Plain-language summary: phzz collects the personal data you provide when you register and play, plus technical data like your device type and session activity. We use it to run your account, process payments, prevent fraud, and improve the platform. We do not sell your data. You have the right to access, correct, or delete your information at any time. This policy is governed by the Philippine Data Privacy Act of 2012 (Republic Act 10173).
1. Overview and Scope
This Privacy Policy applies to all personal data collected and processed by phzz in connection with your use of the phzz online gaming platform, accessible at phzz.best, and any related services, promotions, communications, and mobile browser applications. It applies to all registered players, prospective players who browse the platform without registering, and anyone who contacts phzz through our support channels.
By registering an account or using phzz in any way, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described here. If you do not consent, please do not register or use phzz.
This policy should be read alongside the phzz Terms and Conditions, which govern your use of the platform as a whole. In the event of any conflict between this Privacy Policy and the Terms and Conditions on matters of data privacy, this Privacy Policy prevails.
2. Who We Are — Data Controller
phzz operates phzz.best and acts as the data controller for all personal information collected through the platform. As data controller, phzz determines the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules and regulations.
phzz has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws. You may contact the phzz DPO with any privacy-related queries or requests at support@phzz.best with the subject line "Data Privacy Request".
Data Controller: phzz · phzz.best · Operated in the Philippines
Data Protection Officer: Reachable at support@phzz.best
Governing Law: Republic Act 10173 — Data Privacy Act of 2012, Philippines
3. Personal Data We Collect
phzz collects the following categories of personal data. We collect only what is necessary for the purposes described in this policy — we do not collect data speculatively or for purposes we have not identified.
| Category | Examples | Why Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID number | Account registration, KYC verification, age verification |
| Contact Data | Philippine mobile number, email address | Account access, OTP verification, support communication |
| Financial Data | GCash/Maya account number, bank account details, transaction history | Processing deposits and withdrawals, fraud prevention |
| Gaming Activity Data | Bets placed, games played, session duration, win/loss history | Account management, responsible gaming monitoring, regulatory compliance |
| Technical Data | IP address, device type, browser type, operating system, cookies | Platform security, fraud detection, service optimisation |
| Usage Data | Pages visited, features used, time spent, click patterns | Platform improvement, personalised user experience |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Resolving support queries, quality assurance, dispute resolution |
| KYC Documents | Scanned government-issued ID (UMID, SSS, PhilHealth, driver's licence, passport) | Identity verification, anti-money laundering compliance |
Special Categories of Data
phzz does not intentionally collect sensitive personal data such as health information, religious beliefs, or political affiliations. The exception is information that may arise in the context of responsible gaming interventions — for example, if you disclose a gambling-related health concern to our support team. Any such information is treated with the highest level of confidentiality and used only to provide appropriate support.
4. How We Collect Your Data
phzz collects personal data through the following channels:
- Direct collection: Information you provide when you register a phzz account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
- Automated collection: Technical and usage data collected automatically as you browse and use phzz, including through cookies, server logs, and similar technologies. This data is collected whether or not you are logged in.
- Payment processors: When you make a deposit or withdrawal via GCash, Maya, BDO, BPI, or other Philippine payment channels, phzz receives transaction confirmation data from the payment processor. We do not store your full GCash PIN or bank account password.
- Game providers: phzz's third-party game providers may share aggregated game session data with phzz for billing, dispute resolution, and regulatory reporting purposes.
- Fraud detection partners: phzz may receive risk signals and device fingerprint data from fraud prevention service providers for the purpose of protecting the platform and its players.
- Referral programme: If you are referred to phzz by another player through the Refer a Friend programme, phzz receives your contact information from the referring player solely for the purpose of setting up your account and attributing the referral reward.
5. Why We Use Your Personal Data
phzz uses your personal data only for the specific purposes described below. We do not use your data in ways that are incompatible with these stated purposes without obtaining fresh consent or relying on a different legal basis.
- Account management: Creating and maintaining your phzz account, verifying your identity and age, processing password resets and OTP authentication.
- Payment processing: Handling deposits from GCash, Maya, bank transfers, and card payments; processing withdrawal requests to your registered payment account; maintaining transaction records.
- Game delivery: Enabling access to phzz's full range of games including slots, poker, card games, bingo, basketball betting, and boxing betting; recording game results and settling bets.
- Regulatory compliance: Meeting phzz's obligations under Philippine gaming regulations and anti-money laundering laws, including Know Your Customer (KYC) verification and suspicious transaction reporting.
- Fraud prevention and security: Detecting and preventing fraudulent activity, account takeovers, collusion, bonus abuse, and money laundering on the phzz platform.
- Responsible gaming: Monitoring gaming activity to identify patterns associated with problem gambling and providing appropriate interventions, tools, and support in line with phzz's responsible gaming obligations.
