phopin Privacy Policy

1. Introduction and Scope

1.1 Purpose

This Privacy Policy describes how phopin Corporation ("phopin," "we," "us," "our"), a PAGCOR-licensed online gaming operator (License No. 2020-PH-089-OL), collects, uses, processes, stores, discloses, and protects personal information from users ("you," "your," "User," "Member") of the phopin platform, accessible at https://phopin.cam and associated mobile applications.

By registering an account, accessing the platform, or using any of our services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with these practices, you must discontinue use of the platform immediately.

1.2 Legal Framework

phopin operates in strict compliance with:

• Republic Act No. 10173 – Data Privacy Act of 2012 (DPA)
• Republic Act No. 10175 – Cybercrime Prevention Act of 2012
• National Privacy Commission (NPC) issuances, circulars, and guidelines
• PAGCOR regulations governing online gaming operators
• Anti-Money Laundering Act (AMLA) and related regulatory requirements

phopin has registered with the National Privacy Commission as a Personal Information Controller (PIC) under registration number NPC-2024-PH-0892. Our Data Protection Officer (DPO) oversees compliance with Philippine data protection law.

1.3 Definitions

"Personal Information" means any information that can identify you as an individual, including name, date of birth, address, email, phone number, identification documents, financial data, and IP addresses.
"Sensitive Personal Information" means data requiring heightened protection, such as government-issued IDs, financial account details, biometric data, and gambling history.
"Processing" means any operation performed on personal information, including collection, storage, use, disclosure, transfer, and deletion.
"Data Subject" refers to you, the individual whose personal information is being processed.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a phopin account or use our services, we collect:

• Identity Information: Full legal name, date of birth, nationality, gender
• Contact Information: Email address, mobile phone number, residential address, postal code
• Account Credentials: Username, password (encrypted), security questions and answers
• Verification Documents: Government-issued photo ID (passport, driver's license, UMID, PhilSys ID), proof of address (utility bills, bank statements), selfie photographs for identity verification
• Financial Information: Payment method details (GCash account, Maya account, bank account numbers, cryptocurrency wallet addresses), deposit and withdrawal transaction history
• Communication Records: Customer support inquiries, live chat transcripts, email correspondence, phone call recordings (with prior notice)
• Marketing Preferences: Opt-in/opt-out status for promotional emails, SMS, and push notifications

2.2 Information Collected Automatically

When you access the phopin platform, we automatically collect:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), mobile network information
• Usage Data: Pages visited, features accessed, games played, bets placed, session duration, click patterns, search queries
• Location Data: IP address, geolocation data (with consent) to verify Philippine residency and prevent access from prohibited jurisdictions
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, local storage objects. See Section 9 for detailed cookie information.
• Transaction Logs: Deposit amounts, withdrawal requests, wager history, bonus redemptions, game outcomes

2.3 Information from Third Parties

We may receive personal information from:

• Payment Processors: GCash, Maya, banks, and cryptocurrency platforms share transaction verification data
• Identity Verification Services: Third-party KYC (Know Your Customer) providers verify your identity documents
• Fraud Prevention Services: Anti-fraud systems flag suspicious account activity and potential duplicate accounts
• Game Providers: Software vendors providing casino games, slots, and live dealer tables may share gameplay data
• PAGCOR: Regulatory data including exclusion lists, self-excluded individuals, and compliance reports

3. How We Use Your Information

3.1 Service Provision and Account Management

We use your personal information to:

• Create and manage your phopin account
• Process deposits, withdrawals, and financial transactions
• Enable gameplay on casino games, sports betting, bingo, and other gaming products
• Track wagers, calculate winnings, and credit your account balance
• Provide customer support via live chat, email, and phone
• Send transactional notifications (deposit confirmations, withdrawal status, account alerts)
• Manage VIP programs, loyalty rewards, and promotional bonuses

3.2 Legal and Regulatory Compliance

We process your data to comply with:

