DATA PRIVACY

PHKuya Privacy Policy — How We Protect Your Data

PHKuya takes your privacy seriously. This policy explains exactly what personal information we collect, why we collect it, who we share it with, and the rights you have as a registered player in the Philippines.

Last updated: 6 March 2025

Your Privacy Matters to PHKuya

When you create a PHKuya account, every bit of personal information you provide is treated as a trust you're extending to the platform. That trust is not something we take lightly. PHKuya collects only the data it genuinely needs to run your account, process payments, keep your funds secure, and comply with the rules that licensed online gaming operators in the Philippines are required to follow.

This Privacy Policy is written in plain language — not buried inside impenetrable legal boilerplate — because PHKuya believes every player deserves to understand how their information is handled. You should be able to read this page and come away with a clear picture of what PHKuya knows about you, what it does with that knowledge, and what you can do if you want to review, correct, or remove your data.

This policy applies to the PHKuya website at phkuya.xyz, the PHKuya mobile experience, all account management tools, payment channels, and any PHKuya promotional communications. By registering or continuing to use PHKuya, you confirm that you have read and understood this Privacy Policy.

Quick Summary

PHKuya collects registration, payment, and gameplay data to operate your account, verify your identity, process transactions, prevent fraud, and improve platform services. We do not sell your personal data. You have the right to access, correct, or request deletion of your information at any time.

phkuya

How PHKuya Keeps Your Data Safe

Six privacy commitments that apply to every PHKuya player — from registration through account closure.

End-to-End Encryption

All data transmitted between your device and PHKuya servers uses 256-bit SSL/TLS encryption. Your passwords are stored as salted hashes — PHKuya staff cannot see them, and neither can anyone else who might gain unauthorised access to our databases.

Strict Access Controls

Only PHKuya staff members with a documented, legitimate need may access personally identifiable player information. Access is logged, reviewed regularly, and revoked immediately when no longer required. No personal data is accessible to the broader team.

We Never Sell Your Data

PHKuya does not sell, rent, or trade personal information to any third party for marketing purposes. Full stop. If a service provider requires access to a limited subset of your data to perform a specific function, they operate under a strict data processing agreement that prohibits any secondary use.

Minimum Data Collection

PHKuya collects only what it actually needs. If a piece of information is not necessary for running your account, processing payments, satisfying verification requirements, or improving platform security, we do not ask for it. Data collection decisions are reviewed periodically to ensure they remain proportionate.

Defined Retention Periods

PHKuya retains personal data only for as long as it is needed for its stated purpose or as required by applicable Philippine regulations. Transaction and identity records may be kept for a minimum period to comply with anti-money laundering and tax rules, after which they are securely deleted or anonymised.

Breach Notification

In the unlikely event of a data security incident that could affect your personal information, PHKuya will notify affected players promptly and take immediate steps to contain, investigate, and remediate the issue — in line with Philippine data privacy regulations and our responsibility to the PHKuya player community.

phkuya

1 Data Controller

PHKuya, operating at phkuya.xyz, is the data controller responsible for personal information collected through the platform. When this Privacy Policy refers to "PHKuya," "we," "us," or "our," it means the operator of the PHKuya website and gaming services. For privacy-related questions, please contact support@phkuya.xyz with the subject line "Privacy Request."

PHKuya processes personal data in accordance with the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines, its Implementing Rules and Regulations, and the requirements of the National Privacy Commission. These obligations shape every decision PHKuya makes about collecting, storing, sharing, and deleting personal information.

