phmery Privacy Policy

phmery ("we," "us," or "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy ("Policy") sets out how phmery collects, uses, stores, discloses, and protects personal information obtained in connection with your use of the phmery platform at phmery.vip, including all associated mobile-optimized interfaces, account features, game services, and payment systems.

This Policy applies to all registered players, visitors to phmery.vip, and any individual whose personal data phmery processes in the ordinary course of operating its licensed online gaming services in the Philippines. It covers data collected through the phmery website, account registration forms, KYC verification processes, payment transactions, customer support interactions, and automated data collection technologies such as cookies and analytics tools.

By registering an account on phmery, using any feature of the phmery platform, or providing personal data to phmery in any context, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the phmery platform.

For the purposes of the Data Privacy Act of 2012, phmery is the personal information controller in respect of personal data collected and processed through the phmery platform. phmery determines the purposes and means of processing your personal data.

phmery has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. Queries, rights requests, and complaints relating to data privacy may be submitted to phmery's support team at [email protected], referencing "Data Privacy" in the subject line. phmery will direct such communications to the DPO for handling within the response timeframes set out in Section 14.

phmery collects the following categories of personal data in connection with the provision of its services:

• Full legal name
• Date of birth
• Gender
• Philippine residential address
• Email address
• Mobile phone number (Philippine format)
• Username and encrypted password

• Government-issued photo identification (SSS ID, UMID, PhilHealth ID, driver's license, passport, voter's ID, or other valid Philippine government ID)
• Selfie or facial photograph for identity matching
• Proof of address documentation (where required)
• Source of funds documentation (where required for enhanced due diligence)

• GCash mobile number and transaction reference numbers
• PayMaya (Maya) account reference information
• Bank account details (bank name, account number) for bank transfer transactions
• Deposit and withdrawal amounts, dates, and payment method used
• Complete transaction history within your phmery account

• Game titles played, bet amounts, game outcomes, and session durations
• Sports betting selections, odds accepted, and settlement outcomes
• Bonus and promotion usage history
• Responsible gaming tool settings and self-exclusion records

• IP address and geolocation data at the time of login and transactions
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and analytics data

• Customer support chat transcripts and email correspondence
• Feedback and survey responses you voluntarily provide to phmery

phmery collects personal data through the following channels and methods:

• Direct Provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a survey or promotion.
• Automated Collection: Technical and device data collected automatically when you access phmery.vip through cookies, server logs, and analytics tools. This includes your IP address, browser type, device identifiers, and browsing behavior on the phmery platform.
• Payment Processors: Transaction confirmation data received from GCash, PayMaya, and banking partners when you initiate deposits or withdrawals through their systems.
• Identity Verification Services: Data returned from third-party KYC and identity verification providers engaged by phmery to verify submitted identity documents.
• Regulatory Sources: Where legally required, phmery may receive information from PAGCOR, the AMLC, or law enforcement agencies in connection with regulatory compliance obligations.

phmery processes your personal data for the following purposes:

phmery processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to enter into and perform the agreement between you and phmery, including account creation, payment processing, and service delivery.
• Legal Obligation: Processing required for phmery to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act, the Data Privacy Act, and tax regulations.
• Legitimate Interest: Processing necessary for phmery's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes beyond operational necessity — such as marketing communications and non-essential analytics — where phmery relies on your explicit, freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

phmery does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:

phmery engages trusted third-party service providers who process personal data on phmery's behalf as personal information processors. These include payment processing partners (GCash/GCash operator, PayMaya, and banking partners), KYC and identity verification providers, cloud hosting and server infrastructure providers, customer support platform providers, and analytics service providers. All processors are bound by data processing agreements and are prohibited from using your data for any purpose beyond delivering services to phmery.

Game studios and providers integrated into the phmery platform (including JILI Games, Pragmatic Play, Evolution Gaming, and others) receive limited technical session data necessary to deliver and render games within your phmery account. Game providers do not receive your financial information, government ID data, or full identity data.

