Privacy Policy – phcity19 Online Gaming Platform

1 Introduction

phcity19 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users of the phcity19 online gaming platform. This Privacy Policy describes how phcity19 collects, uses, stores, shares, and protects personal data in connection with the operation of the platform and the provision of gaming services to players in the Philippines and other permitted jurisdictions.

This Privacy Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC). It is also consistent with the data governance requirements of the Philippine Amusement and Gaming Corporation (PAGCOR) under whose regulatory oversight phcity19 operates.

This Privacy Policy should be read together with the phcity19 Terms & Conditions and Responsible Gaming Policy, each of which forms part of the overall agreement between you and phcity19.

2 Personal Data We Collect

phcity19 collects the following categories of personal data from registered players and platform visitors:

2.1 Identity & Registration Data

Full legal name as it appears on your government-issued identification document
Date of birth (used to verify the mandatory 21+ age requirement)
Gender
Nationality and country of residence
Username and encrypted password

2.2 Contact Data

Email address
Mobile phone number
Residential address (including barangay, city/municipality, province, and postal code)

2.3 Identity Verification (KYC) Data

Copies of government-issued photo identification (e.g., PhilSys National ID, passport, driver's license, SSS ID, GSIS ID, PRC ID)
Proof of residential address documents
Selfie or liveness verification images where required
Source-of-funds documentation where required by AML regulations

2.4 Financial & Transaction Data

Payment method details (GCash account number, PayMaya account, BPI/BDO/Metrobank account details — stored in tokenized or masked form)
Deposit and withdrawal transaction history
Wagering history and game activity records
Bonus and promotional credit records
Account balance history

2.5 Technical & Usage Data

IP address and approximate geolocation derived from IP
Device type, operating system, and browser information
Session timestamps and duration
Pages visited and features used within the platform
Referring URLs and navigation paths
Cookie identifiers and similar tracking data (see Section 8)

2.6 Communications Data

Records of your communications with phcity19 customer support, including chat transcripts and email correspondence
Feedback, survey responses, and complaints submitted to phcity19

⚠️ Sensitive Personal Information: Certain data collected during KYC verification — such as government ID numbers and financial account details — may constitute sensitive personal information under the Data Privacy Act. phcity19 applies heightened security and access controls to all sensitive personal information and processes it only to the extent strictly necessary for regulatory compliance.

3 How We Collect Your Data

phcity19 collects personal data through the following means:

Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions on the phcity19 platform.
Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access and use the phcity19 website or mobile application (see Section 8).
From third-party identity verification providers — phcity19 may use accredited third-party KYC and AML screening services to verify the identity and background of registered players as required by PAGCOR regulations.
From payment processors — transaction confirmation and status data is received from GCash, PayMaya, and banking partners when you make deposits or withdrawals.
From fraud prevention and security services — phcity19 may receive risk signals and device fingerprint data from third-party fraud detection providers to protect the integrity of the platform.

4 How We Use Your Personal Data

phcity19 uses the personal data it collects for the following purposes:

Purpose	Data Used
Account registration and management	Identity, contact, and login data
Age and identity verification (KYC)	Identity, KYC, and contact data
Processing deposits and withdrawals	Financial and transaction data
Providing gaming services and game history	Identity, transaction, and usage data
Anti-money laundering (AML) compliance	Identity, KYC, and financial data
Fraud detection and platform security	Technical, usage, and financial data
Customer support and dispute resolution	Identity, contact, and communications data
Responsible gaming monitoring and intervention	Usage, transaction, and identity data
Regulatory reporting to PAGCOR and other authorities	Identity, KYC, and financial data
Platform improvement and analytics	Technical and usage data (aggregated/anonymized)
Marketing communications (with consent)	Contact and usage data

🌸 Marketing Communications: phcity19 will only send you promotional emails or SMS messages if you have provided your explicit consent during registration or through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting our support team.

5 Legal Basis for Processing

phcity19 processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

Contractual necessity: Processing is necessary to perform the contract between you and phcity19 — including account registration, processing transactions, and providing gaming services.
Legal obligation: Processing is required to comply with applicable Philippine laws and PAGCOR regulations, including KYC verification, AML reporting, and responsible gaming obligations.
Legitimate interests: Processing is necessary for the legitimate interests of phcity19, including fraud prevention, platform security, and improving the quality of our services, where such interests are not overridden by your rights and freedoms.
Consent: For certain processing activities — such as sending marketing communications — phcity19 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

phcity19 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

PAGCOR and Philippine regulatory authorities: phcity19 is required by law to share player data with PAGCOR and other competent Philippine government authorities upon lawful request or as part of mandatory regulatory reporting obligations.
Law enforcement and government agencies: phcity19 will disclose personal data to Philippine law enforcement agencies, the Anti-Money Laundering Council (AMLC), and other government bodies where required by law or court order.
KYC and identity verification providers: Accredited third-party providers engaged by phcity19 to perform identity verification and AML screening services. These providers are bound by strict data processing agreements and may only use your data for the specified verification purpose.
Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers engaged to process your deposits and withdrawals. Data shared is limited to what is necessary to complete the transaction.
Technology and platform service providers: Cloud hosting, cybersecurity, fraud detection, and customer support technology providers engaged by phcity19 to operate the platform. All such providers are subject to data processing agreements requiring them to protect your data and process it only on phcity19's instructions.
Game content providers: Where technically necessary for the delivery of specific game titles, limited technical data (such as session tokens) may be shared with licensed game providers. No personally identifiable information is shared with game providers beyond what is strictly required.

