pharcade Privacy Policy

1.About This Privacy Policy

1.1 This Privacy Policy ("Policy") is issued by pharcade ("pharcade," "we," "us," "our"), the operator of the online gaming platform accessible at pharcade.biz. This Policy applies to all personal data collected in connection with your use of the pharcade website, mobile browser experience, account services, games, payment processing, and customer support.

1.2 pharcade acts as the personal information controller in respect of the personal data it collects directly from players and website visitors. Where pharcade engages third-party service providers to process data on its behalf, those parties act as personal information processors under written data processing agreements.

1.3 This Policy is intended to comply with the Republic Act No. 10173 (Data Privacy Act of 2012 of the Philippines) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). pharcade takes its obligations under Philippine data privacy law seriously and has appointed a Data Protection Officer (DPO) to oversee compliance.

2.Personal Data We Collect

pharcade collects personal data from you in the following circumstances and categories:

2.1 Registration & Account Data

When you create a pharcade Account, we collect: your full legal name, date of birth, residential address, email address, and mobile phone number. This data is necessary to create and administer your Account and to verify your eligibility under the 21+ age requirement.

2.2 KYC Identity Verification Data

To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, pharcade collects government-issued identification documents (such as Philippine passport, driver's license, Unified Multi-Purpose ID, or national ID), proof of address, and where applicable, source of funds documentation. This data is processed solely for identity verification and compliance purposes.

2.3 Financial & Transaction Data

pharcade collects records of all deposits, withdrawals, and in-platform transactions associated with your Account, including payment method identifiers (e.g., GCash-registered mobile number, bank account name), transaction amounts, timestamps, and transaction reference numbers. Full payment credentials (card numbers, GCash PINs) are handled exclusively by PCI-DSS compliant payment processors and are not stored by pharcade.

2.4 Gameplay & Activity Data

pharcade automatically records data related to your use of the platform, including: game sessions played, wager amounts, session duration, game outcomes, bonus activity, login timestamps, and device/browser information (IP address, device type, operating system, browser version). This data is used for account security, responsible gaming monitoring, fraud prevention, and platform analytics.

2.5 Communications Data

When you contact pharcade support or communicate with us via live chat, email, or other channels, we retain records of those communications, including the content of messages and any attachments, for quality assurance, dispute resolution, and regulatory compliance purposes.

2.6 Cookies & Technical Data

pharcade collects technical data via cookies and similar tracking technologies as further described in Section 7 of this Policy.

3.How pharcade Uses Your Personal Data

pharcade uses the personal data it collects for the following purposes:

• Account administration: creating and managing your pharcade Account, processing deposits and withdrawals, and providing access to games and platform features;
• Identity verification and KYC compliance: verifying your age (21+), identity, and eligibility to use pharcade in accordance with PAGCOR-aligned requirements and Philippine anti-money laundering legislation;
• Security and fraud prevention: detecting, investigating, and preventing unauthorized access, fraudulent activity, money laundering, multi-accounting, and other prohibited conduct;
• Responsible gaming: monitoring gameplay patterns to identify indicators of problem gambling, communicating responsible gaming tools and resources, and processing self-exclusion requests;
• Customer support: responding to inquiries, resolving disputes, and providing assistance with Account-related issues;
• Legal and regulatory compliance: maintaining records required under Philippine gaming regulations and anti-money laundering laws, and responding to lawful requests from regulatory authorities and law enforcement;
• Platform improvement and analytics: analyzing usage patterns to improve game offerings, platform performance, and user experience — using aggregated and anonymized data where possible;
• Direct marketing: where you have provided consent, sending you promotional offers, bonus notifications, and updates about pharcade products and services. You may withdraw consent for marketing communications at any time by contacting [email protected].

