phv8 Privacy Policy — Your Data, Your Rights

1 Introduction

This Privacy Policy ("Policy") is issued by phv8 ("phv8", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "the Player") who access, register, or interact with the phv8 platform at phv8.cam, including all gaming services, account features, and payment functionalities offered therein.

phv8 operates as a PAGCOR-licensed online casino and sports betting platform serving players in the Philippines. As a licensed operator, phv8 is subject to data processing obligations under both PAGCOR's regulatory framework and the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC).

This Policy is designed to inform you clearly and transparently about how phv8 handles your personal data — what we collect, why we collect it, how we protect it, how long we keep it, and what your rights are. We encourage you to read this Policy in full before registering an account or using phv8's services.

By registering an account on phv8.cam or by continuing to use phv8's services after publication of any updated version of this Policy, you acknowledge that you have read and understood this Policy.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and related regulations, phv8 acts as the Personal Information Controller (PIC) in respect of your personal data collected through phv8.cam.

phv8 operates phv8.cam and is responsible for determining the purposes and means of processing your personal data. Where phv8 engages third-party service providers who process data on our behalf (such as payment processors, game providers, and analytics platforms), those parties act as Personal Information Processors (PIP) under phv8's instructions and are bound by contractual data protection obligations consistent with RA 10173.

Contact details for the phv8 Data Protection Officer are set out in Section 15 of this Policy.

3 Personal Data We Collect

phv8 collects the following categories of personal data:

3.1 Registration Data

When you create a phv8 account, we collect:

• Full legal name;
• Date of birth (for mandatory 21+ age verification);
• Email address;
• Mobile phone number;
• Residential address;
• Chosen username and password (stored in hashed, non-reversible form).

3.2 KYC Identity Verification Data

To comply with PAGCOR requirements and applicable AML regulations, we collect:

• Government-issued identification documents (Philippine National ID / PhilSys, driver's licence, passport, UMID, or equivalent);
• Selfie photographs submitted for identity document matching;
• Proof of address documentation (where requested for enhanced due diligence);
• Source of funds information (where required by AML compliance obligations).

3.3 Financial & Transaction Data

• Payment method details (GCash account number, Maya account, bank account details) — stored in tokenised or reference form;
• Deposit history, withdrawal records, and transaction timestamps;
• Currency and amount of each transaction;
• Bonus redemption and wagering history.

3.4 Gaming Activity Data

• Game session records including games played, bets placed, and outcomes;
• Sports bet history including markets, odds, stakes, and settlements;
• Bingo session and jackpot participation records;
• Responsible gaming tool usage (limits set, self-exclusion requests).

3.5 Technical & Device Data

• IP address at the time of login and transactions;
• Device type, operating system, and browser version;
• Session timestamps and duration;
• Cookie identifiers and similar tracking technologies (see Section 8).

3.6 Communications Data

• Content of support conversations (live chat, email, and any other support channel);
• Records of complaints or dispute submissions;
• Marketing communication preferences and opt-in / opt-out records.

4 How We Collect Your Data

phv8 collects personal data through the following means:

5 How phv8 Uses Your Personal Data

phv8 uses your personal data for the following specific purposes:

