phzzz Privacy Policy – How We Handle Your Personal Data

1 Who This Policy Covers

This Privacy Policy applies to all individuals who interact with phzzz — including people who visit the website without registering, players with active accounts, and former account holders whose data phzzz is required to retain for legal or regulatory purposes.

phzzz is operated for players physically located in the Philippines. If you access the platform from outside the Philippines, this Privacy Policy still applies to any data you provide, but access from certain jurisdictions may not be permitted under the platform's Terms and Conditions.

2 Data We Collect

phzzz collects personal data in two primary ways: information you provide directly when registering and using the platform, and data collected automatically as you browse and play.

Information You Provide

• Registration data: Full legal name, date of birth, email address, Philippine mobile number, and chosen password.
• Identity verification (KYC): Government-issued ID (such as PhilSys National ID, passport, UMID, SSS ID, PRC ID, or driver's licence), a selfie with your ID, and for certain withdrawal amounts, proof of address.
• Payment information: Bank account details or e-wallet identifiers used for deposits and withdrawals. phzzz does not store full card numbers or e-wallet PIN codes.
• Support communications: Any messages, screenshots, or information you share with the phzzz support team when raising a query or complaint.
• Responsible gaming information: Deposit limits, session reminders, or self-exclusion requests you submit through your account settings.

Data Collected Automatically

• Device and connection data: IP address, device type, operating system, browser type and version, and your general geographic location as derived from your IP address.
• Session data: Login timestamps, pages visited, games accessed, session duration, and betting and game activity logs.
• Cookie data: Session identifiers, preference settings, and analytics data collected via browser cookies and similar technologies. See Section 8 for full details.

3 How We Use Your Data

The table below summarises the main purposes for which phzzz uses your personal data and the data types involved:

4 Legal Basis for Processing

phzzz processes personal data on the following legal grounds as recognised under Philippine data protection law:

• Contract performance: Processing is necessary to provide you with the services you registered for — including account management, gameplay, and payment processing.
• Legal obligation: Certain processing — particularly KYC, anti-money-laundering checks, and transaction record-keeping — is required by applicable Philippine regulations.
• Legitimate interests: Fraud prevention, security monitoring, and platform analytics are conducted on the basis of phzzz's legitimate interest in operating a safe and reliable platform.
• Consent: Where phzzz sends you optional marketing communications or uses non-essential cookies, consent is the legal basis. You can withdraw consent at any time.

5 Sharing Your Data

phzzz does not sell your personal data. We may share data with the following categories of third parties only where necessary:

• Game providers: Game studios whose titles are available in the phzzz Game Lobby receive your account identifier and session tokens to deliver game content. They do not receive your full identity documents or payment details.
• Payment processors and banks: Your payment details are shared with Philippine banks and payment infrastructure providers only as needed to process a specific deposit or withdrawal transaction.
• Identity verification services: KYC documents may be processed by third-party identity verification providers who operate under strict data processing agreements.
• Technology infrastructure: Cloud hosting, database, and security service providers who process data on phzzz's behalf under contractual confidentiality obligations.
• Legal and regulatory authorities: phzzz will disclose personal data to Philippine law enforcement or regulatory authorities when required to do so by law, court order, or in response to a lawful investigation.

6 Data Retention

phzzz retains personal data for as long as your account is active and for a period afterwards as required by law. The key retention periods are:

• Account and identity data: Retained for the duration of your account and for at least five years after account closure, in line with anti-money-laundering record-keeping obligations.
• Transaction records: Betting records, deposit and withdrawal histories, and account balance statements are retained for at least five years.
• Support correspondence: Retained for three years from the date of the communication or resolution of any related dispute.
• Session and analytics data: Aggregated and anonymised after 90 days; individual session logs are deleted within 12 months unless required for an ongoing investigation.

When data is no longer required and no legal retention obligation applies, phzzz securely deletes or anonymises it.

7 Security Measures

phzzz implements a range of technical and organisational measures to protect your personal data:

• SSL/TLS encryption on all data in transit between your device and phzzz servers.
• Encryption at rest for sensitive fields including identity document images and payment details.
• OTP-based verification for sensitive account actions including login from new devices and withdrawal requests.
• Access controls limiting internal access to personal data to staff with a legitimate operational need.
• Regular security reviews of the platform infrastructure and data handling practices.

No online platform can guarantee absolute security. If you believe your phzzz account has been compromised, contact support immediately via your registered email address.

8 Cookies and Tracking Technologies

phzzz uses cookies and similar technologies to operate the platform effectively. Cookies are small text files stored on your device by your browser. The types used on phzzz include:

• Essential cookies: Required for the platform to function — including keeping your session active while you are logged in and remembering your account preferences. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to understand how players navigate the platform — which pages are visited most, where players drop off, and how features are used. This data is aggregated and does not identify individual players.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious transaction behaviour.

You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies may prevent you from logging in or accessing certain platform features.

9 Your Rights Over Your Data

As a player in the Philippines, you have the following rights regarding your personal data held by phzzz:

• Right to access: You can request a copy of the personal data phzzz holds about you.
• Right to correction: You can request that inaccurate or incomplete personal information be corrected. For name or ID document corrections, supporting documentation will be required.
• Right to erasure: You can request deletion of your personal data. This right is subject to phzzz's legal retention obligations — data required for regulatory compliance cannot be deleted on request.
• Right to data portability: You can request your account data in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interests, including analytics and non-essential communications.
• Right to withdraw consent: Where processing is based on your consent (such as marketing emails), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, contact phzzz support through your account's support section after logging in. Requests will be acknowledged within five business days and resolved within 30 calendar days where possible.

10 Children and Minors

phzzz is strictly for adults aged 21 and above. The platform does not knowingly collect personal data from individuals under 21 years of age. If an account is found to belong to a minor, it will be closed immediately, the balance forfeited, and any identity data associated with that account deleted as soon as the legal retention period permits.

If you believe a minor has created an account on phzzz, please contact support immediately so the account can be reviewed and closed.

11 Changes to This Privacy Policy

phzzz may update this Privacy Policy from time to time to reflect changes in how we operate, new legal obligations, or improvements to our data handling practices. The updated policy will be published on this page with a revised effective date.

For material changes that affect how we use your personal data in a way that is less favourable than the previous policy, phzzz will notify registered players via their registered email address before the change takes effect. Continued use of the platform after the effective date of any update constitutes acceptance of the revised policy.

12 Contact Us

For questions or concerns about this Privacy Policy, or to exercise your data rights, please contact the phzzz team through the support section in your account after logging in. You can also reach us at the email address displayed in the footer of this page.

phzzz aims to respond to all privacy-related enquiries within five business days (Monday to Friday, 9 AM to 6 PM Philippine Standard Time). Complex data access or deletion requests may require additional time to process, particularly where identity verification is involved.