phhalik is committed to protecting the personal information of every Filipino player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we use and store it, and the rights you have over your own information under Philippine data privacy law.
A plain-language summary before you read the full policy below
phhalik uses 256-bit SSL encryption, secure server infrastructure, and access-controlled internal systems to protect your personal and financial data from unauthorised access at every layer.
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, object to, and request erasure of your personal data held by phhalik. These rights can be exercised at any time by contacting our Data Protection Officer.
phhalik does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. Data shared with service providers is strictly governed by written agreements requiring them to protect your information.
phhalik's data practices are designed to comply with Republic Act 10173, the Philippine Data Privacy Act of 2012, and the implementing rules of the National Privacy Commission (NPC).
You can opt out of phhalik marketing communications at any time — through the unsubscribe link in any email, or by contacting phhalik support directly. Opting out of marketing does not affect your account access or service communications.
phhalik retains personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Retention periods for each data category are described in this Policy.
This Privacy Policy describes how phhalik ("phhalik", "we", "us", or "our") — the operator of the online casino and sports betting platform accessible at phhalik.co — collects, processes, stores, shares, and protects personal information relating to registered players and visitors to the phhalik platform ("you" or "your").
phhalik is committed to handling your personal data responsibly and in compliance with Republic Act 10173, the Philippine Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC). phhalik also observes data handling standards consistent with PAGCOR's framework for regulated online gaming operators in the Philippines.
This Policy applies to all personal data collected through phhalik.co, any associated mobile interface, phhalik's customer support channels, and any other touchpoint through which phhalik collects data from individuals. It covers data collected from players located in Metro Manila, Cebu, Davao, the Visayas, Mindanao, and all other Philippine regions served by the phhalik platform.
phhalik collects personal data in the following categories:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID number, ID document images | KYC verification, age verification, account management |
| Contact Data | Email address, Philippine mobile number, residential address | Account communication, 2FA delivery, support |
| Financial Data | GCash account reference, Maya account reference, BPI/BDO/Metrobank account details, transaction history | Payment processing, withdrawal verification, AML compliance |
| Gaming Activity Data | Game session history, wager amounts, win/loss records, bonus usage, responsible gaming settings | Account management, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type, operating system, session timestamps, login history | Security monitoring, fraud prevention, platform performance |
| Communications Data | Support chat transcripts, email correspondence, survey responses | Customer service quality, dispute resolution, service improvement |
| Marketing Preferences | Email opt-in/out status, promotional preference settings, referral data | Personalised promotions (where consented), general communications |
phhalik does not intentionally collect sensitive personal information beyond what is strictly necessary for KYC identity verification and responsible gaming obligations. Sensitive information (as defined by the DPA) is handled with additional security controls and is not used for profiling or marketing purposes.
phhalik collects personal data through the following channels:
Under the Philippine Data Privacy Act of 2012, phhalik processes your personal data on the following legal grounds:
phhalik uses the personal data we collect for the following specific purposes:
6.1 Service Providers. phhalik shares personal data with carefully selected third-party service providers who assist in delivering the phhalik platform. These providers include:
All service providers engaged by phhalik are contractually required to process your personal data solely for the purposes specified by phhalik and to implement appropriate technical and organisational security measures.
6.2 Regulatory and Legal Disclosure. phhalik may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or other competent Philippine government authorities where required or permitted to do so by applicable law.
6.3 No Sale of Data. phhalik does not sell, rent, lease, or otherwise trade your personal data to any third party for their own commercial or marketing purposes. This commitment applies without exception.
6.4 Business Transfers. In the event that phhalik undergoes a merger, acquisition, restructuring, or asset sale, your personal data may form part of the transferred assets. In such circumstances, phhalik will notify you through the email address associated with your account and will ensure that the receiving entity is bound by privacy obligations no less protective than those in this Policy.
7.1 What Are Cookies. Cookies are small text files placed on your device when you visit phhalik.co. phhalik uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and analyse how the Platform is used.