• Age Verification: Ensuring all users are 21 years or older as required by PAGCOR
• Identity Verification (KYC): Verifying your identity to prevent fraud, money laundering, and terrorist financing
• Anti-Money Laundering (AML): Monitoring transactions for suspicious activity and reporting to the Anti-Money Laundering Council (AMLC) when required
• PAGCOR Reporting: Submitting regulatory reports on player activity, financial transactions, and responsible gaming metrics
• Tax Compliance: Reporting winnings to the Bureau of Internal Revenue (BIR) as required by law
• Self-Exclusion Programs: Maintaining records of self-excluded users and preventing their access
• Responsible Gaming: Identifying problem gambling behavior and implementing protective measures

3.3 Fraud Prevention and Security

We use your information to:

• Detect and prevent fraudulent transactions, account takeovers, and payment fraud
• Identify duplicate accounts and circumvention of account restrictions
• Monitor for collusion, chip dumping, and other forms of cheating
• Investigate Terms of Service violations and bonus abuse
• Protect against cyberattacks, hacking attempts, and unauthorized access
• Enforce account security measures including two-factor authentication

3.4 Marketing and Communications

With your consent, we use your information to:

• Send promotional emails about bonuses, tournaments, and new game releases
• Deliver SMS notifications about time-sensitive offers and promotions
• Display personalized content and game recommendations based on your preferences
• Conduct surveys, contests, and prize draws
• Send push notifications through our mobile app

You may opt out of marketing communications at any time through account settings, unsubscribe links in emails, or by contacting customer support. Opting out does not affect transactional communications necessary for account operation.

3.5 Analytics and Service Improvement

We analyze usage data to:

• Improve platform performance, speed, and reliability
• Identify and fix bugs, glitches, and technical issues
• Understand user preferences and optimize game selection
• Develop new features and enhance user experience
• Conduct A/B testing of design elements and promotional campaigns
• Generate aggregated, anonymized reports on player trends and platform statistics

4. Legal Basis for Processing

4.1 Contractual Necessity

Processing is necessary to perform our contract with you, including account creation, transaction processing, game provision, and customer support.

4.2 Legal Obligation

Processing is required to comply with Philippine law, including age verification, KYC/AML requirements, PAGCOR regulations, tax reporting, and cooperation with law enforcement.

4.3 Legitimate Interests

Processing is necessary for our legitimate business interests, including fraud prevention, security, analytics, and service improvement, balanced against your privacy rights.

4.4 Consent

For marketing communications, cookies, and geolocation tracking, we obtain your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. Data Sharing and Disclosure

5.1 Service Providers and Business Partners

We share personal information with trusted third parties who assist in operating our platform:

• Payment Processors: GCash, Maya, banks, cryptocurrency exchanges process your financial transactions
• Identity Verification Services: KYC providers verify your identification documents
• Game Providers: Software vendors operate casino games, slots, live dealer tables, and sports betting systems
• Cloud Hosting: Secure servers store platform data and user information
• Customer Support Tools: Live chat platforms, email systems, and CRM software manage support interactions
• Marketing Services: Email delivery platforms, SMS gateways, and analytics tools support promotional campaigns
• Fraud Prevention: Anti-fraud systems detect suspicious activity and prevent unauthorized access

All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with Philippine data protection law.

5.2 Regulatory and Law Enforcement

We disclose personal information when legally required:

• PAGCOR: Regulatory reports, compliance audits, and responsible gaming data
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports as mandated by AMLA
• Bureau of Internal Revenue (BIR): Winnings reports for tax purposes
• National Privacy Commission (NPC): Data breach notifications and compliance reports
• Law Enforcement: In response to valid legal process (court orders, subpoenas, search warrants)
• Government Agencies: As required by applicable Philippine law

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity. You will be notified of any such transfer and provided with choices regarding your data.

5.4 We Do Not Sell Your Data

phopin does not sell, rent, or trade your personal information to third parties for their marketing purposes. Data is shared only as described in this Privacy Policy.