2 Information We Collect

PHKuya collects personal information in three ways: directly from you during registration and account management, automatically through your use of the platform, and from third-party verification and payment processors. Here is a breakdown of what that includes:

Category Examples When Collected
Identity Full legal name, date of birth, government ID number, photo ID, selfie or liveness image Registration, KYC verification
Contact Mobile number, email address, residential address, province or city Registration, profile updates
Financial GCash number, Maya account, bank account or card details (last four digits and type), transaction history First deposit, withdrawal requests
Gaming Activity Games played, wager amounts, game results, session times, bonus usage, account balance history Ongoing platform use
Technical IP address, device type, browser, operating system, screen resolution, session duration, referral source Every visit or login
Communications Support chat transcripts, email messages, complaint records, survey responses When you contact PHKuya

Note: PHKuya does not store full card numbers. Payment card details are handled by PCI-DSS compliant payment processors. PHKuya receives only a tokenised reference and masked card number sufficient for dispute resolution.

3 Why We Use Your Personal Data

Every piece of data PHKuya processes has a defined purpose. The main reasons we use your information include:

  • Account creation and management — registering you, maintaining your profile, authenticating your identity, and managing your account settings and balance.
  • Processing deposits and withdrawals — verifying payment ownership, executing transactions through GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, Visa, and Mastercard channels, and maintaining transaction records.
  • Identity and age verification — confirming that you meet PHKuya's minimum age of 21 and are who you say you are, as required by gaming and anti-money laundering regulations.
  • Fraud prevention and security — detecting suspicious account activity, identifying duplicate registrations, monitoring for payment fraud, and protecting the integrity of game outcomes.
  • Responsible gaming — monitoring gameplay patterns, responding to limit or self-exclusion requests, and intervening when account behaviour suggests possible gambling harm.
  • Legal and regulatory compliance — fulfilling record-keeping, anti-money laundering, reporting, and audit requirements applicable to online gaming operators.
  • Customer support — reviewing your account, transaction, and game history to resolve support queries, complaints, and disputes.
  • Platform improvement — analysing anonymised or aggregated usage data to improve game performance, navigation, payment flows, and overall service quality.
  • Promotional communications — sending PHKuya offers, tournament announcements, and platform news to players who have consented to receive them.

4 Legal Bases for Processing

PHKuya processes your personal data on one or more of the following legal grounds under Philippine data privacy law:

  • Contractual necessity — processing required to fulfil the PHKuya player agreement, including running your account, managing payments, and providing access to games.
  • Legal obligation — processing required to comply with anti-money laundering rules, gaming regulations, tax obligations, and lawful government requests.
  • Legitimate interest — processing for fraud detection, security monitoring, responsible gaming oversight, and internal analytics, balanced against your privacy interests.
  • Consent — processing for optional marketing communications and any other purpose where your explicit consent has been obtained and can be withdrawn at any time.

5 How We Share Your Information

PHKuya does not sell your personal data. Sharing is limited to the following categories of recipients, each bound by confidentiality obligations or contractual data protection requirements:

  • Payment processors — GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, and card networks receive only the information required to execute your specific transaction.
  • Identity verification providers — third-party KYC and age verification services receive a copy of identification documents and, where required, a selfie or liveness check. These providers may not use this data for any purpose other than your PHKuya verification.
  • Game content providers — where a game is supplied by a third-party studio, that provider may receive a pseudonymous player identifier, wager amounts, and game results to operate the game and calculate returns. No contact or payment details are shared.
  • Fraud and risk management services — IP addresses, device fingerprints, and transaction patterns may be shared with specialist fraud prevention systems operating under strict data processing agreements.
  • Regulatory and law enforcement authorities — PHKuya will disclose information when required by a valid legal order, government instruction, anti-money laundering obligation, or gaming regulatory requirement. We will not voluntarily disclose information beyond what is required.

International transfers: Some PHKuya service providers may be located or process data outside the Philippines. Where this occurs, PHKuya takes steps to ensure that appropriate data transfer safeguards, contractual protections, and data processing agreements are in place consistent with the Data Privacy Act of 2012.

