At philmacao, your privacy is not an afterthought — it's a core part of how we operate. This Privacy Policy explains exactly what personal data we collect from Filipino players, why we collect it, how we use it, and the rights you have over your own information.
By registering an Account or using the philmacao Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy is governed by the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (PDPA) of the Philippines, and applicable PAGCOR data handling requirements.
philmacao is an online casino and sports betting platform operating under applicable PAGCOR regulations, providing gaming services to eligible players in the Philippines. For the purposes of this Privacy Policy, philmacao acts as the data controller responsible for the personal information collected through the philmacao website at philmacao.asia and all associated services.
As a data controller, philmacao determines the purposes and means by which your personal data is processed. We are committed to handling your information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances from the National Privacy Commission (NPC) of the Philippines.
If you have any questions about how philmacao handles your personal data, you may contact our Data Protection Officer at any time using the contact details provided in Section 13 of this Policy.
philmacao collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, mobile number, residential address (city, province) | Account communications, support, regulatory notifications |
| Financial Data | GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank), transaction history | Deposit processing, withdrawal verification, AML compliance |
| Gaming Data | Game history, bet amounts, win/loss records, session duration, bonus usage | Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type, operating system, login timestamps | Security monitoring, fraud prevention, platform optimization |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Customer support, quality assurance, dispute resolution |
| Verification Documents | Scanned government ID, proof of address, selfie verification images | KYC compliance, identity verification, PAGCOR regulatory requirements |
Government-issued ID numbers and financial account details are classified as sensitive personal information under the Data Privacy Act of 2012. philmacao applies heightened security measures to this category of data and limits access to authorized personnel only on a strict need-to-know basis.
philmacao collects personal data through the following channels:
You provide personal data directly to philmacao when you:
When you access and use the philmacao Platform, certain technical data is collected automatically through cookies, web beacons, and server logs. This includes your IP address, device identifiers, browser type, pages visited, session duration, and in-game activity. This data is used to maintain platform security, detect fraudulent activity, and improve the overall user experience for Filipino players.
philmacao may receive personal data about you from third-party sources in limited circumstances, including:
philmacao uses your personal data only for legitimate, specified purposes. The primary purposes for which we process your data are:
philmacao will not use your personal data for any purpose that is incompatible with the purposes stated in this Policy without first obtaining your consent or establishing another lawful basis for processing.
Under the Data Privacy Act of 2012, philmacao processes your personal data on the following legal bases:
philmacao shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, game software suppliers, cloud hosting providers, and customer support platforms. All third-party processors are contractually bound to handle your data securely and only for the purposes specified by philmacao.
philmacao is required by law to disclose certain player data to PAGCOR and other competent Philippine regulatory and law enforcement authorities upon lawful request. This includes transaction records, identity verification data, and gaming activity logs where required for regulatory oversight, AML investigations, or criminal proceedings.
In the event of a merger, acquisition, or sale of all or part of philmacao's business, your personal data may be transferred to the acquiring entity as part of that transaction. philmacao will notify affected players of any such transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those in this Policy.
philmacao does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your information is used solely to operate the philmacao Platform and fulfill our legal obligations.
Cookies are small text files placed on your device when you visit the philmacao Platform. They allow the Platform to recognize your device, remember your preferences, maintain your session, and collect analytical data about how you use the site.
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies may affect the functionality of your philmacao Account and prevent you from accessing certain features of the Platform.
philmacao retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
Upon expiry of the applicable retention period, philmacao will securely delete or anonymize your personal data in accordance with its data disposal procedures.
philmacao implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
In the event of a personal data breach that poses a risk to your rights and freedoms, philmacao will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by philmacao. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 13.
philmacao will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified accordingly.
The philmacao Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations and applicable Philippine law. philmacao does not knowingly collect personal data from individuals under the age of 21.
If philmacao becomes aware that personal data has been collected from a person under 21 years of age, the associated Account will be immediately closed, all funds will be handled in accordance with applicable regulations, and the personal data will be deleted as soon as practicable. If you believe that a minor has registered an Account on the philmacao Platform, please contact our support team immediately.
philmacao employs age verification measures during the registration process and reserves the right to request additional proof of age at any time. Providing false information about your age during registration constitutes a material breach of the philmacao Terms & Conditions.
philmacao reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, philmacao will notify registered players via email and/or a prominent notice on the Platform prior to the changes taking effect.
The date of the most recent revision is displayed at the top of this page. Your continued use of the philmacao Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this Policy periodically to stay informed about how philmacao protects your personal data.
If any amendment to this Policy materially affects the way philmacao processes your personal data in a manner that requires fresh consent, philmacao will seek your explicit consent before the new processing begins.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way philmacao handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:
philmacao's Data Protection Officer is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. All data rights requests and privacy complaints are handled with strict confidentiality and in accordance with applicable Philippine law.
Our Privacy Commitments
Privacy at philmacao isn't just a legal checkbox — it's built into every layer of how we operate for Filipino players.
Every connection to the philmacao Platform is protected by industry-standard TLS encryption. Your personal data, payment details, and gaming activity are transmitted securely at all times — no exceptions.
Access to your philmacao Account data is restricted to authorized personnel only. Internal access logs are maintained and audited regularly to ensure your information is never accessed without a legitimate reason.
philmacao's data practices are fully aligned with Republic Act No. 10173 — the Data Privacy Act of 2012. We maintain a registered Data Protection Officer and comply with all NPC reporting and accountability requirements.
philmacao will never sell, rent, or trade your personal information to third parties for commercial gain. Your data is used exclusively to operate your Account and fulfill our regulatory obligations — nothing more.
philmacao gives you full control over your personal data. Access it, correct it, restrict its use, or request deletion — all through a simple request to our Data Protection Officer. Your rights under the PDPA are fully respected.
In the unlikely event of a data breach, philmacao is prepared to notify the NPC within 72 hours and inform affected players promptly. Our incident response procedures are tested regularly to ensure rapid, effective action.
Your Data Is Safe With Us
Now that you know how philmacao protects your privacy, enjoy everything our platform has to offer — from live casino tables and slots to PBA and UFC sports betting. Your data stays yours. 21+ only. Play responsibly.