ph.rush Privacy Policy

1 Who We Are

This Privacy Policy is issued by ph.rush ("ph.rush," "we," "us," or "our"), the operator of the ph.rush online casino and sports betting platform accessible at phrush.vu. ph.rush is the data controller in respect of the personal information of players and visitors processed under this Policy.

ph.rush operates under applicable Philippine gaming regulations and is subject to oversight by the Philippine Amusement and Gaming Corporation (PAGCOR). As a data controller, ph.rush is registered with the National Privacy Commission (NPC) of the Philippines in accordance with the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This Policy applies to all personal information collected by ph.rush through the ph.rush website, mobile-optimized platform, customer support channels, and all associated services. By accessing or using the ph.rush platform, you confirm that you have read and understood this Privacy Policy.

2 Personal Data We Collect

ph.rush collects the following categories of personal information depending on your interaction with the platform:

Registration & Identity Data

• Full legal name, date of birth, and gender.
• Government-issued identification documents (e.g., Philippine National ID, passport, driver's license) submitted for KYC verification.
• Residential address, province, and postal code.
• Email address and mobile phone number.
• Username and encrypted password.

Financial & Transaction Data

• GCash or PayMaya mobile number, BPI/BDO/Metrobank account details (as applicable), or cryptocurrency wallet addresses used for deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal requests, and timestamps.
• Bonus and promotional activity records.

Gaming & Behavioural Data

• Game session logs, bet history, wagering volumes, and game preferences.
• Responsible gaming tool settings (deposit limits, self-exclusion status, cooling-off periods).

Technical & Device Data

• IP address, device type, operating system, browser type, and version.
• Login timestamps, session duration, and platform navigation data.
• Cookie identifiers and similar tracking technologies as described in Section 9.

Communications Data

• Records of correspondence between you and ph.rush support, including live chat transcripts and email communications.
• Feedback, complaints, and dispute records.

3 How We Collect Your Data

ph.rush collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or complete any other form or interaction on the ph.rush platform.
• Automatically — through the use of cookies, server logs, and similar technologies when you visit or use the ph.rush website or platform. See Section 9 for details.
• From third parties — including KYC verification service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention services, and game providers, where such data is necessary for the purposes described in Section 4 and is collected in accordance with applicable law.

4 Purposes of Processing

ph.rush processes your personal data for the following purposes:

• Account registration and management — to create and maintain your ph.rush account and provide you with access to the platform and its features.
• Identity verification (KYC) — to verify your identity and age (21+) as required by PAGCOR licensing conditions and Philippine anti-money laundering regulations (RA 9160, as amended by RA 10927).
• Payment processing — to process deposits and withdrawals via your chosen payment method (GCash, PayMaya, bank transfer, or cryptocurrency).
• Platform provision and improvement — to deliver and continuously improve the ph.rush gaming experience, including game recommendation, interface optimisation, and performance monitoring.
• Regulatory compliance — to meet ph.rush's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, and other applicable Philippine law.
• Responsible gaming — to administer self-exclusion, deposit limits, and other player protection tools and to identify and assist players showing signs of problem gambling.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, account abuse, and security incidents on the ph.rush platform.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates where you have opted in or where ph.rush has a legitimate interest, subject always to your right to opt out.
• Customer support — to respond to your enquiries, resolve complaints, and administer disputes.

5 Legal Bases for Processing

ph.rush processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules:

• Contractual necessity — processing required to perform the contract between you and ph.rush (your account agreement and these Terms).
• Legal obligation — processing required to comply with applicable Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act, and National Privacy Commission requirements.
• Legitimate interests — processing necessary for ph.rush's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent — where ph.rush relies on your consent as the basis for processing (for example, for certain marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Personal Data

ph.rush does not sell, rent, or trade your personal data. We share your information only in the following circumstances and only to the extent necessary for the stated purpose:

• Game providers and platform partners — third-party studios and software providers (e.g., Pragmatic Play, Evolution, PG Soft) may receive pseudonymised session data necessary to deliver and audit game outcomes. These partners are contractually bound to process data solely for the purposes of service delivery.
• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency network operators receive the transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification services — third-party verification providers receive identification documents and data for the purpose of fulfilling PAGCOR-mandated KYC obligations.
• Regulatory authorities — ph.rush will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement, or other competent Philippine authorities where required by law or lawful order.
• Professional advisors — legal, financial, or auditing advisors may access personal data on a need-to-know basis subject to professional confidentiality obligations.

