ph928 Privacy Policy – How We Handle Your Personal Data

1. Introduction

ph928.club ("ph928," "we," "our," or "the Platform") is committed to protecting the privacy and personal information of all players, visitors, and users of our services. This Privacy Policy (the "Policy") describes how ph928 collects, uses, stores, discloses, and safeguards personal information in connection with your use of ph928.club and all associated services.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations (IRR) as enforced by the National Privacy Commission (NPC).

By accessing ph928.club, registering a player account, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any part of this Policy, please discontinue use of ph928 immediately.

2. Data Controller

ph928.club acts as the Data Controller for personal information collected through the Platform. As Data Controller, ph928 determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable Philippine data protection laws.

ph928 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the DPA and this Policy. The DPO can be contacted via the details provided in Section 13 of this Policy.

3. Personal Information We Collect

ph928 collects personal information from you in the following categories:

ph928 does not intentionally collect sensitive personal information (as defined under the DPA) beyond what is necessary for age and identity verification purposes. Where such information is collected (e.g., government ID data for KYC), it is handled with enhanced security measures.

4. How We Use Your Personal Information

ph928 uses your personal information for the following purposes:

• Account Management: To create, maintain, verify, and secure your ph928 player account, including OTP-based login verification and account recovery.
• Service Delivery: To enable you to access and play games, place bets, participate in promotions, and use all features of the ph928 platform.
• Payment Processing: To process your deposits via GCash, PayMaya, BPI, BDO, or Metrobank, and to process withdrawal requests to your nominated Philippine bank or e-wallet account.
• Identity Verification and KYC: To verify your identity, age (21+), and source of funds as required under Philippine gaming regulations and anti-money laundering (AML) laws.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct on the Platform.
• Regulatory Compliance: To fulfil ph928's obligations under applicable Philippine laws, including reporting obligations to regulatory authorities where required.
• Customer Support: To respond to your queries, complaints, and support requests submitted via live chat, email, or other channels.
• Service Improvement: To analyse usage patterns and player feedback to improve the ph928 platform, game library, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via SMS or email — but only where you have provided consent or where we have a legitimate interest, and always subject to your right to unsubscribe.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and to administer self-exclusion and responsible gaming tools.

5. Legal Basis for Processing

ph928 processes your personal information on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to fulfil our contractual obligations to you as a registered ph928 player, including account operation, game delivery, and payment processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, gaming regulations, and tax reporting obligations.
• Legitimate Interest: Processing is necessary for ph928's legitimate interests in fraud prevention, platform security, service improvement, and responsible gaming monitoring, provided these interests are not overridden by your privacy rights.
• Consent: For direct marketing communications, ph928 relies on your consent. You may withdraw consent at any time by contacting support or using the unsubscribe mechanism in marketing messages.

6. Data Sharing and Disclosure

ph928 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may disclose your personal information to the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Service Providers: GCash (Mynt), PayMaya (Maya Bank), BPI, BDO, and Metrobank — to process your deposits and withdrawals.
• Game Providers and Technology Vendors: Third-party game providers and platform technology vendors who supply games and technical infrastructure to ph928. These parties process only the data necessary to deliver their services and are bound by contractual data protection obligations.
• Identity Verification Services: KYC and AML screening service providers who assist ph928 in verifying player identity and complying with regulatory requirements.
• Fraud Prevention Services: Third-party fraud detection and prevention platforms that help ph928 identify and prevent fraudulent activity on the Platform.
• Regulatory Authorities: Philippine government authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC), where ph928 is required by law to disclose information.
• Legal and Professional Advisors: Lawyers, accountants, and auditors engaged by ph928, subject to professional confidentiality obligations.

All third-party data processors engaged by ph928 are required to maintain appropriate technical and organisational security measures and may only process personal data for the specific purposes for which they were engaged.

7. Data Retention

ph928 retains your personal information for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Specific retention periods include:

• Active Account Records: Retained for the duration of your account and for a period of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documentation: Identity verification documents are retained for the duration of your account and for five (5) years after account closure.
• Support Communications: Customer support communications are retained for two (2) years from the date of the last interaction.
• Marketing Data: Where processing is based on consent, data is retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, ph928 will securely delete or anonymise your personal information in accordance with its data disposal procedures.

8. Data Security

ph928 implements appropriate technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph928's servers
• Encryption of sensitive data at rest within ph928's databases
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Multi-factor authentication for internal system access by ph928 staff
• Regular security vulnerability assessments and penetration testing
• Secure data centres with physical access controls
• Incident response procedures for handling data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph928 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required under the DPA, and will notify affected players without undue delay where the breach is likely to result in high risk.

9. Cookies and Similar Technologies

ph928 uses cookies and similar tracking technologies on ph928.club to improve your browsing experience and to support the operation of our services. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication cookies that keep you logged in to your ph928 account. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and game display options to personalise your ph928 experience.
• Analytics Cookies: Help ph928 understand how players interact with the Platform by collecting aggregated, anonymised usage statistics. This helps us improve game navigation and site performance.
• Security Cookies: Used for fraud prevention and security monitoring purposes, including detection of unusual login patterns.

You can control non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of ph928.club, including your ability to remain logged in to your account.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by ph928:

• Right to be Informed: The right to be informed about how ph928 collects and processes your personal data — fulfilled by this Privacy Policy.
• Right of Access: The right to request a copy of the personal information ph928 holds about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal information held by ph928.
• Right to Erasure: The right to request deletion of your personal information, subject to ph928's legal retention obligations and legitimate operational requirements.
• Right to Object: The right to object to ph928's processing of your personal information on grounds relating to your particular situation, including processing for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible and where processing is based on consent or contract.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph928 has violated your data privacy rights.

To exercise any of these rights, please contact ph928's Data Protection Officer as described in Section 13. ph928 will respond to your request within thirty (30) days of receipt. ph928 may request proof of identity before processing your request.

11. Children and Age Restriction

ph928 is strictly restricted to persons aged twenty-one (21) years and above. ph928 does not knowingly collect personal information from persons under 21 years of age. If ph928 becomes aware that personal information has been collected from a person under 21 years of age, such information will be deleted and the associated account will be closed immediately.

If you are a parent or guardian and believe that a minor has provided personal information to ph928 without your consent, please contact us immediately using the details in Section 13.

12. Changes to This Privacy Policy

ph928 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or the services we offer. When material changes are made, ph928 will notify registered players via a notice on ph928.club or by SMS/email to your registered contact details, with at least seven (7) days' advance notice where practicable.

The date at the top of this Policy indicates when it was last updated. Your continued use of ph928 following the effective date of any update constitutes acceptance of the revised Policy. If you do not agree with the updated terms, you must discontinue use and contact support to close your account.