🔒 phmines Privacy Policy

1. Who We Are (Data Controller)

phmines ("phmines," "we," "us," or "our") is the data controller responsible for the personal data collected through the phmines.win online gaming platform (the "Platform"). phmines operates under a valid Philippine Amusement and Gaming Corporation (PAGCOR) license and is subject to the jurisdiction of Philippine data protection law.

As data controller, phmines determines the purposes and means of processing personal data collected from users of the Platform, including registered account holders, visitors, and any individuals who interact with phmines through the Platform's features or support channels.

For all data protection enquiries, you may contact phmines through the channels specified in Section 14 of this Policy.

2. Personal Data We Collect

phmines collects the following categories of personal data in connection with the operation of the Platform:

2.1 Identity Data

• Full legal name (as appearing on government-issued identification)
• Date of birth
• Gender
• Nationality and place of birth
• Government-issued identification number and document type (e.g., PhilSys National ID, Passport, UMID, Driver's Licence, SSS/GSIS ID, PRC ID)
• Photographs of identification documents and, where required, selfie verification images

2.2 Contact Data

• Philippine residential address (barangay, city/municipality, province)
• Mobile phone number (Philippine format)
• Email address

2.3 Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account numbers and account names for BPI, BDO, Metrobank, and other Philippine banks
• Credit/debit card details (card number, expiry, and billing address — stored only in tokenised form)
• Transaction history, including deposit amounts, withdrawal amounts, and dates

2.4 Gameplay & Activity Data

• Game session records, wager amounts, win/loss outcomes, and game type history
• Sports betting selections and results
• Bonus redemption and wagering requirement progress
• Account login timestamps, session durations, and logout records

2.5 Technical Data

• IP address at time of registration and each subsequent login
• Device type, operating system, and browser/application version
• Geolocation data (where permitted and required for regulatory compliance)
• Cookies and similar tracking technologies (see Section 7)

2.6 Communications Data

• Records of customer support interactions via live chat, email, or any other channel
• Correspondence records, including complaints and their resolution
• Promotional communication preferences and opt-in/opt-out history

2.7 Sensitive Personal Information

phmines may collect and process sensitive personal information as defined under the DPA, including information about responsible gaming self-exclusions and cooling-off requests. Such data is handled with heightened security controls and processed only where legally required or with your explicit consent.

3. How We Collect Your Data

phmines collects personal data through the following channels and methods:

• Direct collection: Information you provide when registering a phmines account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar technologies.
• Third-party sources: Identity verification services, payment processors (including GCash, PayMaya, and Philippine banking partners), fraud detection services, and PAGCOR regulatory databases where applicable.

4. How We Use Your Personal Data

phmines uses the personal data we collect for the following purposes:

• Account management: Registering and maintaining your phmines account, authenticating your identity at login, and managing your account settings and preferences.
• KYC and regulatory compliance: Verifying your identity and age in accordance with PAGCOR licensing requirements and Philippine AMLA obligations. phmines is legally required to verify that all players are aged 21 or over.
• Payment processing: Processing deposits, withdrawals, and refunds through your chosen Philippine payment method.
• Service delivery: Providing access to games, sports betting, live casino, bonuses, and all other features of the phmines Platform.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and administering self-exclusion, cooling-off, and limit-setting tools.
• Customer support: Responding to your enquiries, resolving disputes, and managing complaints.
• Marketing communications: Sending promotional offers, game releases, and bonus notifications where you have consented to receive such communications. You may withdraw consent at any time.
• Analytics and improvement: Analysing Platform usage patterns to improve user experience, game performance, and service quality.
• Legal compliance: Complying with applicable Philippine laws, PAGCOR directives, court orders, and regulatory obligations.

