1 Who We Are and Why This Policy Exists
PHSugar is an online gaming platform available at phsugar.best, operated by PHSugar Ltd. We offer sports betting, fishing games, and associated promotional services to adult players in the Philippines. As part of running this platform, PHSugar processes personal data belonging to our registered users.
This Privacy Policy explains what personal data PHSugar collects from you, the purposes for which we process it, who we may share it with, how long we keep it, and what rights you have over your own information. Reading this policy takes about ten minutes, and it's worth doing — knowing how your data is handled means you can make informed decisions about your account at PHSugar.
This policy applies to all personal data collected through the PHSugar website, mobile platform, customer support interactions, and any other channel through which you communicate with PHSugar. It does not apply to third-party websites or services that may be linked from our platform — those have their own privacy policies that we have no control over.
PHSugar processes personal data in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and the regulations of the National Privacy Commission. If you have a complaint about how PHSugar handles your personal data, you have the right to file a complaint with the NPC at privacy.gov.ph.
2 Personal Data PHSugar Collects
PHSugar collects personal data through three main channels: information you provide directly, information generated by your use of the platform, and information received from trusted third parties as part of our verification and payment processes.
| Data Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, government ID number | Registration form, KYC verification |
| Contact Data | Mobile number, email address, city/province | Registration form, account settings |
| Financial Data | GCash/Maya account reference, bank account details (for withdrawal routing only) | Deposit and withdrawal flows |
| Transaction Data | Deposit amounts, withdrawal amounts, bet history, game session records | Platform activity — generated automatically |
| Technical Data | IP address, device type, browser, operating system, login timestamps | Automatic collection during platform use |
| Communications Data | Support chat transcripts, email correspondence, feedback submitted through forms | Direct communication with PHSugar |
| Verification Data | Government ID images, selfie photos, proof of address documents | KYC and AML verification process |
PHSugar does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond identity verification selfies), health data, or sexual orientation. If any such information is incidentally shared with us through a support communication, it is not recorded or processed beyond the immediate purpose of that interaction.
PHSugar does not store full card numbers, CVV codes, or card expiry dates on its own servers. All card payment processing is handled by PCI DSS-compliant third-party payment processors. PHSugar only receives a tokenised reference that allows transaction matching — not the card data itself.
3 How PHSugar Uses Your Personal Data
PHSugar uses your personal data only for specific, documented purposes. We do not use your data for any purpose that you would find surprising or that goes beyond what is necessary to deliver the PHSugar platform and its services.
- Account creation and management: Your identity and contact data are used to create and maintain your PHSugar account, verify your identity, and ensure only you can access your account.
- Transaction processing: Financial data is used to process deposits, withdrawals, and refunds, and to route funds to the correct payment method. PHSugar uses this data to reconcile transactions and investigate disputed payments.
- Regulatory compliance (AML/KYC): PHSugar is legally required to verify the identity of its players and monitor financial transactions for signs of money laundering or fraud. This requires processing identity, financial, and transaction data.
- Responsible gaming: Transaction and session data are used to monitor for signs of problem gambling, to enforce deposit limits and cooling-off periods you set, and to support self-exclusion requests. PHSugar takes this obligation seriously.
- Customer support: Communications data is used to handle your support queries, investigate complaints, and improve the quality of the support service.
- Platform improvement: Technical and transaction data is analysed in aggregated, anonymised form to understand how the PHSugar platform is used and to prioritise product improvements.
- Fraud prevention and security: Technical data, IP addresses, and login history are used to detect and prevent unauthorised access, multi-accounting, and other fraudulent activity.
- Marketing communications: Where you have opted in, contact data is used to send you information about PHSugar promotions, new products, and offers relevant to your activity on the platform. You can opt out at any time.
4 Legal Basis for Processing
Under the Philippine Data Privacy Act, PHSugar must have a lawful basis for processing your personal data. Depending on the purpose, PHSugar relies on one of the following legal bases:
- Performance of a contract: Processing necessary to create your PHSugar account, process deposits, settle bets, pay out winnings, and provide the services you signed up for.
- Legal obligation: Processing required to comply with Philippine law — including anti-money laundering regulations, gaming licence conditions, and data privacy law itself.
- Legitimate interests: Processing to protect the security of the PHSugar platform, prevent fraud, conduct anonymised analytics, and maintain the integrity of the betting environment — in all cases balanced against your privacy rights.
