phqueen Privacy Policy

phqueen ("we," "us," "our," or "the Company") operates the online gaming platform accessible at phqueen.vip. As a PAGCOR-licensed online casino and sports betting operator serving Filipino players, phqueen processes personal data as part of its legal, regulatory, and operational obligations.

We take the privacy of our players seriously. Whether you are a player in Manila placing a PBA bet, a bingo enthusiast in Cebu, or a slots player in Davao accessing the platform via GCash — your data is handled with the same level of care, security, and transparency described in this Policy.

This Privacy Policy covers: what categories of personal data phqueen collects; the purposes and legal bases for that collection; how phqueen shares, transfers, and retains data; the technical and organisational security measures in place; and the rights available to you under Philippine law. For data processing activities specific to the use of cookies and similar technologies, please also refer to Section 11 of this document.

For the purposes of the Philippine Data Privacy Act, phqueen acts as the Personal Information Controller (PIC) in respect of all personal data collected from and about players of the phqueen platform. As PIC, phqueen determines the purposes and means of processing personal data and is responsible for ensuring that processing activities comply with applicable law.

phqueen has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and the DPA. Contact details for the DPO are provided in Section 15 of this Policy.

phqueen collects personal data across the following categories, depending on the stage of your relationship with the platform and your use of specific services:

• Full legal name as it appears on your government-issued ID;
• Date of birth (used for age verification — players must be 21 years or older);
• Nationality and country of residence;
• Registered mobile number (used as primary account identifier and 2FA channel);
• Email address (where provided).

• Copies of government-issued identification documents (e.g., PhilSys National ID, Philippine passport, UMID, SSS ID, GSIS ID, PRC ID, or driver's license);
• Selfie or biometric photograph where required for liveness verification;
• Proof of address documents where applicable.

• GCash account number (last digits) or Maya account details used for deposits and withdrawals;
• Bank account details (BPI, BDO, UnionBank, Metrobank) where relevant to withdrawal instructions;
• Deposit history, withdrawal requests, and transaction timestamps;
• Cryptocurrency wallet addresses (for USDT TRC20 transactions);
• Wagering history, game session records, and account balance movements.

• IP address and approximate geolocation;
• Device type, operating system, browser type, and version;
• Session timestamps, login history, and page navigation data;
• Error logs and crash reports.

• Records of live chat conversations with phqueen support agents;
• Email correspondence with phqueen;
• Feedback, survey responses, and promotional preference records.

• Deposit limits, loss limits, and session time restrictions set by the player;
• Self-exclusion status and exclusion period;
• Responsible gaming questionnaire responses where completed voluntarily.

phqueen collects personal data through the following channels and methods:

• Direct provision: Information you provide when registering, completing KYC, submitting deposit or withdrawal requests, updating account settings, or contacting support;
• Automated collection: Technical and usage data collected automatically through the phqueen platform using cookies, session tracking, and server logs when you access the website;
• Third-party payment providers: Transaction confirmation data received from GCash, Maya, and partner banks upon processing deposits and withdrawals;
• Identity verification services: KYC data processed through phqueen's identity verification partners where applicable;
• Regulatory agencies: Information received from PAGCOR, AMLC, or other competent authorities in connection with regulatory obligations.

phqueen processes your personal data for the following specific purposes:

phqueen does not use personal data for purposes materially different from those listed above without first notifying you and, where required by law, obtaining your prior consent.

Under the Philippine Data Privacy Act, phqueen processes personal data on the following lawful bases:

• Contractual necessity: Processing required to fulfil the player agreement — account registration, game provision, payment processing;
• Legal obligation: Processing required by Philippine law — PAGCOR reporting, AMLC obligations, tax reporting under the Bureau of Internal Revenue (BIR);
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics where these interests are not overridden by your privacy rights;
• Consent: Marketing communications and personalised promotional offers, where you have provided explicit opt-in consent. You may withdraw marketing consent at any time through your account settings.

