ph9898 Casino – Privacy Policy

1 Introduction

ph9898 ("ph9898," "we," "us," "our," "the Company," "the Platform") is committed to protecting the personal data of all individuals who interact with our platform. This Privacy Policy has been prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).

This Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data in connection with your use of the ph9898 online casino platform. It applies to all registered players, prospective players, and visitors to ph9898.net, regardless of the device or medium used to access the platform.

This Privacy Policy should be read together with ph9898's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, ph9898 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes. ph9898 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

ph9898 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. Contact details for the DPO are provided in Section 15 of this Policy.

3 Personal Data We Collect

ph9898 collects the following categories of personal data from players and platform users:

• Identity Data: Full legal name, date of birth, nationality, government-issued ID number (passport, driver's license, PhilSys national ID), and a copy of your identity document for KYC verification purposes.
• Contact Data: Email address, mobile phone number, and residential address (including city, province, and postal code).
• Account Data: Username, encrypted password, account registration date, account status, and communication preferences.
• Financial Data: Payment method details (GCash number, Maya account, bank account details, debit card details), transaction history, deposit and withdrawal records, and balance information. ph9898 does not store full card numbers — payment data is tokenized and processed through secure payment gateways.
• Gaming Data: Game history, bet amounts, win/loss records, session duration, bonus usage, and wagering activity.
• Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features used, time spent on the platform, click patterns, and navigation paths within ph9898.
• Communications Data: Records of your communications with ph9898 customer support, including live chat transcripts, emails, and any documents you submit.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, session time limits, and any information provided in connection with responsible gaming tools.

4 How We Collect Your Data

ph9898 collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the ph9898 platform, through cookies, web beacons, log files, and similar tracking technologies (see Section 10).
• Third-Party Sources: Identity verification data from KYC service providers; fraud detection data from anti-fraud partners; payment verification data from payment processors such as GCash, Maya, and Philippine banks.
• Regulatory Sources: Data received from PAGCOR, the AMLC, or other Philippine regulatory authorities in connection with our compliance obligations.

5 How We Use Your Personal Data

ph9898 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your ph9898 player account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide you with access to ph9898's games, features, and services, process your deposits and withdrawals, and administer bonuses and promotions.
• Legal Compliance: To comply with our obligations under Philippine law, including the Anti-Money Laundering Act, PAGCOR regulations, the Data Privacy Act, and any other applicable legislation. This includes conducting KYC checks, filing mandatory reports with the AMLC, and responding to lawful requests from regulatory authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited conduct on the ph9898 platform.
• Responsible Gaming: To administer responsible gaming tools including deposit limits, self-exclusion, and session time controls, and to identify players who may be at risk of problem gambling.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the ph9898 platform, games, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time through your account settings.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, ph9898 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of our contract with you — i.e., providing the ph9898 gaming service, processing transactions, and managing your account.
• Legal Obligation: Processing required to comply with our legal obligations under Philippine law, including AML reporting, KYC verification, PAGCOR regulatory requirements, and tax obligations.
• Legitimate Interests: Processing necessary for ph9898's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

ph9898 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, and Philippine banking partners, for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to confirm your identity and age in compliance with PAGCOR and AML requirements.
• Game Providers: Licensed third-party game developers and providers whose games are available on the ph9898 platform. These providers may receive limited gameplay data necessary for game operation.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies, where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, courts, and other competent authorities, where disclosure is required by a lawful order, warrant, or legal process.
• Fraud Prevention Partners: Third-party fraud detection and prevention services used to protect the ph9898 platform and its players from fraudulent activity.
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who process data on ph9898's behalf under strict data processing agreements.

8 Data Retention

ph9898 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your active account relationship with ph9898, plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial & Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later, as required by AMLC regulations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, after which it will be deleted or anonymized within thirty (30) days.
• Technical & Usage Data: Retained for up to twenty-four (24) months for platform analytics and security purposes, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, ph9898 will securely delete or anonymize your personal data in accordance with NPC guidelines on data disposal.

9 Data Security

ph9898 implements a comprehensive set of technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the ph9898 platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized ph9898 personnel and service providers on a strict need-to-know basis. All access is logged and regularly audited.
• Password Security: Player passwords are stored using one-way cryptographic hashing. ph9898 staff cannot view your password in plain text.
• Two-Factor Authentication (2FA): ph9898 offers and encourages the use of two-factor authentication for all player accounts to provide an additional layer of security.
• Penetration Testing: ph9898's systems undergo regular security assessments and penetration testing by qualified cybersecurity professionals.
• Incident Response: ph9898 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, ph9898 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the Data Privacy Act.

10 Cookies & Tracking Technologies

ph9898 uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the ph9898 platform, including maintaining your login session, remembering your language preferences, and enabling security features. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect anonymized data about how players use the ph9898 platform, which pages are visited most frequently, and where errors occur. This data helps us improve the platform experience.
• Functional Cookies: Used to remember your preferences and personalize your ph9898 experience, such as your preferred game categories and display settings.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts on the ph9898 platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph9898 platform. ph9898 does not use third-party advertising cookies or share cookie data with external advertising networks.

11 Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph9898:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph9898 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data ph9898 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph9898's legal obligations to retain certain records.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on ph9898's legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph9898 has violated your data privacy rights.

12 Minors & Age Restriction

The ph9898 platform is strictly intended for individuals who are 21 years of age or older. ph9898 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the ph9898 registration process, and accounts found to belong to persons under 21 will be immediately suspended.

If ph9898 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data from our systems and close the associated account. If you believe that ph9898 may have inadvertently collected data from a minor, please contact our Data Protection Officer immediately.

13 International Data Transfers

In the course of providing the ph9898 service, your personal data may be transferred to and processed in countries other than the Philippines — for example, where ph9898's cloud infrastructure providers or game providers are located. Where such transfers occur, ph9898 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

These safeguards may include contractual clauses that require the recipient to protect your personal data to the same standard as required under Philippine law, or transfers to countries that the NPC has determined provide an adequate level of data protection.

By using the ph9898 platform, you acknowledge and consent to the transfer of your personal data to other countries as described in this section, subject to the safeguards described above.

14 Changes to This Privacy Policy

ph9898 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidelines. When material changes are made, ph9898 will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.

The most current version of this Privacy Policy will always be available at ph9898.net/privacy-policy. The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. Your continued use of the ph9898 platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with the changes, you should cease using ph9898 and may request account closure.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or ph9898's data processing practices, please contact our Data Protection Officer through the following channels:

If you are not satisfied with ph9898's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.