phsuper is committed to protecting the personal data of every Filipino player who uses our platform. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, who we share it with, and the rights you have over your own information under Philippine law.
controller: "phsuper"
framework: "RA 10173"
regulator: "NPC / PAGCOR"
encryption: "TLS 1.3"
data_sale: false // never
dpo: "[email protected]"
Notice to All phsuper Players: This Privacy Policy applies to all personal data collected by phsuper through the phsuper.vip website, mobile browser interface, and any associated customer support channels. By registering a phsuper account or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. Please read it in full alongside our Terms & Conditions.
phsuper ("we", "us", "our", or "the Operator") operates the online gaming platform accessible at phsuper.vip and is committed to protecting the privacy and personal data of all registered Players and website visitors ("you" or "the Data Subject"). This Privacy Policy sets out the basis on which phsuper collects, processes, stores, and discloses personal data in connection with the provision of its online casino, sports betting, and related gaming services to Players in the Philippines.
phsuper processes personal data in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and the implementing rules and regulations issued by the National Privacy Commission ("NPC"). phsuper additionally complies with the data handling requirements imposed by the Philippine Amusement and Gaming Corporation ("PAGCOR") as conditions of its operating licence.
This Privacy Policy applies to personal data collected through the phsuper.vip website, through the phsuper account registration and login process, through gameplay and transaction activity on the platform, and through any communication you initiate with phsuper's customer support team via live chat, email, or other available channels. It does not apply to third-party websites or services that may be linked to or accessible from the phsuper platform, including the websites of game providers, payment processors, or other external services.
Scope of Application: This Privacy Policy covers all personal data collected from persons who register, visit, or interact with phsuper through any channel. If you are a Philippine resident, your data rights under the DPA apply in full. phsuper's data processing activities are subject to NPC oversight and PAGCOR regulatory audit.
For the purposes of the Data Privacy Act of 2012, phsuper is the personal information controller in respect of all personal data collected through the phsuper.vip platform and associated services. As the data controller, phsuper determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.
phsuper has designated a Data Protection Officer ("DPO") responsible for overseeing data protection compliance, handling data subject rights requests, and acting as the point of contact for the National Privacy Commission. Player inquiries and formal data subject rights requests may be directed to the DPO using the contact details provided in Section 13 of this Privacy Policy.
phsuper collects personal data from Players through several distinct collection points, each corresponding to a specific stage of the Player relationship. The categories of personal data collected are as follows:
When you create a phsuper account, we collect the information you provide during the registration process, which includes: your full legal name as it appears on a Philippine government-issued identification document; your date of birth; your registered Philippine mobile number; and your email address. This information forms the foundation of your phsuper account and is used for identity verification, account authentication, and regulatory compliance purposes.
In compliance with PAGCOR's Know Your Customer requirements, phsuper collects documentary evidence of Player identity and address prior to processing withdrawal requests. KYC data may include scanned or photographed copies of your Philippine government-issued identification (e.g., PhilSys National ID, Driver's License, Passport, SSS ID, or UMID), proof of address documentation such as a recent utility bill or bank statement, payment method ownership documentation, and selfie photographs taken with identification documents.
phsuper records all financial transactions conducted through your account, including deposit amounts and timestamps, payment methods used, withdrawal requests and processing records, bonus credits and wagering activity, and account balance history. Financial transaction data is required for regulatory reporting under PAGCOR requirements and for anti-money laundering compliance under applicable Philippine law.
phsuper automatically collects technical and gameplay data during your use of the platform, including IP address and geolocation data at the time of login and gameplay sessions; device type, operating system, and browser information; session duration and activity logs; game results and bet histories; and platform navigation behaviour. This data is used for security monitoring, fraud detection, regulatory reporting, and platform improvement purposes.
