ph98 Casino – Privacy Policy

1. Who We Are and How to Contact Us

ph98 Casino operates the online gaming platform accessible at ph98.one, providing Filipino players with online casino games, sports betting, online sabong, bingo, and related gaming services. ph98 acts as the Personal Information Controller ("PIC") in respect of all personal data processed through its platform, as defined under the Data Privacy Act of 2012.

For privacy-related enquiries, data access requests, or complaints, you may contact our Data Privacy Officer at: [email protected]

ph98 aims to acknowledge all privacy-related communications within two (2) business days and to provide a substantive response within fifteen (15) calendar days, consistent with the timelines recommended by the National Privacy Commission of the Philippines.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected by ph98 from:

• Registered account holders using the ph98 platform for real-money gaming;
• Visitors who browse ph98.one without creating an account;
• Individuals who interact with ph98 through customer support channels;
• Any person whose personal data is provided to ph98 in connection with the verification of account holder identity.

This Policy does not apply to third-party websites or services linked from or integrated into ph98.one. Each third-party service operates under its own privacy policy, for which ph98 accepts no responsibility.

3. Personal Data We Collect

ph98 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is processed. The categories of personal data we collect include:

Registration and Identity Data:

• Full legal name as it appears on your government-issued Philippine ID;
• Date of birth (used to verify that you meet the 21+ age requirement);
• Philippine mobile number (used as your account identifier and for 2FA);
• Email address (optional, used for account communications);
• Username selected during registration.

KYC Verification Data:

• Scanned copies or photographs of government-issued Philippine identification documents (PhilSys, UMID, Passport, Driver's License, PRC ID, SSS/GSIS ID);
• Proof of residential address (utility bill, bank statement, or equivalent);
• Source of funds documentation, where required by AML compliance procedures.

Financial Transaction Data:

• GCash mobile number and transaction reference numbers;
• PayMaya account details used for deposits or withdrawals;
• Philippine bank account details (BPI, BDO, Metrobank, or other banks) used for fund transfers;
• Deposit amounts, withdrawal amounts, and transaction history in Philippine Peso (₱).

Gaming Activity Data:

• Game session logs, including games played, bet amounts, win/loss records, and session durations;
• Sports betting selections and wager history;
• Bonus and promotion activation and wagering records;
• Responsible gaming tool settings (deposit limits, session caps, self-exclusion status).

Technical and Device Data:

• IP address at time of login and during active sessions;
• Device type, operating system, and browser version;
• Session timestamps and login/logout records;
• Cookies and similar tracking technologies (see Section 10).

Customer Support Data:

• Records of live chat conversations, support ticket submissions, and any communications exchanged between you and ph98 support agents.

4. How We Collect Personal Data

ph98 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or adjust your account settings;
• Automatically — through cookies, server logs, and similar technologies as you browse ph98.one or use the gaming platform;
• From payment service providers — GCash, PayMaya, and Philippine banking institutions may transmit transaction confirmation data to ph98 in connection with deposit and withdrawal processing;
• From identity verification services — ph98 may use third-party KYC and AML screening services to assist in verifying the identity and compliance status of account holders.

5. Legal Basis for Processing

ph98 processes personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity — processing is required to fulfill the gaming services agreement between ph98 and the account holder, including account management, payment processing, and game delivery;
• Legal obligation — processing is required to comply with Philippine law, including PAGCOR regulatory requirements, Anti-Money Laundering Act obligations (RA 9160 as amended), and AMLC reporting requirements;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests do not override your privacy rights;
• Consent — for marketing communications and optional data uses, where we have obtained your explicit consent and which you may withdraw at any time.

6. How We Use Your Personal Data

ph98 uses the personal data it collects for the following purposes:

• Creating, managing, and maintaining your ph98 account;
• Verifying your identity and age in compliance with ph98's KYC requirements and Philippine gaming regulations;
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard;
• Delivering the games, sports betting products, online sabong, bingo, and other gaming services you access through ph98;
• Detecting, investigating, and preventing fraudulent activity, money laundering, and other illegal or prohibited conduct;
• Administering bonuses, promotions, and loyalty rewards;
• Operating and enforcing responsible gaming tools, including monitoring for signs of problem gambling behavior and administering self-exclusion requests;
• Providing customer support and resolving disputes;
• Sending transactional communications — account statements, deposit confirmations, withdrawal notifications, security alerts — via SMS to your registered Philippine mobile number;
• Sending promotional communications where you have consented to receive them, which may be withdrawn at any time by contacting support;
• Improving the ph98 platform through aggregated, anonymized usage analytics;
• Complying with applicable Philippine law and responding to lawful requests from Philippine regulatory and law enforcement authorities.

