phpbonus Privacy Policy

phpbonus operates as the data controller responsible for the personal information collected through the phpbonus platform at https://phpbonus.club. As data controller, phpbonus determines the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

phpbonus has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact the DPO at any time using the contact details provided in Section 12 of this policy.

phpbonus collects personal data from you in the following categories:

2.1 Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Email address and mobile number
• Residential address (city, province, postal code)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification (PhilSys, passport, driver's license, SSS, GSIS, PRC ID, or Voter's ID)
• Proof of address documents where required
• Selfie or liveness verification images where required for enhanced KYC

2.3 Financial Data

• GCash or PayMaya account reference numbers
• BPI, BDO, or Metrobank account details (account name only; full account numbers are not stored)
• Transaction history including deposits, withdrawals, and bonus credits

2.4 Technical & Usage Data

• IP address, device type, operating system, and browser type
• Session logs, login timestamps, and geolocation data (city-level)
• Game history, betting patterns, and platform interaction data
• Cookie identifiers and similar tracking technologies

2.5 Communications Data

• Records of your communications with phpbonus customer support
• Feedback, survey responses, and promotional opt-in preferences

phpbonus uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your phpbonus account, including processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank.
• Identity Verification: To verify your identity and age (21+) in compliance with Philippine gaming regulations and anti-money laundering requirements.
• Platform Operation: To provide access to phpbonus games, process bets, calculate winnings, and deliver the core services of the platform.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the phpbonus platform.
• Legal Compliance: To comply with applicable Philippine laws, PAGCOR regulatory requirements, Anti-Money Laundering Act (AMLA) obligations, and orders from competent authorities.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gambling patterns and proactively offer responsible gaming tools where problem gambling indicators are detected.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent. You may withdraw consent at any time.
• Platform Improvement: To analyse usage patterns and improve the phpbonus platform, game selection, and user experience.

Under the Philippine Data Privacy Act of 2012, phpbonus processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the phpbonus Terms & Conditions, including account management and transaction processing.
• Legal Obligation: Processing required to comply with Philippine law, including AMLA reporting obligations, PAGCOR regulatory requirements, and tax obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phpbonus does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers to process deposits and withdrawals.
• Game Providers: Licensed third-party game providers whose games are available on the phpbonus platform, to the extent required for game operation and fairness auditing.
• KYC & Fraud Prevention Services: Identity verification and fraud detection service providers operating under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where required by law.
• Legal & Professional Advisors: Lawyers, auditors, and accountants where necessary for legal proceedings or compliance purposes, subject to professional confidentiality obligations.
• IT Service Providers: Cloud hosting, data storage, and cybersecurity service providers operating under data processing agreements that require them to protect your data.

phpbonus retains your personal data for the following periods:

• Active Account Data: Retained for the duration of your phpbonus account and for a minimum of 5 years after account closure, as required by Philippine AMLA regulations.
• KYC Documents: Retained for a minimum of 5 years after the end of the business relationship, in compliance with AMLA and PAGCOR requirements.
• Transaction Records: Retained for a minimum of 5 years for regulatory and audit purposes.
• Customer Support Records: Retained for 3 years after the resolution of the relevant inquiry or dispute.
• Marketing Consent Records: Retained until you withdraw consent, plus 1 year for compliance documentation purposes.
• Technical Logs: Retained for 12 months for security and fraud investigation purposes.

After the applicable retention period, phpbonus will securely delete or anonymise your personal data in accordance with NPC guidelines.

phpbonus implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and phpbonus servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Multi-factor authentication (MFA) available for all phpbonus player accounts.
• Role-based access controls ensuring that phpbonus staff can only access personal data necessary for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• 24/7 intrusion detection and monitoring systems covering all phpbonus infrastructure.
• Strict data processing agreements with all third-party service providers who handle phpbonus player data.
• Regular staff training on data protection obligations and secure data handling practices.

In the event of a personal data breach that poses a risk to your rights and freedoms, phpbonus will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phpbonus:

• Right to be Informed: You have the right to be informed of how your personal data is collected, used, and processed by phpbonus, as set out in this Privacy Policy.
• Right of Access: You may request a copy of the personal data phpbonus holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data phpbonus holds about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phpbonus's legal retention obligations.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to phpbonus's overriding legal obligations.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phpbonus has violated your data protection rights.

To exercise any of these rights, please contact the phpbonus Data Protection Officer using the contact details in Section 12. phpbonus will respond to all verified requests within 30 calendar days. We may require proof of identity before processing your request.

phpbonus uses cookies and similar tracking technologies to operate the platform, maintain your session, prevent fraud, and analyse platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the phpbonus platform to function. These include session cookies, authentication tokens, and security cookies. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Used to collect anonymised data about how players use the phpbonus platform, helping us improve performance and user experience. No personally identifiable information is included in analytics data.
• Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, including account takeover attempts and bonus abuse patterns.

phpbonus does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the phpbonus platform.

phpbonus does not knowingly collect personal data from individuals under 21 years of age. Access to the phpbonus platform is strictly limited to players aged 21 and above, in accordance with Philippine gaming regulations.

phpbonus uses date-of-birth verification at registration and may request government-issued ID documents to confirm age. If phpbonus discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be suspended.

phpbonus reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. Material changes will be communicated to registered players via email or in-platform notification at least 7 days before taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the phpbonus platform after the effective date of any revision constitutes your acknowledgement of the updated Privacy Policy. If you do not agree to the revised policy, you must cease using the platform and may request account closure by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about how phpbonus handles your personal data, please contact our Data Protection Officer:

If you are not satisfied with phpbonus's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

For general platform support, account inquiries, or responsible gaming assistance, you may also reach the phpbonus support team at [email protected]. Please note that email addresses on this page are displayed as plain text and are not clickable links.