phv8 Privacy Policy — Your Data, Your Rights
At phv8, your personal data is treated with the same seriousness as your account security. This Privacy Policy explains exactly what we collect, why we collect it, how we protect it, and what rights you hold as a Filipino player under the Data Privacy Act of 2012.
Overview
This Privacy Policy ("Policy") describes how phv8 ("phv8", "we", "us", or "our") collects, processes, stores, shares, and protects the personal information of users ("you", "your", or "Player") who access or use the phv8.net Platform — whether through a desktop browser, mobile browser, or any other compatible device.
phv8 is committed to safeguarding your privacy and handling your personal data responsibly in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.
By registering an account on phv8.net, accessing any part of the Platform, or otherwise engaging with phv8's services, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease using the Platform and may request account closure by contacting [email protected].
Data Controller
For the purposes of the Philippine Data Privacy Act of 2012, phv8 acts as the Personal Information Controller (PIC) in respect of the personal data it collects directly from users of phv8.net. As PIC, phv8 determines the purposes for which and the means by which personal data is processed.
Where phv8 engages third-party service providers — such as payment processors, identity verification providers, or analytics platforms — those providers act as Personal Information Processors (PIPs) under written data processing agreements that require them to handle your data only in accordance with phv8's instructions and this Policy.
All inquiries, requests, or complaints relating to this Policy and your personal data should be directed to the phv8 Data Privacy Officer at: [email protected]. Please use the subject line "Data Privacy Request" so your message is routed to the correct team promptly.
What We Collect
phv8 collects the following categories of personal data, grouped by the context in which they arise:
| Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Registration & KYC |
| Contact Data | Email address, mobile number, residential address | Registration |
| Verification Data | Government-issued ID copies (PhilSys, passport, driver's license, SSS/GSIS ID), selfie photos | KYC Verification |
| Financial Data | E-wallet references (GCash, Maya), bank account details, transaction history, deposit/withdrawal records | Transactions |
| Gameplay Data | Bet history, game sessions, wagering patterns, bonus usage, win/loss records | Active gameplay |
| Technical Data | IP address, device type, operating system, browser type, session timestamps | Automatic collection |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, preferred notification channels | Registration & account settings |
phv8 does not collect unnecessary personal data. We operate on a data minimization principle — if a piece of information is not genuinely needed to operate your account or comply with our legal obligations, we do not collect it.
How We Collect Your Data
phv8 collects personal data through the following channels:
- Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or update your account profile, you actively provide us with personal data.
- Automated technical collection: When you access phv8.net, our servers and analytics tools automatically record technical data such as your IP address, browser fingerprint, device information, and session activity. This is standard practice for all web-based platforms.
- Cookies and similar technologies: phv8 uses cookies, local storage, and similar tracking technologies to maintain your session, remember your preferences, and understand how players navigate the Platform. See Section 08 for full details on our cookie practices.
- Third-party identity verification: Where phv8 uses a third-party KYC or identity verification provider to process your submitted documents, that provider returns a verification result and risk score to phv8. We do not receive or store raw biometric data beyond what is necessary to confirm your identity.
- Payment processors: When you make a deposit or withdrawal using GCash, Maya, GrabPay, BPI, BDO, Metrobank, or QR Ph, the relevant payment provider shares transaction confirmation data with phv8 to credit or debit your account. phv8 does not store your full payment credentials.
Why We Use Your Data
phv8 processes your personal data for the following specific purposes:
- Account creation and management: To set up, operate, and maintain your phv8 player account, including processing your registration, managing your wallet balance, and updating your account settings.
- Identity verification (KYC): To verify your age (21+ requirement), identity, and address in compliance with PAGCOR-aligned operating standards and the Philippine Anti-Money Laundering Act.
- Payment processing: To process deposits and withdrawals accurately and securely, reconcile transaction records, and prevent fraudulent or unauthorized payment activity.
- Game delivery and integrity: To deliver our full range of games — including slots, live casino, sports betting, bingo, sabong, Ludo Quick, and Monster Mine — and to maintain the fairness and integrity of all game outcomes.
- Regulatory and legal compliance: To fulfill our obligations under the Data Privacy Act, the Anti-Money Laundering Act (RA 9160 and amendments), applicable PAGCOR regulations, and any lawful requests from competent Philippine authorities.
- Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, enforce self-exclusion requests, and apply deposit limits or cooling-off periods as requested by or on behalf of players.
- Fraud prevention and platform security: To detect, investigate, and prevent unauthorized access, fraudulent transactions, bonus abuse, money laundering, and other prohibited activities as described in our Terms and Conditions.
- Customer support: To respond to your inquiries, complaints, and requests, and to maintain a record of support interactions for quality assurance and dispute resolution purposes.
- Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and platform updates — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time via your account settings or by contacting support.