6 Cookies and Tracking Technologies

PHKuya uses cookies — small text files stored by your browser — and similar tracking tools to operate the platform, maintain session security, prevent fraud, and understand how players use the site. Categories of cookies used include:

  • Essential cookies — required for the website to function. These include session management, login authentication, and security tokens. They cannot be disabled.
  • Performance and analytics cookies — collect anonymised or aggregated data about page views, session duration, and navigation paths to help PHKuya improve the platform. No individually identifiable information is stored.
  • Preference cookies — remember choices you have made, such as language preferences or responsible gaming settings, to avoid asking you to repeat them on every visit.

You can manage most cookies through your browser settings. Disabling essential cookies may prevent some PHKuya features from working correctly. PHKuya does not currently use third-party advertising cookies or retargeting pixels.

7 How Payment Data Is Protected

Financial transactions at PHKuya are processed through encrypted channels. When you make a deposit or request a withdrawal via GCash, Maya, InstaPay, or another supported method, the actual sensitive payment credentials are handled directly by the payment provider — not stored on PHKuya's own servers.

PHKuya retains a record of transaction amounts, dates, reference numbers, and the masked identifier for the payment method used. This is necessary for account balance accuracy, dispute resolution, anti-money laundering records, and audit trails. PHKuya will never ask you to share your full e-wallet PIN, card CVV, or online banking password through chat, email, or any PHKuya interface.

8 How Long We Keep Your Data

PHKuya retains personal information only for as long as necessary for its stated purpose and any applicable minimum period required by Philippine law. General retention guidelines are:

  • Account and identity verification records are kept for at least five years after account closure to meet anti-money laundering requirements.
  • Transaction records are retained for at least five years for financial compliance and audit purposes.
  • Support and complaint records are kept for up to three years from case closure.
  • Game history logs are retained for up to two years for dispute resolution and responsible gaming monitoring.
  • Marketing consent records are retained for as long as the consent is valid and for one year after it is withdrawn.

When the retention period for a category of data expires and no legal hold applies, PHKuya securely deletes or irreversibly anonymises the information so it can no longer be linked to you as an individual.

9 Your Privacy Rights as a PHKuya Player

Under the Philippine Data Privacy Act and PHKuya's own commitments, you have the following rights regarding your personal information:

Right to Access

Request a copy of the personal data PHKuya holds about you, including the purposes for which it is used.

Right to Correction

Request correction of inaccurate, outdated, or incomplete personal information in your PHKuya account.

Right to Erasure

Request deletion of personal data where it is no longer necessary, consent has been withdrawn, or processing is unlawful — subject to legal retention requirements.

Right to Object

Object to processing carried out on the basis of legitimate interest, including profiling or automated decisions affecting your account.

Right to Portability

Receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.

Right to Withdraw Consent

Withdraw marketing consent at any time through your account settings or by emailing support@phkuya.xyz without affecting prior processing.

To exercise any of these rights, contact PHKuya at support@phkuya.xyz with your registered email, the nature of your request, and sufficient information for identity verification. PHKuya aims to respond within 30 days. Complex or multiple requests may require additional time, and we will notify you accordingly.

10 Security Measures PHKuya Uses

PHKuya uses multiple layers of technical and organisational security to protect your personal information. These include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, bcrypt password hashing, strict database access controls and audit logging, two-factor authentication options for player accounts, regular internal security assessments and third-party penetration testing, firewall and intrusion detection systems, and documented incident response procedures.

No security system is completely impenetrable. Players also contribute to account security by choosing a strong, unique password, not sharing login credentials, and contacting PHKuya immediately at support@phkuya.xyz if they suspect their account has been accessed without their authorisation.

11 Children's Privacy

PHKuya is strictly for players who are 21 years of age or older. The platform does not knowingly collect personal information from anyone under that age. If PHKuya discovers or is notified that a minor has registered or provided personal information, the account will be suspended, any deposits returned to the original payment source subject to verification, and all associated personal data permanently deleted. Parents or guardians who believe a minor may have accessed PHKuya should contact support@phkuya.xyz immediately.

