settings, responsible gaming limit configurations, and in-game display preferences — to improve your experience on the phpar Platform. These cookies persist between sessions and can be disabled through your browser settings, though doing so may affect personalisation features.
With your consent, phpar uses analytics technologies to collect anonymised data about how players use the Platform — including which pages are visited most, how long sessions last, and where players encounter errors. This data is used in aggregate form to improve Platform performance and game selection. It is not used to identify individual players.
You can control cookie settings through your web browser settings at any time. Most browsers allow you to view, delete, and block cookies. Please note that deleting or blocking essential cookies will affect the functionality of the phpar Platform. Instructions for managing cookies in common browsers are available through each browser's support documentation.
As a data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data processed by phpar. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.
You have the right to be informed of how your personal data is being collected and used. This Privacy Policy serves as phpar's primary means of fulfilling this obligation. phpar will provide updated notices whenever there are material changes to its data processing activities.
You have the right to obtain confirmation from phpar as to whether your personal data is being processed, and — where it is — to receive a copy of that data along with information about how it is being used. phpar will provide a data access response within 15 business days of a valid request.
If any personal data phpar holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many personal details — such as your email address, contact number, and notification preferences — can be updated directly from your phpar account settings.
You have the right to request the deletion or suspension of processing of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where your data has been unlawfully processed. This right is subject to phpar's legal data retention obligations under PAGCOR regulations and the AMLA.
You have the right to object to phpar's processing of your personal data for direct marketing purposes at any time. You may also object to processing based on phpar's legitimate interests, though phpar may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that phpar transmit that data to another controller where technically feasible.
If you believe that phpar has processed your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC). Information on how to file a complaint with the NPC is available on the NPC's official website. phpar encourages data subjects to contact our DPO first to attempt resolution before escalating to the NPC.
How to Exercise Your Rights: To exercise any of the rights listed above, contact phpar's Data Protection Officer with your full name, registered email address, and a description of your request. phpar will acknowledge receipt of your request within five (5) business days and will provide a substantive response within fifteen (15) business days. Identity verification may be required before processing certain requests.
phpar has designated a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act of 2012 and Rule IV of its Implementing Rules and Regulations. The DPO is responsible for overseeing phpar's data privacy compliance programme, handling data subject rights requests, managing data breach response, and serving as the point of contact with the National Privacy Commission.
For all data privacy-related enquiries, rights requests, or complaints, please contact phpar's Data Protection Officer through the following channels:
For formal complaints to the National Privacy Commission of the Philippines, please refer to the NPC's published complaints process. phpar will cooperate fully with any NPC investigation, mediation, or adjudication process.
phpar may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law or NPC issuances, changes in PAGCOR regulatory requirements, or changes in the technology we use.
When material changes are made to this Policy, phpar will:
Your continued use of the phpar Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not agree with any changes to this Policy, you have the right to close your account and request deletion of your personal data subject to phpar's legal retention obligations.
phpar recommends that you review this Privacy Policy periodically. The current version of this Policy will always be accessible at https://phpar.org/privacy-policy.
phpar is built on trust. PAGCOR-licensed, Data Privacy Act compliant, SSL encrypted, and transparent about how your data is used. Join Filipino players across Manila, Cebu, and Davao on the platform that puts player protection first. 21+ only.
Create Your phpar Account Learn About phpar