5. Legal Basis for Processing

phmines processes your personal data on the following legal bases as established under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the phmines Terms and Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing requirements, AMLA reporting obligations, and NPC data protection requirements.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and service analytics, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and certain cookie-based tracking activities, where your consent has been freely given and is recorded. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

phmines does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

• Game providers: Limited technical data shared with certified game providers (Pragmatic Play, PG Soft, JILI, Evolution Gaming, Habanero, Microgaming) solely to enable game functionality and audit.
• Payment processors: Financial and identity data shared with Philippine payment partners (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard) as necessary to process transactions.
• Identity verification services: Identity documents and biometric data shared with third-party KYC service providers for the sole purpose of verifying your identity in compliance with PAGCOR and AMLA requirements.
• Regulatory authorities: Personal and financial data disclosed to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities when required by law or a valid regulatory order.
• Professional advisers: Data shared with legal counsel, auditors, and insurers on a need-to-know basis and subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or restructuring of phmines, personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

All third parties with whom phmines shares personal data are required to process such data only for the stated purpose and in compliance with applicable Philippine data protection law.

7. Cookies & Tracking Technologies

phmines uses cookies and similar tracking technologies on the Platform to support essential functionality, performance analytics, and (where consented to) personalised content. The types of cookies used by phmines include:

• Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens, and fraud prevention. These cannot be disabled.
• Performance cookies: Collect anonymous data on how users interact with the Platform to help us identify and fix issues and improve the user experience.
• Functional cookies: Remember your Platform preferences, such as language settings and responsible gaming configuration.
• Analytics cookies: Used by phmines to analyse Platform usage patterns at an aggregate level. No individual-level profiling for advertising purposes.

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent login.

8. Data Retention

phmines retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Specific retention periods are as follows:

• Account data and KYC documents: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and Philippine AMLA record-keeping obligations.
• Transaction records: Retained for five (5) years following the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn, plus an additional three (3) years for compliance audit purposes.
• Technical and access logs: Retained for twelve (12) months from the date of generation, unless required for longer by an active investigation.

Upon expiry of the applicable retention period, phmines securely destroys or anonymises personal data in a manner that prevents its reconstruction.

9. Data Security

phmines implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phmines servers
• AES-256 encryption for personal and financial data stored at rest
• Multi-factor authentication for internal phmines system access
• Regular independent security audits and penetration testing
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis
• Data breach detection systems with mandatory NPC notification procedures in the event of a personal data breach

While phmines takes every reasonable precaution to protect your data, no system is completely immune to security risk. In the event of a data breach affecting your personal data, phmines will notify you and the National Privacy Commission in accordance with applicable DPA requirements.

10. Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data processed by phmines:

To exercise any of the above rights, contact phmines via the channels in Section 14. phmines will respond within thirty (30) calendar days. You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

11. Children's Privacy

The phmines Platform is strictly prohibited for persons under the age of 21. phmines does not knowingly collect personal data from individuals below this age threshold. If phmines becomes aware that a minor has registered an account or provided personal data, that account will be immediately closed and all associated personal data will be securely deleted. Parents or guardians who believe a minor may have accessed phmines are urged to contact support immediately at the details provided in Section 14.

12. International Data Transfers

The personal data of phmines users is primarily stored and processed within the Philippines. In certain circumstances — for example, where third-party service providers (such as game providers or cloud infrastructure partners) operate outside the Philippines — your personal data may be transferred internationally. Such transfers are made only where phmines has implemented appropriate safeguards consistent with the requirements of the DPA, including contractual commitments from the recipient to uphold equivalent standards of data protection. You may request details of international transfer safeguards by contacting phmines via the channels in Section 14.

13. Amendments to This Privacy Policy

phmines reserves the right to update or amend this Privacy Policy at any time. When material changes are made, phmines will provide notice via the Platform, by email to your registered address, or by SMS to your registered Philippine mobile number. The effective date of the most recent version is displayed at the top of this page. Your continued use of the phmines Platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the amended Policy, you must cease using the Platform and contact support to close your account.

14. Contact & Data Protection Enquiries

For all privacy-related enquiries, data subject rights requests, or to report a privacy concern, please contact phmines through the following channels:

phmines aims to respond to all data subject rights requests and privacy enquiries within thirty (30) calendar days of receipt. Complex or multi-part requests may require additional time, in which case phmines will notify you of the extended timeline within the initial 30-day period.