ph.rush Casino Privacy Policy

ph.rush (referred to in this Privacy Policy as "ph.rush," "we," "us," or "our") is an online gaming and casino platform accessible at phrush.one, offering Filipino players a wide range of games including slots, live dealer games, bingo, Kalaka Bingo, and sports-related wagering. ph.rush operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA"), ph.rush acts as the Personal Information Controller (PIC) with respect to the personal data of registered players and website visitors. This means ph.rush determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the ph.rush website at phrush.one, the ph.rush mobile application (where available), customer support interactions, and any other channel through which you interact with ph.rush. By registering a ph.rush account or using our services, you acknowledge that you have read and understood this Privacy Policy.

ph.rush collects personal data in several categories depending on how you interact with our platform. The following table summarizes the categories of personal data we collect and the context in which each category is gathered:

ph.rush does not collect special categories of sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance — such as health data, political opinions, or religious beliefs — unless you voluntarily provide such information in the context of a responsible gaming self-assessment.

ph.rush collects personal data through the following methods:

• Direct Collection: Information you provide when registering a ph.rush account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you visit phrush.one, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for full details on our cookie practices.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention services. ph.rush only receives data from third parties where you have authorized that third party to share your information, or where ph.rush is legally permitted to obtain such data.
• Publicly Available Sources: In limited circumstances related to fraud prevention or regulatory compliance, ph.rush may cross-reference information against publicly available records or databases maintained by Philippine government agencies.

ph.rush processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your consent or establishing a separate lawful basis under the DPA:

• Account Management: To create, maintain, verify, and manage your ph.rush player account, including processing login authentication and account security.
• Service Delivery: To provide access to ph.rush games, process wagers, calculate and credit winnings, and deliver all features of the ph.rush platform.
• Financial Transactions: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records.
• Identity Verification (KYC): To verify your identity and age (21+) as required by PAGCOR regulations and to comply with Philippine anti-money laundering obligations under the AMLA.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the ph.rush platform.
• Regulatory Compliance: To fulfill ph.rush's obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine regulatory authorities.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming patterns, identify potential problem gambling behavior, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time through your account settings.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve ph.rush's games, features, and user experience.

Under the Philippine Data Privacy Act of 2012, ph.rush processes your personal data on the following lawful bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your ph.rush account, process transactions, and deliver gaming services as described in our Terms and Conditions.
• Legal Obligation: Processing necessary to comply with ph.rush's legal obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate Interests: Processing carried out for ph.rush's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ph.rush does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your financial transactions.
• KYC & Identity Verification Providers: Third-party identity verification and fraud screening services engaged by ph.rush to fulfill KYC obligations.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies, where disclosure is required by law or regulatory direction.
• Law Enforcement: Philippine law enforcement agencies, where ph.rush is legally compelled to disclose information in connection with a criminal investigation or court order.
• Technology Service Providers: Cloud hosting, cybersecurity, analytics, and customer support platform providers engaged by ph.rush under strict data processing agreements that prohibit unauthorized use of your data.
• Game Content Providers: Licensed game studios and software providers whose games are available on ph.rush, to the limited extent necessary to deliver and support those games.

ph.rush will never share your personal data with third-party advertisers, data brokers, or marketing companies without your explicit prior consent.

ph.rush uses cookies and similar tracking technologies on phrush.one to enhance your browsing experience, maintain session security, and analyze platform usage. A cookie is a small text file placed on your device by a website you visit.

ph.rush uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of phrush.one, including maintaining your login session, remembering your language preferences, and enabling secure transactions. These cookies cannot be disabled without affecting core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymized data about how visitors use phrush.one — such as which pages are visited most frequently and how long sessions last — to help ph.rush improve the platform. No personally identifiable information is collected through these cookies.
• Functional Cookies: Used to remember your preferences and settings (such as responsible gaming limits you have set) to provide a more personalized experience on ph.rush.
• Marketing Cookies: Used only where you have consented, to deliver relevant promotional content about ph.rush offers. You may opt out of marketing cookies at any time through your browser settings or the ph.rush cookie preference center.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain features of ph.rush, including account login and financial transactions.

ph.rush retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

• Account Data: Retained for the duration of your active ph.rush account, plus a minimum of five (5) years following account closure, as required by PAGCOR regulations and AMLA record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and Bureau of Internal Revenue (BIR) requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service improvement.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever occurs first.
• Technical & Log Data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, ph.rush will securely delete or anonymize your personal data in accordance with its data disposal procedures, unless further retention is required by a specific legal obligation or ongoing regulatory investigation.

ph.rush implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and ph.rush is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in ph.rush databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within ph.rush is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and regular data privacy training.
• Two-Factor Authentication (2FA): ph.rush supports and encourages the use of two-factor authentication for player accounts to provide an additional layer of login security.
• Penetration Testing: ph.rush's systems undergo regular independent security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response: ph.rush maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, ph.rush will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the DPA.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph.rush. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 14:

ph.rush will respond to all data subject rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you. Requests may be subject to identity verification before processing to protect against unauthorized access to your data.

ph.rush is strictly an adult gaming platform. In accordance with Philippine gaming regulations enforced by PAGCOR, ph.rush services are available exclusively to individuals who are 21 years of age or older. ph.rush does not knowingly collect personal data from individuals under the age of 21.

If ph.rush becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted (subject to any legal retention obligations), and any deposits will be returned at ph.rush's discretion.

If you are a parent or guardian and believe that a minor in your care has registered a ph.rush account or provided personal data to ph.rush, please contact our Data Protection Officer immediately using the contact details in Section 14 so that appropriate action can be taken without delay.

ph.rush primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where ph.rush uses internationally hosted cloud infrastructure or engages game content providers based in other jurisdictions.

Where such cross-border transfers occur, ph.rush ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Philippine Data Privacy Act, including:

• Entering into data transfer agreements with overseas recipients that impose data protection obligations equivalent to those required under Philippine law.
• Transferring data only to countries or organizations that the National Privacy Commission has recognized as providing an adequate level of data protection.
• Obtaining your explicit consent for specific cross-border transfers where required by the DPA.

ph.rush will not transfer your personal data to any overseas recipient that cannot demonstrate adequate data protection standards consistent with the DPA and its implementing rules.

ph.rush may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The most current version of this Privacy Policy will always be available at phrush.one/privacy-policy, with the effective date updated accordingly.

For material changes — those that significantly affect how ph.rush processes your personal data or your rights as a data subject — ph.rush will provide advance notice via email to your registered address or through a prominent in-platform notification at least fourteen (14) days before the changes take effect, where reasonably practicable.

Your continued use of ph.rush following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Privacy Policy, you should stop using ph.rush and may request account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ph.rush handles your personal data, you may contact our Data Protection Officer directly. ph.rush is committed to addressing all privacy-related inquiries promptly and transparently.

You may reach the ph.rush Data Protection Officer through the following channels:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available within your ph.rush account dashboard, 24 hours a day, 7 days a week.
• Mailing Address: ph.rush Data Protection Officer, Metro Manila, Philippines.

When submitting a data subject rights request or privacy complaint, please include your registered ph.rush username, a clear description of your request or concern, and any relevant supporting information. This will allow our DPO to process your request as efficiently as possible.

ph.rush takes all privacy complaints seriously and will acknowledge receipt of your complaint within three (3) business days, with a substantive response provided within thirty (30) days. We are committed to resolving all data privacy concerns fairly, transparently, and in full compliance with the Data Privacy Act of 2012 and its implementing rules and regulations.