// Legal Documents · Data Privacy · phmanila
This Privacy Policy explains how phmanila collects, uses, stores, shares, and protects the personal information of its users — including Filipino players who register accounts, make deposits, place wagers, and interact with any feature of the phmanila platform. phmanila is committed to handling your personal data responsibly and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
// Privacy at a Glance
These six cards highlight the most important aspects of phmanila's approach to your personal data. The full policy text is below.
phmanila collects only the personal information necessary to operate your account, verify your identity, process payments, and comply with PAGCOR-aligned regulatory requirements. We do not collect data we have no operational or legal basis to hold.
All personal data stored by phmanila is encrypted at rest using industry-standard encryption. All data transmitted between your device and phmanila's servers is protected by 256-bit SSL/TLS encryption. Your financial data — including linked GCash and Maya account details — receives additional tokenisation protection.
phmanila operates in full compliance with the Philippine Data Privacy Act of 2012 (R.A. 10173) and the regulations issued by the National Privacy Commission. Your rights as a data subject under Philippine law — including the right to access, correct, and request deletion of your data — are fully honoured.
phmanila does not sell, rent, or trade your personal information to third parties. Data is shared with third parties only where strictly necessary — such as with game providers for gameplay delivery, payment processors for transaction handling, and regulatory authorities as required by law.
phmanila will only send you promotional communications — SMS, email, or push notifications — where you have provided consent during registration or have not subsequently withdrawn that consent. You may opt out of all marketing communications at any time through your account settings or by contacting phmanila support.
phmanila retains your personal data only for as long as your account is active and for the legally required period thereafter — typically five (5) years post-account closure, to satisfy anti-money laundering record-keeping requirements under Philippine law. Data no longer required is securely deleted.
In this Privacy Policy, the following terms carry the meanings set out below.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a specific individual, including name, mobile number, email address, government ID details, IP address, device identifier, financial account details, and gameplay records. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, access, use, disclosure, transfer, deletion, or destruction. |
| "Data Subject" | The individual to whom Personal Data relates — in this context, you, the phmanila user or account applicant. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. phmanila is the Data Controller for all Personal Data collected through the phmanila Platform. |
| "Third Party" | Any entity other than you and phmanila, including game providers, payment processors, identity verification services, and regulatory authorities. |
| "DPA" | The Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and all implementing rules and regulations issued thereunder by the National Privacy Commission. |
| "NPC" | The National Privacy Commission of the Philippines — the regulatory body responsible for enforcing the DPA. |
| "Platform" | The phmanila website at phmanila.org and all associated services, games, and features accessible to registered users. |
phmanila acts as the Data Controller for all Personal Data collected in connection with the phmanila Platform. As Data Controller, phmanila determines the purposes for which your data is collected and the manner in which it is processed, stored, and — where applicable — transferred.
phmanila has appointed a Data Protection Officer (DPO) as required by the Philippine DPA. The DPO is responsible for overseeing phmanila's compliance with data privacy obligations, handling data subject rights requests, and serving as the point of contact for the National Privacy Commission on privacy-related matters.
Data Protection Officer: All data privacy enquiries, rights requests, and complaints may be directed to phmanila's DPO via email at [email protected] with the subject line "Data Privacy Request". phmanila will acknowledge all DPO-addressed correspondence within five (5) business days.
phmanila collects Personal Data across several categories, each tied to a specific operational purpose. The categories below represent the totality of Personal Data phmanila may hold about a registered user.
phmanila collects Personal Data through the following channels and mechanisms:
phmanila processes your Personal Data only where a lawful basis for processing exists under the Philippine Data Privacy Act. The table below sets out the primary purposes for which phmanila processes your data and the corresponding lawful basis for each.
| Processing Purpose | Lawful Basis |
|---|---|
| Account creation and management | Performance of a contract with you (your phmanila account agreement). |
| Age and identity verification (KYC) | Legal obligation — mandatory under PAGCOR-aligned compliance requirements and Philippine AML law. |
| Processing deposits and withdrawals | Performance of a contract and legal obligation (AML transaction record-keeping). |
| Delivering games and platform services | Performance of a contract with you. |
| Customer support and complaint resolution | Legitimate interests of phmanila and performance of the account contract. |
| Fraud detection and prevention | Legitimate interests of phmanila and legal obligation. |
| Anti-money laundering monitoring | Legal obligation under Philippine AML legislation. |
| Responsible gaming monitoring and tool delivery | Legal obligation and legitimate interests. |
| Sending promotional communications | Your consent — you may withdraw consent at any time. |
| Platform analytics and improvement | Legitimate interests of phmanila. |
Consent Withdrawal: Where phmanila processes your data on the basis of your consent — specifically, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before the withdrawal, nor does it affect processing carried out on any other lawful basis.
phmanila does not sell, lease, or trade your Personal Data to any third party for their own commercial purposes. Personal Data is disclosed to third parties only in the circumstances described below, each of which is necessary for the operation of the phmanila Platform or required by law.
