phzz Privacy Policy

1 About This Policy

This Privacy Policy applies to all personal information collected and processed by phzz in connection with your use of the phzz platform — including the website at phzz.app, the mobile app, and any related services. It explains what data we collect, why we collect it, how it is used and stored, and what rights you have as a user based in the Philippines.

By registering for a phzz account or using the platform, you acknowledge that you have read this policy. It should be read alongside the Terms & Conditions, which govern your use of the platform more broadly.

2 Information We Collect

phzz collects personal information in several ways — directly from you during registration and verification, automatically through your use of the platform, and through payment processing channels.

3 How We Use Your Information

The personal data phzz holds is used for the following purposes:

• Account management: Creating and maintaining your phzz account, authenticating your logins via OTP, and communicating account-related updates.
• Identity verification (KYC): Confirming your age, identity, and eligibility to use the platform as required before withdrawal access is enabled.
• Transaction processing: Crediting deposits, processing withdrawal requests, and maintaining an accurate PHP transaction history in your account.
• Fraud prevention and security: Detecting and preventing unauthorized access, duplicate accounts, money laundering, and other fraudulent or abusive behavior.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling, and supporting self-exclusion and limit tools.
• Legal compliance: Meeting obligations under applicable Philippine laws, including data protection, anti-money laundering, and financial reporting requirements.
• Platform improvement: Understanding how the platform is used in aggregate to improve performance, game selection, and the user experience.

phzz does not use your personal data for automated profiling that produces legal effects, nor for selling to third-party advertisers.

4 Legal Basis for Processing

phzz processes your personal data on the following legal grounds:

• Contract performance: Processing necessary to operate your account and deliver the platform services you have registered for.
• Legal obligation: Processing required to comply with applicable laws, including KYC and anti-money laundering requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement — where these interests are not overridden by your data protection rights.
• Consent: Where phzz processes data on the basis of consent (such as for certain communications), you can withdraw that consent at any time by contacting support.

5 Sharing of Information

phzz does not sell your personal data. Information may be shared in the following limited circumstances:

• KYC and identity verification providers: Third-party verification services used to confirm the validity of government-issued IDs submitted during the KYC process. These providers are bound by confidentiality agreements.
• Payment processors: GCash, Maya, and Philippine bank transfer systems receive the minimum information necessary to process your PHP transactions. phzz does not store full payment credentials.
• Technology and hosting providers: Infrastructure services that support the operation of phzz are bound by data processing agreements and are not permitted to use your data for their own purposes.
• Legal and regulatory authorities: phzz may disclose personal data where required by Philippine law, court order, or in response to a lawful request from a government authority.
• Fraud and AML investigations: Where phzz has reasonable grounds to suspect fraud or financial crime, data may be shared with relevant investigative authorities.

6 Data Retention

phzz retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law and internal risk management policies. The general retention guidelines are:

• Account and identity data: Retained for the duration of your account and for a minimum of five years after account closure, as required for anti-money laundering compliance.
• Transaction records: Financial transaction records in PHP are retained for at least five years after the date of the transaction.
• Activity and session data: Retained for up to two years from the date of the activity, unless required for an ongoing investigation or legal proceeding.
• Support communications: Retained for up to two years from the date of the communication, or longer if the communication relates to a dispute or investigation.

Once the retention period has expired and there is no legal basis to continue holding data, phzz will securely delete or anonymize the relevant records.

7 Security Measures

phzz implements technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These include:

• SSL/TLS encryption for all data transmitted between your device and the phzz platform
• OTP-based two-factor authentication on every account login
• Access controls that restrict internal access to personal data to authorized personnel only
• Regular security reviews and monitoring of platform infrastructure
• Secure storage of KYC documents with restricted access logging

No security system is entirely infallible. If you suspect that your phzz account has been accessed without your authorization, contact support immediately at [email protected] so that appropriate steps can be taken.

8 Your Rights

As a phzz account holder based in the Philippines, you have the following rights regarding your personal data:

• Right to access: You can request a copy of the personal data phzz holds about you.
• Right to correction: You can request that inaccurate or incomplete personal data be corrected. Basic account details such as your email address can be updated from your account settings.
• Right to erasure: You can request deletion of your personal data, subject to our legal retention obligations for financial and identity records.
• Right to data portability: You can request a copy of your personal data in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interests, including profiling for platform improvement purposes.
• Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the phzz support team at [email protected]. Requests will be responded to within 30 days. Some requests may require identity verification before they can be fulfilled.

9 Cookies and Tracking

phzz uses cookies and similar tracking technologies to support essential platform functions and improve the player experience. The main categories of cookies used are:

• Essential cookies: Required for the platform to function — including maintaining your logged-in session, remembering your language preference, and securing your account activity. These cannot be disabled.
• Analytics cookies: Used to understand how players navigate the platform in aggregate, which helps phzz improve page performance and game discoverability. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent login attempts and other suspicious activity patterns.

Your browser settings allow you to control non-essential cookies. Disabling certain cookies may affect the functionality of some parts of the phzz platform.

10 Children and Minors

phzz is strictly for adults aged 21 and above. The platform does not knowingly collect or process personal data from persons under 21 years of age. If phzz becomes aware that personal data has been collected from a minor, that data will be deleted and the associated account will be closed immediately.

If you believe a minor has registered on phzz, please contact support at [email protected] so that the matter can be investigated promptly.

11 Updates to This Policy

phzz may update this Privacy Policy from time to time to reflect changes in platform operations, applicable laws, or data handling practices. The updated version will always be published on this page with a revised date at the top.

Where changes are material — for example, if phzz begins processing data for a new purpose — registered players will be notified via their registered email address or through a notice on the platform before the changes take effect. Continued use of phzz after the effective date of an updated policy constitutes acceptance of the changes.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact the phzz team:

You can also check the FAQ page for answers to common account and privacy questions, or review the Terms & Conditions for the broader framework governing your use of phzz.