phnova Privacy Policy

1Introduction and Scope

This Privacy Policy ("Policy") describes how phnova ("phnova," "we," "us," or "our") collects, uses, stores, and protects the personal data of individuals ("you," "your," or "Player") who access or use the phnova website at phnova.club and all associated services, features, and content (collectively, the "Platform").

This Policy applies to all personal data collected through the Platform, whether provided directly by you during registration, collected automatically through your use of the Platform, or obtained from third parties in connection with the provision of our services. By accessing the Platform or creating a phnova account, you acknowledge that you have read and understood this Policy.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2Data Controller Information

phnova is the data controller responsible for the personal data collected through the Platform. As data controller, phnova determines the purposes and means of processing your personal data. phnova is committed to fulfilling its obligations as a data controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

If you have any questions about how phnova handles your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer using the contact details provided in Section 13 of this Policy.

3Personal Data We Collect

3.1 Data You Provide Directly

When you register for a phnova account, use our services, or contact our support team, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., PhilSys ID, passport, driver's license, UMID);
• Contact Data: Philippine mobile number, email address, and residential address;
• Financial Data: GCash number, PayMaya account details, BPI, BDO, or Metrobank account information used for deposits and withdrawals;
• Account Data: Username, password (stored in hashed form), account preferences, and communication preferences;
• Support Data: Records of your communications with our customer support team, including chat logs and email correspondence.

3.2 Data Collected Automatically

When you access and use the Platform, we automatically collect certain technical and behavioral data, including:

• Device and Technical Data: IP address, device type, operating system, browser type and version, and screen resolution;
• Usage Data: Pages visited, games played, betting history, session duration, click patterns, and navigation paths within the Platform;
• Location Data: General geographic location derived from your IP address (country and region level only; we do not collect precise GPS location);
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 7 of this Policy.

3.3 Data from Third Parties

We may receive personal data about you from third parties in the following circumstances:

• From payment processors (GCash, PayMaya, BPI, BDO, Metrobank) to verify and process your transactions;
• From identity verification service providers during the KYC process;
• From fraud prevention and anti-money laundering screening services;
• From game providers, to the extent necessary to resolve disputes or technical issues.

4How We Use Your Data

phnova uses your personal data for the following purposes:

Purpose	Description
Account Management	To create, maintain, and manage your phnova account, including verifying your identity and age.
Service Delivery	To provide access to games, process bets, credit winnings, and deliver all features of the Platform.
Payment Processing	To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank.
Legal Compliance	To comply with applicable Philippine laws, including anti-money laundering (AML) obligations, KYC requirements, and regulatory reporting.
Fraud Prevention	To detect, investigate, and prevent fraudulent activity, cheating, and other prohibited conduct on the Platform.
Responsible Gaming	To monitor gaming behavior and enforce responsible gaming tools such as deposit limits and self-exclusion.
Customer Support	To respond to your inquiries, resolve disputes, and provide technical assistance.
Platform Improvement	To analyze usage patterns and improve the performance, features, and user experience of the Platform.
Marketing	To send you promotional offers, bonuses, and news about phnova — only where you have given your consent to receive such communications.

5Legal Basis for Processing

phnova processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide the Platform and its services);
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including AML and KYC obligations;
• Legitimate Interests: Processing is necessary for our legitimate interests, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights;
• Consent: Where we rely on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6Data Sharing and Disclosure

6.1 Service Providers

phnova may share your personal data with trusted third-party service providers who assist us in operating the Platform. These include payment processors, identity verification providers, cloud hosting providers, fraud prevention services, and customer support tools. All such providers are contractually bound to process your data only on our instructions and to maintain appropriate security measures.

6.2 Game Providers

Where you play games on the phnova Platform that are supplied by third-party game providers, limited technical data (such as session identifiers and bet amounts) may be shared with those providers solely for the purpose of delivering the game and resolving technical disputes. Game providers are not permitted to use this data for any other purpose.

6.3 Regulatory and Legal Disclosure

phnova may disclose your personal data to Philippine government authorities, regulatory bodies, law enforcement agencies, or courts where we are required to do so by law, court order, or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of phnova's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6.5 No Sale of Personal Data

phnova does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Full stop.

7Cookies and Tracking

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the phnova Platform. They help us recognize your device, remember your preferences, keep your session active, and understand how you use the Platform so we can improve it.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and display options to provide a more personalized experience.
• Analytics Cookies: Help us understand how players navigate the Platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymized.
• Marketing Cookies: Used to deliver relevant promotional content to you on the Platform, based on your gaming activity and preferences. These are only activated with your consent.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform.

8Data Retention

phnova retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with AML record-keeping requirements;
• Transaction Data: Retained for a minimum of five (5) years from the date of the transaction;
• KYC Documents: Retained for a minimum of five (5) years after the end of the business relationship;
• Support Communications: Retained for two (2) years from the date of the last communication;
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year after withdrawal of consent.

When personal data is no longer required, phnova will securely delete or anonymize it in accordance with our data disposal procedures.

9Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phnova:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. We will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request.

10Data Security

phnova implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields at rest in our databases;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of the Platform;
• Two-factor authentication (2FA) available for all player accounts;
• Incident response procedures to detect, report, and address personal data breaches promptly.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phnova will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

11Children and Minors

The phnova Platform is strictly intended for individuals who are 21 years of age or older. phnova does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately using the details in Section 13.

12Changes to This Policy

phnova reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features of the Platform. When we make material changes to this Policy, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect. The updated Policy will always be available at phnova.club/privacy-policy.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the Platform and may request account closure as described in our Terms & Conditions.

13Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way phnova handles your personal data, please contact our Data Protection Officer. Our contact email is displayed in the footer of every page of this website. We aim to respond to all privacy-related inquiries within five (5) business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about how to file a complaint with the NPC is available on the NPC's official website.

This Privacy Policy was last updated on January 1, 2026. If you have a concern about any provision of this Policy, please contact us before using the Platform.