This Privacy Policy explains how phace collects, uses, stores, shares, and protects information connected with our website and gaming services. It also outlines the choices available to eligible Filipino account holders.
Privacy should be understandable, not buried in technical language. These core commitments describe how phace handles account and platform information.
phace collects information needed to create accounts, confirm eligibility, maintain security, process supported transactions, and provide available services. We aim to explain these purposes clearly so users understand why information is requested.
phace applies organisational and technical safeguards to personal information. Account holders also play an important role by using unique passwords, private devices, and careful login habits.
Subject to verification and applicable requirements, phace users may request access to personal information, ask for inaccurate details to be corrected, or raise questions about how their data is handled.
From registration to account closure, phace follows a practical information lifecycle based on service needs, security, and applicable obligations.
phace receives information directly from users, their devices, account activity, and supported transaction providers.
Information supports identity checks, platform delivery, security monitoring, payments, communication, and responsible gaming.
phace uses controlled access, monitoring, verification, and other reasonable safeguards appropriate to the information involved.
Information is kept only as needed for stated purposes and applicable requirements, then deleted or anonymised where appropriate.
This Privacy Policy applies when you visit the phace website, register an account, access an available game or sports market, complete a supported transaction, contact support, or otherwise interact with the platform. It covers information that identifies you directly as well as information that may identify you when combined with other records.
The policy should be read together with the phace Terms and Conditions. Those terms explain the contractual rules for account use, while this document focuses on personal information. Product notices or transaction screens may provide additional details when phace needs information for a particular purpose.
phace is intended only for eligible adults. We do not knowingly offer accounts to children or persons below the applicable legal age. If information indicates that an account holder does not meet the age requirement, phace may restrict the account while eligibility is reviewed.
The information requested by phace depends on how you use the platform. Visitors can view public pages without opening an account, but registration and transaction features require more detailed information. The main categories are described below.
During registration, phace may collect your full name, date of birth, residential address, nationality, account username, password record, mobile number, email address, and answers needed for account security. We may request government-issued identification, a current photograph, proof of address, or similar documents to verify identity and eligibility.
When you make an eligible deposit or withdrawal, phace may process the selected method, transaction reference, date, amount, status, and account-holder details. Supported options may include GCash, Maya, GrabPay, Coins.ph, InstaPay or PESONet bank transfer, BDO, BPI, UnionBank, and Visa or Mastercard bank cards.
phace does not need to display complete bank-card details in ordinary account views. Payment information may be handled through secure processing arrangements, while phace receives the records required to confirm and reconcile a transaction.
phace records account balances, deposits, withdrawals, bonuses, game activity, sports selections, stakes, wins, losses, session details, responsible-gaming settings, and account communications. These records help provide the service, settle activity, manage limits, investigate concerns, and maintain accurate account history.
When you access phace, technical records may include your internet address, device type, browser type, operating system, language, approximate location, login time, referring page, session identifiers, and platform performance information. These details help phace keep pages working, identify suspicious access, and understand common device needs.
If you contact phace, we may retain your message, contact details, attached documents, account reference, and the response provided. Calls or live assistance may be monitored or recorded where appropriate and permitted, with relevant notice provided through the service.
phace uses personal information only when there is a clear operational, contractual, security, legal, or consent-based reason. Depending on the situation, information may be used to:
phace does not treat personal information as an unlimited resource. Information gathered for identity verification will not be used for an unrelated purpose without a valid basis. Where consent is required, the request should identify what the user is agreeing to and how that choice may be changed.
phace may use cookies, local storage, session identifiers, and comparable technologies to remember login status, keep account sessions secure, store preferences, monitor performance, and detect unusual activity. Some technologies are necessary for core account functions and cannot be disabled without affecting the platform.
Browser controls may allow users to block or delete cookies. Doing so can remove saved preferences, end an active phace session, or prevent certain account features from working correctly. Users should review their browser settings carefully before changing them.
phace may also analyse aggregated usage information to understand which pages work well on common Philippine devices and connections. Aggregated reports are designed to focus on broader patterns rather than the activity of a specific identified person.
phace does not sell personal information to unrelated organisations for their independent advertising. Information may be shared only when reasonably necessary to provide the platform, maintain security, process transactions, protect users, or meet applicable obligations.
Recipients may include identity-verification providers, hosting and security providers, payment processors, banks, technical support suppliers, professional advisers, auditors, and authorised public bodies. Each recipient should receive only the information needed for its assigned function.
