Your privacy matters to phmarry. This Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you hold under Philippine law.
These highlights summarise our most important data practices. They do not replace the full Policy text below.
phmarry collects only the personal data required to operate your account, process transactions, comply with KYC and AML obligations, and deliver responsible gaming tools. We do not collect data for speculative or unnecessary purposes.
phmarry will never sell, rent, or trade your personal data to third-party advertisers, data brokers, or any commercial entity. Your information is used exclusively for operating and improving phmarry services for Filipino players.
All data transmitted between your device and phmarry is encrypted using 256-bit SSL/TLS — the same standard used by BPI, BDO, and Metrobank for online banking. Data at rest is encrypted in access-controlled environments with strict internal access logging.
As a Filipino data subject, you hold seven statutory rights under the Philippine Data Privacy Act of 2012, including the right to access, correct, erase, object, and data portability. phmarry honours all requests within the statutory timeframes.
phmarry's primary data processing infrastructure serving Filipino players is operated in compliance with Philippine data residency principles. Any cross-border data transfer is governed by strict contractual safeguards and disclosed in this Policy.
phmarry has appointed a Data Privacy Officer (DPO) as required by RA 10173. All privacy-related inquiries, access requests, and complaints are handled directly by the DPO team, which includes Filipino compliance professionals with experience in gaming regulation.
phmarry is committed to protecting the privacy and personal data of all players who use our platform. We understand that trust is the foundation of our relationship with Filipino players — and protecting your data is a non-negotiable part of earning and keeping that trust.
This Privacy Policy applies to all personal data collected by phmarry through: the phmarry website (phmarry.org), all game and betting interfaces on the platform, live chat and customer support interactions, email, SMS, and push notification communications, account registration and KYC verification processes, and any other digital touchpoint through which you interact with phmarry.
This Policy should be read together with the phmarry Terms & Conditions, which govern the contractual relationship between you and phmarry, and the Responsible Gaming Policy, which governs our obligations in relation to player welfare. Where any provision of this Privacy Policy conflicts with the Terms & Conditions, this Privacy Policy shall take precedence with respect to data privacy matters.
phmarry is the Personal Information Controller (PIC) in respect of all personal data collected through the platform, as defined under Section 3(h) of RA 10173. As PIC, phmarry determines the purposes for which and the means by which personal data is processed.
phmarry has designated a Data Privacy Officer (DPO) pursuant to Section 21 of RA 10173 and NPC Circular No. 16-01. The DPO is responsible for ensuring compliance with this Privacy Policy, responding to data subject requests, and liaising with the National Privacy Commission. The phmarry DPO can be contacted via the contact details set out in Section 17 of this Policy.
phmarry's data processing systems are registered with the National Privacy Commission (NPC) of the Philippines in accordance with RA 10173. phmarry complies with all NPC registration obligations, breach notification requirements, and Privacy Impact Assessment obligations applicable to its data processing activities.
phmarry collects only the personal data necessary for the specific purposes described in Section 5 of this Policy. The categories of personal data we collect are as follows:
| Category | Data Types | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, government ID type and number, selfie photograph, nationality | Account registration; KYC verification |
| Contact Data | Philippine mobile number, email address, city/province of residence | Account registration; support interactions |
| Financial Data | GCash number, Maya account, BPI/BDO/Metrobank account details (masked), USDT wallet address, transaction history, deposit and withdrawal amounts | Payment processing; AML obligations |
| Account Data | Username, hashed password, account creation date, login history, device identifiers, IP addresses used | Account creation; security monitoring |
| Gaming Activity Data | Game session logs, wager amounts, win/loss records, bonus usage, responsible gaming limit settings, self-exclusion status | Game play; regulatory reporting; responsible gaming compliance |
| Technical Data | Browser type and version, operating system, device type, screen resolution, referring URL, session duration, page interaction data | Platform access; analytics; fraud detection |
| Communications Data | Live chat transcripts, support email content, SMS logs (opt-in status), push notification preferences, survey responses | Support interactions; marketing (with consent) |
phmarry collects personal data through the following means:
You provide personal data directly to phmarry when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, set responsible gaming limits, respond to surveys, or participate in promotions. The accuracy of directly provided data is your responsibility — phmarry will act on the data you provide in good faith.
When you access phmarry, our servers automatically record certain technical information including your IP address, device identifiers, browser type, operating system, session start and end times, pages visited, and interaction patterns. This data is collected via server logs, cookies, and similar technologies described in Section 9 of this Policy.
When you make a deposit or request a withdrawal, phmarry receives transaction confirmation data from GCash, Maya, BPI, BDO, Metrobank, or other payment service providers. This data includes transaction reference numbers, timestamps, and amounts. phmarry does not receive or store full bank account numbers or full GCash credentials — only the information necessary to verify and reconcile your transaction.