Data Transfer Outside the Philippines: Some of phmanila's third-party service providers — particularly cloud infrastructure and game technology providers — may operate servers located outside the Philippines. Where Personal Data is transferred internationally, phmanila ensures that appropriate safeguards are in place consistent with the requirements of the Philippine DPA and NPC guidelines on cross-border data flows.
phmanila uses cookies and similar tracking technologies on the phmanila Platform to provide functionality, maintain session security, and analyse platform usage patterns. The categories of cookies used are described below.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Required for core platform functions — session authentication, maintaining your login state, fraud prevention, and load balancing. Cannot be disabled without breaking basic Platform functionality. | Session / up to 24 hours |
| Functional | Remembers your preferences — language settings, responsible gaming tool configurations, and display preferences — so you don't need to reset them on each visit. | Up to 90 days |
| Analytics | Collects anonymised or pseudonymised data on how users navigate the phmanila Platform — which pages are visited most frequently, where users encounter errors, and overall Platform performance metrics. Used to improve Platform design and functionality. | Up to 13 months |
| Marketing | Used to deliver relevant promotional content within the phmanila Platform based on your game preferences and activity history. Only deployed where you have provided marketing consent during registration. | Up to 30 days |
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the phmanila Platform. For all other cookie categories, you may withdraw consent at any time via your phmanila account preferences or browser settings without affecting your ability to use the Platform.
phmanila implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:
In the event of a Personal Data breach that is likely to result in risk to the rights and freedoms of affected data subjects, phmanila will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the requirements of the Philippine DPA.
Your Role in Security: While phmanila invests significantly in platform security, you play an important role in protecting your own account. Please use a strong, unique password for your phmanila account, enable two-factor authentication, and never share your login credentials with any third party. If you suspect your account has been compromised, contact phmanila's Live Chat support immediately.
phmanila retains your Personal Data for the period necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by Philippine law. The retention schedule below applies to active and closed accounts.
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account activity plus 5 years post-account closure (AML requirement under Philippine law). |
| KYC identity documents | Duration of account activity plus 5 years post-account closure. |
| Financial transaction records | Minimum 5 years from date of transaction — required by Philippine AML legislation. |
| Gameplay session records | Duration of account activity plus 2 years post-closure for dispute resolution purposes. |
| Customer support communications | 3 years from the date of the most recent interaction in a support case. |
| Marketing consent records | Until consent is withdrawn, plus 1 year as proof of consent status. |
| Self-exclusion records | Permanently, to prevent circumvention of self-exclusion through re-registration. |
| Technical / server access logs | 90 days for routine logs; up to 2 years for logs associated with security incidents. |
Personal Data that has reached the end of its applicable retention period and for which no other lawful basis for continued processing exists will be securely and irreversibly deleted or anonymised in accordance with phmanila's data disposal procedures.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your Personal Data held by phmanila. To exercise any of these rights, please contact phmanila's Data Protection Officer at [email protected] with the subject line "Data Privacy Request", providing sufficient information to identify your account.
phmanila will respond to all verified data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or phmanila receives multiple requests from the same individual simultaneously, this period may be extended by a further two months, with notice provided to you within the initial thirty-day period.
The phmanila Platform is not directed at, and is not intended for use by, any person under the age of 21. phmanila does not knowingly collect Personal Data from individuals under 21. If phmanila becomes aware that Personal Data has been submitted by or on behalf of a person under 21, that data will be immediately deleted and the associated account will be permanently closed.
Age Verification: phmanila enforces its 21+ requirement through KYC verification conducted prior to first withdrawal and through ongoing monitoring. Date of birth is collected at registration and cross-referenced against government ID documentation. Providing a false date of birth to circumvent the age restriction is a material breach of phmanila's Terms and Conditions and may constitute fraud under Philippine law.
If you believe a minor may have accessed or registered on the phmanila Platform, please contact phmanila's support team immediately via Live Chat or at [email protected]. phmanila takes such reports seriously and will investigate promptly.
phmanila may send you promotional communications about phmanila's games, bonuses, VIP tier benefits, and special events — including promotions tied to PBA games, Filipino boxing events, and seasonal occasions — where you have provided your consent to receive marketing communications during the registration process or at any point thereafter.
phmanila reserves the right to update or amend this Privacy Policy at any time. When material changes are made — changes that affect how your Personal Data is collected, used, or shared — phmanila will notify you through one or more of the following channels: a prominent notice displayed on the phmanila Platform, an email to your registered address, or an SMS to your registered Philippine mobile number.
The "Last Updated" date at the top of this page will be revised whenever an amendment is made. We recommend reviewing this Privacy Policy periodically. The current version will always be accessible at phmanila.org/privacy-policy. Continued use of the phmanila Platform following notification of material changes constitutes your acknowledgment of the updated Privacy Policy.
Previous versions of this Privacy Policy are archived and may be requested from phmanila's Data Protection Officer where you wish to understand how your data was being processed at a specific prior point in time.
For all enquiries, rights requests, or complaints relating to this Privacy Policy or to the processing of your Personal Data by phmanila, please contact phmanila's Data Protection Officer through the channels below.
phmanila is committed to resolving all privacy concerns promptly and transparently. We will acknowledge data privacy correspondence within five (5) business days and provide a substantive response within thirty (30) calendar days of receiving a verified request.
Age Restriction — 21 Years and Above Only: All real-money features of the phmanila Platform are restricted to individuals aged 21 and above, consistent with PAGCOR regulations governing online gaming in the Philippines. phmanila enforces this requirement through KYC verification. For responsible gaming tools, self-exclusion options, and external support resources, visit our Responsible Gaming page.
Gambling involves financial risk. Please gamble responsibly. This platform is intended for entertainment purposes and is restricted to users aged 21 and above.
// Your Data, Protected
You've read how phmanila handles your personal data — with 256-bit encryption, Philippine DPA compliance, no third-party data sales, and full data subject rights. Your privacy is protected from the moment you register to every session you play. Explore phmanila knowing your information is in good hands.
// 21+ only · Philippine DPA compliant · PAGCOR-aligned · GCash & Maya accepted