7 International Data Transfers

Some of ph.rush's service providers and game partners are based outside the Philippines. Where personal data is transferred to countries that may not provide an equivalent level of data protection to Philippine law, ph.rush ensures such transfers are governed by appropriate safeguards — including standard contractual clauses, data sharing agreements approved by the NPC, or transfers to entities that have implemented binding corporate rules equivalent to Philippine data protection standards.

By using ph.rush, you acknowledge that your personal data may be processed in jurisdictions outside the Philippines subject to these safeguards.

8 Data Retention

ph.rush retains your personal data for as long as your account is active and for such additional period as is necessary to comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods are as follows:

• Account and KYC data — retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act.
• Transaction records — retained for a minimum of five (5) years following the date of the transaction.
• Support and communications records — retained for three (3) years from the date of the last communication.
• Cookie and technical data — retained for up to thirteen (13) months from collection, unless a shorter period is applicable to a specific cookie category.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with ph.rush's data deletion procedures.

9 Cookies & Tracking Technologies

ph.rush uses cookies and similar technologies (including local storage and session tokens) to operate the platform, enhance security, and understand how users interact with the service. We use the following categories of cookies:

• Strictly necessary cookies — essential for the ph.rush platform to function, including session management, login authentication, and security tokens. These cannot be disabled.
• Functional cookies — used to remember your preferences, such as language settings and game display options. Disabling these cookies may affect platform functionality.
• Analytics cookies — used to understand aggregate usage patterns on the ph.rush platform, helping us improve performance and user experience. Analytics data is processed in aggregated, anonymised form where possible.

ph.rush does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the ph.rush platform.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, you have the following rights in respect of your personal data held by ph.rush:

• Right to be informed — the right to know what personal data ph.rush holds about you and how it is being processed. This Policy fulfils that obligation.
• Right of access — the right to request a copy of the personal data ph.rush holds about you.
• Right to rectification — the right to have inaccurate or incomplete personal data corrected. You may update most account information directly from your ph.rush account settings.
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph.rush's legal retention obligations.
• Right to object — the right to object to processing of your personal data based on legitimate interests, including direct marketing.
• Right to data portability — the right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph.rush has processed your personal data in breach of applicable law.

To exercise any of these rights, please contact ph.rush at the details provided in Section 14. ph.rush will respond to verified requests within thirty (30) days of receipt.

11 Data Security

ph.rush implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the ph.rush platform.
• Encrypted storage of passwords using industry-standard one-way hashing algorithms.
• Access controls restricting access to personal data to authorised ph.rush personnel on a need-to-know basis.
• Real-time monitoring for suspicious login activity and automated fraud detection systems.
• Regular security assessments and penetration testing of the ph.rush platform.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph.rush will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach and will notify affected data subjects without undue delay in accordance with NPC requirements.

12 Children's Privacy

The ph.rush platform is strictly intended for adults. In accordance with PAGCOR regulations, the minimum age for accessing and using ph.rush is 21 years. ph.rush does not knowingly collect or process the personal data of individuals under 21 years of age.

If ph.rush discovers or is notified that personal data of a person under 21 has been collected, we will promptly delete that data and close the associated account. If you believe a minor has registered on ph.rush, please contact us immediately at the details in Section 14.

13 Policy Updates

ph.rush may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When we make material changes, we will notify you by posting a notice on the ph.rush platform and/or by sending a notification to your registered email address. The updated Policy will be effective as of the date indicated at the top of the document.

Your continued use of the ph.rush Service following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically.

14 Contact & Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ph.rush, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the ph.rush platform after logging in
• Data Protection Officer: reachable via the same support email with subject line "Data Privacy Request"

ph.rush's Data Protection Officer is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy. All data subject rights requests will be handled by the DPO's office and responded to within thirty (30) days.

You also have the right to contact the National Privacy Commission (NPC) of the Philippines directly if you believe your data privacy rights have been violated. NPC contact details are publicly available on the NPC's official government website.