Privacy Policy

1.1  phboss8 ("phboss8", "we", "us", "our") is the data controller responsible for the personal information collected through phboss8.club and all related services offered under the phboss8 brand. As data controller, phboss8 determines the purposes and means of processing your personal data in connection with the provision of online gaming services to Filipino players.

1.2  phboss8 operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable PAGCOR guidelines governing the handling of player data in licensed online gaming operations.

1.3  For all data privacy-related inquiries, including data access requests, correction requests, and complaints, you may contact phboss8's designated data privacy point of contact at: [email protected].

2.1  Registration Data. When you create a phboss8 account, we collect your chosen username, password (stored in encrypted form), Philippine mobile number, and email address where provided. We may also collect your full legal name, date of birth, and government-issued ID details during account verification.

2.2  Identity Verification Data. To comply with PAGCOR's know-your-customer (KYC) requirements and to verify that players are at least 21 years of age, phboss8 may collect copies of government-issued identification documents (e.g., Philippine passport, SSS ID, driver's license, PhilSys national ID), selfie photographs for liveness verification, and proof of address documents.

2.3  Financial Data. phboss8 collects transaction records including deposit amounts, withdrawal requests, GCash reference numbers, and bank account details used for payment processing. Full payment credentials (e.g., GCash PINs, bank passwords) are never collected or stored by phboss8.

2.4  Gaming Activity Data. We collect records of your gaming sessions including games played, bets placed, winnings, bonus redemptions, and session duration. This data is used for account management, dispute resolution, and responsible gaming monitoring.

2.5  Technical Data. phboss8 automatically collects device identifiers, IP addresses, browser type, operating system, and session timestamps when you access phboss8.club. This data is used for security monitoring, fraud prevention, and platform performance optimization.

2.6  Communications Data. We retain records of your communications with phboss8 support, including live chat transcripts, to facilitate dispute resolution and service improvement.

phboss8 uses the personal information it collects for the following purposes:

• Account administration — creating, maintaining, and managing your phboss8 player account;
• Identity and age verification — confirming that you meet the 21+ eligibility requirement and verifying your identity as required by PAGCOR KYC standards;
• Payment processing — executing deposits, withdrawals, and refunds through your registered Philippine payment methods (GCash, PayMaya, BPI, BDO, Metrobank);
• Gaming service delivery — enabling access to phboss8's games, live casino tables, bonuses, and promotional offers;
• Security and fraud prevention — detecting and investigating unauthorized account access, bonus abuse, money laundering, and other prohibited conduct;
• Responsible gaming — monitoring gaming patterns to identify potential problem gambling indicators and administering self-exclusion requests;
• Legal and regulatory compliance — fulfilling phboss8's obligations under PAGCOR regulations, Philippine tax law, and anti-money laundering legislation;
• Customer support — resolving queries, complaints, and disputes submitted to phboss8 support channels;
• Platform improvement — analysing aggregated usage data to enhance platform performance, game selection, and user experience.

4.1  Contractual necessity. The majority of phboss8's data processing is necessary to perform the services you have contracted for by registering an account, including account management, payment processing, and gaming service delivery.

4.2  Legal obligation. Certain data processing activities — including KYC verification, age verification, transaction monitoring for anti-money laundering purposes, and reporting to PAGCOR — are required by Philippine law and PAGCOR regulatory requirements.

4.3  Legitimate interests. phboss8 processes some categories of technical and behavioural data on the basis of legitimate business interests, including fraud prevention, security monitoring, and platform optimization, where such interests are not overridden by your data protection rights.

4.4  Consent. Where phboss8 sends you direct marketing communications or promotional offers by SMS or email beyond those necessary to administer your account, such communications are sent on the basis of your consent, which you may withdraw at any time via your account notification settings or by contacting phboss8 support.