- Customer support: Responding to your queries, resolving disputes, and maintaining records of our support interactions for quality assurance purposes.
- Marketing communications: Sending you promotional offers, bonus notifications, and platform updates by SMS or email — but only if you have opted in to receive them. You can opt out at any time.
- Platform improvement: Analysing usage patterns to identify areas for improvement, testing new features, and optimising the phzz platform for Philippine players.
6. Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012 (RA 10173), phzz processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to deliver the phzz service you have contracted for — account management, game delivery, payment processing, and support. Without this processing, phzz cannot provide the service.
- Legal obligation: Processing required to comply with Philippine laws including anti-money laundering regulations (RA 9160 as amended), gaming licence conditions, and tax reporting requirements.
- Legitimate interest: Processing necessary for phzz's legitimate business interests where those interests are not overridden by your rights — specifically fraud prevention, platform security, and product improvement.
- Consent: For marketing communications and for any processing not covered by the above grounds. You may withdraw consent at any time by contacting support@phzz.best or using the opt-out link in any marketing message.
Processing based on contractual necessity and legal obligation cannot be withdrawn without closing your phzz account, as this data processing is essential to delivering the service. Processing based on consent can be withdrawn at any time without affecting your access to the platform.
7. Sharing Your Personal Data
phzz does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Full stop. We share your data only in the following limited circumstances:
7.1 Service Providers
phzz engages third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include: payment processors (GCash, Maya, BancNet partners), KYC verification providers, game software providers, cloud hosting and infrastructure providers, fraud detection and cybersecurity services, and email and SMS delivery services. These providers are permitted to use your data only for the specific service they are providing to phzz and are required to maintain appropriate security standards.
7.2 Regulatory and Law Enforcement
phzz may disclose personal data to Philippine government agencies, regulators, or law enforcement authorities when required to do so by law, court order, or regulatory instruction — including reports required under the Anti-Money Laundering Act (RA 9160). phzz will notify you of such disclosure where legally permitted to do so.
7.3 Business Transfers
In the event of a merger, acquisition, or sale of phzz's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified before your data is transferred and becomes subject to a different privacy policy.
7.4 With Your Consent
phzz may share your personal data with third parties in other circumstances where we have obtained your explicit consent to do so.
We do not share your data with advertisers or data brokers. phzz does not use your gaming history, financial data, or personal information to build advertising profiles for sale to third parties or for display advertising on other websites.
8. Data Retention
phzz retains your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by Philippine law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years | Anti-money laundering regulations (RA 9160) |
| Financial Transaction Records | Duration of account + 5 years | Tax, regulatory, and AML compliance |
| Gaming Activity Logs | Duration of account + 3 years | Dispute resolution, regulatory audits |
| KYC Documents | Duration of account + 5 years | Anti-money laundering regulations |
| Support Communications | 3 years from last interaction | Quality assurance, dispute resolution |
| Technical / Session Logs | 12 months | Security monitoring, fraud detection |
| Marketing Consent Records | Until consent withdrawn + 3 years | Demonstrating compliance with consent requirements |
Upon expiry of the applicable retention period, phzz will securely delete or anonymise your personal data. Where anonymisation is not technically feasible, phzz will restrict further processing of the data until deletion is possible.
9. Security Measures
phzz takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the phzz servers — the same standard used by major Philippine banks.
- Encrypted data storage for sensitive fields including payment account numbers and identity document scans, using AES-256 encryption at rest.
- Two-factor authentication (2FA) via OTP for all account logins and high-value transactions, reducing the risk of unauthorised account access.
- Access controls: phzz staff access to personal data is restricted on a strict need-to-know basis. All access to sensitive systems is logged and regularly audited.
- Regular security testing: phzz conducts periodic penetration testing and vulnerability assessments on its platform infrastructure.
- Incident response plan: phzz maintains a documented data breach response plan. In the event of a personal data breach, phzz will notify affected players and the National Privacy Commission (NPC) within 72 hours of discovery, as required by RA 10173.
No online system is perfectly immune from security risks. phzz strongly recommends that you use a unique, strong password for your account and enable two-factor authentication. Never share your phzz login credentials with anyone.
10. Cookies and Tracking Technologies
phzz uses cookies and similar tracking technologies to make the platform work properly, understand how it is being used, and improve the experience for Filipino players. A cookie is a small text file stored on your device when you visit a website.
Types of Cookies phzz Uses
- Essential cookies: Required for the phzz platform to function. These include session cookies that keep you logged in, security tokens, and anti-CSRF tokens. You cannot opt out of these without disabling your account session.
- Functional cookies: Remember your preferences such as language settings, preferred deposit method, and game lobby layout. These improve your experience but are not strictly required.
- Analytics cookies: Help phzz understand how players use the platform — which games are most popular, where players encounter difficulties, and how new features are being adopted. This data is aggregated and not linked to individual identities.
