This Privacy Policy explains what personal data fchai collects from Filipino players, how that data is used, who it may be shared with, how it is protected, and what rights you hold in relation to your data. Please read this document alongside the fchai Terms & Conditions before using the platform.
fchai is committed to handling your personal data with transparency, care, and in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations. By registering for and using the fchai platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
This Privacy Policy applies to all personal data collected and processed by fchai in connection with the operation of the fchai online gaming platform, accessible at fchai.org and any associated mobile applications, sub-domains, or digital services operated under the fchai brand.
For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, fchai is the data controller responsible for your personal data. fchai determines the purposes for which, and the manner in which, your personal data is collected and processed.
This Privacy Policy covers all personal data processed in connection with:
This Privacy Policy forms part of the overall agreement between you and fchai, alongside the Terms & Conditions. By accepting the Terms & Conditions, you simultaneously accept this Privacy Policy. If you do not agree with how fchai processes your personal data, you should discontinue use of the platform.
fchai collects the following categories of personal data from Players and prospective Players. Only data that is necessary and proportionate to the purposes described in this Policy is collected.
Data collected when you create or update a fchai Account:
Data collected during the KYC verification process required before full withdrawal access is granted:
Accepted Philippine government IDs include: PhilSys National ID, UMID, driver's license, Philippine passport, SSS ID, GSIS ID, PRC ID, and Postal ID.
Data generated in connection with deposits, withdrawals, and in-platform financial activity:
Data generated by your participation in Games on the fchai platform:
Data collected automatically when you access the fchai platform:
Data generated when you contact fchai or receive communications from us:
fchai collects personal data through the following means:
Providing certain data is optional, but failure to provide required data may limit your ability to use specific platform features. For example, KYC documentation is not required to register or place bets, but is required before withdrawal requests above threshold amounts are processed.
fchai processes your personal data for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Creating and managing your fchai Account | Identity, Registration, Technical |
| Verifying your identity and age (KYC / 21+ compliance) | Identity, KYC Documents |
| Processing deposits and withdrawals via GCash, Maya, and banks | Financial, Transaction, Identity |
| Providing access to Games and recording game outcomes | Gaming Activity, Financial |
| Administering bonuses, promotions, and VIP rewards | Gaming Activity, Financial, Identity |
| Providing customer support and resolving disputes | Communications, Identity, Transaction |
| Detecting and preventing fraud, money laundering, and bonus abuse | All categories as relevant |
| Complying with legal and regulatory obligations | Identity, KYC, Financial, Gaming Activity |
| Responsible gaming monitoring and player protection | Gaming Activity, Financial, Communications |
| Sending marketing communications (with your consent) | Identity, Communications, Gaming Preferences |
| Platform security, maintenance, and performance analytics | Technical, Device |
Under the Philippine Data Privacy Act of 2012, fchai processes your personal data under one or more of the following legal bases:
fchai does not sell your personal data to third parties for their own marketing purposes. Your data may be shared only in the following circumstances and with the following categories of recipients:
GCash, Maya, BPI, BDO, Metrobank, and other payment processing partners receive limited identity and transaction data necessary to process deposits and withdrawals. These providers process your data under their own privacy policies and applicable financial regulations.
Third-party KYC and identity verification service providers receive your identity documents and photographs for the purpose of verifying your identity and age. These providers are contractually required to process your data only for the specified verification purpose and to maintain appropriate security standards.
Device and behavioural data may be shared with fraud prevention and platform security service providers to detect and prevent fraud, money laundering, account compromise, and other prohibited activities on the platform.
Third-party game providers (including live dealer studio operators and slot game providers) may receive limited session data necessary to deliver game content to you and record game outcomes. Game providers do not receive your full identity or financial data.
fchai may be required by law, court order, or regulatory directive to disclose personal data to Philippine government authorities, law enforcement agencies, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent authorities. fchai will comply with such requirements and, where legally permissible, will notify you of any such disclosure.
fchai's legal advisers, auditors, and other professional service providers may have access to your personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.
fchai does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Any data sharing is limited to the purposes described in this section and is subject to appropriate data processing agreements and security obligations.
