At phslots, we take your personal data seriously — not as a legal checkbox, but as a genuine obligation to the Filipino players who trust us with their information. This Privacy Policy explains exactly what we collect, why we collect it, how we protect it, and what rights you hold as a data subject under Philippine law.
Our Privacy Commitments
These six principles summarise the phslots approach to data privacy. Full legal detail for each area is set out in the numbered policy sections below.
phslots collects only the personal data genuinely necessary for account operation, PAGCOR compliance, and payment processing. We do not harvest data speculatively or for resale to unrelated third parties.
All personal and financial data transmitted through phslots is protected by 256-bit TLS/SSL encryption. Account data is stored in access-controlled servers subject to regular security audits and intrusion testing.
phslots does not sell, rent, or trade your personal information to advertising networks, data brokers, or unrelated commercial parties. Your data is shared only where required for platform operation or Philippine legal compliance.
Under the Data Privacy Act of 2012 (RA 10173), you hold the right to access, correct, object to, and erase your personal data held by phslots. Requests are processed within the timeframes mandated by the National Privacy Commission.
phslots complies with the National Privacy Commission's implementing rules and with PAGCOR's data protection requirements for licensed online gaming operators. Our Data Protection Officer (DPO) oversees all compliance activities.
We retain your personal data only as long as necessary for the purposes described in this Policy or as required by Philippine law. Retention schedules for each data category are set out in Section 7 of this Policy.
This Privacy Policy ("Policy") describes how phslots ("phslots," "we," "our," or "us") collects, uses, discloses, and protects personal information obtained from individuals ("you," "your," or "data subject") who access or use the phslots platform at phslots.asia and any associated subdomains or mobile-optimised experiences (collectively, the "Platform").
This Policy is issued pursuant to and in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, the issuances of the National Privacy Commission ("NPC"), and the data protection obligations applicable to PAGCOR-licensed online gaming operators.
This Policy applies to all personal data processed by phslots in connection with your registration, account maintenance, gameplay, financial transactions, customer support interactions, and any other use of the Platform. It applies equally to data collected online via the Platform and, where applicable, through offline interactions with phslots support channels.
Acceptance: By registering an account or continuing to use the phslots Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy is incorporated by reference into the phslots Terms & Conditions.
For the purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller responsible for your data is the phslots operating entity — a PAGCOR-licensed online gaming operator operating the Platform accessible at phslots.asia.
phslots has appointed a Data Protection Officer ("DPO") in accordance with Section 21 of the DPA and NPC Circular 16-01. The DPO is responsible for overseeing phslots's data protection programme, ensuring compliance with the DPA and NPC regulations, and acting as the primary point of contact for data subject rights requests and privacy inquiries.
Contact details for the phslots DPO are provided in Section 14 of this Policy. All data subject requests and privacy complaints should be directed to the DPO in the first instance.
phslots collects the following categories of personal data in the course of operating the Platform. Data marked as mandatory is required for account creation and platform access; data marked as optional is collected only when voluntarily provided by you.
| Data Element | Purpose | Required |
|---|---|---|
| Full legal name | KYC verification, account identification, AML compliance | Mandatory |
| Date of birth | Age verification (21+ requirement), account eligibility | Mandatory |
| Philippine mobile number | Account verification, OTP/2FA, GCash/PayMaya linkage, support contact | Mandatory |
| Email address | Account communications, password recovery, transactional notifications | Mandatory |
| Residential address | KYC verification for higher withdrawal tiers; AML due diligence | Mandatory (KYC) |
| Nationality | Jurisdiction eligibility verification, PAGCOR compliance | Mandatory (KYC) |
For Know Your Customer (KYC) verification purposes, phslots may collect copies or images of government-issued identification documents, which may include the Philippine Statistics Authority (PSA) national ID (PhilSys), Philippine passport, Land Transportation Office (LTO) driver's licence, Social Security System (SSS) ID, or Unified Multi-Purpose ID (UMID). Document data is used solely for identity and age verification and is processed in accordance with Section 5 of this Policy.
phslots collects and processes transaction records associated with your account, including: deposit amounts, dates, and payment reference numbers; withdrawal requests and processing records; GCash and PayMaya e-wallet identifiers used for transactions; bank account details (account name and last four digits) where bank transfer is used; wallet balance history and bet transaction logs for AML monitoring purposes.
phslots automatically records data generated by your use of Platform games, including: game session timestamps and duration; game titles accessed; wager amounts and outcomes per session; bonus and promotion usage history; responsible gaming tool settings and activation records; and self-exclusion or cooling-off period status.
phslots collects technical data automatically when you access the Platform, including: IP address and approximate geographic location (country and region level); browser type and version; device type, operating system, and screen resolution; session cookies and local storage identifiers; referring URL and navigation path through the Platform; and connection timestamps and session duration logs.
phslots collects personal data through the following channels and mechanisms:
Under the Data Privacy Act of 2012, phslots processes your personal data on the following legal bases:
Processing is necessary for the performance of the contract between you and phslots as set out in the Terms & Conditions. This includes: account creation and management; processing of deposits, wagers, and withdrawals; provision of game access; customer support; and communication of account-related notices.
