phsweet Privacy Policy

phsweet is a PAGCOR-regulated online casino and sports betting platform operating at phsweet.net, offering casino games, live dealer tables, slots, bingo, and sports wagering services to Filipino players across the Philippines. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), phsweet acts as the Personal Information Controller in respect of all personal data collected through the phsweet Platform.

This Privacy Policy applies to all personal data collected, processed, stored, or disclosed by phsweet in connection with your use of the Platform, including data gathered through the website, mobile web interface, live chat, email correspondence, and any customer support interactions.

phsweet collects personal data that is necessary to operate the Platform, comply with PAGCOR regulatory obligations, and deliver a safe and personalised experience to registered players. The categories of personal data we collect are as follows:

phsweet does not intentionally collect sensitive personal data beyond what is necessary for identity verification and regulatory compliance. We do not collect biometric data, political opinions, religious beliefs, or health information unless specifically required by a regulatory directive.

phsweet collects personal data through the following channels:

Information you provide directly when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact our support team, participate in a promotion, or update your account preferences.

When you access the Platform, our servers and analytics tools automatically collect technical data including your IP address, device identifiers, browser type, and session behaviour. This collection is facilitated through server logs, session cookies, and similar technologies as described in Section 7.

We may receive identity verification data from our licensed KYC service providers, fraud screening data from anti-money laundering compliance tools, and payment confirmation data from our payment processing partners (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank). All third-party data providers are contractually bound to handle data in compliance with applicable Philippine privacy laws.

phsweet processes your personal data for the following specific purposes:

• Account Registration & Management: To create, maintain, and secure your phsweet Account, including authentication and account recovery.
• KYC & Age Verification: To verify that you are at least 21 years of age and to confirm your identity in accordance with PAGCOR requirements and Philippine AML regulations.
• Payment Processing: To process your deposits and withdrawals via GCash, PayMaya, and supported Philippine banks, and to match payment methods to verified Accounts.
• Regulatory Compliance: To fulfil our obligations under PAGCOR licensing conditions, Republic Act No. 9160 (Anti-Money Laundering Act as amended), and other applicable Philippine laws. This includes mandatory record-keeping and reporting of suspicious transactions.
• Responsible Gaming: To monitor wagering patterns for signs of problem gambling, administer self-exclusion requests, enforce deposit limits, and comply with PAGCOR responsible gaming guidelines.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, unauthorised Account access, bonus abuse, collusion, and other prohibited conduct described in our Terms & Conditions.
• Customer Support: To respond to your queries, resolve disputes, and improve our support services based on interaction records.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given us your explicit consent to do so. You can withdraw consent at any time via Account Settings.
• Platform Improvement: To analyse usage patterns in aggregate (non-personally identifiable) form to improve game performance, website navigation, and the overall player experience.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, phsweet relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing required to perform our contract with you — including operating your Account, processing payments, and delivering game services.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AML reporting obligations under RA 9160, and other mandatory Philippine regulatory requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where our legitimate interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have provided clear, informed, and freely given consent. You may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

Where consent is the legal basis for a particular processing activity, we will maintain a clear record of when and how your consent was obtained. We will not use consent as a basis for processing that is, in practice, required for your Account to function — in those cases, the legal basis will be contractual necessity or legal obligation.

phsweet does not sell your personal data. We share personal data only in the following limited, controlled circumstances:

We share data with third-party service providers who assist us in operating the Platform. These include KYC and identity verification providers, payment processors (GCash, PayMaya, and partner banks), game software providers, customer support platform operators, and cloud infrastructure providers. All such providers are bound by data processing agreements requiring them to handle your data solely on our instructions and in compliance with applicable Philippine privacy laws.

We will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine authorities where we are legally required to do so — for example, in connection with a suspicious transaction report, a regulatory audit, or a lawful court order. phsweet will not voluntarily disclose data to government authorities beyond what is legally mandated.

In the event of a merger, acquisition, or transfer of all or substantially all of phsweet's business assets, player data may be transferred to the successor entity. We will notify registered players of any such transfer via their registered email address before the transfer takes effect, and the successor entity will be required to honour the commitments made in this Privacy Policy.

The phsweet Platform uses cookies and similar tracking technologies to operate correctly and to provide you with a consistent, personalised experience. A cookie is a small text file stored on your device by your web browser when you visit a website.

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences — such as your preferred language, game lobby view, and responsible gaming settings — across sessions.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players navigate the Platform, which games are most popular, and where technical errors occur. This data is used solely to improve the Platform and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and suspicious session behaviour.

phsweet does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies that follow your browsing activity outside of the phsweet Platform.

