pharcade Privacy Policy

This Privacy Policy describes how pharcade ("pharcade," "we," "us," or "our"), the operator of the online casino and sports betting platform accessible at pharcade.asia, collects, uses, stores, shares, and protects the personal data of individuals who register for or use pharcade's services ("Players," "Users," or "you").

pharcade is committed to processing personal data responsibly, transparently, and in accordance with its obligations under Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines and the implementing rules and regulations issued by the National Privacy Commission (NPC). Where pharcade processes data of users located in jurisdictions with additional data protection requirements, pharcade takes reasonable steps to meet those requirements to the extent applicable.

By creating a pharcade account or using any pharcade service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not register an account or use the pharcade platform.

For the purposes of the Data Privacy Act of 2012, pharcade is the Personal Information Controller (referred to internationally as the "data controller") in respect of personal data collected through the pharcade platform. pharcade determines the purposes and means by which your personal data is processed.

pharcade has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and with applicable data protection legislation. Contact details for the DPO are provided in Section 16.

Third-party service providers engaged by pharcade (including payment processors, game studios, fraud prevention providers, and cloud infrastructure providers) act as Personal Information Processors and process personal data only on pharcade's instructions, pursuant to binding data processing agreements that impose obligations consistent with this Policy.

pharcade collects the following categories of personal data in connection with account registration, use of the platform, and regulatory compliance:

3.1 Identity and Contact Data

• Full legal name as it appears on a government-issued ID
• Date of birth and age
• Philippine mobile number
• Email address
• Residential address
• Government-issued identification number (SSS, GSIS, Driver's License, PhilSys ID, or Passport number)

3.2 Account and Transaction Data

• Account username and hashed password
• Deposit and withdrawal transaction history
• Payment method details (GCash number, PayMaya number, bank account references — stored in tokenized form; full payment credentials are never stored by pharcade)
• Account wallet balance and bonus balance records
• KYC verification status and document submission records

3.3 Gaming and Betting Activity Data

• Game session history, bet amounts, and outcomes
• Sports betting selections, odds accepted, and settlement records
• Responsible gaming tool settings (deposit limits, loss limits, session time limits, self-exclusion status)
• Bonus and promotion usage history

3.4 Technical and Device Data

• IP address at the time of account creation and each login session
• Device type, operating system, and browser information
• Geolocation data (derived from IP address)
• Session timestamps and duration
• Cookie identifiers and similar tracking technology data (see Section 9)

3.5 Communications Data

• Records of communications with pharcade customer support, including live chat transcripts and email correspondence
• Complaints and dispute records
• Marketing consent preferences

pharcade collects personal data through the following channels:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to surveys or promotions.
• Automatically through your use of the platform: Technical data collected via cookies, session tracking, login records, and your interactions with pharcade games and betting markets.
• From payment service providers: Transaction confirmation and payment reference data from GCash, PayMaya, BPI, BDO, and Metrobank in connection with deposits and withdrawals you initiate.
• From identity verification providers: Confirmation data returned by KYC service providers in connection with the verification of government-issued identification documents.
• From fraud prevention and compliance providers: Risk signals and screening results generated by third-party fraud detection and anti-money laundering compliance services.

The following table sets out the purposes for which pharcade processes your personal data and the legal basis for each:

pharcade does not sell, rent, or exchange your personal data with third parties for their own marketing purposes. pharcade may share your personal data with the following categories of recipients, strictly for the purposes described in Section 5:

6.1 Payment Service Providers

Transaction data is shared with GCash (Mynt — Globe Fintech Innovations, Inc.), PayMaya (Maya Philippines, Inc.), BPI, BDO, and Metrobank to process deposits and withdrawals you initiate. These providers process data pursuant to their own privacy policies and applicable Philippine financial regulation.

6.2 Identity Verification Providers

For KYC purposes, pharcade may share your name, date of birth, and identification document details with accredited identity verification service providers operating in the Philippines. Data shared is limited to what is necessary to complete the verification and is not retained by these providers beyond the verification transaction.