- Platform improvement and analytics: To analyze aggregated and anonymized usage data in order to improve Platform performance, fix technical issues, and develop new features that better serve Filipino players.
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, phv8 relies on the following lawful bases to process your personal data:
- Consent: For marketing communications and non-essential analytics tracking, processing is based on your freely given, specific, and informed consent. You may withdraw this consent at any time.
- Contractual necessity: Processing your identity data, contact data, financial data, and gameplay data is necessary for phv8 to perform its contractual obligations to you under our Terms and Conditions — specifically to operate your account, accept deposits, deliver games, and process withdrawals.
- Legal obligation: KYC verification, AML monitoring, and transaction record-keeping are required by Philippine law (Data Privacy Act, Anti-Money Laundering Act, and applicable PAGCOR regulations). phv8 must process this data regardless of consent.
- Legitimate interests: Fraud detection, platform security monitoring, and aggregated analytics are processed on the basis of phv8's legitimate interests in protecting the Platform, its players, and its business — provided these interests do not override your fundamental privacy rights.
Data Sharing & Third Parties
phv8 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared only in the following limited circumstances:
- Payment processors: GCash, Maya, GrabPay, BPI Online, BDO, Metrobank, and QR Ph receive transaction data necessary to process your deposit or withdrawal. Each provider operates under its own privacy policy and relevant Philippine financial regulations.
- Identity verification providers: Where a third-party KYC provider assists in verifying your identity documents, the minimum necessary data (ID images and verification result) is shared under a binding data processing agreement.
- Regulatory authorities: The Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), PAGCOR, and other competent Philippine government agencies may receive data where required by law, a court order, or lawful regulatory direction.
- Legal and professional advisors: phv8's legal counsel, auditors, and fraud investigation specialists may access limited personal data on a strictly need-to-know basis and under professional confidentiality obligations.
- Platform infrastructure providers: Cloud hosting and cybersecurity service providers that support phv8.net's technical operations are bound by strict data processing agreements and are not permitted to use your data for any purpose other than delivering the contracted service.
Cookies & Tracking Technologies
phv8 uses cookies and similar technologies to provide a functional, personalized, and secure experience on phv8.net. The following types of cookies are used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, fraud detection. Required for the Platform to function. | No — essential |
| Functional | Remembering your language preferences, game lobby layout preferences, and responsible gaming settings. | Yes — optional |
| Analytics | Aggregated, anonymized data on page visits, feature usage, and navigation paths. Used to improve the Platform. | Yes — optional |
| Marketing | Tracking opt-in promotional preferences so that phv8 can send relevant bonus offers to consenting players only. | Yes — opt-in only |
You can manage your cookie preferences through your browser settings or through the phv8 cookie preference center accessible from the footer of phv8.net. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly.
phv8 does not use cookies or tracking technologies to serve third-party advertising on phv8.net or to track your browsing activity on other websites outside the Platform.
Data Retention
phv8 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The following general retention periods apply:
- Account and identity data: Retained for the lifetime of your account plus a minimum of five (5) years after account closure, in line with AMLA record-keeping requirements.
- Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act.
- KYC verification documents: Retained for the duration of your account plus five (5) years post-closure. ID images are stored in encrypted form and access is strictly controlled.
- Gameplay data: Retained for the lifetime of your account plus two (2) years post-closure, for dispute resolution and responsible gaming monitoring purposes.
- Customer support records: Retained for three (3) years from the date of the interaction, to support complaint resolution and quality assurance.
- Marketing consent records: Retained for as long as you hold an active marketing preference with phv8, plus two (2) years as evidence of consent.
- Technical logs: Standard web server logs are retained for up to ninety (90) days for security and incident response purposes, then automatically deleted.
At the end of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with an identified or identifiable individual. Anonymized or aggregated data may be retained indefinitely for statistical and analytical purposes.
Security Measures
phv8 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and phv8.net servers.
- Encryption at rest for sensitive personal data, including KYC documents and financial records, stored on phv8's servers.
- Multi-factor authentication (MFA) for administrative access to systems that store personal data.
- Role-based access controls (RBAC) ensuring that phv8 staff members can only access personal data that is necessary for their specific job function.
- Regular security audits and penetration testing conducted by qualified cybersecurity professionals to identify and remediate vulnerabilities.
- Intrusion detection and DDoS mitigation systems operating continuously to protect the integrity of the Platform.
- Data breach response protocol: In the event of a personal data breach that poses a risk to your rights and freedoms, phv8 will notify the NPC within 72 hours of becoming aware of the breach and will inform affected players without undue delay, as required by law.