Processing is necessary for compliance with legal obligations applicable to phslots as a PAGCOR-licensed operator, including: age and identity verification under PAGCOR licensing requirements; anti-money laundering monitoring and reporting under RA 9160 as amended; suspicious transaction reporting to the Anti-Money Laundering Council (AMLC); and tax record-keeping obligations under Philippine tax law.
phslots processes certain data on the basis of its legitimate interests where those interests are not overridden by your rights and interests. Legitimate interest processing includes: fraud prevention and Platform security; responsible gaming monitoring and intervention where required; platform performance analytics and service improvement; and protection of phslots's legal rights in the event of disputes.
Where phslots sends you optional promotional communications (such as bonus offers, new game announcements, and loyalty programme updates), such processing is conducted on the basis of your consent provided at registration or subsequently through your Account notification preferences. You may withdraw consent for promotional communications at any time by updating your Account settings or contacting phslots support.
phslots does not sell your personal data. We share your data only in the following limited circumstances:
Transaction data is shared with Philippine-registered payment service providers — including GCash (Mynt/Globe Fintech Innovations), PayMaya (Maya Bank), BPI, BDO, Metrobank, UnionBank, 7-Eleven (PLSI), and Cebuana Lhuillier — to the extent necessary to execute your requested deposit or withdrawal transaction. These processors act as independent data controllers for their own services and are bound by their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.
Where phslots engages a third-party KYC verification service provider, your identity document data is transmitted to that provider solely for the purpose of verifying your identity and age. phslots enters into data processing agreements with KYC partners that require them to process your data only for the stated purpose and to maintain security standards consistent with the DPA.
phslots is required by Philippine law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), and other competent Philippine authorities where legally mandated. Such disclosures are made only to the extent required by the applicable legal obligation.
Third-party game software providers whose titles are accessible through the Platform may receive anonymised or pseudonymised session data (e.g., game ID, session token, bet and outcome data) for the purpose of game operation, jackpot aggregation, and technical support. These providers do not receive your name, contact details, or financial information unless specifically required for a licensed progressive jackpot payout verification.
phslots may disclose your personal data to courts, law enforcement agencies, or legal representatives to the extent necessary to establish, exercise, or defend legal claims or to comply with a valid court order or subpoena.
No cross-border transfers without safeguards: Where personal data is transmitted to entities outside the Philippines, phslots ensures that appropriate contractual safeguards are in place in accordance with NPC regulations on cross-border data transfers. See Section 12 for further detail.
phslots retains personal data for the minimum period necessary to fulfil the purposes described in this Policy or as required by applicable Philippine law, whichever is longer. The following retention schedules apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and identity data | 5 years from account closure | PAGCOR licensing requirements; AML obligations |
| KYC identity documents | 5 years from account closure | RA 9160 (AMLA) record-keeping obligation |
| Financial transaction records | 5 years from transaction date | RA 9160; BIR record-keeping; PAGCOR audit requirements |
| Gaming session and bet history | 3 years from session date | PAGCOR audit trail; responsible gaming monitoring |
| Customer support communications | 2 years from interaction date | Legitimate interests (dispute resolution) |
| Marketing consent records | Duration of consent plus 2 years | NPC compliance; evidence of lawful processing |
| Technical logs and IP records | 12 months from collection | Security monitoring; fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of your identity. Data subject to active legal proceedings, regulatory investigations, or unresolved disputes will be retained for the duration of those proceedings regardless of the standard retention schedule.
phslots implements technical, organisational, and physical security measures appropriate to the nature and volume of personal data processed on the Platform. These measures include, but are not limited to:
Player responsibility: The security of your phslots account also depends on the confidentiality of your login credentials. phslots will never ask for your password via email, live chat, or SMS. If you suspect your credentials have been compromised, change your password immediately and contact phslots support.