When you contact phsuper's customer support team via live chat or email, we retain records of those communications, including the content of your messages and any attachments you provide. Communication records are used to resolve your queries, train our support team, and maintain records required for dispute resolution purposes.
| Data Category | Examples | Collection Trigger |
|---|---|---|
| Registration Data | Name, DOB, mobile, email | Account sign-up |
| KYC / Identity | Gov't ID, proof of address, selfie | Before first withdrawal |
| Financial & Transactions | Deposit/withdrawal records, GCash details | Every transaction |
| Gameplay & Technical | IP, device, session logs, bet history | Each login / game session |
| Communications | Chat transcripts, support emails | Customer support contact |
| Cookies & Analytics | Session cookies, performance analytics | Website visit |
phsuper processes personal data only for specific, explicitly stated purposes. We do not process personal data in a manner that is incompatible with the purposes for which it was originally collected. The primary purposes for which phsuper processes Player personal data, and the corresponding legal basis for each, are set out below:
Marketing Opt-Out: If you have consented to receive promotional communications from phsuper and wish to withdraw that consent, you may do so at any time through your phsuper account settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing that took place before the withdrawal.
phsuper does not sell, rent, or transfer your personal data to unaffiliated third parties for their own independent commercial purposes. Personal data is shared with third parties only in the following defined circumstances:
phsuper engages third-party service providers who process personal data on phsuper's behalf and under phsuper's instructions as data processors. These include: payment processing companies (GCash/Maya integrators, banking partners, card processors); game software providers for KYC-related functions; identity verification and document authentication services; customer support platform providers; and cloud hosting and data security infrastructure providers. All phsuper data processors are contractually bound to process Player data only in accordance with phsuper's documented instructions and applicable Philippine data protection law.
phsuper is required to disclose certain Player data to PAGCOR as part of its ongoing regulatory reporting obligations. phsuper will also disclose personal data to the National Privacy Commission, the Anti-Money Laundering Council (AMLC), Philippine law enforcement authorities, or courts of competent jurisdiction where required by law, court order, or regulatory direction. phsuper will notify affected Players of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, sale of business assets, or corporate restructuring involving phsuper, Player personal data may be transferred to the successor entity as part of the transaction. Affected Players will be notified of any such transfer and of any material changes to data processing arrangements that result from it, with adequate advance notice before those changes take effect.
No Data Selling: phsuper does not and will never sell your personal data to third-party marketers, advertising networks, data brokers, or any other party for commercial purposes. This applies to all categories of personal data without exception.
phsuper retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law or PAGCOR regulation. The general retention periods applicable to different categories of Player data are as follows:
Upon the expiry of the applicable retention period, phsuper will securely delete or anonymize personal data in accordance with documented data disposal procedures. Anonymized data that can no longer identify any individual may be retained indefinitely for statistical and analytical purposes.
phsuper implements a comprehensive suite of technical and organizational security measures designed to protect Player personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:
In the event of a personal data breach that is reasonably likely to result in serious harm to affected Data Subjects, phsuper will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected Players without undue delay, in accordance with Section 20(f) of the Data Privacy Act of 2012.
The phsuper.vip website uses cookies and similar tracking technologies to provide a functional, secure, and personalized user experience. A cookie is a small text file that is placed on your device when you visit a website. phsuper uses the following categories of cookies:
phsuper does not use advertising or third-party behavioral tracking cookies that would share your browsing data with external advertisers. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the phsuper platform.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, Philippine residents whose personal data is processed by phsuper have the following rights with respect to their personal information:
You have the right to be informed about how phsuper collects and uses your personal data, including the specific purposes for processing and the identity of the data controller. This Privacy Policy fulfils phsuper's obligation to inform.
You have the right to request access to the personal data that phsuper holds about you, including a copy of the data and information about how it has been processed. Requests will be fulfilled within 15 business days.
You have the right to request correction of inaccurate, incomplete, or outdated personal data that phsuper holds about you. Corrections to account registration data may be made through your phsuper account dashboard or by contacting the DPO.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for continued processing. This right is subject to phsuper's legal retention obligations under PAGCOR and AML regulations.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though phsuper may continue processing where there are compelling legal grounds.
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another data controller.
If you believe that phsuper has processed your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact details for the NPC are available on the NPC's official website.
Exercising Your Rights: To exercise any of the above rights, submit a written request to phsuper's Data Protection Officer at the contact address provided in Section 13. phsuper will respond to all valid data subject rights requests within 15 business days of receipt. Identity verification will be required before any request is processed to ensure that personal data is not disclosed to unauthorized individuals.
