phshy Privacy Policy for Secure Online Gaming in PH

Who this Privacy Policy covers

This policy applies to visitors, prospective members, registered players, and other people who communicate with phshy about its services. It covers information collected through the phshy website, registration process, account tools, game activity, payment channels, customer support, promotions, security reviews, and responsible gaming processes.

In this policy, “personal information” means information that identifies a person or can reasonably be linked to one. Some records may be sensitive because they concern identity documents, financial activity, account protection, or responsible gaming. phshy treats those records with additional care appropriate to their purpose and risk.

The policy does not change the rules governing wagers, withdrawals, or promotions. Those matters are explained in the Terms and Conditions and the relevant phshy pages. Privacy questions should be considered separately from whether a transaction or game result is valid.

Information phshy may collect

The exact information collected depends on how you interact with phshy. A person browsing public pages normally provides less information than a member who registers, deposits, plays, withdraws, enters promotions, or asks support to investigate an account.

phshy may receive information directly from you, automatically from your browser or device, or from organisations involved in payments, verification, fraud prevention, games, communications, or account security. We may also create internal records based on account activity, such as verification status, risk indicators, support notes, or responsible gaming controls.

How and why information is used

phshy uses personal information to create and administer accounts, authenticate logins, display balances, provide games, record wagers, settle results, process payments, answer questions, and maintain the overall player relationship. Without essential account information, phshy may be unable to provide registered services.

Information is also used to protect players and the platform. phshy may review devices, transaction patterns, linked accounts, failed login attempts, unusual gameplay, payment ownership, and identity records to detect unauthorised access, fraud, collusion, bonus abuse, chargebacks, or other prohibited conduct.

phshy may process information to meet legal, regulatory, financial, tax, reporting, anti-fraud, and responsible gaming requirements that apply to the service. Where appropriate, records may be used to establish, exercise, or defend legal rights and to respond to a valid request from an authorised body.

Service analysis helps phshy understand how pages perform across smartphones, tablets, and computers used in the Philippines. Aggregated trends can show whether players have difficulty completing registration, locating payment instructions, or using a page on mobile data. This information helps improve navigation and performance.

phshy may send essential messages about account security, identity checks, deposits, withdrawals, game settlements, policy changes, responsible gaming, or service availability. Marketing messages about phshy promotions may be sent where permitted and can be managed through the options made available to the player.

Cookies and similar technologies

phshy may use cookies, browser storage, session identifiers, and comparable technologies to remember essential settings, maintain secure logins, support navigation, prevent fraud, and understand website performance. Some technologies are necessary for account features to work correctly.

Functional records can remember language or display preferences. Security records can help phshy recognise unusual access or protect an active session. Performance information can show which pages load slowly or where visitors encounter errors. Where analytics are used, phshy aims to focus on improving the service rather than collecting information without a genuine purpose.

You can use browser controls to remove or block certain cookies. However, blocking essential technologies may prevent registration, login, account security, payment processing, or game sessions from working as intended. Browser settings apply to the device and browser where they are changed.

When phshy may share information

phshy does not disclose personal information merely because another person asks for it. Information may be shared with carefully selected organisations when this is reasonably necessary to deliver services, secure accounts, process transactions, investigate concerns, or meet applicable obligations.

• Payment providers and banks: to process GCash, Maya, GrabPay, Coins.ph, InstaPay or PESONet transfers, BDO, BPI, UnionBank, Visa, and Mastercard transactions.
• Identity and security providers: to verify player details, assess documents, detect fraud, monitor account risks, and prevent unauthorised use.
• Game and platform suppliers: to deliver games, record valid results, investigate interrupted rounds, manage tournaments, and maintain technical functions.
• Professional advisers: to receive legal, accounting, audit, security, or compliance assistance where confidentiality requirements apply.
• Authorities and lawful recipients: when disclosure is required by law, a valid process, player protection needs, or the investigation of suspected offences.

Providers are expected to handle information for defined purposes and to apply suitable safeguards. phshy may also share aggregated or de-identified information that does not reasonably identify an individual, such as general website performance or game popularity trends.

International processing and safeguards

Some phshy service providers or technical systems may process information outside the Philippines. Privacy and data protection rules can differ between locations. Where cross-border processing occurs, phshy seeks to use contractual, organisational, and technical safeguards appropriate to the information and service involved.