4.Legal Basis for Processing

pharcade processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173):

• Contract performance: processing necessary to perform the pharcade user agreement (these Terms and Conditions) — including Account management, payment processing, and game access;
• Legal obligation: processing required to comply with applicable Philippine laws, including RA 9160 (Anti-Money Laundering Act), PAGCOR licensing requirements, and the Data Privacy Act itself;
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where pharcade's legitimate interests are not overridden by your privacy rights;
• Consent: processing for direct marketing communications, where you have provided explicit consent during registration or subsequently. Consent may be withdrawn at any time.

5.Sharing Your Personal Data

5.1 pharcade does not sell, rent, or trade your personal data to third parties. pharcade shares personal data only in the following circumstances and only to the extent necessary:

• Payment processors: GCash (G-Xchange, Inc.), PayMaya (Voyager Innovations), and other payment providers receive the data necessary to process your deposit and withdrawal transactions. These providers are bound by their own privacy policies and PCI-DSS compliance obligations;
• Game providers: game software providers (such as JILI, Pragmatic Play, PG Soft, Spribe) may receive session data necessary to run game logic, verify outcomes, and prevent cheating — under data processing agreements with pharcade;
• KYC and identity verification services: third-party KYC verification providers who assist pharcade in verifying government-issued identification documents, processed under strict data processing agreements;
• IT and infrastructure providers: cloud hosting, security, and analytics service providers who process data on pharcade's behalf under contractual data protection obligations;
• Regulatory and law enforcement authorities: pharcade will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or law enforcement agencies where required to do so by applicable Philippine law or a valid legal process;
• Business transfers: in the event of a merger, acquisition, or sale of substantially all of pharcade's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

5.2 pharcade requires all third-party service providers who receive personal data to maintain appropriate technical and organizational security measures and to process personal data only for the specific purposes for which it was shared.

6.Data Retention

6.1 pharcade retains personal data for as long as necessary to fulfill the purposes set out in this Policy, to maintain your Account in active or dormant status, and to comply with applicable legal obligations.

6.2 The following general retention periods apply:

• Account and KYC data: retained for the duration of the Account relationship and for a minimum of five (5) years after Account closure, consistent with AMLC record-keeping requirements under RA 9160;
• Transaction and financial records: retained for a minimum of five (5) years after the date of the transaction, in compliance with anti-money laundering regulations;
• Gameplay and activity logs: retained for two (2) years from the date of the relevant activity, or longer where required for an ongoing investigation or dispute;
• Communications data: retained for two (2) years from the date of the communication, or longer where relevant to an unresolved dispute or regulatory inquiry;
• Marketing consent records: retained for as long as pharcade continues to process data for marketing purposes, and for one (1) year after consent is withdrawn as evidence of the prior consent.

6.3 When personal data is no longer required for any lawful purpose, pharcade will securely delete or anonymize it in accordance with its internal data disposal procedures.

7.Cookies & Similar Technologies

7.1 pharcade uses cookies and similar web technologies (including local storage, session tokens, and tracking pixels) on the pharcade.biz platform. These technologies serve the following functions:

• Essential cookies: required for the platform to function — including maintaining your login session, storing game state between pages, and enabling secure payment flows. These cannot be disabled without impairing platform functionality;
• Performance and analytics cookies: collect anonymized or aggregated data about how players interact with the platform — which pages are visited, how long sessions last, and which games are most popular — used to improve platform performance and game selection;
• Security cookies: used to detect fraudulent login attempts, prevent cross-site request forgery (CSRF), and enforce session timeouts;
• Functional cookies: remember your preferences such as language settings, notification preferences, and recently played games.

7.2 You can manage or disable non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or set preferences for specific websites. Note that disabling certain cookies may affect your experience on the pharcade platform.

7.3 pharcade does not use third-party advertising cookies or permit advertising networks to set cookies on its platform for the purpose of serving targeted advertisements to players.

8.Data Security

8.1 pharcade implements appropriate technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pharcade platform;
• Encrypted storage of sensitive personal data and KYC documents at rest;
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
• Regular penetration testing and security audits by independent third-party security specialists;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for detecting, containing, and notifying affected parties and the NPC in the event of a personal data breach, consistent with the requirements of RA 10173.