Your Rights Under the Data Privacy Act
As a data subject under Philippine law, you hold the following rights with respect to your personal data held by phv8. You may exercise any of these rights by contacting [email protected] with the subject line "Data Privacy Request":
Your Data Rights as a phv8 Player
The Data Privacy Act of 2012 gives every Filipino data subject concrete, enforceable rights. Here is what you are entitled to and how to exercise each right with phv8.
Right to Be Informed
You have the right to know what personal data phv8 collects about you, why it is collected, and how it is processed. This Privacy Policy is the primary vehicle through which phv8 fulfills this obligation.
Right to Access
You may request a copy of the personal data phv8 holds about you, including the categories of data, the purposes for which it is processed, and any third parties it has been shared with. phv8 will respond within 15 business days.
Right to Correction
If any personal data phv8 holds about you is inaccurate, incomplete, or outdated, you have the right to request a correction. phv8 will update the relevant records promptly and notify any third parties who received the incorrect data.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. Note that phv8 may be required to retain certain data by law even after an erasure request.
Right to Object
You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your fundamental rights override phv8's interest in the processing.
Right to Data Portability
Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider. Contact our Data Privacy Officer to make a portability request.
Right to Damages
If phv8's non-compliance with the Data Privacy Act results in damage to you, you have the right to claim compensation for actual damages sustained. This right is exercised through the National Privacy Commission or through appropriate legal proceedings.
Right to File a Complaint
If you believe phv8 has violated your data privacy rights, you may file a complaint directly with the National Privacy Commission (NPC) of the Philippines. We encourage you to contact phv8 first so we can resolve the matter — but the NPC route is always available to you.
Withdraw Consent
Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. Opt-out links are included in all marketing emails from phv8.
Minors — 21+ Only
phv8 is a real-money gaming platform and is strictly intended for players aged 21 years and above, in accordance with Philippine gaming regulations. phv8 does not knowingly collect or process personal data from individuals under the age of 21.
During registration, all applicants are required to confirm their age and complete identity verification. If phv8 subsequently discovers that a registered account belongs to an individual under 21 years of age, the account will be suspended immediately, all funds will be held pending investigation, and the personal data associated with the account will be deleted or anonymized as appropriate under the law.
Changes to This Policy
phv8 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to the Platform. When material changes are made, phv8 will:
- Update the "Last Updated" date at the top of this page.
- Display a prominent notice on phv8.net for a reasonable period following the update.
- Where the changes significantly affect how we use your personal data, send a notification to the email address registered to your account.
Your continued use of phv8.net following notification of a Policy update constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you should stop using the Platform and may request account closure by contacting our support team.
We encourage you to review this Policy periodically so you remain informed about how phv8 protects your data. All previous versions of this Policy are available upon request from our Data Privacy Officer.
Contact Our Data Privacy Officer
For any questions, concerns, requests, or complaints relating to this Privacy Policy or the processing of your personal data by phv8, please reach out to our Data Privacy Officer directly:
- Email: [email protected] — please use the subject line "Data Privacy Request"
- Response time: phv8 aims to acknowledge all data privacy requests within 3 business days and to resolve them within 15 business days.
- Platform: phv8.net — serving Filipino players across the Philippines, including Manila, Quezon City, Cebu, Davao, and Makati.
If you are not satisfied with phv8's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Details on how to file a complaint are available on the NPC's official website at privacy.gov.ph.
Built on Security & Transparency
From encryption to your right to erasure, here is a snapshot of the protections phv8 puts in place for every Filipino player on the Platform.
256-bit SSL Encryption
Every connection between your device and phv8.net is protected by industry-standard 256-bit SSL/TLS encryption — the same level used by major Philippine banks like BPI and BDO. Your data is never transmitted in plain text.
DPA 2012 Compliance
phv8 operates in full alignment with the Philippine Data Privacy Act of 2012 (RA 10173) and the guidelines of the National Privacy Commission. Your rights as a Filipino data subject are not just acknowledged — they are actively upheld.
Zero Data Selling
phv8 has never and will never sell your personal data to third-party advertisers, data brokers, or any commercial entity. Your information exists on our Platform to serve your gaming experience — nothing more.
Role-Based Data Access
Internal access to your personal data is governed by strict role-based controls. Only staff members with a legitimate operational need can view your account details, and all access is logged and audited regularly.
Opt-Out Marketing
Promotional messages from phv8 are only sent to players who have explicitly opted in. Every marketing email includes a clear, functional one-click unsubscribe link, and opt-out requests are honored within 48 hours.
Breach Notification Protocol
In the unlikely event of a data breach affecting your personal information, phv8 is committed to notifying the NPC within 72 hours and informing affected players promptly — giving you the information you need to protect yourself without delay.
Your Privacy is Protected at phv8 — Every Step of the Way
Now that you know exactly how phv8 handles your data, you can play slots, bet on PBA and NBA games, enjoy live casino, and more — with full confidence that your personal information is in safe hands.