- Consent: Processing for direct marketing communications, or where PHSugar asks for your specific consent before processing data for an optional purpose. Consent can be withdrawn at any time.
5 Cookies and Tracking Technologies
PHSugar uses cookies and similar technologies on the platform. A cookie is a small text file stored on your device that helps the platform remember your preferences and recognise your browser across sessions.
Types of cookies used by PHSugar:
- Essential cookies: Required for the platform to function — keeping you logged in, maintaining your session state, and enabling secure transactions. These cannot be disabled without breaking core functionality.
- Functional cookies: Remember your language preference, display settings, and other customisations so you don't need to reset them on every visit.
- Analytics cookies: Help PHSugar understand how players navigate the platform — which pages are visited most, where players encounter difficulties, and which features are most used. Data is aggregated and does not identify individual players.
- Marketing cookies: Used only where you have consented to receive personalised promotions. These help PHSugar understand which offers are relevant to your preferences so we're not sending you promotions for games you never play.
You can manage cookie preferences through the cookie settings panel accessible from the footer of the PHSugar platform. Refusing non-essential cookies does not affect your ability to use the platform or claim bonuses.
6 Who PHSugar Shares Your Data With
PHSugar does not sell your personal data. We share it only where genuinely necessary — with service providers who help us operate the platform, regulatory bodies who require it by law, and in limited circumstances described below.
- Payment processors: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and card processing networks receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual data protection obligations with PHSugar.
- Identity verification providers: Licensed KYC and AML service providers process your identity documents for verification purposes. These providers are contractually prohibited from using your data for any purpose other than the verification service.
- Regulatory authorities: PHSugar's gaming regulator and, where required by law, the Anti-Money Laundering Council of the Philippines (AMLC), the National Privacy Commission, and other Philippine government agencies may require access to certain data. PHSugar complies with all lawful requests.
- Technology infrastructure providers: Cloud hosting, cybersecurity, and platform analytics providers may process technical data as part of delivering their services to PHSugar. All such providers are bound by data processing agreements that restrict use to the services provided.
- Group companies: PHSugar may share data within its corporate group for operational and compliance purposes, subject to the same data protection standards as described in this policy.
Some of PHSugar's service providers operate infrastructure outside the Philippines. Where personal data is transferred internationally, PHSugar ensures appropriate safeguards are in place — including standard contractual clauses and assessments of the receiving country's data protection standards — consistent with the requirements of the Philippine Data Privacy Act.
7 Data Retention — How Long We Keep Your Information
PHSugar keeps your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
- Account data (identity, contact, verification documents): Retained for the duration of your active PHSugar account plus five years after account closure, as required by Philippine AML regulations.
- Transaction records (deposits, withdrawals, bet history): Retained for five years from the date of the transaction, in line with financial record-keeping requirements under Philippine law.
- Communications data (support chats, emails): Retained for three years from the date of the interaction, or longer where relevant to an ongoing dispute or legal proceeding.
- Technical and log data (IP addresses, login records): Retained for 12 months, after which they are deleted or anonymised unless required for an active security investigation.
- Marketing preferences and opt-in records: Retained for the duration of your account plus one year after account closure, to demonstrate compliance with consent requirements.
After the relevant retention period expires, PHSugar securely deletes or permanently anonymises your personal data. Anonymised data — which cannot be traced back to any individual — may be retained indefinitely for aggregate analytics and platform improvement purposes.
8 How PHSugar Protects Your Data
PHSugar takes technical and organisational security seriously. The following measures are in place to protect your personal data from unauthorised access, disclosure, alteration, or destruction:
- TLS/SSL encryption: All data transmitted between your device and PHSugar servers is encrypted using industry-standard TLS protocols. The padlock icon in your browser confirms this is active during every session.
- Encryption at rest: Sensitive data stored on PHSugar servers — including identity documents and financial records — is encrypted at rest using AES-256 or equivalent standards.
- Access controls: Access to personal data within PHSugar is restricted on a need-to-know basis. Staff members can only access the data required for their specific role. Access is logged and reviewed regularly.
- Two-factor authentication: PHSugar encourages all players to enable two-factor authentication (2FA) on their accounts. It is mandatory for staff who access player data.
- Regular security audits: PHSugar engages independent security professionals to conduct periodic penetration tests and vulnerability assessments of the platform.