The phslots Platform uses cookies and similar technologies to operate core Platform functionality, maintain your session state, and improve your experience. The following types of cookies are used:
These cookies are essential for the Platform to function. They maintain your logged-in session, remember your currency and language preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without rendering the Platform non-functional. No consent is required for strictly necessary cookies under applicable Philippine law.
Functional cookies remember your preferences and personalise your experience on the phslots Platform — for example, retaining your preferred game lobby view or responsible gaming settings between sessions. These are set for the duration of your session or up to 12 months where persistence is required.
phslots uses first-party analytics data to understand how Players navigate the Platform, which game categories are most accessed, and where technical errors occur. This data is used exclusively to improve Platform performance and is not shared with third-party advertising networks. Analytics data is aggregated and does not identify individual Players by name.
You may manage or delete cookies through your browser settings. Note that disabling cookies beyond strictly necessary ones may affect the functionality of certain Platform features. Instructions for managing cookies in major browsers are available through the browser's own help documentation.
Under the Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by phslots. These rights are exercisable by submitting a written request to the phslots Data Protection Officer (see Section 14). phslots will respond to all verified requests within thirty (30) calendar days of receipt, as required by NPC regulations.
Request a copy of the personal data phslots holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data held about you in phslots records.
Request deletion of your personal data where processing is no longer necessary, subject to overriding legal obligations.
Object to processing of your data for direct marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interests.
Receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
Withdraw consent for consent-based processing (e.g., marketing communications) at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please contact the phslots Data Protection Officer using the contact details in Section 14. phslots may require you to verify your identity before processing a data subject request. Requests from unverified parties cannot be actioned.
If you believe phslots has not adequately addressed your privacy concerns, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the competent supervisory authority for data protection matters under Philippine law.
The phslots Platform is strictly intended for use by adults aged 21 years and above in compliance with PAGCOR licensing requirements and the minimum age for participation in casino-style gaming in the Philippines. phslots does not knowingly collect, use, or retain personal data from persons under the age of 21.
phslots employs date-of-birth verification at account registration and identity document verification during the KYC process to enforce this age requirement. Where phslots discovers or is notified that personal data of a person under 21 has been collected, it will take prompt steps to: (a) suspend the relevant Account; (b) delete or anonymise the personal data of the minor to the extent not required to be retained for regulatory purposes; and (c) refund any deposits made, subject to fraud investigation.
Parents and guardians who believe their child may have registered an Account on phslots are encouraged to contact the phslots DPO immediately using the contact details in Section 14.
The phslots Platform and the majority of its data processing infrastructure are operated within the Philippines. In certain circumstances, personal data may be transmitted to and processed by entities located outside the Philippines — for example, where phslots engages an internationally headquartered KYC technology provider or a game software provider whose servers are hosted outside the Philippines.
phslots ensures that all cross-border transfers of personal data are conducted in accordance with the requirements of the Data Privacy Act of 2012 and relevant NPC issuances. Specifically, phslots implements one or more of the following safeguards for cross-border transfers: (a) standard contractual clauses approved by or acceptable to the NPC; (b) binding corporate rules where applicable; or (c) transfer to jurisdictions that have been assessed as providing an adequate level of data protection.
Details of the cross-border transfers conducted by phslots and the safeguards applicable to each may be requested from the DPO using the contact details in Section 14.
phslots reserves the right to amend this Privacy Policy at any time to reflect changes in: Philippine privacy legislation or NPC regulations; PAGCOR licensing requirements; the nature of personal data processing conducted by phslots; or Platform features that affect data collection.
Material changes to this Policy will be communicated to registered Players via email to the registered address and via a prominent notice on the Platform. The "Effective Date" shown at the top of this Policy will be updated upon each revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of an amendment constitutes your acknowledgement of the revised Policy.
Prior versions of this Policy are archived and available upon request from the phslots DPO.
For all inquiries, requests, or complaints relating to this Privacy Policy or to the processing of your personal data by phslots, please contact our Data Protection Officer using the following channels:
phslots will acknowledge all formal privacy requests within five (5) business days and provide a substantive response within thirty (30) calendar days of verified receipt, as required by the Data Privacy Act of 2012.
NPC complaints: If you are not satisfied with phslots's response to your privacy concern, you may file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on the NPC complaint process is available through the NPC's official channels.
This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions. phslots is a PAGCOR-licensed online gaming operator serving Filipino players. All data processing activities described herein are conducted in accordance with Philippine law.
Your data is protected. Your funds are regulated. Your gameplay is fair. phslots is the PAGCOR-licensed online casino built for Filipino players — with GCash deposits, same-day withdrawals, and 2,000+ games waiting for you.