ph9872 Privacy Policy

1. Who We Are (Data Controller)

ph9872 ("ph9872," "we," "us," or "our") is the data controller responsible for the personal data of players and visitors who access ph9872.org. As data controller, ph9872 determines the purposes and means of processing personal data collected through the Platform.

ph9872 operates under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR) and processes personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012, and the regulations issued by the National Privacy Commission (NPC).

For all data privacy enquiries, you may contact our Data Protection Officer at the details provided in Section 13 of this Policy.

2. Personal Data We Collect

ph9872 collects personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Policy. The categories of personal data we collect include:

3. How We Collect Your Data

ph9872 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing identity verification (KYC), making deposits or withdrawals, contacting support, or responding to surveys or promotions.
• Automated technologies: As you interact with ph9872, we automatically collect Technical Data and Usage Data using cookies, server logs, and similar tracking technologies. See Section 7 for details.
• Third-party sources: We may receive data from payment processors (e.g., GCash, Maya, BPI, BDO), identity verification services, fraud detection providers, and analytics platforms — solely for the purposes of operating the Platform securely and compliantly.
• Publicly available sources: In limited circumstances, we may supplement your account information with data from publicly available government or regulatory records for compliance purposes.

4. How We Use Your Personal Data

ph9872 uses your personal data only for lawful purposes that are compatible with the reason the data was originally collected. Specific uses include:

• Registering and maintaining your ph9872 account, including identity verification (KYC) as required by PAGCOR regulations.
• Processing deposits, withdrawals, and all in-platform financial transactions.
• Providing access to casino games, live dealer tables, sports betting markets, and all other ph9872 Services.
• Communicating with you about your account, transactions, and security alerts.
• Sending promotional communications where you have provided consent or where ph9872 has a legitimate interest in doing so (subject to your right to opt out at any time).
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited conduct in accordance with the Anti-Money Laundering Act (AMLA) and related Philippine regulations.
• Enforcing the 21+ age requirement and other eligibility criteria for ph9872 account holders.
• Improving ph9872's products, services, and Platform performance through aggregated, anonymized analytics.
• Complying with applicable law, regulatory instructions, and court orders.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act and applicable NPC regulations, ph9872 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to provide ph9872 Services, process payments, and maintain your account.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting requirements, NPC registration, and other applicable Philippine law.
• Legitimate interest: Processing for fraud prevention, platform security, and improving our services, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and revocable consent.

6. Sharing Your Personal Data

ph9872 does not sell your personal data. We share personal data with third parties only in the following limited circumstances and always under appropriate data processing agreements or legal obligations:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers — strictly to process your financial transactions.
• Game providers: Software providers whose games are hosted on ph9872 receive limited session data necessary for game operation. These providers are contractually bound to use such data only for game delivery.
• Identity verification providers: KYC and age verification partners receive identity documents and personal details necessary to complete verification in compliance with PAGCOR requirements.
• Fraud and security vendors: Third-party fraud detection services receive Technical Data and Usage Data to identify suspicious activity on the Platform.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and other government bodies where disclosure is required by law, regulation, or legal process.
• Professional advisers: Lawyers, auditors, and compliance consultants where necessary for ph9872's legal or regulatory obligations, under strict confidentiality obligations.

All third parties are required by contract to handle your personal data securely and in compliance with applicable data protection law.

7. Cookies & Tracking Technologies

ph9872 uses cookies and similar tracking technologies (including web beacons and local storage) on ph9872.org to:

• Essential cookies: Maintain your login session, remember your preferences, and ensure the Platform functions correctly. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Collect anonymized usage data (page views, session duration, navigation paths) to help ph9872 understand how players use the site and improve the experience.
• Security cookies: Detect and prevent fraudulent login attempts and other security threats.

Non-essential cookies are deployed only with your consent, which you may provide or withdraw through your browser settings or any cookie consent mechanism presented on the Platform. Note that disabling certain cookies may impair the functionality of ph9872.

8. Data Security

ph9872 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your browser and ph9872 servers.
• AES-256 encryption for sensitive personal data stored at rest.
• Role-based access controls ensuring that ph9872 staff can only access personal data necessary for their specific function.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Two-factor authentication (2FA) available to all ph9872 account holders and mandated for all administrative access to ph9872 systems.
• Incident response procedures aligned with NPC notification requirements for personal data breaches.

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, ph9872 will notify the NPC within 72 hours of becoming aware of the breach and will notify affected individuals without undue delay.

9. Data Retention

ph9872 retains personal data for the following periods, unless a longer retention period is required by law:

• Active account data: Retained for the duration of your account relationship with ph9872, plus five (5) years after account closure, to comply with AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLC regulations.
• Identity verification documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Retained for two (2) years from the date of the interaction.
• Marketing consent records: Retained for three (3) years from the date of consent, or until withdrawn, whichever is sooner.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph9872's data disposal procedures.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights in relation to your personal data held by ph9872:

• Right to be informed: The right to know how your personal data is being collected, used, and processed — this Privacy Policy fulfills that obligation.
• Right of access: The right to request a copy of the personal data ph9872 holds about you.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update most personal details directly through your ph9872 account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose collected, subject to overriding legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing or where ph9872 relies on legitimate interests as the legal basis.
• Right to data portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe ph9872 has violated your data privacy rights.

To exercise any of these rights, contact ph9872's Data Protection Officer at the details in Section 13. ph9872 will respond to verified requests within fifteen (15) business days.

11. Children and Minors

ph9872 is strictly prohibited from being accessed by persons under 21 years of age. ph9872 does not knowingly collect personal data from individuals under 21. Age verification checks are applied at registration and at the point of first withdrawal. If ph9872 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account permanently closed. Parents or guardians who believe a minor may have accessed ph9872 should contact us immediately at the details in Section 13.

12. Changes to This Privacy Policy

ph9872 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or NPC guidance. Material changes will be communicated to registered Players via email or a prominent notice on ph9872.org at least seven (7) days before taking effect. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of ph9872 after the effective date of any change constitutes your acceptance of the revised Privacy Policy.

13. Contact Our Data Protection Officer

For all data privacy enquiries, requests to exercise your data subject rights, or complaints regarding ph9872's handling of your personal data, please contact our Data Protection Officer: