Your privacy matters to us. This Policy explains exactly what personal data phmaca collects, how it is used, who it is shared with, and what rights you hold as a Filipino data subject under Philippine law.
These cards summarise phmaca's core privacy commitments. They are not a substitute for the full Policy below, which governs your rights as a phmaca player.
phmaca embeds privacy protections into every feature we build — from account registration to withdrawal processing. We collect only the minimum data needed to operate and improve the platform for Filipino players.
phmaca complies fully with the Philippines' Data Privacy Act of 2012 (RA 10173) and its implementing rules. Your personal data rights as a Filipino citizen are fully recognised and honoured on this platform.
phmaca does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data sharing is limited to licensed payment processors, regulatory bodies such as PAGCOR, and fraud prevention services.
All data transmitted between your device and phmaca's servers is protected by 256-bit SSL/TLS encryption. Passwords are stored using industry-standard hashing algorithms — phmaca staff cannot view your plain-text password.
Under the Data Privacy Act and this Policy, you have the right to access, correct, delete, and object to the processing of your personal data. These rights can be exercised directly by contacting phmaca's support team.
In the unlikely event of a personal data breach affecting your phmaca account, we will notify you and the National Privacy Commission (NPC) within the timeframes mandated by Philippine data protection regulations.
This Privacy Policy ("Policy") describes how phmaca.vip ("phmaca," "we," "us," or "the Platform") collects, uses, stores, discloses, and protects personal data obtained from players, visitors, and any other individuals who interact with the phmaca platform ("you" or "Data Subject").
This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations (IRR). It applies to all personal data processed by phmaca in connection with the delivery of online casino, sports betting, and related services offered at phmaca.vip.
By registering for a phmaca account, making a deposit, or otherwise using the phmaca platform, you acknowledge that you have read, understood, and agreed to the collection and use of your personal data as described in this Policy.
Note: This Policy should be read alongside phmaca's Terms and Conditions, which are available at phmaca.vip/terms-conditions. In the event of any conflict between this Policy and the Terms and Conditions on privacy matters, this Policy shall prevail.
phmaca operates as the Personal Information Controller (PIC) for all personal data collected through phmaca.vip and its associated services. As PIC, phmaca determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Data Privacy Act of 2012 and all applicable Philippine data protection regulations.
Questions regarding this Policy, requests to exercise your data subject rights, or privacy-related complaints should be directed to phmaca's Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.
phmaca collects the following categories of personal data, depending on how you interact with the platform:
| Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, government-issued ID number and type (SSS, PhilHealth, driver's license, or passport) | Account registration; KYC verification |
| Contact Data | Philippine mobile number (+63), email address, residential address | Account registration; support interactions |
| Financial Data | GCash number, Maya account, bank account details (BPI, BDO, UnionBank, Metrobank), cryptocurrency wallet addresses, transaction history | Deposits; withdrawals; cashier interactions |
| Usage Data | Games played, wager amounts, session duration, login timestamps, device type, operating system, browser type | Continuous during platform use |
| Technical Data | IP address, device identifier, cookies, session tokens, mobile network data | On site access and each session |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, player feedback submissions | Support interactions; feedback forms |
| Responsible Gaming Data | Deposit limits set, self-exclusion status, cooling-off periods, loss limits, session time restrictions | When tools are activated by the player |
phmaca does not collect sensitive personal information (as defined under RA 10173, including health, biometric, or genetic data) unless specifically required for identity verification purposes and consented to in writing by the Data Subject.
phmaca collects personal data through the following channels and mechanisms:
phmaca uses personal data collected from players and users for the following purposes:
phmaca processes personal data on the following legal bases as permitted under the Data Privacy Act of 2012:
phmaca does not sell, rent, or trade your personal data to any third party. Your data may be shared only in the following limited and controlled circumstances:
All third-party service providers engaged by phmaca are contractually obligated to process personal data only in accordance with phmaca's instructions and in compliance with the Data Privacy Act of 2012.
No cross-border sale of data: phmaca does not transfer your personal data to overseas marketing companies, advertising networks, or data brokers.
phmaca uses cookies and similar tracking technologies on phmaca.vip to operate and improve the platform. The following types of cookies are used:
You may control non-essential cookies through your browser settings. However, disabling strictly necessary cookies may prevent you from logging in or using core features of the phmaca platform. phmaca does not use third-party advertising or tracking cookies for targeted advertising purposes.
phmaca retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | PAGCOR and AML compliance requirements |
| Financial transaction records | 5 years from transaction date | Anti-Money Laundering Act (RA 9160) |
| KYC verification documents | 5 years from account closure | Regulatory obligation |
| Customer support communications | 2 years from last interaction | Legitimate interest (dispute resolution) |
| Usage and technical data (logs) | 13 months from collection | Security and fraud prevention |
| Responsible gaming records | Duration of self-exclusion + 5 years | PAGCOR responsible gaming compliance |
| Marketing consent records | Until withdrawal of consent + 1 year | Consent management obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with phmaca's data disposal procedures.
phmaca implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Your responsibility: Security is a shared obligation. phmaca's security measures are most effective when complemented by strong, unique account passwords and careful management of your login credentials. See Section 4 of phmaca's Terms and Conditions for account security obligations.
As a Data Subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmaca. These rights are exercisable by contacting phmaca's Data Protection Officer as described in Section 15:
The right to know how your personal data is being collected, processed, and used — fulfilled by this Privacy Policy.
Request a copy of the personal data phmaca holds about you and details of how it is processed.
Request correction of inaccurate or incomplete personal data in your phmaca account record.
Request deletion of personal data where processing is no longer necessary or is unlawful, subject to retention obligations under applicable law.
Object to processing of your personal data for direct marketing or on grounds relating to your personal situation where processing is based on legitimate interests.
File a complaint with the National Privacy Commission (NPC) if you believe phmaca has violated your data privacy rights under RA 10173.
Requests to exercise your data subject rights will be acknowledged within three (3) business days and responded to within fifteen (15) business days of receipt. Where extensions are required due to complexity, phmaca will notify you within the initial fifteen-day period.
phmaca is a real-money gambling platform strictly prohibited from use by individuals under 21 years of age, in accordance with PAGCOR regulations and phmaca's Terms and Conditions. phmaca does not knowingly collect personal data from individuals under the age of 21.
If phmaca discovers that personal data has been collected from an individual under 21 years of age, the account will be immediately suspended, all personal data associated with the account will be deleted, and any funds in the account will be returned to the verified payment method of the account holder's legal guardian, net of any applicable processing fees, following identity verification.
Parents and guardians: If you believe a minor under your care has registered a phmaca account, please contact our support team immediately via live chat or at [email protected]. We will act on all such reports as a matter of priority.
Some of phmaca's third-party service providers — including certain game studio partners, cloud infrastructure providers, and fraud prevention services — may process personal data outside of the Philippines. Where such cross-border data transfers occur, phmaca ensures that:
phmaca does not authorise cross-border transfers of personal data to jurisdictions that do not provide adequate data protection standards unless the transfer is required by Philippine law or regulatory obligation.
phmaca reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. Material changes to this Policy will be communicated to registered players via a prominent notice on phmaca.vip and, where practicable, via a notification to the mobile number or email address registered to your phmaca account.
The version number and effective date displayed at the top of this Policy indicate the current operative version. We recommend reviewing this Policy periodically to stay informed of how phmaca manages your personal data. Continued use of the phmaca platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact phmaca using the following channels:
phmaca's Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and the Data Privacy Act of 2012, and is your primary point of contact for all data subject rights requests and privacy complaints.
If you are not satisfied with phmaca's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the competent supervisory authority for data protection matters under Republic Act No. 10173.
Response commitment: phmaca will acknowledge all privacy requests within three (3) business days and provide a substantive response within fifteen (15) business days. Complex requests involving large volumes of data or third-party consultation may require an extension, which we will communicate promptly.
phmaca is committed to protecting both your personal data and your wellbeing as a player. Your responsible gaming data — including any deposit limits, self-exclusion settings, or cooling-off periods you activate — is treated with the highest level of care. This data is never used for marketing purposes and is retained only to ensure your protection under PAGCOR's responsible gaming framework.
Your data is protected. Your game is waiting. JILI slots, live baccarat, and PBA betting — GCash deposits in seconds. 21+ only.
Login to phmaca Explore the Casino