International processing may be necessary for game delivery, security monitoring, verification, payment support, website hosting, or technical maintenance. phshy limits access according to operational roles and expects service providers to use the information only for agreed purposes, subject to applicable requirements.

How phshy protects personal information

phshy uses layered safeguards intended to protect personal information against accidental loss, unauthorised access, improper alteration, and unlawful disclosure. Measures may include encrypted transmission, access restrictions, authentication controls, monitoring, record separation, secure development practices, staff procedures, and incident response processes.

No online service can promise absolute security. Players also have an important role. Use a unique password for phshy, keep your registered mobile number and email account secure, and do not reveal a one-time password to anyone. Avoid logging in through shared devices or unsecured public connections when handling payments.

If you believe another person has accessed your phshy account, change your password and contact support without delay. Include useful details such as the time of the event or an unfamiliar transaction, but never send your password or one-time password. phshy may temporarily restrict activity while the concern is investigated.

When a security incident affects personal information, phshy will assess the circumstances, work to contain the issue, document appropriate actions, and provide notices where required. The response will depend on the nature of the information, the likely consequences, and applicable obligations.

How long information is retained

phshy retains information for the period reasonably required to operate an account and fulfil the purposes described in this policy. Retention can continue after an account is closed when records remain necessary for transaction reconciliation, fraud prevention, legal claims, financial reporting, responsible gaming, security, or other valid obligations.

Different records can have different retention periods. A short-lived browser session does not need the same treatment as a verified withdrawal, an account dispute, or a self-exclusion record. phshy considers the type of information, its sensitivity, the reason it was collected, the risk of misuse, and any applicable requirement.

When information is no longer required, phshy may securely delete, anonymise, or isolate it according to the relevant process. Anonymised statistics that no longer identify a player may be retained to understand long-term performance and service trends.

Your privacy rights and choices

Depending on applicable law and the circumstances, you may have rights concerning personal information held by phshy. Requests are reviewed individually because some rights can be limited by identity verification, security, payment, fraud prevention, responsible gaming, legal, or record-retention requirements.

To protect account holders, phshy will verify the identity of a person making a request. Please provide enough detail to identify the relevant account and concern. Do not send passwords or one-time passwords. A complex or broad request may require clarification before it can be completed.

Responsible gaming and privacy

phshy may process gameplay, deposit, withdrawal, session, communication, and limit information to support responsible gaming. This can include recording a cooling-off period, account limit, self-exclusion request, or interaction about potentially harmful play.

Responsible gaming records may need to be retained even after account closure so that phshy can respect an active restriction and prevent attempts to create another account. Access to this information is limited according to operational need and applicable requirements.

Automated indicators may help identify patterns that warrant a review, but an indicator does not automatically establish that a person has a gambling problem. phshy may use the available context to decide whether to send information, request a conversation, apply safeguards, or restrict activity.

Players can learn more about budgets, breaks, limits, and safer habits on the Responsible Gaming page. Privacy does not prevent phshy from taking reasonable steps intended to protect a player or comply with an active restriction.

Children and underage access

phshy is intended only for adults who meet the applicable legal gaming age. The service is not directed at children, and minors must not register, deposit, play, or submit identity documents.

If phshy has reason to believe that an account belongs to an underage person, the account may be suspended while age and identity are reviewed. Relevant information may be retained or shared where necessary to protect the person, investigate the account, resolve transactions, or meet legal obligations.

Parents and guardians should keep payment details, identity documents, devices, passwords, and one-time passwords away from minors. If you believe a minor has used phshy, contact support promptly and provide enough information for an investigation.

Policy updates and privacy questions

phshy may revise this Privacy Policy when services, technology, payment arrangements, security practices, legal requirements, or player support processes change. The updated policy will be published on this page with a revised effective date. A separate notice may be provided where a change materially affects registered players.

Please review the current policy from time to time, especially before submitting new information. Continuing to use phshy after an update takes effect means that the revised information practices apply from that point, subject to any consent or notice requirement under applicable law.

Privacy questions can be sent to the website email shown in the footer. Include your registered details and a clear description of the issue, but do not send your password, full card credentials, or one-time password. phshy may ask for suitable verification before discussing an account.