phdarna Privacy Policy

phdarna ("phdarna", "we", "us", "our") is the operator of the online casino and sports betting platform accessible at phdarna.co. phdarna is the Data Controller responsible for the personal data of registered players and website visitors as defined under the Philippine Data Privacy Act of 2012 (RA 10173). Our designated Data Protection Officer (DPO) can be contacted using the details in Section 14 of this Policy.

phdarna operates in compliance with PAGCOR regulations and the requirements of Philippine law, including obligations relating to the collection, storage, and processing of personal data arising under the Anti-Money Laundering Act (AMLA), Know Your Customer (KYC) requirements, and responsible gaming regulations.

phdarna collects the following categories of personal data in connection with your use of the Platform:

phdarna collects only the minimum personal data necessary for the identified purposes. We do not collect special categories of personal data (e.g., health data, biometric data beyond what is necessary for identity verification) except where explicitly required by law.

phdarna collects personal data through the following means:

• Direct collection — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to surveys or promotions
• Automated collection — through cookies, server logs, and analytics tools that record your interactions with the phdarna Platform (see Section 8 for cookie details)
• Third-party sources — identity verification partners, fraud prevention databases, payment processors (GCash, Maya, BPI, BDO, Metrobank), and PAGCOR regulatory data feeds where applicable

phdarna will always inform you at the point of collection if personal data is being gathered, unless it is collected through automated means disclosed in this Policy.

phdarna uses your personal data for the following purposes:

• To create, verify, and administer your phdarna account
• To process deposits, withdrawals, and other financial transactions via GCash, Maya, and local bank channels
• To verify your identity and age (21+) in compliance with PAGCOR requirements and Philippine law
• To detect and prevent fraud, money laundering, and other prohibited activities, including compliance with AMLA reporting obligations
• To provide customer support and resolve complaints and disputes
• To personalise your gaming experience, including recommending games and promotions relevant to your activity
• To monitor gaming behaviour for responsible gaming purposes and enforce deposit limits, cooling-off periods, and self-exclusions
• To communicate important account, security, and policy updates
• To send promotional communications, including bonus offers and tournament invitations (where you have not opted out)
• To comply with applicable Philippine laws, regulatory obligations, and court or government orders
• To improve the security, performance, and functionality of the Platform

phdarna processes your personal data on the following legal grounds under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our obligations under our Terms & Conditions, including account operation, payment processing, and game delivery
• Legal obligation — processing required to comply with Philippine laws, including PAGCOR regulations, AMLA obligations, and NPC requirements
• Consent — processing for marketing communications and optional personalisation features, which you may withdraw at any time
• Legitimate interests — processing for fraud prevention, security monitoring, and platform improvement, where our interests do not override your rights and freedoms

phdarna does not sell or rent your personal data to any third party. We share your data only in the following circumstances and only to the extent necessary:

• Payment processors — GCash, Maya, BPI, BDO, and Metrobank receive the minimum transactional data required to process your deposit or withdrawal
• Identity verification providers — licensed third-party KYC and anti-fraud service providers who assist phdarna in verifying player identities and detecting suspicious activity
• Game software providers — providers such as Pragmatic Play, PG Soft, Jili, and Evolution Gaming receive the minimum data required to operate and authenticate game sessions
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government bodies where legally required
• Professional advisers — legal, accounting, and security advisers bound by confidentiality obligations who assist phdarna in operating its business lawfully
• Business successors — in the event of a merger, acquisition, or asset sale, player data may be transferred to the acquiring entity subject to equivalent privacy protections

All third parties who receive phdarna player data are contractually required to process it only for the specified purpose and to maintain data security standards consistent with this Policy and applicable Philippine law.

phdarna retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by Philippine law:

• Account and identity data — retained for a minimum of five (5) years following account closure, as required by AMLA and PAGCOR regulations
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction
• Gaming activity logs — retained for a minimum of two (2) years for dispute resolution purposes
• Support communications — retained for two (2) years following resolution of the relevant matter
• Marketing consent records — retained for the duration of your account and for one (1) year following consent withdrawal

