phmystic Privacy Policy — What We Collect and How We Keep It Safe

When you register for a phmystic account, we collect the personal details you provide directly, including your full name, date of birth, email address, mobile number, and a government-issued ID for age and identity verification as required under Philippine gaming regulations. When you make deposits or withdrawals, we also collect transaction-related information such as your payment method details, transaction amounts, and timestamps — though we do not store full card numbers or full bank account credentials on our servers. As you use the platform, we automatically collect certain technical data including your device type, operating system, browser version, IP address, and session activity logs. This technical data helps us detect unusual account behaviour, prevent fraud, and ensure the platform runs correctly on your device. We may also collect information you voluntarily provide when you contact our support team, such as the content of your messages and any attachments you send. All data collection is limited to what is genuinely necessary to operate your account, process your transactions, and comply with our obligations under Philippine law. We do not collect sensitive personal information such as racial or ethnic origin, political opinions, or health data.

The primary purpose for collecting your personal data is to create and manage your phmystic account, process your deposits and withdrawals, and deliver the gaming services you have signed up for. We use your identity and age verification data to comply with Philippine gaming regulations and to ensure that only eligible adults aged 21 and above can access the platform. Transaction data is used to process payments accurately, detect and prevent fraudulent activity, and maintain the financial integrity of the platform. Technical and session data is used to monitor platform performance, troubleshoot issues, and improve the overall user experience for players across the Philippines. We may use your contact details to send you important account notifications, security alerts, and updates about changes to our Terms or this Privacy Policy — these communications are not optional as they relate directly to your account. If you have opted in to receive promotional communications, we may also send you information about new games, features, or offers available on phmystic; you can opt out of these at any time through your account settings. We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

phmystic does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. We share your data only with carefully selected service providers who assist us in operating the platform, and only to the extent necessary for them to perform their specific function. These include payment processors and e-wallet providers such as GCash partners who handle your PHP transactions, identity verification services that confirm your age and identity documents, and cloud infrastructure providers that host the platform's servers and databases. All third-party service providers are contractually required to handle your data securely, use it only for the purpose for which it was shared, and comply with applicable Philippine data protection laws. We may also disclose your information to regulatory authorities, law enforcement agencies, or courts in the Philippines if we are legally required to do so, or if disclosure is necessary to protect the rights, property, or safety of phmystic, our players, or the public. In the event that phmystic undergoes a business restructuring, merger, or acquisition, your personal data may be transferred to the successor entity, and you will be notified of any such change in advance. We do not transfer your personal data outside the Philippines unless adequate data protection safeguards are in place and the transfer is permitted under applicable law.

We take the security of your personal information seriously and implement a range of technical and organisational measures to protect it from unauthorised access, loss, alteration, or disclosure. All data transmitted between your device and the phmystic platform is encrypted using industry-standard TLS protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit. Our servers are hosted in secure data centres with restricted physical and logical access, and we conduct regular security assessments to identify and address potential vulnerabilities. Access to your personal data within phmystic is limited to staff and systems that genuinely need it to perform their role, and all staff with data access are trained on data protection obligations. We use multi-factor authentication options for account access and encourage all players to enable these features to add an extra layer of protection to their accounts. In the unlikely event of a data breach that affects your personal information, we will notify you and the relevant Philippine authorities in accordance with our legal obligations and within the timeframes required by law. While we work hard to protect your data, no system is completely immune to risk, and we encourage you to use a strong, unique password for your phmystic account and to keep your login details confidential.

As a player based in the Philippines, you have rights over your personal data under the Data Privacy Act of 2012 and its implementing rules and regulations. You have the right to be informed about how your data is collected and used, which is the purpose of this Privacy Policy. You have the right to access the personal data we hold about you — you can request a copy of your data at any time through the support channel in your account dashboard. If any of your personal information is inaccurate or incomplete, you have the right to request that we correct it, and we will do so promptly upon verification. You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, subject to our legal retention obligations. You also have the right to object to certain types of processing, including direct marketing communications, and to withdraw any consent you have previously given at any time without affecting the lawfulness of processing carried out before withdrawal. If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. To exercise any of these rights, please contact us through the support channel available in your phmystic account dashboard.

We retain your personal data for as long as your account is active and for a period thereafter as required by Philippine gaming regulations, tax laws, and anti-money laundering obligations — typically a minimum of five years following account closure. After the applicable retention period has expired, your personal data is securely deleted or anonymised so that it can no longer be linked back to you. Transaction records may be retained for longer periods where required by specific regulatory requirements applicable to licensed gaming operators in the Philippines. phmystic uses cookies and similar tracking technologies on the platform to maintain your session, remember your preferences, and analyse how the platform is used so we can improve it. Essential cookies are necessary for the platform to function and cannot be disabled; analytical cookies help us understand usage patterns and are used only in aggregate, anonymised form. We do not use third-party advertising cookies or share cookie data with external advertising networks. You can manage your cookie preferences through your browser settings, though disabling essential cookies may affect your ability to log in and use the platform normally.