6.3 Game Content Providers

When you play a game operated by a third-party studio (such as JILI, PG Soft, Fachai, Pragmatic Play, or CQ9), session and transaction data may be shared with the relevant studio for game operation, dispute resolution, and RNG audit purposes. No identity data beyond a pseudonymous player identifier is shared with game studios.

6.4 Regulatory Authorities

pharcade is required to disclose personal data to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC) of the Philippines, pursuant to its regulatory obligations under the Casino Regulatory Authority Act, PAGCOR's online gaming regulations, and the Anti-Money Laundering Act (Republic Act No. 9160, as amended).

6.5 Law Enforcement and Legal Process

pharcade may disclose personal data where required to do so by a court order, subpoena, or other valid legal process issued by a Philippine court or competent authority, or where pharcade reasonably believes disclosure is necessary to protect the rights, property, or safety of pharcade, its players, or the public.

6.6 Cloud and Infrastructure Providers

pharcade uses cloud computing and infrastructure services to operate the platform. Personal data stored on cloud infrastructure is subject to the same security controls as data stored on pharcade-owned systems, and cloud providers are engaged under data processing agreements that prohibit use of data beyond the provision of infrastructure services.

Some of pharcade's service providers and game content studios are located outside the Philippines. Where personal data is transferred to a country that has not been assessed by the NPC as providing an adequate level of data protection, pharcade ensures that such transfers are made only pursuant to appropriate safeguards, which may include:

• Binding data processing agreements incorporating the NPC's standard contractual clauses or equivalent protections;
• The recipient organization's adherence to an approved code of conduct or certification scheme recognized by the NPC; or
• Such other lawful transfer mechanism as pharcade implements in compliance with its obligations under the DPA 2012.

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting pharcade's Data Protection Officer using the contact details in Section 16.

pharcade retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with PAGCOR's record-keeping requirements and the Anti-Money Laundering Act.
• Transaction data: Retained for a minimum of five (5) years following each transaction, in compliance with AMLC reporting and record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Gaming session and betting history: Retained for a minimum of three (3) years for dispute resolution purposes and regulatory compliance.
• Customer support communications: Retained for a minimum of three (3) years following the resolution of the relevant support interaction.
• Marketing consent records: Retained for as long as your account is active and for a period of three (3) years following account closure.
• Technical log data: Retained for a maximum of twelve (12) months, after which it is anonymized or deleted.

Where data is no longer required for any purpose and no legal retention requirement applies, pharcade will securely delete or anonymize the data. Anonymized data (from which you cannot be identified) may be retained for longer periods for statistical and analytical purposes.

pharcade uses cookies and similar tracking technologies on the pharcade platform. Cookies are small text files placed on your device by your browser when you visit a website. They enable pharcade to recognize your device, maintain your login session, and collect usage data to improve the platform.

9.1 Types of Cookies pharcade Uses

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your pharcade account during a session. These cookies cannot be disabled without impairing basic platform functionality.
• Functional Cookies: Remember your preferences, such as preferred game category, language settings, and responsible gaming display options. These enhance your experience but are not essential.
• Performance and Analytics Cookies: Collect anonymized data about how players use the pharcade platform — which pages are visited, how long sessions last, and which features are used most. This data helps pharcade identify areas for improvement. pharcade uses only self-hosted or privacy-compliant analytics for this purpose.
• Security Cookies: Support pharcade's fraud detection and account security measures, including device fingerprinting used to identify suspicious login attempts.

