phmavao Privacy Policy

This Privacy Policy ("Policy") describes how phmavao ("we," "us," "our," "the Platform") collects, uses, stores, protects, and shares the personal information of users ("Player," "you," "your") who access or use phmavao at phmavao.net. This Policy forms part of the phmavao Terms & Conditions and applies to all services offered on the platform, including online casino games, sports betting, bingo, Super Bingo, Golden Bank, live dealer games, and all related support and communication channels.

By registering an account on phmavao, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of phmavao and contact us to request account closure.

01 Introduction & Data Controller

phmavao is the data controller responsible for the personal information collected through phmavao.net and all associated platform services. As data controller, phmavao determines the purposes and means by which your personal data is processed, and is accountable for ensuring that such processing complies with the Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC) of the Philippines.

phmavao has appointed a Data Protection Officer (DPO) responsible for overseeing the Platform's data protection strategy, compliance, and player data rights requests. Contact details for the DPO are provided in Section 14 of this Policy.

02 Personal Data We Collect

phmavao collects the following categories of personal data, depending on your interaction with the platform:

03 How We Collect Your Data

phmavao collects personal data through the following means:

• Direct Collection: Information you provide voluntarily when registering an account, completing KYC verification, making deposits or withdrawals, claiming bonuses, contacting customer support, or updating your profile.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access phmavao.net or use platform features. See Section 7 for full details on cookies.
• Third-Party Sources: Identity and fraud-screening information received from KYC verification service providers, payment processors, and anti-money laundering (AML) compliance platforms. phmavao may cross-reference your provided details against third-party databases to verify accuracy and detect fraudulent activity.
• Game Providers: Gaming activity data generated by third-party game providers (e.g., Jili, PG Soft, Pragmatic Play) integrated into the phmavao platform, transmitted back to phmavao for settlement, fraud prevention, and responsible gaming monitoring purposes.

04 Purposes of Processing

phmavao processes your personal data for the following purposes:

• Account Management: Creating, maintaining, verifying, and closing your phmavao account; authenticating your identity at login; and managing account security.
• Service Delivery: Processing deposits, withdrawals, bet placements, game participation, bonus credits, and all other platform transactions.
• KYC & AML Compliance: Verifying your identity and age (21+ requirement) as required by Philippine gaming regulations and anti-money laundering obligations under Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments.
• Responsible Gaming: Monitoring gaming behavior to identify indicators of problem gambling; applying deposit limits, loss limits, session controls, and self-exclusion measures as requested or required.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct.
• Customer Support: Responding to your inquiries, resolving disputes, and improving our support services.
• Promotions & Loyalty: Administering bonuses, the Golden Bank loyalty program, and personalized promotional offers where you have consented to receive them.
• Platform Improvement: Analyzing usage patterns to improve the phmavao platform, fix technical issues, and enhance the player experience.
• Legal & Regulatory Obligations: Meeting obligations imposed by Philippine law, regulatory bodies, court orders, or lawful requests from government authorities.
• Marketing Communications: Sending promotional emails, SMS, or in-platform notifications about phmavao offers, new games, and platform updates — where you have provided explicit consent, which you may withdraw at any time.

05 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, phmavao relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to fulfill our obligations under the phmavao Terms & Conditions, including account creation, transaction processing, game participation, and customer support.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including KYC/AML requirements, gaming license conditions, and tax reporting obligations.
• Legitimate Interests: Processing necessary for phmavao's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Sharing Your Personal Data

phmavao does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• KYC & Identity Verification Providers: Third-party services used to verify your identity, age, and government-issued documents during the registration and KYC process.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard processing networks, to facilitate deposits and withdrawals in PHP.
• Game Providers: Third-party online casino game providers (e.g., Jili, PG Soft, Pragmatic Play) integrated into phmavao, who receive game session data necessary to deliver their games and settle results.
• AML & Fraud Screening Services: Compliance technology platforms used to screen transactions and player behavior for money laundering indicators and fraudulent activity.
• IT & Cloud Infrastructure Providers: Hosting, database, and security service providers that power the phmavao platform under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Philippine government bodies, regulatory agencies, courts, or law enforcement authorities where disclosure is required by law, court order, or lawful government request. phmavao will notify affected players where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by phmavao, subject to confidentiality obligations.

07 Cookies & Tracking Technologies

phmavao uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage, and deliver a personalized experience. The types of cookies used on phmavao are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming tool configurations. These improve your experience but are not essential.
• Analytics Cookies: Collect aggregated, anonymized data about how players navigate phmavao, which features are most used, and where technical errors occur. This data is used to improve the platform. Analytics cookies are only set with your consent.
• Marketing Cookies: Used to deliver personalized promotional content within the phmavao platform based on your gaming activity and preferences. Marketing cookies are only set with your explicit consent.