- Incident response plan: PHSugar maintains a documented data breach response plan that outlines the steps to be taken in the event of a security incident, including notification timelines for affected players and regulatory bodies.
PHSugar's security measures protect data on our side. Your account password and any 2FA codes are your responsibility. Use a unique, strong password for your PHSugar account and do not share login details with anyone. If you suspect your account has been accessed without your knowledge, contact support immediately.
9 Your Data Rights as a PHSugar Player
Under the Philippine Data Privacy Act and PHSugar's own privacy commitments, you have the following rights over your personal data. All rights can be exercised free of charge by contacting PHSugar at the details in Section 13.
Right to Access
Request a copy of the personal data PHSugar holds about you, including the purposes for which it is processed and who it has been shared with.
Right to Correction
Request that PHSugar correct any inaccurate or incomplete personal data held about you. Many details can be corrected directly in your account settings.
Right to Erasure
Request that PHSugar delete your personal data where it is no longer necessary, where you withdraw consent, or where processing is unlawful — subject to legal retention requirements.
Right to Restrict Processing
Request that PHSugar temporarily pause processing of your data while an accuracy dispute is being resolved or while you object to processing based on legitimate interests.
Right to Data Portability
Request a machine-readable copy of the personal data you provided to PHSugar, suitable for transfer to another service provider, where technically feasible.
Right to Object
Object to processing of your data based on PHSugar's legitimate interests, including profiling. You can also object to direct marketing at any time, with immediate effect.
PHSugar will acknowledge data rights requests within 3 business days and respond in full within 30 days. Where a request is complex or voluminous, PHSugar may extend this by a further 30 days with prior notification. There is no charge for exercising these rights.
10 Children's Privacy
PHSugar is strictly an adults-only platform. Registration and access to services is prohibited for anyone under 21 years of age. PHSugar does not knowingly collect personal data from individuals under 21.
If PHSugar becomes aware that a minor has registered an account or that personal data belonging to a minor has been collected, the account will be immediately suspended, any associated funds will be returned to the depositing payment method, and the minor's personal data will be deleted from PHSugar's systems. If you believe a minor may have registered an account on PHSugar, please contact support@phsugar.best immediately.
11 Marketing Communications and Opt-Out
PHSugar sends promotional communications — including bonus offers, new product announcements, and event notifications — only to players who have opted in to receive them. Opt-in occurs during registration and can be updated at any time in your account communication settings.
If you no longer want to receive marketing communications from PHSugar, you can opt out at any time by:
- Updating your communication preferences in your PHSugar account settings.
- Clicking the unsubscribe link in any PHSugar marketing email.
- Contacting support at support@phsugar.best with "Unsubscribe" in the subject line.
Opting out of marketing communications does not affect transactional messages — PHSugar will still send you important account notifications, deposit confirmations, withdrawal updates, and security alerts regardless of your marketing preferences. These communications are necessary to operate your account.
Messages related to responsible gaming — such as deposit limit reminders, cooling-off period confirmations, and self-exclusion notices — are always sent regardless of marketing opt-out status. These are account safety communications, not marketing.
12 Changes to This Privacy Policy
PHSugar reviews this Privacy Policy regularly and updates it when our data practices change, when new services are introduced, or when legal requirements evolve. The "last updated" date at the top of this page reflects the most recent revision.
When we make material changes to this policy — such as processing your data for a new purpose or sharing it with a new category of third party — PHSugar will notify you by email to your registered address and by in-account notification at least 14 days before the change takes effect. This gives you enough time to review the changes and, if you disagree, close your account or exercise your data rights before the new policy applies.
Minor updates — such as clarifying existing language, correcting typographical errors, or adding examples that do not change the substance of the policy — may be made without advance notice.
13 How to Contact PHSugar About Privacy
PHSugar has a designated Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests related to your personal data, you can reach the DPO through the following channels:
- Email: support@phsugar.best — mark your subject line "Privacy Request" or "DPO Inquiry"
- Live chat: Available 24/7 through the support chat in your PHSugar account dashboard
PHSugar's support and DPO team communicate in both Filipino and Philippine English. All privacy-related inquiries are handled separately from general support queries to ensure they receive appropriate attention.
If you are not satisfied with PHSugar's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph. PHSugar cooperates fully with NPC investigations and complies with all NPC orders.