How phfyn Protects Your Privacy
Encrypted Data Storage
All personal information held by phfyn — including your ID documents, contact details, and payment data — is stored using industry-standard AES-256 encryption. Your data is never stored in plain text on our servers.
Your Data Rights
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the right to access, correct, and request deletion of your personal data at any time. phfyn fully honours every data subject right without unnecessary delay.
No Unauthorised Sharing
phfyn does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data is shared only where strictly required — such as with payment processors and regulatory authorities.
Transparent Cookie Use
We use cookies and similar tracking technologies solely to improve your experience on phfyn — for session management, platform personalisation, and analytics. You are in control of your cookie preferences at any time.
Secure Payment Handling
Payment transactions on phfyn — via GCash, Maya, BPI, BDO, and other local providers — are processed through PCI-DSS compliant gateways. phfyn does not store full card numbers or e-wallet PINs on its own servers.
Direct Privacy Support
Our dedicated privacy support channel is available 24/7. Whether you need to update your registered details, exercise a data subject right, or raise a privacy concern, our team responds within two hours to all written enquiries.
Contents
1. Introduction
phfyn ("phfyn," "we," "us," or "our") is committed to protecting the privacy of every player who registers and participates on the phfyn online gaming platform, accessible at phfyn.net. This Privacy Policy ("Policy") describes in full detail the categories of personal information we collect, the purposes for which we process that information, the circumstances under which we may share it with third parties, the security measures we apply to safeguard it, and the rights you hold as a data subject under Philippine law.
This Policy applies to all personal information collected through any channel associated with phfyn — including the phfyn website, mobile-optimised interface, live chat support, email correspondence, and any related promotional communications. By registering a phfyn account or continuing to use any part of the phfyn platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
Philippine Law Compliance: This Privacy Policy has been prepared in accordance with the requirements of Republic Act No. 10173, known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations issued by the National Privacy Commission ("NPC") of the Philippines.
2. Data Controller
For the purposes of the Data Privacy Act of 2012, phfyn acts as the personal information controller in respect of all personal data collected from players and site visitors through the phfyn platform. phfyn determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out in compliance with applicable Philippine privacy legislation.
phfyn operates within the PAGCOR (Philippine Amusement and Gaming Corporation) licensing framework. As part of its regulatory obligations, phfyn maintains a designated Data Protection Officer ("DPO") who oversees the implementation of this Privacy Policy and serves as the primary point of contact for data subject rights requests and privacy-related enquiries.
You may contact phfyn's Data Protection Officer directly by writing to: [email protected] — please include "Data Privacy Request" in the subject line of your message to ensure it is routed to the correct team.
3. Data We Collect
phfyn collects personal information only to the extent necessary for the purposes outlined in this Policy. The categories of personal data we collect include, but are not limited to, the following:
3.1 Registration & Identity Data
When you create a phfyn account, we collect your full legal name, date of birth, nationality, Philippine residential address (including city and province — for example, Manila, Cebu, Davao, Quezon City, or Makati), email address, and mobile number. This information is required to verify your identity and confirm your eligibility to use the phfyn platform.
3.2 Identity Verification (KYC) Documents
As part of our Know Your Customer (KYC) obligations under PAGCOR regulations and applicable Philippine anti-money laundering law, phfyn may request copies of government-issued identification documents such as your Philippine passport, UMID card, SSS/GSIS ID, driver's licence, or voter's ID. We may also request proof of address documents such as a utility bill or bank statement.
3.3 Financial & Transaction Data
phfyn collects records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method identifiers (such as your GCash-registered mobile number or BPI account name), transaction reference numbers, and timestamps. We do not store full debit/credit card numbers, CVV codes, or e-wallet PINs.
3.4 Gaming Activity Data
We collect records of your gaming activity on the phfyn platform, including game sessions, wager amounts, win/loss records, bonus usage, and responsible gaming tool settings. This data is used for platform optimisation, fraud prevention, and regulatory compliance reporting to PAGCOR.
3.5 Technical & Device Data
When you access phfyn, our systems automatically collect certain technical information including your IP address, browser type and version, operating system, device identifiers, session timestamps, pages visited, and referral URLs. This data helps us maintain platform security and improve the overall user experience.
3.6 Communications Data
If you contact phfyn's customer support team — whether via email, live chat, or any other channel — we retain records of those communications, including the content of messages, support ticket reference numbers, and timestamps. This is necessary to provide consistent and accurate support and to maintain a record of dispute resolutions.
| Data Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, address | Registration form |
| KYC Documents | Passport, UMID, driver's licence | Verification upload |
| Financial Data | GCash number, BPI account name, transaction history | Deposit / withdrawal |
| Gaming Activity | Wagers, game sessions, bonus usage | Platform interaction |
| Technical Data | IP address, browser, device ID | Automatic collection |
| Communications | Support chat logs, email records | Customer support |
4. How We Use Your Data
phfyn processes your personal data for the following specific purposes. We do not use your data for any purpose beyond those listed here without first obtaining your explicit consent or establishing a separate lawful basis under the Data Privacy Act of 2012:
- Account creation and management: To register your phfyn account, verify your identity, manage your account settings, and maintain accurate records of your profile information.
