ph828 Privacy Policy

1.Introduction

ph828 ("ph828," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who access or use the ph828 Platform at ph828.vip (the "Platform"). This Privacy Policy ("Policy") describes how ph828 collects, uses, discloses, stores, and protects your personal information when you register for an account, use our services, or otherwise interact with the Platform.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). By accessing or using the ph828 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms and Conditions, which govern your use of the ph828 Platform. Capitalised terms not defined in this Policy have the meanings given to them in the Terms and Conditions.

2.Personal Data We Collect

ph828 collects the following categories of personal data:

Identity & Contact Data

• Full legal name, date of birth, and gender
• Residential address (including city, province, and postal code)
• Email address and mobile phone number
• Government-issued identification documents (e.g., Philippine passport, driver's licence, SSS/GSIS ID, PhilSys ID) submitted for identity verification

Financial Data

• GCash or PayMaya account details (mobile number associated with the account)
• Bank account details (account name, account number, bank name) for withdrawal processing
• Transaction history, including deposits, withdrawals, wagers, and winnings

Technical & Usage Data

• IP address, device type, operating system, and browser type
• Login timestamps, session duration, and pages visited on the Platform
• Game activity logs, including games played, bet amounts, and outcomes
• Cookie identifiers and similar tracking technologies (see Section 7)

Communications Data

• Records of your communications with ph828 customer support, including live chat transcripts and email correspondence
• Feedback, survey responses, and promotional opt-in preferences

3.How We Collect Your Data

ph828 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, log files, and similar technologies when you access and use the Platform.
• Third-party sources: Identity verification data from third-party KYC (Know Your Customer) service providers; fraud prevention data from anti-money laundering screening services; and payment confirmation data from payment processors such as GCash and PayMaya.

4.How We Use Your Personal Data

ph828 uses your personal data for the following purposes:

• To create, manage, and maintain your ph828 player account.
• To verify your identity and age in compliance with PAGCOR regulations and the DPA.
• To process deposits, withdrawals, and other financial transactions.
• To provide customer support and respond to your enquiries and complaints.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To personalise your experience on the Platform and deliver relevant promotions and offers (where you have consented to receive marketing communications).
• To comply with our legal and regulatory obligations, including reporting requirements under PAGCOR and anti-money laundering laws.
• To improve the Platform, analyse usage patterns, and conduct internal research and analytics.
• To enforce our Terms and Conditions and other applicable policies.

5.Legal Basis for Processing

ph828 processes your personal data on the following legal bases under the DPA and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions, including account management and transaction processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing requirements, anti-money laundering obligations, and tax reporting.
• Legitimate interests: Processing necessary for ph828's legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.Data Sharing & Disclosure

ph828 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers, to confirm your identity and age in compliance with PAGCOR requirements.
• Fraud prevention & AML screening: Third-party services used to detect and prevent fraud, money laundering, and other financial crimes.
• IT and hosting providers: Cloud infrastructure and data hosting providers who process data on our behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory mandate.
• Law enforcement: Philippine law enforcement agencies, where disclosure is required pursuant to a valid legal order, warrant, or subpoena.

All third-party service providers who process personal data on behalf of ph828 are required to enter into data processing agreements that impose obligations consistent with the DPA and this Policy.

7.Cookies & Tracking Technologies

ph828 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support security functions. A cookie is a small text file placed on your device when you visit the Platform.

ph828 uses the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional cookies: Remember your preferences and settings (e.g., language, display preferences) to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how visitors use the Platform, helping us identify areas for improvement. No personally identifiable information is collected through analytics cookies.
• Security cookies: Used to detect and prevent fraudulent activity, protect against unauthorised access, and support our responsible gaming monitoring systems.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. ph828 does not use third-party advertising or behavioural tracking cookies.

8.Data Retention

ph828 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and anti-money laundering obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine AML regulations.
• Identity verification documents: Retained for the period required by PAGCOR and AML regulations, typically five (5) years from the end of the business relationship.
• Customer support records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and usage logs: Retained for up to twelve (12) months, unless required for longer periods for security investigations or legal purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ph828's data disposal procedures.

9.Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph828:

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 14. ph828 will respond to all verified requests within thirty (30) days, or within such extended period as permitted by the DPA where the request is complex or numerous.

10.Data Security

ph828 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting access to personal data to authorised personnel only.
• Regular security assessments, vulnerability scanning, and penetration testing.
• Multi-factor authentication for administrative access to systems containing personal data.
• Staff training on data privacy obligations and security best practices.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While ph828 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying ph828 immediately if you suspect any unauthorised access to your account.

11.Children's Privacy

The ph828 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. ph828 does not knowingly collect personal data from individuals under the age of 21.

If ph828 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the ph828 Platform, please contact our support team immediately.

12.International Data Transfers

ph828 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines (for example, cloud hosting services), ph828 ensures that such transfers are carried out in compliance with the DPA and NPC regulations, including the implementation of appropriate safeguards such as contractual data protection clauses.

ph828 will not transfer your personal data to a country or territory that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

13.Updates to This Policy

ph828 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. When material changes are made, ph828 will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this Policy. We encourage you to review this Policy periodically to stay informed about how ph828 protects your personal data. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

14.Contact & Data Protection Officer

ph828 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Privacy Policy. If you have any questions, concerns, or requests regarding this Policy or the processing of your personal data, please contact our DPO:

Data Protection Officer — ph828
Email: [email protected]
General Support: [email protected]

Please include your full name, registered account username, and a clear description of your request or concern. ph828 aims to acknowledge all privacy-related enquiries within five (5) business days and to resolve them within thirty (30) days.

If you are not satisfied with ph828's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.