9.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete stored cookies, or receive a notification before a cookie is placed. Note that disabling cookies may affect the functionality of the pharcade platform, including your ability to remain logged in to your account.

pharcade implements technical and organizational security measures designed to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Encryption: All data transmitted between your device and pharcade's servers is encrypted using 256-bit SSL/TLS.
• Password Hashing: Account passwords are stored exclusively as cryptographic hashes using a strong, salted hashing algorithm. Plaintext passwords are never stored.
• Access Controls: Access to personal data within pharcade's systems is restricted on a need-to-know basis. All access is logged, and access privileges are reviewed regularly.
• Two-Factor Authentication: Login to pharcade administrative systems requires multi-factor authentication. Player-facing 2FA via mobile OTP is available and triggered automatically for unrecognized device logins.
• Penetration Testing: pharcade engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of the platform's infrastructure.
• Incident Response: pharcade maintains a documented data security incident response plan. In the event of a breach affecting personal data, pharcade will notify the NPC and affected users in accordance with Section 14 of this Policy.

While pharcade takes its security obligations seriously, no digital system is completely immune from risk. You are responsible for maintaining the security of your own login credentials and for notifying pharcade immediately if you suspect unauthorized access to your account.

Under the Data Privacy Act of 2012, you have the following rights in relation to the personal data pharcade holds about you:

To exercise any of these rights, contact pharcade's Data Protection Officer using the details in Section 16. pharcade will respond to all valid rights requests within thirty (30) days of receipt. Where a request is complex or where pharcade receives multiple requests from the same individual, this period may be extended by a further sixty (60) days, with notice provided to you.

The pharcade platform is strictly for individuals who are 21 years of age or older. pharcade does not knowingly collect personal data from individuals under the age of 21. The age verification procedures pharcade implements at registration and at the point of first withdrawal are designed to identify and exclude underage users.

If pharcade becomes aware that personal data has been collected from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account, and will refund any deposits made pursuant to applicable regulatory requirements. If you are a parent or guardian and believe that a minor has accessed pharcade and provided personal data, please contact pharcade's Data Protection Officer immediately.

pharcade may send you promotional and marketing communications — including information about bonuses, new games, and platform promotions — via SMS, email, or push notification, where you have opted in to receive such communications.

Marketing communications from pharcade are opt-in only. You will be asked to confirm your marketing preferences when registering your pharcade account. You may update these preferences at any time through your account settings under "Communication Preferences," or by responding to an opt-out link included in any marketing message pharcade sends you.

Withdrawing your consent to marketing communications does not affect the processing of personal data for other purposes (such as account management, transaction processing, and regulatory compliance) which are based on different legal grounds.

In the event of a personal data breach — meaning any incident that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to personal data — pharcade will:

• Activate its internal incident response procedure immediately upon discovery.
• Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of a breach that is likely to result in serious harm to affected data subjects.
• Notify affected data subjects directly — via email to their registered address or via account notification — where the breach is likely to result in a high risk to their rights and freedoms.
• Provide affected data subjects with the nature of the breach, the categories of data affected, steps pharcade has taken to address the breach, and recommendations for steps affected individuals can take to protect themselves.

If you suspect that your pharcade account has been compromised, or that your personal data has been accessed without authorization, please contact pharcade support immediately via live chat so that protective measures can be implemented without delay.

pharcade may update this Privacy Policy from time to time to reflect changes in how we process personal data, changes in applicable law or PAGCOR regulations, or changes to our services. The "Effective" date at the top of this Policy reflects when the current version took effect.

Where changes to this Policy are material, pharcade will notify registered Players via email to their registered account address and display a notice on the pharcade platform at least seven (7) days before the changes take effect. For non-material changes, the updated Policy will be published on this page without advance notice.

Your continued use of the pharcade platform following the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a material change, you have the right to close your account and request deletion of your personal data, subject to pharcade's legal retention obligations.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pharcade, you may contact pharcade's Data Protection Officer using the following channels:

• Data Protection Officer, pharcade
• Live Chat: Available 24/7 via the pharcade platform. Request to be connected to a DPO-related inquiry for escalation to the DPO team.
• Email: [email protected] (plain text — not a clickable link). Responses within three (3) business days.

If you believe that pharcade has not adequately addressed your concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC's contact details and complaint procedures are publicly available on the NPC's official website.