Privacy Policy — f4ph Casino
At f4ph, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains what personal data f4ph collects from players and visitors, why we collect it, how it is used, who it may be shared with, and what rights you hold under Philippine law. This Policy is issued in compliance with Republic Act No. 10173 (the Data Privacy Act of 2012) and its implementing rules, as administered by the National Privacy Commission (NPC) of the Philippines.
Navigation
Table of Contents
This Privacy Policy is divided into thirteen sections. Use the links below or the sidebar on desktop to jump to any section. If you have questions after reading this Policy, contact our Data Protection Officer at the email address shown above.
At a Glance
Our Commitment to Your Privacy
Six principles guide how f4ph handles every piece of personal data it processes. These are not aspirational statements — they are operational commitments backed by Philippine law.
Transparency
f4ph tells you what data it collects, why it collects it, and who it shares it with — before you sign up, not buried in footnotes afterward.
Purpose Limitation
Your data is collected for specific, legitimate purposes. f4ph does not repurpose your personal information for unrelated commercial activities without fresh consent.
Data Minimisation
f4ph collects only the data it genuinely needs to operate its platform, verify your identity, process payments, and meet PAGCOR compliance requirements.
Accuracy
f4ph takes reasonable steps to keep your personal data accurate and up to date. You can update your profile details at any time through your account settings.
Security
Industry-standard encryption, access controls, and monitoring protect your personal data from unauthorised access, disclosure, alteration, or destruction.
Your Rights
Under RA 10173, you hold clear rights over your personal data — including the right to access, correct, delete, and object to its processing. f4ph honours all of these rights.
Section 1
Personal Data f4ph Collects
f4ph collects personal data through several channels: directly from you when you register or update your account, automatically when you use the platform, and from third parties such as payment processors and identity verification providers. The categories of personal data f4ph may collect are described below.
1.1 Registration and Account Data
When you create an f4ph account, we collect the information you provide in the registration form, including your full legal name, date of birth, nationality, email address, mobile number, and a username and password of your choosing. You may also be asked to provide your residential address for KYC verification purposes.
1.2 Identity Verification (KYC) Data
In compliance with PAGCOR anti-money laundering (AML) requirements and the Philippines' Anti-Money Laundering Act (AMLA), f4ph requires players to complete Know Your Customer (KYC) verification before processing withdrawals. KYC data may include:
- A copy of a government-issued photo ID (Philippine National ID, passport, driver's licence, SSS/GSIS card, or PRC ID).
- Proof of address (utility bill, bank statement, or government-issued document dated within 90 days).
- Selfie or liveness verification image for document authentication.
- Proof of ownership of the payment method used for deposits (e.g., screenshot of GCash account under your name).
KYC documents are processed and stored securely. Where f4ph uses a third-party identity verification provider, that provider is bound by a data processing agreement that meets the requirements of RA 10173.
1.3 Financial and Transaction Data
f4ph records all financial transactions conducted on the platform, including deposit amounts, withdrawal requests, payment method identifiers (e.g., GCash registered number, bank account last four digits), transaction timestamps, and transaction reference numbers. Full payment credentials (such as complete bank account numbers or card numbers) are never stored on f4ph servers — they are handled exclusively by PCI-DSS-compliant payment processors.
1.4 Gaming and Betting Activity Data
f4ph logs all gaming activity on the platform, including games played, bet amounts, game outcomes, session duration, and responsible gaming tool usage. This data is used for platform operation, regulatory reporting to PAGCOR, bonus administration, fraud detection, and responsible gaming monitoring.
1.5 Technical and Device Data
When you access f4ph, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.
1.6 Communications Data
If you contact f4ph customer support via live chat or email, we retain records of those communications, including the content of messages and the date and time of contact. This data is used to resolve your query, improve our support quality, and maintain a record of dispute resolution proceedings where applicable.
1.7 Voluntary Data
You may choose to provide additional information voluntarily — for example, when completing responsible gaming self-assessments, participating in player surveys, or interacting with promotional campaigns. Provision of such data is optional, and its use is limited to the specific purpose for which it was collected.
f4ph does not collect sensitive personal information as defined under RA 10173 (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required for responsible gaming assessments, in which case your explicit consent will be sought first.