For example, a supported payment provider may need a transaction amount, account-holder name, and payment reference. A security provider may need device and login information to identify suspicious access. phace may provide information to an authorised authority when required by a lawful request or when necessary to investigate fraud, account misuse, or threats to platform safety.
If phace undergoes a reorganisation, merger, financing event, or transfer of business assets, relevant information may be included in that process subject to appropriate confidentiality and data-protection safeguards.
Personal information may be processed through systems located inside or outside the Philippines. Where information moves between locations, phace takes reasonable steps to ensure that the recipient applies safeguards appropriate to the nature of the information and the applicable requirements.
The location of a server does not remove the need for protection. phace considers access controls, contractual obligations, service reliability, security practices, and lawful transfer arrangements when selecting providers that may process user information.
phace applies reasonable technical and organisational measures intended to reduce unauthorised access, alteration, loss, misuse, or disclosure. Measures may include access restrictions, account verification, monitoring, secure transmission, password protection, transaction review, employee confidentiality, and incident-response procedures.
No website or storage system can promise absolute security. phace continually reviews practical risks, but users must also protect their accounts. Use a unique password, keep one-time codes private, lock your phone, avoid unknown networks, and sign out after using a shared device.
phace staff or support representatives will not need your complete password. Be careful with anyone who asks for login credentials or promises guaranteed gaming results. If you notice an unfamiliar login, payment, or account change, stop using the account and contact phace promptly.
phace keeps personal information for as long as reasonably required to provide services, maintain accurate financial records, investigate disputes, support security, apply responsible-gaming controls, and meet applicable obligations. Different categories may have different retention periods.
Closing a phace account does not always cause immediate deletion. Certain identity, payment, self-exclusion, and account activity records may need to remain available for fraud prevention, dispute handling, regulatory reporting, or legal claims. When information is no longer required, phace may securely delete it or anonymise it so that it no longer identifies the user.
Subject to identity verification, applicable law, and valid exceptions, a phace user may ask to access personal information, correct inaccurate details, object to certain processing, withdraw consent where consent applies, or request deletion or restriction.
A request should be clear enough for phace to understand the action required. We may ask for additional information to confirm that the requester is the account holder. This protects personal records from being released or altered by an unauthorised person.
Some requests may be limited where phace must retain information for account security, financial records, responsible-gaming restrictions, fraud investigations, or legal obligations. If a request cannot be completed in full, phace will aim to explain the reason where permitted.
Where permitted and based on the appropriate user choice, phace may send information about platform features, games, sports activity, or promotions. Marketing preferences are separate from essential messages about account security, transactions, policy updates, or service changes.
Eligible users may change promotional communication preferences through available account controls or by contacting phace. A preference update may take reasonable time to apply to communications already being processed.
Responsible-gaming status takes priority over marketing. When an account is self-excluded or subject to relevant restrictions, phace takes steps to stop promotional communication in line with the chosen control and applicable requirements.
phace may use automated tools to identify unusual login patterns, potentially fraudulent transactions, duplicate accounts, prohibited activity, or indicators connected with responsible gaming. These tools help review large volumes of activity consistently, but a flagged event does not automatically prove wrongdoing.
Where appropriate, phace staff may review the available information before applying significant account restrictions. Users may contact phace when they believe an automated or security-related decision was based on inaccurate information.
Responsible-gaming information may include limits, session patterns, self-exclusion choices, account restrictions, and support communications. phace treats this information carefully because it may reveal personal behaviour and financial concerns.
These records are used to apply requested controls, identify potential risk, prevent attempts to bypass exclusion, and support responsible platform operation. A phace user should not create another account to avoid an active restriction. Relevant information may be retained to enforce that restriction even after an account has been closed.
Do not provide another person’s personal information to phace unless you have a valid reason and permission to do so. A phace account must belong to the registered eligible adult and cannot be opened for a friend, family member, employee, or customer.
If documents include information about another person, users should provide only what is necessary and should avoid sending unrelated records. phace may request clarification or reject documents that cannot be properly connected to the account holder.
phace may update this Privacy Policy to reflect changes in platform functions, security practices, legal requirements, or information-handling procedures. The latest version will appear on this page with a revised review date.
When a change materially affects how personal information is used, phace may provide an additional platform notice where practical. Continued use after an update means the user should review the revised policy and decide whether to continue using phace.
Questions, correction requests, access requests, or privacy complaints may be sent to the official phace email shown in the footer. Include enough information to identify the relevant account and describe the request, but never include a complete password.
phace will review the concern, confirm identity where necessary, and respond within a reasonable period based on the request’s complexity. If additional time or documentation is needed, phace will aim to explain the next step clearly.