As a PAGCOR-licensed operator, phmery is required to submit player data, transaction records, and gaming activity data to PAGCOR as part of ongoing regulatory compliance and reporting obligations. phmery is also required under the Anti-Money Laundering Act to report covered transactions and suspicious transactions to the Anti-Money Laundering Council (AMLC). phmery will disclose personal data to law enforcement agencies, courts, or government authorities where legally compelled to do so by valid legal process.

phmery retains personal data for the period necessary to fulfill the purposes for which it was collected, subject to the following minimum retention requirements:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and Philippine anti-money laundering law.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and Bureau of Internal Revenue regulations.
• Gaming activity logs: Retained for a minimum of two (2) years from the date of each session, or longer where required for dispute resolution or regulatory compliance.
• Customer support records: Retained for two (2) years following resolution of the relevant support interaction, unless the matter involves a regulatory, legal, or dispute resolution proceeding.
• Marketing consent records: Retained for the duration of your account and for two (2) years following account closure or consent withdrawal, as evidence of consent management.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phmery's data disposal procedures. Requests for early deletion are subject to the overriding legal retention obligations described above.

phmery implements technical and organizational security measures appropriate to the sensitivity of the personal data processed and the risks posed by our operating environment. These measures include:

• Encryption: All data transmitted between your device and phmery's servers is encrypted using TLS/SSL protocols with 256-bit encryption. Sensitive data fields, including passwords, are stored using one-way cryptographic hashing and are not recoverable in plain text by any phmery employee.
• Access Controls: Access to personal data within phmery's systems is restricted on a need-to-know basis. Employees, contractors, and system accounts are granted the minimum level of access required for their function. Access is authenticated via individual credentials and logged for audit purposes.
• Infrastructure Security: phmery's platform is hosted on secured infrastructure with firewall protection, intrusion detection systems, and regular vulnerability assessments. Physical access to data center facilities housing phmery's servers is restricted to authorized personnel.
• Incident Response: phmery maintains a data breach response procedure. In the event of a personal data breach affecting your data, phmery will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach where required, and will notify affected individuals in accordance with NPC guidelines.

While phmery takes all reasonable steps to protect your personal data, no method of data transmission over the internet or electronic storage is completely secure. phmery cannot guarantee absolute security but commits to maintaining standards proportionate to the risks involved in operating a licensed online gaming platform.

Cookies are small text files placed on your device when you visit phmery.vip. They enable the platform to recognize your device, maintain your login session, remember your preferences, and collect usage analytics.

• Essential Cookies: Required for phmery's core functionality including maintaining your authenticated session, security tokens, and platform navigation. These cannot be disabled without impairing platform access.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and previously used payment methods to improve your experience on phmery.
• Analytics Cookies: Collect anonymized or pseudonymized data about how players use phmery — which pages are visited most frequently, session duration, and feature usage — to help phmery improve the platform. phmery uses analytics data in aggregate form and does not use it to build individual behavioral profiles for advertising.

You can manage and delete non-essential cookies through your browser settings. Most modern browsers allow you to block third-party cookies, delete existing cookies, and receive alerts before cookies are placed. Please note that disabling essential cookies will affect your ability to log in and use phmery's services.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmery. To exercise any of these rights, contact phmery support at [email protected] with the subject line "Data Privacy Request."

phmery's services are strictly restricted to individuals who are twenty-one (21) years of age or older in accordance with PAGCOR's minimum gambling age requirements. phmery does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process required of all phmery accounts prior to enabling real-money transactions.

If phmery becomes aware that personal data has been collected from an individual under the age of 21, phmery will immediately close the associated account, delete the personal data collected, forfeit any winnings, and where appropriate, report the matter to PAGCOR. If you are a parent or guardian and believe a minor may have created a phmery account, please contact [email protected] immediately.

phmery reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, PAGCOR regulatory requirements, or the structure of our services. When material changes are made, phmery will notify registered players via email to the address associated with their phmery account and/or by posting a prominent notice on the phmery platform at least seven (7) days prior to the effective date of the change.

The "Last Reviewed" date at the top of this Policy will be updated each time the Policy is amended. Your continued use of phmery following the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated Policy. Where changes materially affect the way phmery processes your data, and where processing relies on consent, phmery will seek your renewed consent before applying the updated processing terms.

To exercise any of your rights described in Section 11, submit a data privacy request to phmery's customer support at [email protected] with the subject line "Data Privacy Request." Please include your full name, registered mobile number or email address, the right you wish to exercise, and sufficient information to verify your identity. phmery will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days of receipt.

For general questions about this Privacy Policy or about how phmery handles personal data, you may contact our support team via email at [email protected] or via the live chat feature available in your phmery account dashboard after login. Our support team is available 24 hours a day, 7 days a week, and responds in both English and Tagalog.

If you are not satisfied with phmery's response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official NPC channels.