1. Account creation and management — to register your account, authenticate your identity at login, manage your account settings, and maintain accurate account records;
2. Age and identity verification (KYC) — to comply with PAGCOR's mandatory requirement to verify that all players are at least 21 years of age and are who they claim to be, before permitting real-money gaming or processing withdrawals;
3. Payment processing — to process your deposits, execute your withdrawal requests, reconcile transactions, and maintain financial records for audit and regulatory purposes;
4. Game and platform delivery — to operate the games, live casino tables, sports betting markets, bingo rooms, and all other platform features that comprise the phv8 gaming experience;
5. Bonus and promotion administration — to credit bonuses, track wagering requirement progress, identify and prevent bonus abuse, and manage promotional campaigns;
6. Regulatory compliance and PAGCOR reporting — to fulfil all legal and regulatory obligations imposed by PAGCOR, including statutory reporting, AML transaction monitoring, and submission of required compliance data;
7. Anti-money laundering (AML) and fraud prevention — to detect, investigate, and prevent money laundering, fraud, suspicious transactions, and other prohibited conduct as required by the Anti-Money Laundering Act (RA 9160, as amended) and PAGCOR AML guidelines;
8. Responsible gaming oversight — to monitor gaming patterns for indicators of problem gambling, administer responsible gaming tools (deposit limits, cooling-off, self-exclusion), and protect player welfare;
9. Customer support — to respond to your queries, process complaints, and provide technical and account assistance;
10. Marketing communications — to send you promotional offers, bonus notifications, and platform updates where you have given explicit consent; and to personalise content based on your account activity (marketing processing requires your consent and you may opt out at any time);
11. Platform security and integrity — to monitor for unauthorised account access, detect and investigate suspected cheating or collusion, and maintain the security of the phv8 platform;
12. Platform improvement and analytics — to analyse aggregate and anonymised usage data to improve platform performance, game selection, and user experience.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, phv8 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and phv8 — including account management, KYC verification, payment processing, and platform delivery;
• Legal obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing conditions, AML obligations under RA 9160, and tax reporting obligations;
• Legitimate interests: Processing necessary for phv8's legitimate interests where those interests are not overridden by your data protection rights — including fraud prevention, platform security, and aggregate analytics;
• Consent: Where phv8 relies on consent as its legal basis — specifically for marketing communications and optional data processing activities — such consent is obtained at the time of data collection and may be withdrawn by you at any time without detriment to your account access.

7 Data Sharing & Disclosure

7.1 phv8 does not sell, rent, lease, or trade your personal data to any third party for commercial or marketing purposes. Period.

7.2 phv8 may share your personal data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• PAGCOR and regulatory authorities: As required by phv8's licence conditions, PAGCOR may require phv8 to submit player data as part of regulatory reporting, compliance audits, or investigation of licensed operator obligations. phv8 cooperates fully with all such lawful requests;
• Law enforcement and government agencies: phv8 will disclose personal data where required to do so by law, court order, or valid government demand, including cooperation with AMLC (Anti-Money Laundering Council) pursuant to RA 9160;
• Payment service providers: phv8 shares transaction reference data with payment processors (including GCash, Maya, and banking partners) as required to process your deposits and withdrawals. These providers operate under their own data privacy policies and are contractually required to maintain appropriate data security;
• Game providers and technology partners: Certain technical data (such as session tokens) is shared with game providers (including Playtech and other studio partners) to facilitate game delivery. Game providers receive only the technical data necessary for game function and do not receive your identity or financial data;
• Identity verification service providers: phv8 may use licensed third-party KYC verification platforms to assist with document authentication. Such providers process identity data under strict contractual data protection obligations consistent with RA 10173;
• Professional advisors: phv8 may share data with its legal counsel, auditors, and compliance consultants where strictly necessary for the conduct of their professional services, subject to professional confidentiality obligations;
• Business succession: In the event of a merger, acquisition, sale of assets, or similar transaction affecting phv8's business, player data may be transferred to the successor entity, with players notified in accordance with applicable law.

7.3 All third parties with whom phv8 shares personal data are required by contract to maintain confidentiality, implement appropriate security measures, and process data only in accordance with phv8's instructions and applicable Philippine data protection law.

8 Cookies & Tracking Technologies

8.1 phv8.cam uses cookies and similar tracking technologies to support platform functionality, maintain your login session, and analyse platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for core platform functionality including account login session maintenance, security token management, and fraud detection. These cookies cannot be disabled without impairing your ability to use phv8;
• Functional cookies: Used to remember your preferences (language settings, display options) and personalise your experience on phv8;
• Analytics cookies: Used to collect aggregate, anonymised data about how players interact with phv8.cam, which pages are visited most, and how features are used. This data is used solely to improve the platform. No individual player is identifiable from analytics data;
• Security cookies: Used to detect and prevent fraudulent login attempts, suspicious activity, and other security threats.