Cookies are small text files placed on your device when you visit the fchai website. They allow the platform to recognise your device, maintain your login session, remember your preferences, and collect analytical data about platform usage.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / Session | Required to maintain your login session, keep your wallet balance current, and enable game functionality. The platform cannot function without these. | Session only |
| Authentication | Used to verify your identity across requests and to support two-factor authentication flows. | Session / up to 30 days (if "Remember Me" selected) |
| Security | Detects and prevents fraudulent login attempts, CSRF attacks, and other security threats. | Session only |
| Performance / Analytics | Collects anonymised usage data to help fchai understand how Players navigate the platform and identify technical issues. | Up to 12 months |
| Preference | Remembers your display preferences, language settings, and notification preferences. | Up to 12 months |
You may control non-essential cookies through your browser settings or any cookie management tool provided on the fchai platform. Please note that disabling essential or authentication cookies will impair or prevent your use of the platform, including the ability to log in and access your account.
fchai retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory retention obligations.
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account + 5 years after account closure |
| KYC identity documents | 5 years after account closure (AML / regulatory requirement) |
| Transaction and financial records | 5 years from date of transaction (AMLA compliance) |
| Gaming activity history | 3 years from date of activity |
| Support communications | 2 years from date of last interaction |
| Marketing consent records | Until consent is withdrawn + 1 year |
| Responsible gaming records (self-exclusion, limits) | 5 years from date of request |
| Technical / access logs | 90 days (security review) / 12 months (fraud investigations) |
Upon expiry of the applicable retention period, fchai will securely delete or irreversibly anonymise your personal data. Where retention is extended due to an active legal proceeding, regulatory investigation, or dispute, data will be retained until that matter is fully resolved.
fchai implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
In the event of a personal data breach that is reasonably likely to result in serious harm to affected individuals, fchai will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected Players as required by applicable law, without undue delay.
While fchai takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your Account login credentials and for notifying fchai immediately if you suspect unauthorised access to your Account.
Under the Philippine Data Privacy Act of 2012, you hold the following rights in relation to your personal data processed by fchai. To exercise any of these rights, contact fchai's Data Protection Officer using the contact details in Section 15.
You have the right to be informed whether fchai holds personal data relating to you and the details of how that data is processed. This Privacy Policy fulfils our primary obligation to inform you.
You may request a copy of the personal data fchai holds about you. Requests will be fulfilled within 15 business days. fchai may request proof of identity before providing access.
You may request correction of inaccurate or incomplete personal data held by fchai. You can update most profile information directly within your Account settings.
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected and no overriding legal retention obligation applies. Erasure requests cannot be fulfilled for data subject to mandatory AML or regulatory retention periods.
You may object to the processing of your personal data where such processing is based on legitimate interests. You have an absolute right to object to direct marketing processing at any time.
You may request your personal data in a structured, commonly used, machine-readable format where technically feasible, enabling transfer to another service provider of your choosing.
Submit your data rights request to the fchai Data Protection Officer at [email protected] with the subject line "Data Rights Request — [Your Request Type]". Include your full name, registered mobile number, and Account ID so we can verify your identity before processing the request. All requests are handled within 15 business days unless the complexity of the request requires an extension, in which case you will be notified.
fchai does not knowingly collect, process, or store personal data from individuals under the age of 21 years. The platform is not directed at, designed for, or intended to be used by anyone under 21. If fchai discovers that an Account has been registered by a person under 21, the Account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned to the payment source subject to verification.
If you are a parent or guardian and believe that a minor has registered an Account with fchai, please contact our Data Protection Officer immediately at the contact details provided in Section 15 so that prompt action can be taken.
fchai will only send you promotional and marketing communications (including SMS notifications, push notifications, and email newsletters) where you have explicitly opted in to receive them during registration or at any subsequent point via your Account notification settings. fchai will not send unsolicited marketing communications to Players who have not opted in.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent will be processed within 5 business days. Transactional communications (such as deposit confirmations, withdrawal notifications, OTP messages, and security alerts) are not marketing communications and will continue regardless of your marketing preferences.
