ph928 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by ph928 ("ph928", "we", "us", or "our"), the operator of the online gaming platform accessible at ph928.app and all associated subdomains and mobile interfaces (collectively, the "Platform").

This Policy applies to all personal data collected from individuals ("Players", "Users", or "you") who register for, access, or use the ph928 Platform, including through any mobile application, browser interface, or customer support channel. It covers data collected directly from you, data generated through your use of the Platform, and data received from third-party sources where applicable.

By registering on ph928 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the ph928 Platform immediately.

2. Data Controller Information

ph928 is the data controller responsible for your personal data collected through the Platform. For all privacy-related inquiries, requests, or complaints, you may contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the ph928 Platform in English and Filipino
• Operations: Metro Manila, Philippines

ph928 is committed to responding to all data privacy inquiries within ten (10) business days of receipt.

3. Personal Data We Collect

ph928 collects personal data through several channels. The categories of data we collect, and the context in which we collect them, are described below.

3.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile number, and residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati);
• Identity verification documents: Government-issued ID (e.g., PhilSys ID, passport, driver's license), selfie photographs, and proof of address documents;
• Financial data: GCash account number, PayMaya account details, BPI/BDO/Metrobank account information used for deposits and withdrawals;
• Communications: Messages sent to ph928 via live chat, email, or support tickets.

3.2 Data Generated Through Platform Use

• Login timestamps, session duration, and device information;
• IP address and approximate geolocation;
• Game activity, betting history, and transaction records;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

3.3 Data from Third Parties

• Identity verification results from third-party KYC (Know Your Customer) service providers;
• Payment confirmation data from GCash, PayMaya, and banking partners;
• Fraud and risk signals from third-party security and compliance services.

4. How We Use Your Personal Data

ph928 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and securing your ph928 account, including verifying your identity and age (21+ requirement) in accordance with Philippine gaming regulations;
• Transaction processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels in Philippine Peso (PHP / ₱);
• Platform operation: Delivering games, processing bets, calculating winnings, and maintaining the integrity of the ph928 gaming environment;
• Regulatory compliance: Meeting our obligations under Philippine anti-money laundering laws, gaming regulations, and data privacy legislation including the Data Privacy Act of 2012;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, and other security threats;
• Responsible gaming: Monitoring gaming patterns to identify potentially problematic behavior and administering responsible gaming tools such as deposit limits and self-exclusion;
• Customer support: Responding to your inquiries, resolving disputes, and improving our support services;
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted by applicable law. You may opt out at any time.

ph928 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

5. Sharing of Personal Data

ph928 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your financial transactions;
• Identity verification providers: Third-party KYC and age verification services engaged to confirm your identity and eligibility to use ph928;
• IT and platform service providers: Cloud hosting, data storage, and cybersecurity vendors who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: Philippine government agencies, including the National Privacy Commission, and law enforcement bodies, where disclosure is required by law or court order;
• Fraud prevention and compliance services: Third-party risk management and anti-money laundering screening providers;
• Professional advisors: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations.

All third-party service providers engaged by ph928 are contractually required to process personal data only in accordance with our instructions and to implement appropriate technical and organizational security measures.

6. Data Retention

ph928 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active ph928 account, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance documentation purposes;
• Technical and device data: Retained for up to twelve (12) months from collection, unless required longer for security investigations.

When personal data is no longer required, ph928 will securely delete or anonymize it in accordance with industry best practices.

7. Cookies and Tracking Technologies

ph928 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use are as follows:

• Essential cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting Platform functionality;
• Analytics cookies: Used to understand how Players interact with the ph928 Platform, including pages visited, session duration, and feature usage. This data is aggregated and anonymized;
• Preference cookies: Used to remember your Platform settings and preferences, such as language selection and display options.

ph928 does not use third-party advertising or behavioral tracking cookies. You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling essential cookies may impair your ability to use the ph928 Platform.

8. Data Security

ph928 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph928 Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls ensuring that only authorized ph928 personnel can access personal data, and only to the extent required for their specific role;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for internal systems and, where available, for Player accounts;
• Incident response procedures to detect, contain, and report data breaches in accordance with the Data Privacy Act of 2012 and NPC regulations.

While ph928 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph928 login credentials and for notifying us immediately of any suspected unauthorized access to your account.

9. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by ph928:

• Right to be informed: You have the right to know what personal data ph928 collects about you and how it is used — which is the purpose of this Policy;
• Right of access: You may request a copy of the personal data ph928 holds about you at any time;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data in your ph928 account;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. ph928 will respond to all verified data subject requests within ten (10) business days.

10. Children's Privacy

The ph928 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. ph928 does not knowingly collect personal data from individuals under the age of 21.

If ph928 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on ph928, please contact our support team immediately at [email protected].

11. Cross-Border Data Transfers

ph928 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification services.

Where such transfers occur, ph928 ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require recipient parties to maintain data protection standards equivalent to those required under Philippine law. ph928 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or without implementing appropriate protective measures.

12. Changes to This Privacy Policy

ph928 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, ph928 will update the "Last Updated" date at the top of this page and, where appropriate, notify registered Players via email or in-platform notification.

Your continued use of the ph928 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how ph928 protects your personal data.

13. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or ph928's data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the ph928 Platform
• Operations: Metro Manila, Philippines

If you are not satisfied with ph928's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.