You can control non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Your cookie preferences can also be managed through the cookie consent panel available on your first visit to the Platform.

phsweet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Retained for the full duration of your Account's active status on the Platform.
• KYC & Identity Documents: Retained for a minimum of five (5) years following Account closure, in compliance with PAGCOR licensing requirements and RA 9160 AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, as required by AMLC regulations.
• Customer Support Communications: Retained for three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your Account and for two (2) years following Account closure, to demonstrate compliance with consent requirements.
• Technical / Log Data: Retained for twelve (12) months from collection, after which it is securely deleted or anonymised.

Once the applicable retention period has expired, phsweet will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification. Where anonymisation is not technically feasible, secure deletion will be applied.

phsweet implements a layered information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the phsweet Platform is encrypted using TLS 1.2 or higher.
• Encryption at Rest: Sensitive personal data and financial records stored on phsweet servers are encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Internal staff who access player data are subject to confidentiality obligations and undergo regular data privacy training.
• Two-Factor Authentication: SMS-based 2FA is available to all registered players and is strongly recommended to protect Account access.
• Intrusion Detection: Our infrastructure is monitored continuously for suspicious activity, and automated alerts are triggered upon detection of anomalous access patterns.
• Penetration Testing: The Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a real risk to your rights and freedoms, phsweet will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173.

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights in relation to the personal data phsweet holds about you. You may exercise any of these rights by contacting our Data Protection Officer as described in Section 14.

To exercise any of the above rights, submit a written request to our Data Protection Officer at the contact details provided in Section 14. We will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days. Where a request is complex or involves a large volume of data, we may extend this period by a further fifteen (15) business days, with prior notice to you.

phsweet will not charge a fee for reasonable data subject access requests. Requests that are manifestly unfounded, excessive, or repetitive may be subject to a reasonable administrative fee or may be declined, with written explanation provided to the requestor.

The phsweet Platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. phsweet does not knowingly collect personal data from individuals under the age of 21.

If phsweet discovers or is notified that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the associated Account, delete the personal data collected from that individual (except to the extent required for regulatory reporting purposes), and notify the appropriate authorities where required by law.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account with phsweet, please contact our Data Protection Officer immediately using the contact details in Section 14. We will investigate and take appropriate action within 48 hours of receiving your report.

phsweet's primary operations and data storage are based in the Philippines. In certain circumstances, personal data may be transferred to or accessed by service providers located outside the Philippines — for example, international game software providers or cloud infrastructure vendors with data centres in other jurisdictions.

Where such cross-border transfers occur, phsweet ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under RA 10173. These safeguards include:

• Contractual data processing agreements incorporating the National Privacy Commission's standard contractual clauses for cross-border transfers.
• Transfer only to jurisdictions that the NPC has recognised as providing adequate levels of data protection, or to recipients who have implemented binding corporate rules.
• Limiting the scope of data transferred to the minimum necessary for the service provider to perform its contracted function.

phsweet will not transfer your personal data to any jurisdiction or recipient that cannot demonstrate an adequate level of data protection unless you have given your explicit consent to that specific transfer, or the transfer is required for the performance of a contract to which you are a party (such as processing an international payment).

phsweet may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable regulatory requirements, or the services offered on the Platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

For material changes — those that substantially affect how we use your personal data or the rights available to you — phsweet will provide at least fourteen (14) days' advance notice to registered players via their registered email address, or through a prominent notification displayed on the Platform upon login. Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes.

For non-material amendments — such as typographical corrections, clarifications that do not change the substance of our data practices, or updates required by regulatory directive — the revised policy takes effect immediately upon publication. We encourage you to review this page periodically to stay informed of how phsweet protects your personal information.

phsweet has appointed a Data Protection Officer (DPO) in compliance with the requirements of the Philippine Data Privacy Act of 2012. The DPO is responsible for overseeing phsweet's data protection programme, handling data subject rights requests, and serving as the primary point of contact with the National Privacy Commission.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data phsweet holds about you, please contact us through the following channels:

• Data Protection Officer Email: support@phsweet.net (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "DPO Inquiry" in your subject line to ensure prompt routing to the correct team.
• Live Chat: Available via the chat icon on the Platform, 24 hours a day, seven days a week. Request to be connected to the Privacy team.
• Response Time: Privacy-related inquiries are acknowledged within five (5) Philippine business days. Full responses are provided within fifteen (15) business days.

If you are not satisfied with phsweet's response to your privacy inquiry, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint is available through the NPC's official government website.