ph9898 Privacy Policy

1. Who We Are

ph9898 ("ph9898," "we," "us," or "our") operates the online casino platform accessible at ph9898.app (the "Platform"). ph9898 is a PAGCOR-regulated online gaming operator serving Filipino players across the Philippines.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, ph9898 acts as the Personal Information Controller with respect to the personal data of its registered players and website visitors.

This Privacy Policy applies to all personal data collected, processed, and stored by ph9898 in connection with your use of the Platform, including account registration, gameplay, financial transactions, customer support interactions, and marketing communications.

2. Personal Data We Collect

ph9898 collects the following categories of personal data from players and Platform visitors:

ph9898 does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive data is collected (such as government ID details), it is handled with additional safeguards as required under the DPA.

3. How We Collect Your Data

ph9898 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors.
• Regulatory sources: Self-exclusion and exclusion list data from PAGCOR and other recognized gambling regulatory authorities.

ph9898 will always inform you at the point of collection what data is being collected and for what purpose, in accordance with the transparency requirements of the DPA.

4. How We Use Your Personal Data

ph9898 uses your personal data for the following purposes:

• Account management: To register, verify, maintain, and administer your ph9898 account.
• Age and identity verification: To confirm that you are at least 21 years of age and to verify your identity as required by PAGCOR regulations and Philippine law.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Platform operation: To provide access to games, process bets, record game outcomes, and maintain accurate account balances.
• Regulatory compliance: To comply with PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine laws and regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gameplay patterns and enforce responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — where you have provided consent or where permitted by applicable law. You may opt out at any time.
• Platform improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the ph9898 Platform.

5. Legal Basis for Processing

ph9898 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you — including account registration, payment processing, and game operation.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, tax reporting requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

ph9898 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purposes:

• PAGCOR and regulatory authorities: As required by our operating license and applicable Philippine law, including for AML reporting and player protection purposes.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers, solely to process your financial transactions.
• KYC and identity verification providers: Third-party services used to verify your identity and age as required by PAGCOR regulations.
• Fraud prevention and AML screening services: To detect and prevent fraudulent activity and money laundering on the Platform.
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers who process data on our behalf under strict data processing agreements.
• Customer support platforms: Third-party tools used to manage live chat and support ticket systems.
• Law enforcement and courts: Where required by a valid legal order, court order, or applicable Philippine law.

All third parties with whom ph9898 shares personal data are required to handle that data in accordance with the DPA and ph9898's data protection standards. ph9898 does not authorize third parties to use your data for their own marketing purposes.

7. Cookies & Tracking Technologies

ph9898 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience on ph9898.
• Analytics cookies: Collect anonymized data about how players use the Platform, helping us identify areas for improvement. Used only with your consent.
• Marketing cookies: Used to deliver relevant promotional content. Used only with your explicit consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph9898 Platform. For more information on managing cookies, refer to your browser's help documentation.

8. Data Retention

ph9898 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and AMLA obligations.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with AMLA and tax reporting requirements.
• KYC and identity verification documents: Retained for the duration of your account and for five (5) years following account closure.
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for two (2) years following resolution of the relevant inquiry or dispute.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, ph9898 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9. Data Security

ph9898 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph9898 Platform.
• Encryption at rest for sensitive personal and financial data stored on ph9898 servers.
• Multi-factor authentication for internal systems access by ph9898 personnel.
• Role-based access controls ensuring that only authorized personnel with a legitimate business need can access player data.
• Regular security audits and penetration testing conducted by independent security professionals.
• Intrusion detection and monitoring systems operating 24/7 to detect and respond to security threats.
• Staff training on data protection obligations and security best practices.

While ph9898 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, ph9898 will notify you and the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by the DPA.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph9898:

• Right to Access: You may request a copy of the personal data ph9898 holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Block: You may request that ph9898 suspend processing of your personal data pending resolution of a dispute about its accuracy or lawfulness.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Damages: You have the right to claim compensation for any damages suffered as a result of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. ph9898 will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request.

If you are not satisfied with ph9898's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Children's Privacy

ph9898 is strictly an adult platform. The Platform is not intended for, and ph9898 does not knowingly collect personal data from, individuals under the age of 21. Under Philippine law and PAGCOR regulations, participation in online gambling is prohibited for persons under 21 years of age.

ph9898 employs age verification procedures during account registration to prevent underage access. If ph9898 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and all associated data will be deleted, with any balance forfeited in accordance with our Terms and Conditions.

If you believe that a minor has registered on ph9898, please contact our support team immediately so that we can take appropriate action.

12. Cross-Border Data Transfers

ph9898 primarily stores and processes your personal data within the Philippines. In some cases, data may be transferred to and processed in other countries — for example, where ph9898 uses cloud infrastructure or third-party service providers with operations outside the Philippines.

Where personal data is transferred outside the Philippines, ph9898 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under the DPA.
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission.

By using the ph9898 Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

13. Updates to This Privacy Policy

ph9898 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform prior to the changes taking effect.

The effective date of the most recent version of this Privacy Policy is displayed at the top of this page. We encourage you to review this page periodically to stay informed about how ph9898 protects your personal data.

Your continued use of the ph9898 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must cease using the Platform and close your account.

14. Contact & Data Protection Officer

ph9898 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our DPO:

• Data Protection Officer: ph9898 DPO Office
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the Platform

ph9898 aims to respond to all data privacy requests within fifteen (15) business days. For complex requests, we may require up to thirty (30) days and will notify you of any extension.