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with phdarna's data disposal procedures. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

phdarna uses cookies and similar tracking technologies on its Platform for the following purposes:

• Essential cookies — required for the Platform to function correctly, including maintaining your login session and remembering your account preferences. These cannot be disabled without affecting Platform functionality.
• Analytics cookies — used to understand how players use the Platform, which pages are visited most frequently, and where technical issues occur. This data is aggregated and not used to identify individual players.
• Functional cookies — used to remember your language preferences, game settings, and responsible gaming configurations.
• Security cookies — used to detect fraudulent login attempts, bot activity, and other security threats.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of the phdarna Platform. phdarna does not use third-party advertising cookies or cross-site tracking technologies on its Platform.

phdarna does not knowingly collect personal data from any individual under the age of twenty-one (21) years. Philippine law and PAGCOR regulations prohibit access to real-money online gaming by anyone below this age threshold. phdarna enforces strict age verification at the account registration stage and may request additional verification documents at any time.

If phdarna discovers that it has inadvertently collected personal data from a person under 21, the associated account will be immediately suspended, all funds returned to the payment source, and the personal data deleted from our systems. If you believe a person under 21 has created an account on phdarna, please notify our support team immediately via live chat or by emailing [email protected].

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phdarna:

• Right to be informed — the right to know that your personal data is being collected and processed, as described in this Policy
• Right of access — the right to obtain a copy of the personal data phdarna holds about you
• Right to rectification — the right to request correction of inaccurate or incomplete personal data
• Right to erasure — the right to request deletion of your personal data, subject to phdarna's legal retention obligations under AMLA and PAGCOR regulations
• Right to object — the right to object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation
• Right to data portability — the right to receive your personal data in a structured, commonly used, machine-readable format
• Right to file a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phdarna has violated your data privacy rights

To exercise any of these rights, please contact phdarna's Data Protection Officer as described in Section 14. phdarna will respond to data requests within thirty (30) days of receipt, subject to identity verification requirements.

phdarna implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• AES-256 encryption for data at rest; TLS 1.3 for data in transit
• Role-based access controls limiting data access to authorised personnel only
• Regular third-party penetration testing and security audits
• Multi-factor authentication for all phdarna staff accessing player data
• Automated anomaly detection and real-time fraud monitoring
• Physical access controls for data centre infrastructure
• Regular staff data privacy and security training

While phdarna takes every reasonable precaution to secure your data, no internet-based system is completely immune to security risks. You are responsible for maintaining the security of your phdarna login credentials and for enabling two-factor authentication on your account.

phdarna's primary data processing infrastructure is located in the Philippines and the Asia-Pacific region. Where personal data is processed by third-party service providers outside the Philippines — for example, game software providers operating servers in other jurisdictions — phdarna ensures that appropriate contractual safeguards are in place to protect your data to the same standard required under the Philippine Data Privacy Act of 2012.

phdarna will not transfer personal data to countries or territories that do not provide an adequate level of data protection without implementing appropriate supplementary measures, including standard contractual clauses approved under Philippine data protection law.

phdarna may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email notification and/or a prominent notice on the Platform prior to the effective date of the change.

Your continued use of the phdarna Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

This Privacy Policy was last updated on 1 January 2026. This version supersedes all prior versions.

For all data privacy enquiries, access requests, complaints, or to exercise any of your rights under the DPA 2012, please contact phdarna's Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 on the phdarna Platform — mention "privacy request" when initiating the chat
• Response time: phdarna acknowledges all data privacy requests within 5 business days and aims to resolve them within 30 days

If you believe your data privacy rights have been violated and phdarna has not adequately addressed your concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. NPC contact details are available on the NPC's official government website.

For questions about our gaming Terms & Conditions, see our Terms & Conditions page. For responsible gaming tools and support resources, see our Responsible Gaming page.