12 Marketing Communications

PHKuya may send promotional messages — including bonus offers, tournament invitations, game announcements, and platform news — to players who have opted in to marketing communications. Consent is collected at registration and can be withdrawn at any time through account settings or by contacting support@phkuya.xyz.

Withdrawing marketing consent does not affect your ability to use the PHKuya platform or receive service-essential communications such as payment confirmations, account security alerts, identity verification requests, and responsible gaming notices. These operational messages are not marketing and will continue to be sent as part of normal account management.

13 Changes to This Privacy Policy

PHKuya may update this Privacy Policy to reflect changes in platform features, applicable law, data processing practices, or security standards. The "Last updated" date at the top of this page will reflect the most recent revision. For material changes that significantly affect how your data is used, PHKuya will provide advance notice through your registered email address or a prominent on-screen notice when you next log in.

Continued use of PHKuya after a policy update takes effect constitutes acknowledgement of the revised terms. If you disagree with a significant change, you may request account closure by contacting support@phkuya.xyz before the update date.

14 How to Contact PHKuya About Privacy

For any privacy-related questions, data access requests, complaints, or concerns, reach out to the PHKuya support team:

  • Email: support@phkuya.xyz (Subject: Privacy Request)
  • Live chat: Available 24/7 through the PHKuya platform
  • Response time: PHKuya aims to acknowledge your request within 48 hours and provide a full response within 30 days

If you believe PHKuya has not addressed your privacy concern adequately, you may lodge a complaint with the National Privacy Commission of the Philippines. PHKuya cooperates fully with NPC investigations and will provide all relevant records as required.

Tip: Always use your registered PHKuya email when submitting a privacy request so we can verify your identity quickly and process your request without unnecessary delay.

phkuya

Privacy as a Foundation, Not an Afterthought

For a lot of online platforms, a privacy policy is just a legal obligation — something to publish and forget about. PHKuya approaches it differently. Privacy design decisions are embedded in how the platform is built and updated, not bolted on after the fact. When PHKuya's engineers build a new feature, data minimisation and access control are part of the specification, not an afterthought review at the end.

This matters especially in the context of online gaming, where players are sharing financial information, identity documents, and detailed records of their habits and preferences. Filipino players in particular are increasingly digitally savvy and aware of their rights under the Data Privacy Act — and PHKuya is designed to meet those expectations rather than simply meet the minimum requirement.

The GCash and Maya integrations that Filipino players rely on for instant deposits and withdrawals require PHKuya to handle payment routing data carefully. The e-wallet numbers you use are stored only in encrypted form and accessed only by the specific PHKuya systems responsible for initiating transactions. Nobody on the general PHKuya team can retrieve your full GCash number from the platform — by design, not by policy alone.

PHKuya's responsible gaming tools — deposit limits, cool-off periods, self-exclusion — are another area where privacy and player protection intersect. The gameplay monitoring that enables PHKuya to identify early signs of problem gambling involves analysing patterns in your activity data. This analysis is limited strictly to responsible gaming purposes and is never used for commercial profiling, marketing targeting, or sharing with third parties.

If you have any doubt about what PHKuya holds on you, the right to access described in Section 9 of this policy is real and exercisable. Email support@phkuya.xyz with a subject line of "Privacy Request" and a description of what you'd like to see, and the team will respond with your data summary within the timeframe described. No complicated portal, no weeks of waiting — just a direct response from the PHKuya team.

Play Safely and Responsibly on PHKuya

PHKuya is strictly for players aged 21 and above. If you want to review, limit, or stop your gaming activity, visit the Responsible Gaming page. Privacy and player safety go hand in hand at PHKuya — both are built into the platform, not tacked on as an afterthought.

Ready to Play at PHKuya with Confidence?

You've read the policy. PHKuya protects your data, supports local payments, and runs 24/7 Filipino support. Join hundreds of thousands of Filipino players who trust PHKuya for fair online gaming.