You may manage your cookie preferences at any time through the Cookie Settings panel accessible from the footer of phmavao.net. Please note that disabling certain cookies may affect the functionality of the platform.

08 Data Security Measures

phmavao implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and phmavao's servers is encrypted using TLS 1.3 (256-bit SSL). Personal and financial data stored on phmavao's servers is encrypted at rest using AES-256.
• Access Controls: Access to personal data is restricted to authorized phmavao staff on a strict role-based, need-to-know basis. All staff with access to personal data undergo mandatory data privacy training and are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): phmavao offers optional 2FA for player accounts to provide an additional layer of login security. Players are encouraged to enable 2FA in Account Settings.
• Penetration Testing & Audits: phmavao's platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential security weaknesses.
• Incident Response: phmavao maintains a documented incident response plan. In the event of a data breach, the plan is activated immediately, with notification to affected players and the NPC within the timeframes required by law.
• Secure Payment Processing: Payment card data is handled in compliance with PCI DSS (Payment Card Industry Data Security Standard). phmavao does not store full card numbers on its systems.

While phmavao employs industry-standard security measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your phmavao login credentials. If you suspect unauthorized access to your account, contact support immediately at [email protected] or via live chat.

09 Data Retention

phmavao retains your personal data for the periods described below, after which data is securely deleted or irreversibly anonymized:

• Active Account Data: Retained for the duration of your active account relationship with phmavao, plus a minimum of five (5) years following account closure, to comply with AML record-keeping requirements under RA 9160 and applicable AMLC regulations.
• Transaction Records: Financial transaction data (deposits, withdrawals, bet history) retained for a minimum of five (5) years from the date of each transaction, in accordance with AML and gaming regulatory requirements.
• KYC Documents: Identity verification documents retained for a minimum of five (5) years following account closure or the completion of the last business transaction, whichever is later.
• Customer Support Records: Communications with phmavao support retained for three (3) years from the date of the last interaction, for dispute resolution and service quality purposes.
• Marketing Consent Records: Records of your marketing consent (and any subsequent withdrawal) retained for the duration of the consent period plus three (3) years, to demonstrate compliance with consent requirements.
• Technical Logs: Server and access logs retained for twelve (12) months for security monitoring and fraud detection purposes, after which they are deleted or anonymized.

Where a legal obligation, regulatory requirement, litigation hold, or ongoing investigation requires retention beyond the above periods, phmavao will retain the relevant data for the duration of that obligation and delete it promptly upon its conclusion.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmavao. To exercise any of these rights, contact our DPO at [email protected] with the subject line "Data Rights Request."

11 Children & Minors

phmavao's services are strictly intended for individuals who are 21 years of age or older, as required under applicable Philippine gaming regulations. phmavao does not knowingly collect, process, or retain personal data from individuals under the age of 21.

During registration, phmavao requires players to declare their date of birth and submit government-issued identification for age verification. Any account found to have been registered by an individual under 21 will be immediately suspended, all associated data will be handled in accordance with the erasure and retention obligations under RA 10173, and deposited funds will be returned to the payment source used.

If you believe that phmavao has inadvertently collected personal data from a person under the age of 21, please contact us immediately at [email protected] so that we may take prompt action to delete such data.

12 Cross-Border Data Transfers

phmavao's primary data processing infrastructure is located within or accessible from the Philippines. However, certain third-party service providers used by phmavao — including game providers, cloud infrastructure providers, and analytics platforms — may process data in other jurisdictions.

Where personal data is transferred outside the Philippines, phmavao ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses consistent with NPC requirements.
• Transfers only to countries or organizations that the NPC has determined provide an adequate level of data protection, or where appropriate safeguards have been established on a case-by-case basis.
• Transfer impact assessments conducted prior to initiating any new cross-border data transfer arrangement.

You may request details of the specific safeguards applied to cross-border transfers by contacting phmavao's DPO.

13 Changes to This Privacy Policy

phmavao reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. The revised Policy will be published at phmavao.net/privacy-policy with an updated effective date.

For material changes that significantly affect how your personal data is processed or your rights as a data subject, phmavao will provide advance notice via email to your registered address and/or via a prominent notice on the platform, no less than seven (7) days before the changes take effect.

Your continued use of phmavao following the effective date of any amended Policy constitutes your acknowledgment of the changes. If you do not agree to the revised Policy, you may request account closure at any time.

14 Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact the phmavao Data Protection Officer (DPO) through the following channels:

• Email (DPO): [email protected] — Subject line: "Data Privacy Request"
• Live Chat: Available 24/7 on phmavao.net — identify yourself as submitting a data privacy inquiry
• Response Time: Acknowledgment within 5 business days; resolution within 30 calendar days

If you are not satisfied with phmavao's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for administering and implementing the Data Privacy Act of 2012 in the Republic of the Philippines.