At phmystic, your privacy is not an afterthought — it is built into everything we do. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have over your own information under Philippine law.
These highlights summarize our key privacy commitments. Please read the full policy below for complete details.
phmystic collects personal data strictly for the purposes of account management, identity verification, payment processing, and regulatory compliance. We do not collect data we have no use for, and we do not sell your personal information to third parties.
phmystic operates in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its implementing rules and regulations. Your data rights under Philippine law are fully respected and enforceable on our platform.
phmystic does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Data shared with third parties is limited to what is strictly necessary for service delivery and legal compliance.
All personal data stored by phmystic is protected using industry-standard encryption and access controls. Our systems are regularly audited and tested to ensure your data remains safe from unauthorized access, disclosure, or misuse.
As a phmystic player, you have the right to access, correct, update, and request deletion of your personal data at any time. You can also withdraw consent for certain types of data processing, subject to legal and regulatory obligations.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, phmystic will notify affected players and the National Privacy Commission (NPC) within the timeframes required by Philippine law.
This Privacy Policy applies to all personal data collected by phmystic through its website, mobile platform, customer support channels, and any other services we provide. By using the phmystic platform, you acknowledge that you have read and understood this Privacy Policy.
phmystic ("phmystic," "we," "us," or "our") is an online gaming platform operating in the Philippines and serving Filipino players. phmystic acts as the data controller in respect of the personal data it collects from players and users of the phmystic platform (the "Platform").
As data controller, phmystic is responsible for determining the purposes and means of processing your personal data. We are committed to handling your personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and all applicable issuances of the National Privacy Commission ("NPC").
If you have any questions about this Privacy Policy or about how phmystic handles your personal data, you may contact our Data Protection Officer at [email protected].
phmystic collects the following categories of personal data from players and users of the Platform:
phmystic does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes under PAGCOR regulations and the DPA.
phmystic collects personal data through the following means:
phmystic uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity, contact, and account data |
| Identity verification (KYC/AML compliance) | Identity verification and financial data |
| Processing deposits and withdrawals | Financial and identity data |
| Providing gaming services and maintaining game records | Gaming and account data |
| Customer support and dispute resolution | Identity, contact, and gaming data |
| Fraud prevention and security monitoring | Technical, financial, and identity data |
| Responsible gaming monitoring and intervention | Gaming, account, and identity data |
| Regulatory reporting and legal compliance | All categories as required by law |
| Sending service-related communications | Contact and account data |
| Sending promotional communications (with consent) | Contact and gaming data |
| Platform improvement and analytics | Technical and usage data (aggregated) |
phmystic will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.
Under the Data Privacy Act of 2012, phmystic processes your personal data on the following legal bases:
phmystic does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:
phmystic engages trusted third-party service providers to assist in delivering the Platform, including identity verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank partner gateways), cloud hosting providers, customer support platforms, and analytics services. These providers are contractually bound to process your data only on phmystic's instructions and in accordance with applicable privacy laws.
phmystic may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), law enforcement agencies, and other competent authorities where required by law, court order, or regulatory directive.
In the event of a merger, acquisition, restructuring, or sale of all or part of phmystic's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.
phmystic will never share your personal data with third-party advertisers, data brokers, or any other party for their own commercial purposes. Any sharing of data is strictly limited to what is necessary for service delivery and legal compliance.
phmystic uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use the Platform.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform.
phmystic retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
As a general rule, phmystic retains account and transaction data for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and the Anti-Money Laundering Act. Identity verification documents are retained for the same minimum period.
Where personal data is no longer required for any lawful purpose, phmystic will securely delete or anonymize it in accordance with our data retention and disposal procedures. Anonymized data that can no longer be linked to an identifiable individual may be retained indefinitely for analytical purposes.
If you request account closure, phmystic will cease active processing of your personal data for marketing and gaming purposes. However, certain data will be retained for the minimum periods required by law and regulation, even after your account is closed.
phmystic implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
While phmystic takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying phmystic immediately if you suspect any unauthorized access to your account.
Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phmystic:
To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines.
The phmystic Platform is strictly intended for persons who are at least 21 years of age. phmystic does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to phmystic, please contact us immediately at [email protected] so that we can take appropriate action.
phmystic primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines, such as cloud infrastructure providers or identity verification services with international operations.
Where personal data is transferred outside the Philippines, phmystic ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under the Data Privacy Act of 2012. Such transfers are carried out only where necessary and in compliance with NPC guidelines on cross-border data transfers.
phmystic reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered players via email and through a prominent notice on the Platform prior to the changes taking effect.
The date of the most recent update is displayed at the top of this Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how phmystic protects your personal data. Your continued use of the Platform after the effective date of any update constitutes your acknowledgment of the revised Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way phmystic handles your personal data, please contact our Data Protection Officer:
Data Protection Officer – phmystic
Email: [email protected]
Response Time: Within 15 business days for formal data rights requests; within 24 hours for general privacy inquiries.
Support Hours: 24/7, including Philippine public holidays.
If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the independent regulatory body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.
For full details on your rights and how to file a complaint with the NPC, please refer to the official NPC website or contact the Commission directly through their official government channels.
Now that you know how we protect your data, join hundreds of thousands of Filipino players enjoying live casino, slots, bingo, and more — with fast GCash payouts and 24/7 local support.
21+ For entertainment purposes only. Please play responsibly.