21+ Minimum Age: phsuper does not knowingly collect personal data from individuals under the age of 21. The minimum age to register and use phsuper is 21 years in accordance with PAGCOR's regulatory requirements. If phsuper becomes aware that a person under 21 has provided personal data during registration, the account will be closed immediately, the data will be deleted, and any deposits received will be returned via the original payment method.
Parents or guardians who believe that a minor may have registered on phsuper or provided personal data to phsuper without parental consent are encouraged to contact phsuper's Data Protection Officer immediately. phsuper will take prompt action to investigate, close the relevant account, and delete the associated personal data in accordance with the principles of data minimization and purpose limitation under the DPA.
Some of phsuper's technology partners and game providers operate infrastructure outside the Philippines. Where phsuper transfers personal data outside the Philippines to process it on phsuper's behalf, such transfers are conducted in accordance with Section 21 of the Data Privacy Act of 2012, which requires that the recipient country or organization provides an adequate level of protection for the personal data being transferred.
phsuper ensures that all cross-border data transfers are governed by appropriate contractual safeguards — including data processing agreements that mirror the obligations of the DPA and its implementing regulations — and that processing by overseas service providers is limited strictly to the purposes for which the data was originally collected by phsuper. phsuper does not transfer personal data internationally for purposes other than those described in this Privacy Policy.
phsuper may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or regulatory requirements, or improvements to our platform. When material changes are made to this Privacy Policy — meaning changes that significantly affect how we collect, use, or share your personal data — phsuper will notify registered Players via their registered email address or mobile number prior to the changes taking effect.
Minor updates, such as corrections to typographical errors or clarifications that do not change the substance of our data processing practices, may be made without advance notice. The effective date displayed at the top of this Privacy Policy will always reflect the date of the most recent revision. We encourage Players to review this Privacy Policy periodically to remain informed about how phsuper handles their personal data.
Your continued use of the phsuper platform after any update to this Privacy Policy constitutes your acknowledgment of the revised policy. If you do not agree with any changes to this Privacy Policy, you should discontinue your use of the platform and may request account closure in accordance with the procedures described in our Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how phsuper has handled your personal data, you may contact phsuper's Data Protection Officer through the following channels:
phsuper aims to respond to all Privacy Policy inquiries and data subject rights requests within 15 business days of receipt. Complex requests that require extensive data retrieval or legal review may take up to 30 days, in which case phsuper will notify you of the extended timeline and the reason for it within the initial 15-day window.
If you are not satisfied with phsuper's response to your data privacy inquiry or believe that phsuper has violated your rights under the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information about the NPC's complaint procedures is available through the NPC's official government channels.
Commitment: phsuper's Data Protection Officer is a dedicated role with the authority and resources to ensure that all data subject rights requests are handled correctly and within the timeframes required by Philippine law. Your privacy concerns are taken seriously and will be escalated appropriately within phsuper's compliance team.
The key data protection commitments that every phsuper Player benefits from — regardless of how much they play or how long their account has been active.
All data in transit between your device and phsuper's servers is encrypted using TLS 1.3 — the same standard used by Philippine banks. Stored personal data is encrypted at rest using AES-256 to prevent unauthorized access even in the event of a server compromise.
phsuper does not sell, rent, or transfer your personal data to third-party marketers or data brokers under any circumstances. Your data is used only to operate your account, comply with PAGCOR regulations, and improve the phsuper platform for Filipino players.
phsuper processes all Player personal data in strict accordance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012. Our processing practices are reviewed against NPC guidelines and PAGCOR regulatory requirements on an ongoing basis.
phsuper maintains a designated Data Protection Officer with the authority and resources to handle all data subject rights requests, oversee internal data protection compliance, and liaise directly with the National Privacy Commission on your behalf.
In the unlikely event of a personal data breach that poses risk of harm to Players, phsuper is committed to notifying the National Privacy Commission within 72 hours and informing affected Players without undue delay — well within the DPA's mandatory reporting requirements.
phsuper supports all six data subject rights under the Philippine DPA: access, rectification, erasure, objection, portability, and the right to complain to the NPC. All rights requests are handled within 15 business days by the phsuper DPO team.
phsuper is built on the principle that Filipino players deserve full transparency about how their data is used — and full control over it. PAGCOR regulated, NPC compliant, and always on your side.