✅ Data Processing Agreements: All third-party service providers who process personal data on behalf of phcity19 are required to enter into data processing agreements that comply with the requirements of the Philippine Data Privacy Act and NPC regulations. phcity19 conducts due diligence on all data processors to ensure appropriate security standards are maintained.

7 Data Retention

phcity19 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and Philippine AML laws.
Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended) and PAGCOR requirements.
Customer support communications: Retained for three (3) years from the date of the communication, or longer where the communication relates to an unresolved dispute or regulatory matter.
Technical and usage data: Retained for up to twelve (12) months from collection, after which it is anonymized or deleted.
Marketing consent records: Retained for the duration of your account and for three (3) years following account closure or withdrawal of consent.

Upon expiry of the applicable retention period, phcity19 will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures.

8 Cookies & Tracking Technologies

phcity19 uses cookies and similar tracking technologies on its website and mobile application to enhance your user experience, maintain session security, and gather analytics data to improve the platform.

8.1 Types of Cookies Used

Strictly necessary cookies: Essential for the operation of the phcity19 platform, including session management, login authentication, and security functions. These cookies cannot be disabled without affecting platform functionality.
Functional cookies: Used to remember your preferences and settings, such as language preferences and display options, to provide a more personalized experience.
Analytics cookies: Used to collect aggregated, anonymized data about how players use the phcity19 platform, enabling us to identify areas for improvement. No personally identifiable information is included in analytics reports.
Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and other security threats to the phcity19 platform.

8.2 Cookie Management

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the phcity19 platform and may prevent you from accessing certain features. phcity19 does not use third-party advertising cookies or cross-site tracking technologies.

🍪 Cookie Consent: When you first access the phcity19 platform, you will be presented with a cookie consent notice. By continuing to use the platform after acknowledging this notice, you consent to the use of cookies as described in this section. You may update your cookie preferences at any time through your account settings.

9 Data Security

phcity19 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

Transport Layer Security (TLS): All data transmitted between your device and the phcity19 platform is encrypted using industry-standard TLS protocols.
Encryption at rest: Sensitive personal data stored on phcity19 servers is encrypted using AES-256 or equivalent encryption standards.
Access controls: Access to personal data is restricted on a strict need-to-know basis. All phcity19 staff with access to personal data are subject to confidentiality obligations and regular data privacy training.
Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication.
Regular security audits: phcity19 conducts regular vulnerability assessments and penetration testing of its platform and infrastructure.
Incident response: phcity19 maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk to your rights and freedoms, phcity19 will notify the NPC within 72 hours of becoming aware of the breach and will notify affected players without undue delay.

While phcity19 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your own account credentials and for notifying phcity19 immediately if you suspect unauthorized access to your account.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phcity19:

Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed by phcity19. This Privacy Policy fulfills that obligation.
Right of access: You have the right to request a copy of the personal data that phcity19 holds about you, along with information about how it is being processed.
Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held by phcity19. You may update certain account information directly through your account settings.
Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phcity19's legal retention obligations under PAGCOR regulations and Philippine AML laws.
Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. phcity19 will cease such processing upon receipt of a valid objection unless there are compelling legitimate grounds that override your interests.
Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that phcity19 has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact the phcity19 Data Protection Officer using the contact details provided in Section 15. phcity19 will respond to all valid data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

ℹ️ Identity Verification for Requests: To protect your privacy and prevent unauthorized access to your data, phcity19 will require you to verify your identity before processing any data subject request. This may involve confirming your registered email address, account username, or providing a copy of your government-issued ID.

11 Children's Privacy

The phcity19 platform is strictly intended for adults aged 21 years and above. phcity19 does not knowingly collect personal data from any person under the age of 21. The mandatory age verification process conducted during account registration is designed to prevent minors from accessing the platform.

If phcity19 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the phcity19 platform, please contact our support team immediately.

12 International Data Transfers

phcity19 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or technology partners located outside the Philippines — for example, cloud infrastructure providers or game content providers — phcity19 ensures that such transfers are conducted in compliance with the Data Privacy Act and NPC regulations.

International data transfers are only made to countries or organizations that provide an adequate level of data protection, or where appropriate safeguards are in place, such as contractual clauses approved by the NPC or equivalent data protection standards. phcity19 will not transfer your personal data to jurisdictions that do not provide adequate protection without your explicit consent or a lawful basis under the Data Privacy Act.

13 Third-Party Services & Links

The phcity19 platform may contain references to third-party game providers and payment services. This Privacy Policy applies solely to personal data collected and processed by phcity19. phcity19 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external services.

Where phcity19 shares data with third-party processors as described in Section 6, those processors are contractually bound to process your data only in accordance with phcity19's instructions and this Privacy Policy. However, phcity19 encourages you to review the privacy policies of any third-party services you interact with independently of the phcity19 platform.

14 Changes to This Privacy Policy

phcity19 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC regulations, or PAGCOR requirements. The date of the most recent revision is displayed at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your personal data is processed — phcity19 will notify registered players via email or an in-platform notification at least fourteen (14) days before the changes take effect. For non-material changes, the updated Privacy Policy will be published on this page with an updated revision date.

Your continued use of the phcity19 platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the revised Privacy Policy, you may request account closure in accordance with the Terms & Conditions.

15 Contact & Data Protection Officer

phcity19 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act and NPC regulations. The DPO is responsible for overseeing phcity19's data protection compliance and serves as the primary point of contact for data subject requests and privacy-related inquiries.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phcity19, please contact us using the following details:

Data Protection Officer — phcity19
Email: [email protected]
General Support: [email protected]
Platform: phcity19.net
Response Time: Within 15 business days of receipt of your request

🏛️ National Privacy Commission: If you are not satisfied with phcity19's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.

Privacy Policy — phcity19

Contents