Section 2
How f4ph Uses Your Personal Data
f4ph uses the personal data it collects for the purposes set out in the table below. For each purpose, the corresponding legal basis under RA 10173 and f4ph's legitimate interests (where applicable) are also indicated.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Registration data, device data | Contract performance |
| Identity verification (KYC / AML) | KYC documents, financial data | Legal obligation (PAGCOR, AMLA) |
| Processing deposits and withdrawals | Financial data, KYC data | Contract performance |
| Fraud prevention and security monitoring | Device data, transaction data, gaming data | Legitimate interests / Legal obligation |
| Regulatory reporting to PAGCOR / AMLC | All data categories as required | Legal obligation |
| Responsible gaming monitoring | Gaming data, voluntary data | Legal obligation / Consent |
| Customer support and dispute resolution | Communications data, account data | Contract performance / Legitimate interests |
| Promotional communications (opt-in only) | Registration data, gaming data | Consent |
| Platform analytics and improvement | Technical data, gaming data (aggregated) | Legitimate interests |
f4ph does not use automated decision-making (including profiling) that produces legal or similarly significant effects on players, except where explicitly required by PAGCOR's responsible gaming framework or fraud prevention systems. Where automated decisions are made in such contexts, you have the right to request human review.
Section 3
Legal Basis for Processing
Under Republic Act No. 10173 (the Data Privacy Act of 2012) and its Implementing Rules and Regulations (IRR), f4ph is required to identify a valid legal basis for each category of personal data processing it undertakes. f4ph relies on the following legal bases:
3.1 Contract Performance
The majority of f4ph's data processing is necessary for the performance of the contract between f4ph and you as a registered player. This includes account creation, processing your deposits and withdrawals, administering bonuses, and operating the games you play. Without this processing, f4ph cannot provide you with its services.
3.2 Legal Obligation
Certain processing activities are mandatory under Philippine law, regardless of your preferences. These include KYC verification and AML screening under the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR regulatory reporting, and responsible gaming monitoring requirements. f4ph cannot waive these obligations — they are conditions of its operating licence.
3.3 Legitimate Interests
f4ph processes some personal data on the basis of its legitimate interests as an operator, provided those interests are not overridden by your rights and freedoms. This includes fraud detection, security monitoring, and platform analytics. f4ph has conducted legitimate interest assessments (LIAs) for all processing in this category and is satisfied that the balance of interests favours processing.
3.4 Consent
Where f4ph relies on your consent — for example, to send you promotional emails or SMS updates, or to process sensitive personal information in the context of voluntary responsible gaming assessments — that consent is sought clearly, separately from other terms, and is freely revocable at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent, contact our Data Protection Officer or update your communication preferences in your account settings.
Section 6
Data Retention
f4ph retains your personal data for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by Philippine law. The table below summarises f4ph's standard data retention periods.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and registration data | Duration of account + 5 years after closure | PAGCOR / AMLA requirement |
| KYC documents | 5 years after account closure | RA 9160 (AMLA) as amended |
| Transaction records | 5 years after transaction date | RA 9160 (AMLA) as amended |
| Gaming and betting history | 3 years after account closure | PAGCOR regulatory requirement |
| Customer support communications | 2 years after resolution | Legitimate interests |
| Technical / server logs | 12 months rolling | Security monitoring |
| Marketing consent records | Duration of consent + 1 year | RA 10173 accountability |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is used in place of deletion (for example, to retain aggregate platform analytics), the anonymised data is no longer considered personal data under RA 10173 and is not subject to the same restrictions.
If you request deletion of your personal data before the expiry of the applicable retention period, f4ph will assess the request against its legal obligations. Where a legal retention obligation exists that prevents immediate deletion, f4ph will restrict the processing of your data to storage only, and will delete it as soon as the legal obligation permits.
Section 7
Data Security
f4ph implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, f4ph's security programme includes the following controls:
- Encryption in transit: All data transmitted between your device and f4ph's servers is encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS.
- Encryption at rest: Sensitive personal data stored on f4ph's servers — including KYC documents and financial records — is encrypted using AES-256 encryption.
- Access controls: Access to personal data is restricted to authorised f4ph personnel and service providers on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all staff with access to production systems.
- Payment security: f4ph does not store full card or bank account numbers. Payment processing is handled exclusively by PCI-DSS-compliant payment processors.
- Vulnerability management: f4ph conducts regular security assessments of its platform, including vulnerability scanning and periodic penetration testing.
- Incident response: f4ph maintains a documented data breach response plan. In the event of a personal data breach that is likely to result in a risk to your rights, f4ph will notify the NPC within 72 hours of becoming aware of the breach and will notify affected players as required by RA 10173's implementing rules.
PROTECT YOUR OWN ACCOUNT
f4ph's security measures protect data on our systems. You are responsible for keeping your own login credentials secure. Use a unique, strong password for your f4ph account. Never share your password or OTP codes with anyone — including anyone claiming to be f4ph support staff.
If you suspect your account has been compromised, contact our 24/7 live chat support immediately. f4ph will never ask for your password via chat or email.