- Age and eligibility verification: To confirm that you are at least 21 years of age and legally eligible to participate in online gaming on the phfyn platform, in compliance with PAGCOR regulations.
- Transaction processing: To process deposits, withdrawals, and bonus credits accurately and efficiently via GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, and QR Ph payment channels.
- Regulatory compliance: To fulfil phfyn's legal obligations under PAGCOR's licensing framework, including anti-money laundering (AML) reporting requirements under Republic Act No. 9160 and its amendments.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats on the phfyn platform.
- Customer support: To respond to your enquiries, process complaints, resolve disputes, and provide ongoing account assistance via our 24/7 support team.
- Platform improvement: To analyse aggregated usage data and gaming behaviour in order to improve the features, performance, and overall experience of the phfyn platform.
- Responsible gaming: To monitor gaming patterns for signs of problem gambling and to administer self-exclusion, deposit limit, and cooling-off requests in accordance with phfyn's responsible gaming commitments.
- Marketing communications: To send you promotional offers, bonus notifications, and updates about new games or features on phfyn — but only where you have provided your consent to receive such communications, and always subject to your right to unsubscribe at any time.
5. Legal Basis for Processing
Under the Data Privacy Act of 2012, phfyn relies on the following lawful bases for processing your personal information:
- Consent: Where you have given phfyn your express consent to process your data for a specific purpose — for example, opting in to receive promotional emails or agreeing to this Privacy Policy at the point of registration.
- Performance of a contract: Processing that is necessary to perform the phfyn Player Agreement (Terms and Conditions) into which you have entered with phfyn, including account management, game access, and transaction processing.
- Compliance with a legal obligation: Processing that is required to comply with phfyn's legal and regulatory obligations, including KYC verification, AML reporting, and cooperation with PAGCOR regulatory requirements.
- Legitimate interests: Processing that is necessary for the legitimate interests of phfyn — such as fraud prevention, platform security, and technical improvement — provided that such processing does not disproportionately override your privacy rights as a data subject.
Withdrawal of Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact phfyn at [email protected].
6. Data Sharing & Disclosure
phfyn does not sell, rent, or otherwise transfer your personal information to unaffiliated third parties for their own commercial purposes. Your data may be shared with third parties only in the following specific and limited circumstances:
- Payment processors: phfyn shares transaction-specific data with licensed Philippine payment providers — including GCash (Globe Fintech Innovations), Maya (Voyager Innovations), GrabPay, and partner banks such as BPI, BDO, and Metrobank — solely for the purpose of processing your deposits and withdrawals.
- KYC and identity verification providers: phfyn may engage accredited third-party identity verification services to assist in the KYC process. These providers process your submitted documents under strict data processing agreements and may not use your data for any purpose beyond identity verification.
- PAGCOR and regulatory authorities: phfyn is obligated to share certain player data and transaction records with PAGCOR and, where required by law, with the Anti-Money Laundering Council (AMLC) and other relevant Philippine government agencies.
- Technology and hosting partners: phfyn uses trusted cloud infrastructure, cybersecurity, and software service providers to operate the platform. These providers are contractually bound to process data only on phfyn's instructions and in compliance with the Data Privacy Act of 2012.
- Legal proceedings: phfyn may disclose personal data where required by a valid court order, subpoena, or other legally enforceable demand from a competent Philippine authority.
All third parties with whom phfyn shares personal data are required to maintain appropriate technical and organisational security measures and to process that data solely in accordance with phfyn's documented instructions.
7. Cookies & Tracking Technologies
phfyn uses cookies and similar technologies — including session tokens, local storage objects, and analytics pixels — to operate the platform effectively and to improve your experience as a player. The following categories of cookies are used on phfyn:
- Strictly necessary cookies: These cookies are essential for the phfyn platform to function. They manage your login session, maintain your account state during gameplay, and enable secure transactions. These cookies cannot be disabled without impairing core platform functionality.
- Performance and analytics cookies: These cookies collect aggregated, anonymised data about how players interact with the phfyn platform — which games are most popular, where players spend the most time, and how pages load on different devices. This data is used solely to improve the phfyn experience.
- Functionality cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so that phfyn can deliver a more personalised experience during your sessions.
- Marketing cookies: These cookies are set only where you have given your consent, and are used to deliver relevant promotional content about phfyn bonuses and game launches. You may opt out of marketing cookies at any time through your browser settings.
Most browsers are set to accept cookies by default. You may configure your browser to refuse all cookies or to alert you when a cookie is being set. However, please be aware that disabling strictly necessary cookies will prevent you from logging in to your phfyn account or completing transactions on the platform.
8. Data Retention
phfyn retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:
- Active account data: Retained for the duration of your active phfyn account and for a minimum of five (5) years following permanent account closure, in accordance with PAGCOR record-keeping requirements and AML obligations.