phqueen does not sell your personal data to third parties for their own commercial purposes. We share personal data only in the circumstances described below and only to the extent necessary for each purpose:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, Metrobank, Coins.ph, and other payment partners receive the data necessary to process your transactions. These partners are contractually bound to process data only as instructed by phqueen;
• KYC and identity verification services: Third-party identity verification providers who assist with government-issued ID validation and liveness checks;
• Game content providers: Game studios such as JILI, Pragmatic Play, and Evolution Gaming may receive anonymised session data necessary for game provision and technical support;
• Regulatory authorities: PAGCOR, AMLC, BIR, and other competent Philippine government bodies where disclosure is required by law or regulatory obligation;
• Legal and professional advisers: Lawyers, accountants, and auditors bound by professional confidentiality obligations;
• Law enforcement: Philippine law enforcement agencies where phqueen is required by court order or applicable law to disclose data.

Some of phqueen's service providers and game content partners — including certain KYC verification services and game studio technical infrastructure — may be located outside of the Philippines. Where personal data is transferred to recipients in other countries, phqueen ensures that appropriate safeguards are in place in accordance with the DPA, including:

• Data processing agreements that require third parties to apply data protection standards equivalent to those required under Philippine law;
• Transfer only to countries or organisations that the National Privacy Commission has recognised as providing an adequate level of data protection;
• Standard contractual clauses approved by the National Privacy Commission where applicable.

Details of specific international transfers and the safeguards applied may be requested from phqueen's Data Protection Officer using the contact details in Section 15.

phqueen retains personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory retention requirements. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with phqueen's data destruction procedures.

phqueen implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, and disclosure. These include:

• Encryption: All data in transit is protected by TLS 1.3; data at rest is encrypted using AES-256 — the same standard used by Philippine commercial banks;
• Access controls: Personal data is accessible only to phqueen personnel who require it to perform their designated roles, governed by role-based access control (RBAC) policies;
• Two-factor authentication: Available for all player accounts; mandatory for all phqueen administrative access;
• Penetration testing: phqueen's platform infrastructure undergoes periodic independent penetration testing by accredited cybersecurity firms;
• Incident response: phqueen maintains a documented data breach response plan; in the event of a personal data breach that poses a risk to data subjects, the National Privacy Commission and affected players will be notified in accordance with DPA requirements;
• Staff training: All phqueen personnel who handle personal data receive regular training on data protection obligations and security best practices.

phqueen uses cookies and similar tracking technologies to deliver, maintain, and improve the platform experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function — session authentication, CSRF protection, and load balancing. These cannot be disabled without impairing core functionality;
• Performance and analytics cookies: Collect anonymised data on how players navigate the platform — pages visited, error rates, session durations — used to improve the phqueen experience;
• Functional cookies: Remember your preferences such as language settings, last-played games, and responsible gaming reminder intervals;
• Marketing cookies: Used only with your explicit consent to personalise promotional messages. If you opt out of marketing communications, associated marketing cookies are disabled.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the phqueen platform. phqueen does not use third-party advertising cookies or share cookie data with external advertising networks.

As a data subject under the Philippine Data Privacy Act, you have the following rights in respect of your personal data held by phqueen. Requests to exercise these rights may be submitted to the phqueen DPO via the contact details in Section 15.

phqueen will respond to all verified data subject requests within thirty (30) calendar days, as required by the DPA. In complex cases, this period may be extended by a further thirty (30) days with written notice.

If you are a parent or guardian and believe that a minor has registered on the phqueen platform, please contact the phqueen DPO immediately using the contact details in Section 15.

phqueen may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via the mobile number or email address on file at least fourteen (14) calendar days before they take effect, except where changes are required by law, in which case they may take effect immediately.

The "Last Updated" date at the top of this document indicates when the most recent version was published. We encourage you to review this Policy periodically. Continued use of the phqueen platform following the effective date of any amended Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by phqueen, please contact our Data Protection Officer:

• Data Protection Officer: phqueen Data Protection Office
• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available via the phqueen platform 24/7
• Response Time: All DPA-related requests are acknowledged within 5 business days and resolved within 30 calendar days

For responsible gaming-related matters, please visit phqueen's Responsible Gaming page. For the complete legal terms governing your use of the phqueen platform, please review our Terms & Conditions.