6. Data Retention

6.1 Retention Periods

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

• Active Accounts: Personal information is retained while your account remains active
• Closed Accounts: Data is retained for 7 years after account closure to comply with PAGCOR record-keeping requirements and AML regulations
• Transaction Records: Financial transaction logs are retained for 10 years as required by AMLA and tax law
• Marketing Data: Deleted within 3 months after you opt out or withdraw consent
• Legal Claims: Data relevant to ongoing disputes or legal proceedings is retained until resolution

6.2 Deletion

After retention periods expire, personal information is securely deleted or anonymized. Anonymized data may be retained indefinitely for statistical and analytical purposes.

7. Your Rights as a Data Subject

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format within 15 days of your request.

7.2 Right to Correction

You may request correction of inaccurate or incomplete personal information. We will verify and update your data within 15 days.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information, subject to legal exceptions. We cannot delete data we are required to retain under PAGCOR regulations, AML requirements, or tax law.

7.4 Right to Object

You may object to processing based on legitimate interests or direct marketing. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.

7.5 Right to Data Portability

You may request a machine-readable copy of your personal information for transfer to another service provider.

7.6 Right to Lodge a Complaint

If you believe we have violated your data protection rights, you may file a complaint with the National Privacy Commission:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto St., Pasay City 1308, Metro Manila
Email: [email protected]
Hotline: (+632) 8234-2228

7.7 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer:
Email: [email protected]
Subject Line: "Data Subject Rights Request"

We will respond within 15 days and may request identity verification to prevent unauthorized disclosure.

8. Data Security

8.1 Security Measures

phopin implements industry-standard security measures to protect your personal information:

• Encryption: 256-bit SSL/TLS encryption for data in transit; AES-256 encryption for data at rest
• Secure Servers: Tier-3 data centers with physical security, redundancy, and 24/7 monitoring
• Access Controls: Role-based access restrictions; multi-factor authentication for staff accounts
• Regular Audits: Penetration testing, vulnerability scans, and security audits by independent third parties
• Incident Response: Dedicated security team monitors threats and responds to incidents
• Employee Training: Regular data protection and security awareness training for all staff

8.2 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the National Privacy Commission within 72 hours of discovery. Notifications will include the nature of the breach, affected data, potential consequences, and remedial measures taken.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the phopin platform. They help us recognize you, remember your preferences, and improve your experience.

9.2 Types of Cookies We Use

• Essential Cookies: Required for platform operation (login sessions, account security)
• Functional Cookies: Remember preferences (language, currency, display settings)
• Analytics Cookies: Track usage patterns to improve platform performance
• Marketing Cookies: Deliver personalized advertisements and measure campaign effectiveness

9.3 Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may prevent you from accessing certain platform features. Marketing and analytics cookies can be disabled without affecting core functionality.

10. International Data Transfers

10.1 Data Storage Location

Your personal information is primarily stored on secure servers located in the Philippines. Some service providers may store data on servers in other jurisdictions with equivalent data protection standards.

10.2 Safeguards for International Transfers

When personal information is transferred outside the Philippines, we ensure adequate protection through:

• Contractual clauses requiring recipient compliance with Philippine data protection standards
• Verification that recipient countries have adequate data protection laws
• Certification under internationally recognized privacy frameworks

11. Children's Privacy

11.1 Age Restriction

phopin services are strictly restricted to individuals 21 years of age or older. We do not knowingly collect personal information from minors. If we discover that a minor has provided personal information, we will immediately delete such information and close the account.

11.2 Parental Notice

If you are a parent or guardian and believe your child has provided personal information to phopin, contact us immediately at [email protected] so we can take appropriate action.

12. Changes to This Privacy Policy

12.1 Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated via email or prominent platform notice at least 30 days before taking effect.

12.2 Continued Use

Continued use of the phopin platform after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, you must discontinue use and may request account closure.

13. Contact Information

13.1 Data Protection Officer

For privacy-related inquiries, data subject rights requests, or complaints:
Data Protection Officer
Email: [email protected]
Subject Line: "Privacy Inquiry" or "Data Rights Request"

13.2 Customer Support

For general account or service questions:
Email: [email protected]
Live Chat: Available 24/7 on the phopin platform
Response Time: Typically within 2 hours

13.3 Regulatory Authority

To file a complaint with the National Privacy Commission:
Website: https://www.privacy.gov.ph
Email: [email protected]
Hotline: (+632) 8234-2228