KYC verification involves the collection and processing of government-issued ID documents and biometric-adjacent data (selfie photographs used for identity matching). This data is collected for regulatory compliance purposes and is handled under the highest tier of data protection controls applied by phmarry.
phmarry processes your personal data only for the purposes listed below and only where a lawful basis under RA 10173 exists for doing so.
| Purpose | Legal Basis (RA 10173) |
|---|---|
| Account registration and management | Contractual necessity (Section 12(b)); Consent (Section 12(a)) |
| Identity verification (KYC) and age confirmation | Legal obligation (Section 12(c)); Contractual necessity |
| Deposit and withdrawal processing | Contractual necessity (Section 12(b)) |
| Anti-money laundering (AML) monitoring and reporting to AMLC | Legal obligation (Section 12(c)); Compliance with RA 9160 as amended |
| Fraud detection, security monitoring, and abuse prevention | Legitimate interest (Section 12(f)); Legal obligation |
| Responsible gaming administration (limits, exclusions, monitoring) | Legal obligation; Contractual necessity; Player welfare |
| Customer support and dispute resolution | Contractual necessity (Section 12(b)) |
| Platform analytics and performance optimisation | Legitimate interest (Section 12(f)) |
| Personalised promotions and marketing communications | Consent (Section 12(a)) — opt-in only |
| Regulatory reporting to PAGCOR-context authorities | Legal obligation (Section 12(c)) |
phmarry does not sell, rent, or trade your personal data to any third party. We may share personal data with carefully selected third-party service providers and regulatory bodies strictly as necessary and only in the circumstances described below.
phmarry engages trusted third-party companies to perform specific functions in support of the platform. These include: payment processing companies (GCash / Mynt, Maya / Voyager Innovations, BancNet, and bank partners); identity verification and KYC technology providers; cloud infrastructure and hosting providers; fraud detection and cybersecurity vendors; customer support platform providers; and responsible gaming technology vendors. All service providers are bound by written data processing agreements that restrict use of your data to the agreed purpose only and impose security standards consistent with RA 10173.
phmarry is legally obligated to disclose personal data to the following authorities when required by applicable Philippine law: the Anti-Money Laundering Council (AMLC) pursuant to Republic Act No. 9160 (Anti-Money Laundering Act) as amended; the Philippine Amusement and Gaming Corporation (PAGCOR) or other gaming regulatory bodies in connection with audit, investigation, or compliance requirements; the National Privacy Commission (NPC) in connection with breach notifications, investigations, or data subject complaint proceedings; and courts of competent jurisdiction pursuant to lawful orders.
Certain aggregate, anonymised gameplay statistics may be shared with licensed game developers (such as PG Soft, Pragmatic Play, and Evolution) for game performance monitoring and certification purposes. No personally identifiable information is shared with game providers in connection with individual player gameplay.
phmarry's primary data processing operations are conducted in the Philippines. Some of phmarry's service providers operate infrastructure or support functions outside the Philippines. Where personal data is transferred outside the Philippines, phmarry implements the following safeguards in accordance with NPC requirements:
Cross-border transfers occur only where necessary (e.g., KYC verification vendors, cloud infrastructure) and never for marketing or commercial data monetisation purposes.
phmarry retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory requirements. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of active account + 5 years post-closure | AML legal obligation; RA 9160 |
| KYC documents (ID images, selfies) | Duration of active account + 5 years post-closure | AML legal obligation; regulatory audit |
| Financial transaction records | 5 years from transaction date | RA 9160; PAGCOR-context compliance |
| Gaming activity logs | 3 years from session date | Regulatory audit; dispute resolution |
| Support communications | 3 years from last interaction | Contractual; dispute resolution |
| Marketing consent records | Duration of consent + 3 years post-withdrawal | Consent management; NPC compliance |
| Technical/server logs | 12 months rolling | Security monitoring; fraud prevention |
| Self-exclusion records | Minimum 10 years or lifetime of exclusion | Responsible gaming legal obligation |
Upon expiry of the applicable retention period, phmarry will securely delete or irreversibly anonymise the relevant personal data. Deletion is executed in accordance with NIST SP 800-88 standards for secure data destruction.
phmarry uses cookies and similar tracking technologies to operate the platform, authenticate sessions, detect fraud, measure platform performance, and where you have consented, to deliver personalised content. The following categories of cookies are used:
These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. No consent is required for strictly necessary cookies.
Functional cookies remember your preferences such as language settings, display preferences, and responsible gaming limit configurations. They are set only for the duration of your session unless you opt to save preferences.
Analytics cookies collect anonymised information about how players use the phmarry platform — which pages are visited most often, where players come from, and how the platform can be improved. This data is aggregated and cannot be used to identify individual players. Analytics cookies require your consent and can be declined via the cookie preference centre.
You can manage cookie preferences through the phmarry cookie preference centre, accessible from the footer of the platform. You may also manage cookies through your browser settings — most modern browsers allow you to refuse cookies entirely or delete existing cookies. Note that disabling strictly necessary cookies will prevent you from logging in to your phmarry account.
phmarry applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
As a Data Subject under the Philippine Data Privacy Act of 2012, you hold the following rights in respect of your personal data processed by phmarry. phmarry will respond to all valid data subject requests within thirty (30) days of receipt, in accordance with the timelines prescribed by the NPC.