8.2 While pharcade uses industry-standard security measures, no system can guarantee absolute security. pharcade recommends that all players protect their Account by using a strong, unique password and enabling Two-Factor Authentication (2FA). In the event you suspect that your pharcade Account has been compromised, you should immediately contact [email protected].

8.3 Personal Data Breach Notification. In the event of a personal data breach that is likely to result in serious harm to data subjects, pharcade will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, as required under RA 10173 and its implementing rules.

9.Your Rights as a Data Subject

9.1 Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by pharcade:

• Right to be Informed: the right to be notified of how your personal data is collected, used, and shared — as described in this Policy;
• Right of Access: the right to request a copy of the personal data pharcade holds about you, including information on how it is being processed;
• Right to Rectification: the right to request correction of inaccurate or incomplete personal data held by pharcade;
• Right to Erasure (Right to be Forgotten): the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to pharcade's legal obligations to retain certain records;
• Right to Object: the right to object to the processing of your personal data, including for direct marketing purposes;
• Right to Data Portability: the right to receive a copy of your personal data in a structured, machine-readable format where technically feasible;
• Right to Lodge a Complaint: the right to lodge a complaint with the National Privacy Commission (NPC) if you believe pharcade has not handled your personal data in accordance with RA 10173.

9.2 To exercise any of the above rights, please submit a written request to pharcade's Data Protection Officer at [email protected] (subject line: Data Subject Request). pharcade will respond to all verified data subject requests within fifteen (15) business days. pharcade may require identity verification before processing a data subject request.

9.3 Certain rights are subject to limitations where processing is required for legal compliance, fraud prevention, or other overriding legitimate interests. pharcade will inform you of any applicable limitations when responding to your request.

10.Children, Minors & Age Restriction

10.1 The pharcade platform is strictly intended for persons aged 21 years and above. pharcade does not knowingly collect personal data from persons under the age of 21. Age verification is enforced through mandatory KYC identity verification prior to the processing of any withdrawal.

10.2 If pharcade becomes aware that it has collected personal data from a person under the age of 21, it will promptly close that Account, cancel all pending transactions, and delete the personal data to the extent not required to be retained for legal compliance purposes.

10.3 If you believe that a person under 21 has registered on pharcade, please notify us immediately at [email protected].

11.Cross-Border Data Transfers

11.1 Some of pharcade's third-party service providers — including game software providers, cloud infrastructure providers, and KYC verification services — may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, pharcade takes steps to ensure that appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards equivalent to those required under RA 10173.

11.2 By using the pharcade platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines for the purposes described in this Policy, subject to the safeguards described above.

12.Updates to This Privacy Policy

12.1 pharcade may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

12.2 Where changes to this Policy are material, pharcade will notify registered Players by posting a notice on the pharcade.biz platform and, where practicable, by sending a notification to the registered email address on file. Continued use of the pharcade platform after the effective date of a revised Policy constitutes acceptance of the revised Policy.

12.3 The version of this Policy published on pharcade.biz is the definitive current version. pharcade is not responsible for outdated versions of this Policy stored or distributed by third-party sources.

13.Contact & Data Protection Officer

13.1 pharcade has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. If you have questions about this Policy, wish to exercise your data subject rights, or need to report a privacy concern, please contact pharcade through the following channels:

• Data Subject Requests & Privacy Inquiries: [email protected] — subject line: Data Subject Request
• General Support: [email protected]
• VIP & Account Queries: [email protected]

13.2 pharcade's support team is available 24 hours a day, 7 days a week via live chat on the pharcade.biz platform. Formal data subject requests submitted by email will be acknowledged within three (3) business days and fully responded to within fifteen (15) business days.

13.3 If you are not satisfied with pharcade's response to your privacy inquiry, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.