7. Sharing and Disclosure of Personal Data

ph98 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements or legal authority:

• Payment processors — GCash, PayMaya, Visa, Mastercard, and Philippine banking partners, to the extent necessary to process your financial transactions;
• KYC and AML service providers — third-party identity verification and sanctions screening services contracted by ph98 to support compliance obligations;
• Game content providers — licensed game developers and aggregators whose games are hosted on the ph98 platform may receive anonymized or pseudonymized session data for game performance and fairness auditing;
• Technology infrastructure providers — cloud hosting, server management, and cybersecurity service providers engaged to operate the ph98 technical infrastructure, bound by confidentiality and data processing obligations;
• PAGCOR and Philippine regulatory authorities — as required by applicable gaming regulations, anti-money laundering law, or lawful order from a competent Philippine authority;
• Law enforcement and judicial authorities — where ph98 is required by law, court order, or regulatory directive to disclose personal data;
• Successor entities — in the event of a merger, acquisition, or transfer of ph98's business operations, subject to the successor entity assuming equivalent data protection obligations.

8. Data Retention

ph98 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account registration and KYC data: retained for a minimum of five (5) years following account closure, consistent with AML record-keeping requirements under Philippine law;
• Financial transaction records: retained for a minimum of five (5) years from the date of each transaction;
• Gaming session logs: retained for a minimum of two (2) years from the date of each session;
• Customer support records: retained for a minimum of three (3) years from the date of the last communication;
• Marketing consent records: retained for as long as the consent remains active plus one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification.

9. Data Security

ph98 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and ph98 servers;
• Encryption at rest for sensitive data, including identity documents and financial account details;
• Multi-factor authentication requirements for account access and for internal staff accessing player data;
• Regular security audits and penetration testing of the ph98 platform;
• Strict access controls limiting internal data access to staff with a documented operational need;
• Incident response procedures for identifying, containing, and reporting personal data breaches in accordance with National Privacy Commission notification requirements.

Notwithstanding the above, no internet-based platform can guarantee absolute security. In the unlikely event of a personal data breach affecting your rights, ph98 will notify affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations.

10. Cookies and Tracking Technologies

ph98 uses cookies — small text files stored on your device — and similar tracking technologies to operate the platform, improve user experience, and support security functions. Categories of cookies used by ph98 include:

• Strictly necessary cookies — required for core platform functionality, including maintaining your login session and processing financial transactions. These cannot be disabled;
• Performance and analytics cookies — used to collect aggregated, anonymized data on how players use ph98, helping us improve navigation, page load times, and game lobby design;
• Security cookies — used to detect fraudulent activity, unauthorized login attempts, and suspicious session behavior.

You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair or prevent access to the ph98 platform. Platform functionality is not guaranteed if core cookies are blocked.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its implementing rules, Filipino players whose data is processed by ph98 have the following rights:

• Right to be informed — the right to know that your personal data is being collected and how it will be used;
• Right of access — the right to request a copy of the personal data ph98 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking — the right to request deletion or suppression of personal data that is no longer necessary, processed unlawfully, or no longer serves the purposes for which it was collected, subject to legal retention obligations;
• Right to object — the right to object to processing based on legitimate interests, including profiling for direct marketing purposes;
• Right to data portability — the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission of the Philippines if you believe ph98 has processed your data in violation of the Data Privacy Act.

To exercise any of the above rights, contact ph98's Data Privacy Officer at: [email protected]

12. Children's Privacy

ph98 does not knowingly collect personal data from individuals under the age of 21. The ph98 platform is strictly restricted to verified adults aged 21 and above, consistent with Philippine gaming law. If ph98 becomes aware that it has inadvertently collected personal data from an individual under 21, the data will be immediately deleted and the associated account terminated.

If you are a parent or guardian and believe your child has accessed or registered on ph98, please contact our support team immediately at: [email protected]

13. Cross-Border Data Transfers

ph98 may transfer personal data to service providers or infrastructure partners located outside the Philippines — including cloud infrastructure providers and certain game content partners — where this is necessary to deliver the ph98 platform. Any such transfers are conducted subject to appropriate contractual safeguards that require the recipient to maintain data protection standards no less stringent than those required under Philippine law.

ph98 does not transfer personal data to jurisdictions that do not provide adequate protection for personal data without ensuring that appropriate safeguards are in place.

14. Changes to This Privacy Policy

ph98 reserves the right to update or amend this Privacy Policy at any time. Material changes — changes that affect your rights or how we use your data in a significant way — will be communicated to registered players via SMS to the registered Philippine mobile number, and the updated Policy will be published on this page with a revised effective date.

Continued use of the ph98 platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Privacy Policy, you must stop using the ph98 platform and close your account before the effective date of the changes.

15. Governing Law

This Privacy Policy is governed by the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission. Any dispute arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of the Philippines.