5.1  phboss8 does not sell your personal data to third parties for commercial marketing purposes. Your data may be shared in the following circumstances:

• Payment providers — GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors receive transaction data necessary to execute deposits and withdrawals;
• Identity verification providers — third-party KYC and liveness verification services process identity document data on phboss8's behalf under data processing agreements;
• Game providers — certain game providers may receive anonymized session data for game performance monitoring and RNG audit purposes;
• Regulatory authorities — PAGCOR and other Philippine regulatory bodies may receive player data as required by law, including in the context of gaming audits, anti-money laundering investigations, and regulatory compliance reporting;
• Law enforcement — phboss8 will disclose personal data to law enforcement agencies when required by valid legal process, court order, or applicable Philippine law;
• Professional advisers — phboss8's legal counsel, auditors, and compliance consultants may access player data on a need-to-know basis under confidentiality obligations.

5.2  All third parties who process personal data on phboss8's behalf are required to handle such data in accordance with phboss8's instructions and applicable Philippine data protection law.

6.1  phboss8 retains personal data for as long as your account is active and for a period thereafter as required by applicable law and PAGCOR regulations. Transaction records and KYC documentation are retained for a minimum of five (5) years from the date of the transaction or account closure, as required by Philippine anti-money laundering regulations.

6.2  Gaming session records and communications logs are retained for a minimum of two (2) years to facilitate dispute resolution.

6.3  Where you have requested account closure, phboss8 will anonymize or delete personal data that is no longer required for legal, regulatory, or legitimate business purposes within a reasonable period following closure.

7.1  phboss8 implements technical and organisational security measures appropriate to the nature of the data it processes. These measures include 256-bit SSL/TLS encryption for all data transmissions, encrypted storage of passwords and sensitive credentials, role-based access controls limiting employee access to personal data, and regular security assessments of phboss8's platform infrastructure.

7.2  In the event of a personal data breach that poses a risk to your rights and freedoms, phboss8 will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Philippine Data Privacy Act and its Implementing Rules.

8.1  Under the Philippine Data Privacy Act of 2012, phboss8 players have the following rights with respect to their personal data:

• Right to be informed — to be notified of how your personal data is collected, used, and retained, as described in this Policy;
• Right of access — to request a copy of the personal data phboss8 holds about you;
• Right to correction — to request correction of inaccurate, incomplete, or outdated personal data;
• Right to erasure — to request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to phboss8's legal retention obligations;
• Right to data portability — to receive your personal data in a structured, commonly used format where technically feasible;
• Right to object — to object to processing of your personal data on the basis of legitimate interests, including the use of your data for direct marketing;
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) if you believe phboss8 has processed your personal data in violation of the Data Privacy Act.

8.2  To exercise any of the above rights, contact phboss8 support via live chat or at [email protected]. phboss8 will respond to verified data subject requests within thirty (30) days of receipt.

9.1  phboss8 uses cookies and similar tracking technologies on phboss8.club to maintain login sessions, remember user preferences, detect fraudulent access patterns, and analyse platform usage.

9.2  Session cookies are essential for the operation of the phboss8 platform and cannot be disabled without affecting your ability to log in and use phboss8 services. Analytical and preference cookies are non-essential and may be managed through your browser settings.

9.3  phboss8 does not use third-party advertising cookies or allow external advertising networks to place tracking cookies on phboss8.club pages.

10.1  phboss8 services are strictly for individuals aged 21 years and older. phboss8 does not knowingly collect personal data from individuals below this age. If phboss8 becomes aware that personal data has been collected from an underage individual, that data will be deleted and the associated account will be permanently closed.

10.2  If you are a parent or guardian and have reason to believe that a minor has registered on phboss8, please contact phboss8 support immediately at [email protected].

11.1  phboss8 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via their registered mobile number or email address and will be published on phboss8.club with a revised effective date.

11.2  Continued use of phboss8 following notification of a change to this Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with material changes to this Policy, you may request account closure as described in phboss8's Terms & Conditions.

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phboss8, please contact our support team:

Complaints that cannot be resolved through phboss8's internal process may be escalated to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.