Where you have consented to personalised marketing, fchai may use your gaming activity data and preferences to send you targeted promotions and game recommendations relevant to your play patterns — for example, slot promotions for frequent slot players, or PBA betting offers during the Philippine Cup season. This personalisation is based on your own activity data and does not involve profiling for automated decisions that produce significant legal effects.
The fchai platform may contain integrations with third-party services — such as GCash payment screens, Maya transfer interfaces, and game provider interfaces — that may collect data independently under their own privacy policies. fchai is not responsible for the privacy practices of third-party services you interact with in connection with using the platform.
When you initiate a GCash or Maya deposit or withdrawal, you will interact with the GCash or Maya application directly, and any data you provide within those applications is processed by GCash (G-Xchange, Inc.) and Maya (Paymaya Philippines, Inc.) respectively, under their own privacy policies and the supervision of the Bangko Sentral ng Pilipinas (BSP).
fchai does not receive or store your GCash PIN, Maya PIN, or bank online banking credentials. fchai only receives confirmation data (transaction ID, amount confirmed, reference number) from payment providers.
fchai reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or the features offered on the platform. The effective date at the top of this document will be updated with each revision.
Where changes to this Privacy Policy are material — meaning they significantly affect how fchai processes your personal data or reduce your rights — fchai will notify you via in-platform notification, SMS to your registered mobile number, or email to your registered address at least 7 calendar days before the changes take effect. For non-material updates (such as clarifications of existing practices or administrative corrections), the updated Policy will be published without advance notice.
Your continued use of the fchai platform after an updated Privacy Policy has taken effect constitutes your acceptance of the updated Policy. If you do not agree with material changes to the Privacy Policy, you should close your Account by contacting fchai support before the changes take effect.
We recommend reviewing this Privacy Policy periodically. The "Last Updated" date at the top of this page and in the page header makes it easy to check whether the Policy has changed since you last read it. Archived versions of this Policy are available on request.
For any questions, concerns, or requests relating to this Privacy Policy, the processing of your personal data, or the exercise of your data rights, please contact the fchai Data Protection Officer (DPO):
Email: [email protected]
Subject Line: Privacy Enquiry — [Your Request Type]
The DPO is responsible for overseeing fchai's compliance with the Philippine Data Privacy Act of 2012. Response times are within 5 business days for general enquiries and within 15 business days for formal data rights requests.
You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your personal data has been processed in violation of the Data Privacy Act of 2012. NPC contact details and complaint procedures are available through the NPC's official channels.
For responsible gaming concerns, self-exclusion requests, or problem gambling support, please visit our Responsible Gaming page.
Privacy and data security aren't afterthoughts at fchai — they're built into the platform from the ground up. Here's how our commitments translate into practice for Filipino players.
Every connection between your device and fchai is protected by 256-bit SSL encryption — the same standard used by Philippine banks for online transactions. Your login credentials, GCash details, and identity documents never travel in plain text.
fchai does not sell, rent, or broker your personal data to third-party marketers. Your data is used solely to operate your Account, process payments, and keep the platform secure. Filipino player data stays within the fchai ecosystem.
Identity documents submitted for KYC verification are stored encrypted, processed only for verification purposes, and never shared with marketing partners. Access is strictly limited to compliance and fraud prevention personnel.
fchai's data practices are aligned with the Republic Act No. 10173 (Data Privacy Act of 2012). A dedicated Data Protection Officer oversees compliance and is your direct point of contact for all privacy-related requests.
Promotional SMS and email from fchai are sent only to Players who have explicitly opted in. You can withdraw consent at any time from Account Settings. Transactional messages (OTPs, confirmations) continue regardless and cannot be disabled.
Where no legal retention obligation prevents it, fchai will delete your personal data on request. Regulatory obligations (AML, tax records) require certain data to be retained for defined periods — you will always be told the reason if a deletion request cannot be fully satisfied.
Now you know exactly how fchai handles your data — transparently, securely, and always in line with Philippine law. Your account, your wallet, and your information are in good hands.
🔞 Strictly 21+ only · Gambling involves risk · Play responsibly