phdarna Privacy Policy

This Privacy Policy ("Policy") describes how phdarna ("we", "us", "our") processes the personal data of individuals ("you", "your", "member") who visit, register on, or use the phdarna online casino and sports betting platform accessible at phdarna.org.

phdarna is committed to protecting the privacy and personal data of every Filipino player on our platform. We act as the personal information controller in respect of the data you provide to us, and we process that data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

By registering a phdarna account or continuing to use our platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the phdarna platform.

phdarna collects the following categories of personal data from members and visitors:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (to verify you are 21 years of age or older);
• Nationality and country of residence;
• Email address and mobile number;
• Residential address (barangay, city/municipality, province).

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's license, UMID);
• Proof of address documents;
• Source of funds documentation where required by PAGCOR regulations or anti-money laundering law.

2.3 Financial Data

• GCash or PayMaya mobile wallet number;
• Bank account details (BPI, BDO, Metrobank) for withdrawal processing;
• Partial card details (last four digits, card type) for Visa and Mastercard transactions;
• Transaction history, deposit and withdrawal records.

2.4 Gaming & Behavioural Data

• Game play history, bet amounts, win/loss records;
• Session duration, login timestamps, and platform activity logs;
• Responsible gaming preferences (deposit limits, self-exclusion status);
• Bonus and promotion usage history.

2.5 Technical Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Cookie identifiers and session tokens;
• Referral source and navigation data within the phdarna platform.

2.6 Communications Data

• Records of your communications with phdarna customer support via live chat or email;
• Feedback, complaints, and dispute records.

phdarna collects personal data through the following means:

• Direct submission: Information you provide when registering a phdarna account, completing KYC verification, making deposits or withdrawals, or contacting our support team;
• Automated collection: Technical and behavioural data collected automatically when you access and use the phdarna platform, including through cookies and server logs;
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from risk management partners; payment data from GCash, PayMaya, and banking partners in the course of processing transactions.

phdarna uses your personal data for the following purposes:

phdarna will not use your personal data for any purpose incompatible with those listed above without first obtaining your consent or establishing another lawful basis for processing.

Under the Philippine Data Privacy Act of 2012 (RA 10173), phdarna processes your personal data on the following legal bases:

• Consent: Where you have given clear, informed consent for a specific processing purpose, such as receiving promotional communications from phdarna;
• Contract performance: Where processing is necessary to fulfil our obligations to you as a phdarna member, including account management and payment processing;
• Legal obligation: Where processing is required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), and NPC regulations;
• Legitimate interest: Where processing is necessary for phdarna's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and freedoms.

phdarna may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, for the purpose of processing your deposits and withdrawals;
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with PAGCOR and AML requirements;
• Fraud prevention and risk management partners: Services used to detect and prevent fraudulent activity on the phdarna platform;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory directive;
• IT and platform service providers: Cloud hosting, data storage, and software providers engaged to operate the phdarna platform, bound by data processing agreements;
• Professional advisers: Legal, accounting, and auditing firms engaged by phdarna, subject to professional confidentiality obligations.

All third parties with whom phdarna shares personal data are required to process that data in accordance with applicable Philippine data privacy law and phdarna's data protection standards.

phdarna retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your phdarna membership and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AML record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Gaming activity logs: Retained for three (3) years from the date of the activity;
• Customer support communications: Retained for two (2) years from the date of the last communication;
• Marketing consent records: Retained until you withdraw consent or for three (3) years from the date of consent, whichever is earlier.

Upon expiry of the applicable retention period, phdarna will securely delete or anonymise your personal data in accordance with our data disposal procedures.

Our security measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the phdarna platform;
• Encryption of sensitive data at rest, including financial and identity information;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for administrative access to phdarna systems;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While phdarna takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your phdarna login credentials.

phdarna uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function, including session management and security tokens. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits;
• Analytics cookies: Collect anonymised data about how members use the phdarna platform to help us improve performance and user experience;
• Marketing cookies: Used only with your consent to deliver relevant promotional content within the phdarna platform.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the phdarna platform. phdarna does not use cookies to track your activity on third-party websites.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phdarna:

• Right to be informed: The right to know how your personal data is being collected and processed;
• Right of access: The right to request a copy of the personal data phdarna holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to legal retention obligations;
• Right to object: The right to object to processing based on legitimate interest, including direct marketing;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 14. phdarna will respond to all verified requests within thirty (30) days in accordance with NPC guidelines.

The phdarna platform is strictly intended for individuals who are 21 years of age or older. phdarna does not knowingly collect personal data from persons under 21. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on phdarna, please contact us immediately at [email protected] so that we can take appropriate action.

phdarna primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, cloud infrastructure providers), phdarna ensures that such transfers are subject to appropriate safeguards, including contractual data protection clauses consistent with NPC requirements and the Data Privacy Act.

phdarna will not transfer your personal data to any country that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

phdarna may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes, we will notify registered members via email or in-platform notification at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of the phdarna platform after the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phdarna, please contact our Data Protection Officer (DPO):

Email: [email protected]

Subject line: Data Privacy Request – [Your Full Name]

Live Chat: Available 24/7 inside the phdarna platform after logging in.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through its official channels.