- Security cookies: Used for fraud detection and bot prevention, including device fingerprinting to identify suspicious login patterns.
phzz does not use advertising cookies or allow third-party advertising networks to place cookies on the phzz platform. You can manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.
11. Your Rights Under the Data Privacy Act
As a data subject under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by phzz. You may exercise any of these rights by contacting us at support@phzz.best with the subject line "Data Privacy Request". phzz will respond within 15 business days.
Right to Access
You have the right to request a copy of the personal data phzz holds about you and to be informed about how it is being processed. We will provide this information in a clear, machine-readable format where technically feasible.
Right to Correction / Rectification
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Some corrections — such as legal name or date of birth — may require supporting documentation.
Right to Erasure (Right to be Forgotten)
You may request that phzz delete your personal data. This right is subject to limitations where retention is required by law (such as AML obligations) or where the data is still needed for contractual purposes. We will inform you of any applicable limitations when processing your request.
Right to Object
You have the right to object to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, in which case phzz must demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to Data Portability
You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that phzz transmit that data directly to another service provider where technically feasible.
Right to Lodge a Complaint
If you believe that phzz has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. We encourage you to contact us first so we can try to resolve your concern directly.
12. Minors and Age Verification
phzz is strictly intended for players aged 21 years and above. phzz does not knowingly collect personal data from anyone under the age of 21. Age verification is performed as part of the phzz KYC process and is also enforced at the payment stage through GCash and Maya's own age verification requirements.
If phzz becomes aware that personal data has been collected from a person under the age of 21 without the required parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that phzz may hold data relating to a minor, please contact us immediately at support@phzz.best.
Parents and guardians are encouraged to monitor their children's use of mobile devices and online gaming platforms. phzz recommends the use of device-level parental controls to prevent underage access to online gaming services.
13. Third-Party Game Providers
phzz integrates games from third-party providers including PG Soft, Jili, Habanero, CQ9, and others. When you play these games, limited game session data is shared with the relevant provider for the purpose of delivering the game, settling results, and handling disputes. This data sharing is governed by data processing agreements between phzz and each provider.
Third-party game providers are not permitted to use game session data for their own marketing purposes or to share it with parties outside the scope of the game delivery service. phzz conducts due diligence on all game providers to ensure they maintain appropriate data protection standards.
phzz is not responsible for the privacy practices of third-party game providers in relation to data they may independently collect through their own platform interfaces. We recommend reviewing the privacy policies of any third-party gaming software you use outside the phzz platform.
14. Changes to This Privacy Policy
phzz may update this Privacy Policy from time to time to reflect changes in our data practices, new platform features, or updates to applicable Philippine law. When we make material changes, we will notify you through one or more of the following methods: a notification within the phzz platform, an email to your registered address, or a prominent notice on this page.
The effective date of this Privacy Policy is stated at the top of the page. The most current version of the phzz Privacy Policy is always accessible at phzz.best/privacy-policy. We recommend checking this page periodically if you want to stay informed about how phzz protects your data.
Your continued use of phzz after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If any change is material and you do not accept it, you have the right to close your account and request deletion of your data as described in Section 11.
15. Contact phzz About Privacy
If you have questions, concerns, or requests relating to this Privacy Policy or the way phzz handles your personal data, please reach out to us. Our Filipino support team and Data Protection Officer are available to help.
Response within 15 business days
For urgent account-related privacy issues
If you are unsatisfied with phzz's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the national regulator for data privacy matters under RA 10173.
How phzz Protects Your Privacy
Six key commitments that define the phzz approach to data privacy for Filipino players.
We Never Sell Your Data
phzz does not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for commercial purposes. Your information is used exclusively to deliver and improve the phzz service.
256-bit Encryption, Always On
Every data transmission between your device and phzz is protected by 256-bit SSL/TLS encryption — the same standard Philippine banks use. Sensitive data at rest is encrypted using AES-256.
RA 10173 Compliance
phzz operates in full compliance with the Philippine Data Privacy Act of 2012 and has appointed a Data Protection Officer responsible for ensuring your rights under that law are respected and upheld.
Your Rights Are Real
phzz provides genuine, workable access to your data rights — access, correction, deletion, portability, and objection — with a committed 15-business-day response time and no bureaucratic runaround.
Minimal Data Collection
phzz collects only the personal data that is genuinely necessary for delivering the service, complying with Philippine law, and keeping the platform secure. We do not collect data speculatively.
Breach Notification Within 72 Hours
In the unlikely event of a data breach affecting your personal information, phzz is committed to notifying you and the National Privacy Commission within 72 hours of discovery, as required by RA 10173.
Your Data Is Safe on phzz
phzz is built on trust. Your personal data is encrypted, never sold, and protected under Philippine law. Ready to experience safe, fair, and genuinely Filipino online gaming? Register your phzz account in two minutes — GCash deposits and fast withdrawals are ready when you are.