8.2 phv8 does not use third-party advertising cookies or tracking pixels from ad networks on phv8.cam.

8.3 You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies may prevent you from accessing certain platform features. Disabling analytics cookies will not affect your ability to use phv8.

9 Data Retention

9.1 phv8 retains personal data only for as long as is necessary for the purpose for which it was collected, subject to applicable legal retention obligations.

9.2 The following retention periods apply as general guidelines:

9.3 Data retained beyond the closure of your account is stored in a restricted-access archive and used only for regulatory compliance, audit, or legal defence purposes. It is not used for any active marketing or gaming operations.

9.4 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

10 Data Security

10.1 phv8 implements technical and organisational security measures appropriate to the risk level of the data processed, including:

• 256-bit SSL/TLS encryption on all data transmissions between your browser and phv8's servers;
• Encryption at rest for sensitive personal data stored in phv8's databases;
• Password hashing using industry-standard algorithms — phv8 staff cannot view your password;
• Access controls — access to personal data is restricted to authorised phv8 staff who require it to perform their duties, on a strict need-to-know basis;
• Two-factor authentication for internal staff systems accessing player data;
• Regular security audits and penetration testing by qualified third-party security professionals;
• Incident response procedures covering detection, containment, and notification of any personal data breach in accordance with NPC notification requirements.

10.2 Data Breach Notification. In the event of a personal data breach that is likely to result in serious harm to affected players, phv8 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with NPC Circular 16-03.

10.3 No data transmission over the internet or method of electronic storage is 100% secure. While phv8 implements robust security measures, we cannot provide an absolute guarantee of data security. Players are encouraged to protect their own account credentials and report any suspected unauthorised access immediately.

11 Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phv8:

To exercise any of these rights, please submit a written request to phv8's Data Protection Officer at the contact details in Section 15. phv8 will respond to data rights requests within 15 business days of receipt. We may ask you to verify your identity before processing a request.

Please note that some rights are subject to exceptions — for example, phv8 cannot delete data it is legally required to retain under PAGCOR regulations or AML law, regardless of a deletion request. In such cases, phv8 will explain the specific legal basis for retention.

12 Children & Underage Players

12.1 phv8's registration process requires players to declare their date of birth and submit to mandatory KYC identity verification that includes age confirmation. phv8 does not accept registrations from individuals who declare they are under 21 years of age.

12.2 If phv8 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, we will take immediate steps to suspend the relevant account, delete any data that is not required to be retained for regulatory or legal purposes, and report the matter to PAGCOR as required by our licence conditions.

12.3 If you are the parent or guardian of a minor who may have accessed phv8 without authorisation, please contact us immediately at [email protected] so we can take appropriate action.

13 International Data Transfers

13.1 phv8's primary data infrastructure is located within or accessible from the Philippines. Where phv8 uses third-party service providers whose servers or processing facilities are located outside the Philippines (including game providers and technical platform vendors), your data may be transferred to and processed in those jurisdictions.

13.2 Where such international transfers occur, phv8 ensures that appropriate safeguards are in place to protect your personal data in accordance with standards equivalent to those under Philippine law, including contractual data protection clauses consistent with NPC requirements.

13.3 phv8 does not transfer personal data to countries that do not provide adequate data protection standards without ensuring the specific safeguards required under RA 10173 and NPC guidelines are in place.

14 Changes to This Privacy Policy

14.1 phv8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements.

14.2 Updated versions of this Policy will be published at phv8.cam/privacy-policy with a revised effective date. Where changes are material — meaning they substantially affect how your data is processed or your rights — phv8 will provide advance notice via the platform or by email to your registered address.

14.3 Your continued use of phv8 following publication of an updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree to the updated Policy, you should cease using phv8 and may request account closure in accordance with phv8's Terms & Conditions.

15 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or phv8's data processing practices, please contact phv8's Data Protection Officer (DPO):

For data-related complaints that have not been resolved to your satisfaction through direct contact with phv8, you have the right to escalate your concern to the National Privacy Commission. The NPC's contact information and complaint procedures are available at the NPC's official website.