- KYC and identity documents: Retained for a minimum of five (5) years from the date of account closure or from the date of the last transaction, whichever is later, as required under anti-money laundering regulations.
- Transaction records: Retained for a minimum of five (5) years in accordance with Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR reporting obligations.
- Support and communications records: Retained for a period of three (3) years from the date of the relevant interaction, unless a longer retention period is required in connection with an ongoing dispute or regulatory investigation.
- Marketing data: Retained until you withdraw consent to receive marketing communications, after which your data will be removed from phfyn's active marketing lists within thirty (30) days.
Upon expiry of the applicable retention period, phfyn will securely delete or anonymise your personal data in accordance with its internal data disposal procedures and the requirements of the Data Privacy Act of 2012.
9. Your Data Rights
As a data subject under the Data Privacy Act of 2012, you are entitled to exercise the following rights in respect of your personal data held by phfyn. phfyn is committed to honouring all valid data subject rights requests within the timeframes stipulated by the National Privacy Commission:
- Right to be informed: You have the right to be informed whether phfyn holds personal data about you, and to receive clear information about how that data is processed — which this Privacy Policy provides.
- Right of access: You have the right to request a copy of the personal data phfyn holds about you. phfyn will provide this within fifteen (15) business days of receiving a verified request.
- Right to rectification: You have the right to request that phfyn correct any inaccurate or incomplete personal information we hold about you. You may update certain details directly through your phfyn account dashboard.
- Right to erasure: You may request that phfyn delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to phfyn's legal retention obligations under PAGCOR regulations and Philippine law.
- Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible, to enable transfer to another service provider.
- Right to object: You have the right to object to the processing of your personal data on grounds of legitimate interests or for direct marketing purposes. Where you object to marketing, phfyn will cease processing your data for that purpose immediately.
- Right to lodge a complaint: If you believe phfyn has processed your personal data in a manner that violates the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission of the Philippines.
To exercise any of the above rights, please submit a written request to phfyn's Data Protection Officer at [email protected], including "Data Privacy Request" in the subject line and sufficient detail to identify your account. phfyn may request proof of identity before processing your request.
10. Data Security
phfyn implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- AES-256 encryption for data at rest and TLS 1.3 encryption for all data in transit between your device and phfyn's servers;
- Multi-factor authentication requirements for phfyn administrative system access;
- Regular third-party penetration testing and vulnerability assessments of the phfyn platform infrastructure;
- Role-based access controls ensuring that phfyn staff can only access player data to the minimum extent necessary for their specific job function;
- Continuous monitoring and logging of system access events, with automated alerts for anomalous activity patterns;
- A documented incident response plan aligned with the National Privacy Commission's mandatory personal data breach notification requirements.
Data Breach Notification: In the event of a personal data breach that poses a real risk of serious harm, phfyn will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.
While phfyn takes every reasonable precaution to secure your personal data, no online system can guarantee absolute security. You also play an important role in keeping your data safe — please use a strong, unique password for your phfyn account, enable two-factor authentication, and notify us immediately at [email protected] if you suspect any unauthorised access to your account.
11. Children & Minors
The phfyn platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR regulations governing casino-style online gaming in the Philippines. phfyn does not knowingly collect personal data from any individual under the age of 21.
If phfyn becomes aware — through its KYC verification process or any other means — that a player has provided false information regarding their age and is in fact under 21 years of age, phfyn will immediately suspend the relevant account, void any associated balances, and securely delete the personal data of the underage individual, except where retention is required to comply with reporting obligations to PAGCOR or other competent authorities.
If you believe that a minor under the age of 21 has registered an account on phfyn, please contact our support team at [email protected] immediately so that we can take appropriate action.
12. Third-Party Links
The phfyn platform may contain references to or contextual mentions of third-party services — such as payment providers like GCash or Maya — in connection with transaction processing. phfyn is not responsible for the privacy practices of any third-party service or platform. This Privacy Policy applies solely to personal data collected and processed by phfyn through the phfyn platform.
We encourage you to review the privacy policies of any third-party payment providers you use to fund your phfyn account, as their data practices are governed by their own separate policies and are outside phfyn's control.
13. Amendments to This Policy
phfyn reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine law, National Privacy Commission guidance, PAGCOR regulatory requirements, or phfyn's own data processing practices. When material changes are made, phfyn will notify registered players via email to the address on record and will post the updated Policy on this page with a revised "Last Updated" date.
Your continued use of the phfyn platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any amendment to this Policy, you should cease using the phfyn platform and contact our support team to close your account.
14. Contact & Complaints
For any questions, concerns, or requests relating to this Privacy Policy or phfyn's handling of your personal data, you may contact phfyn's Data Protection Officer at any time:
Email: [email protected]
Subject line: Data Privacy Request
Response time: under 2 hours (24/7)
If you are dissatisfied with phfyn's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at www.privacy.gov.ph.