7.2 Types of Cookies Used by phhalik.
7.3 Managing Cookies. You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from accessing the phhalik Platform. Disabling functional cookies may affect your experience on phhalik.co. phhalik's cookie consent notice, displayed on your first visit to phhalik.co, provides options for managing non-essential cookie categories.
phhalik implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:
phhalik retains personal data only for as long as necessary for the purposes described in this Policy and to comply with applicable legal obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with phhalik's data disposal procedures.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phhalik:
You have the right to obtain confirmation from phhalik as to whether we hold personal data about you, and to receive a copy of that data. Access requests are processed within twenty (20) days of receipt.
You have the right to request correction of inaccurate or incomplete personal data phhalik holds about you. Many contact details can be updated directly within your phhalik account settings.
You have the right to request deletion of personal data phhalik holds about you, where that data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to phhalik's legal retention obligations.
You have the right to object to phhalik's processing of your personal data for direct marketing at any time. You may also object to processing based on legitimate interests where your personal circumstances warrant this.
Where phhalik processes your data by automated means and on the basis of contract or consent, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Under the DPA, you have the right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
To exercise any of the above rights, contact phhalik's Data Protection Officer at the details provided in Section 14. phhalik will respond to all rights requests within twenty (20) days of receipt and will not charge a fee for reasonable requests.
The phhalik platform is strictly intended for adults aged twenty-one (21) years and above. phhalik does not knowingly collect personal data from individuals under the age of 21. If phhalik discovers that personal data has been collected from an individual under 21 — whether through a false age declaration at registration or otherwise — phhalik will immediately suspend the relevant account and delete or anonymise the personal data collected, subject to any retention obligations arising from financial transaction records already processed.
If you believe that phhalik holds personal data belonging to a person under 21, please contact phhalik's Data Protection Officer immediately at the details provided in Section 14.
phhalik's primary platform infrastructure is hosted on servers located in or accessible from the Philippines. However, some of phhalik's third-party service providers — including game content providers, KYC verification platforms, and cloud hosting partners — may process personal data in jurisdictions outside the Philippines.
Where personal data is transferred outside the Philippines, phhalik ensures that such transfers are protected by appropriate contractual safeguards — including standard data protection clauses requiring the recipient to maintain data protection standards equivalent to those required by the Philippine DPA. phhalik does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing such safeguards.
phhalik reserves the right to update or amend this Privacy Policy at any time to reflect changes in phhalik's data practices, changes in applicable Philippine law, or regulatory guidance from the National Privacy Commission or PAGCOR.
Material changes to this Policy will be communicated to registered phhalik players via the email address associated with their account and/or by posting a prominent notice on phhalik.co. Non-material changes (such as clarifications of existing language) will be reflected in the updated "Last Updated" date at the top of this document without separate notice.
Your continued use of the phhalik platform after a revised Privacy Policy takes effect constitutes your acknowledgement of the updated Policy. The current version of this Policy is always available at phhalik.co/privacy-policy.
In accordance with Section 21 of the Philippine Data Privacy Act of 2012, phhalik has designated a Data Protection Officer (DPO) who is responsible for overseeing phhalik's compliance with the DPA and this Privacy Policy. The DPO serves as the primary point of contact for all data privacy matters, including rights requests and privacy-related complaints.
Contact the phhalik Data Protection Officer:
If you are not satisfied with phhalik's response to a data privacy concern or rights request, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines — the government body responsible for enforcing the Philippine Data Privacy Act of 2012.
phhalik encourages players to contact phhalik's Data Protection Officer in the first instance to seek resolution before filing a formal NPC complaint, as many data privacy concerns can be resolved more quickly through direct engagement with phhalik's support team.
Your data is protected under the Philippine Data Privacy Act, secured with 256-bit SSL, and never sold to third parties. 1,200+ games, GCash & Maya payments, and 24/7 Filipino support. 21+ only.
21+ Only · DPA 2012 Compliant · PAGCOR Framework