You have the right to request a copy of all personal data that phmarry holds about you, information about how it is used, who it has been shared with, and how long it will be retained. Submit an access request via the Data Privacy Officer contact details in Section 17.
You have the right to request correction of inaccurate, incomplete, or outdated personal data. Many details can be updated directly in your phmarry account settings. For KYC-linked identity data, corrections must be submitted with supporting documentation.
You may request deletion or blocking of your personal data where processing is unlawful, the data is no longer necessary for the purpose collected, or you have withdrawn consent. Erasure requests are subject to overriding legal retention obligations under the Anti-Money Laundering Act and PAGCOR regulatory requirements.
You have the right to object to processing of your personal data on grounds of legitimate interest or for direct marketing purposes. Objections to marketing are actioned immediately upon receipt. Objections to other processing are assessed on a case-by-case basis and a written response issued within the statutory timeframe.
You have the right to receive your personal data in a structured, commonly used, machine-readable format (CSV or JSON) for transfer to another service provider. Portability requests cover data provided directly by you and data generated through your phmarry account activity.
You have the right to seek compensation where you have suffered damages as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised processing of your personal data by phmarry.
If you are not satisfied with phmarry's response to a data rights request or believe your data has been mishandled, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. NPC contact details are published on the official NPC website. phmarry will cooperate fully with any NPC investigation.
phmarry will only send you personalised marketing communications — including promotional offers, bonus notifications, tournament invitations, and platform news — where you have provided explicit consent to receive such communications, in accordance with Section 12(a) of RA 10173 and NPC Advisory Opinion guidelines on consent.
You may withdraw marketing consent at any time by: (a) using the unsubscribe link in any marketing email from phmarry; (b) replying STOP to any phmarry marketing SMS; (c) updating notification preferences in your phmarry account settings; or (d) contacting phmarry support via live chat or email. Marketing opt-out requests are actioned within two (2) business days. Opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notices, and account security alerts — these will continue regardless of marketing preference.
Age verification is conducted as part of the KYC process for all registered players. If phmarry discovers or has reasonable grounds to believe that a registered account is held by a person under 21 years of age, the account will be immediately suspended, all personal data reviewed, and the account permanently closed. Any real-money balance will be returned to the verified payment method on file after deduction of any promotional credits received.
If you are the parent or guardian of a minor and believe that the minor may have registered a phmarry account, please contact our Data Privacy Officer immediately at [email protected]. We will investigate and act promptly, including deletion of all personal data collected in connection with the minor's account consistent with RA 10173.
The phmarry platform may include links to or integrations with third-party platforms — for example, game provider interfaces embedded within the phmarry lobby. phmarry is not responsible for the data privacy practices of third-party platforms. When you interact with a third-party component (such as a game studio's support portal), the relevant third party's own privacy policy governs the data collected through that interaction.
phmarry recommends that you review the privacy policies of any third-party platforms you interact with in connection with your phmarry gaming activity. phmarry does not share your phmarry account credentials or full personal profile with any third-party game providers.
In the event of a personal data breach that is likely to result in a real risk of harm to affected data subjects, phmarry will comply with the NPC breach notification obligations under NPC Circular No. 16-03 and Section 20(f) of RA 10173, as follows:
phmarry maintains a documented Incident Response Plan and conducts annual tabletop exercises to ensure readiness for breach response. Forensic investigation and containment capabilities are maintained as part of the phmarry security programme.
phmarry reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable Philippine law, NPC guidance, or platform developments. Material amendments — defined as changes that affect your rights or the scope of data processing in a substantive way — will be communicated to registered players via SMS or email to the contact details on file at least fourteen (14) days before the amended Policy takes effect.
Non-material amendments (such as clarifications, typographical corrections, or reorganisation of content without substantive change) may be made without advance notice. The date of the most recent revision is always displayed at the top of this page. Continued use of phmarry after the effective date of any amendment constitutes acknowledgment of the revised Privacy Policy.
phmarry recommends that you review this Privacy Policy periodically. If you have concerns about any amendment, you may contact the phmarry DPO before the effective date using the contact details in Section 17.
All data privacy inquiries, data subject rights requests, and privacy-related complaints must be directed to the phmarry Data Privacy Officer. The phmarry DPO team is staffed by Filipino compliance professionals and is available to assist you in both English and Filipino.
If you are not satisfied with phmarry's response to a data privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC accepts complaints from data subjects at their offices at 5th Floor Delegation Building, PICC Complex, Pasay City, Metro Manila, and through their official online complaints portal. phmarry will cooperate fully and promptly with any NPC investigation or inquiry.
phmarry is built on trust — bank-grade encryption, a dedicated Filipino data privacy team, and full compliance with RA 10173. Join hundreds of thousands of Filipino players who game safely and confidently on phmarry every day.