Section 8
Your Rights Under RA 10173
The Data Privacy Act of 2012 grants all data subjects in the Philippines a set of enforceable rights over their personal data. As an f4ph player, you hold the following rights with respect to the personal data f4ph processes about you:
Right to Be Informed
The right to know that your data is being collected and processed, the purposes of processing, and who it may be shared with — before collection occurs.
Right of Access
The right to request a copy of the personal data f4ph holds about you, along with information about how it is processed.
Right to Rectification
The right to request correction of any inaccurate or incomplete personal data f4ph holds about you.
Right to Erasure
The right to request deletion of your personal data, subject to f4ph's legal retention obligations under PAGCOR and AMLA requirements.
Right to Object
The right to object to processing of your personal data based on legitimate interests, including direct marketing and profiling.
Right to Block or Restrict
The right to suspend or restrict processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
Right to Data Portability
The right to receive a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
Right to Damages
The right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false , unlawfully obtained, or unauthorised use of personal data, in accordance with RA 10173.
To exercise any of the above rights, submit a written request to f4ph's Data Protection Officer at [email protected]. Please include your registered account username, the specific right you wish to exercise, and sufficient information to verify your identity. f4ph will respond to all valid requests within fifteen (15) business days, as required by the NPC's implementing rules. Where a request is complex or voluminous, f4ph may extend this period by a further thirty (30) days, with prior notice to you.
If you are not satisfied with f4ph's response to a data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the NPC's official government website.
Section 9
Minors — Strict 21+ Policy
f4ph is strictly for players aged 21 years and above. This age restriction is mandated by PAGCOR for casino-style online gambling in the Philippines. Individuals under 21 are prohibited from registering, depositing, or participating in any real-money games on the f4ph platform.
f4ph does not knowingly collect personal data from individuals under the age of 21. All registration forms include a mandatory date-of-birth field, and accounts belonging to persons under 21 are rejected at the point of registration. KYC verification further confirms the age of all players before withdrawal privileges are granted.
If f4ph discovers or is notified that it has inadvertently collected personal data from a player who was under 21 at the time of registration, it will take the following steps without undue delay:
- Suspend the relevant account immediately, pending investigation.
- Notify the account holder that their account has been suspended due to an age verification concern.
- If the account holder cannot verify their age as 21 or above, permanently close the account and return any unspent deposits to the original payment method.
- Securely delete personal data collected from the underage individual, to the extent permitted by f4ph's legal obligations.
- Review how the underage registration occurred and implement measures to prevent recurrence.
If you are a parent or guardian and believe that a minor in your care has registered on f4ph, please contact our Data Protection Officer immediately at [email protected]. f4ph will prioritise such reports and act swiftly.
Section 10
Changes to This Privacy Policy
f4ph may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, f4ph's data processing practices, or the services offered on the platform. All updates will be published on this page with a revised "Last Updated" date at the top of the document.
Where a proposed change is material — meaning it significantly affects your rights or how your personal data is used — f4ph will provide advance notice via email to your registered address and/or via an in-platform notification, no less than fourteen (14) days before the change takes effect. Your continued use of the f4ph platform after the effective date of a material change constitutes your acknowledgement of the updated Policy.
For non-material changes (such as minor clarifications or updates to contact details), f4ph will update this page without advance notice. We encourage you to review this Privacy Policy periodically to stay informed of how f4ph protects your data. The current version of this Policy supersedes all previous versions.
To ensure you receive important privacy notices, keep your registered email address up to date in your f4ph account settings. Players who have opted out of all email communications may still receive mandatory legal and regulatory notices.
Section 11
Contact Our Data Protection Officer
f4ph has appointed a Data Protection Officer (DPO) in compliance with Section 21 of RA 10173 and NPC Circular 16-01. The DPO is responsible for overseeing f4ph's data protection programme, handling data subject rights requests, and serving as the primary point of contact with the National Privacy Commission.
If you have questions, concerns, or requests relating to this Privacy Policy or f4ph's processing of your personal data, you may contact the DPO through any of the following channels:
DPO Email:
General Support:
[email protected] — Live Chat: 24/7
Response Time:
Within 15 business days
Jurisdiction:
Republic of the Philippines
When contacting the DPO regarding a data subject rights request or a privacy concern, please provide your registered account username, a clear description of your request or concern, and any supporting information that would help us identify the relevant records. This will help us handle your request as efficiently as possible.
If you are not satisfied with the DPO's response, or if you believe f4ph is processing your personal data in violation of RA 10173, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.
Your Data, Your Rights
Play at f4ph with Full Confidence
f4ph is built for Filipino players who value both great gaming and genuine privacy protection. PAGCOR-regulated, RA 10173-compliant, and committed to keeping your personal data secure. Register today — for players 21 and above.
Must be 21 or older. Please gamble responsibly. Responsible Gaming resources available here.