Privacy Policy

1.Introduction

ph898 ("ph898", "we", "us", "our") operates the online casino platform accessible at ph898.co and its associated mobile applications (the "Platform"). We are committed to protecting the privacy and personal data of all users of the ph898 Platform ("you", "Player", "User").

This Privacy Policy ("Policy") describes the types of personal information ph898 collects, the purposes for which we process that information, the third parties with whom it may be shared, and the rights you hold as a data subject under Philippine law. This Policy applies to all personal data processed by ph898 in connection with your use of the Platform, regardless of whether you access ph898 from Metro Manila, Cebu, Davao, or any other location within the Philippines.

This Policy should be read alongside ph898's Terms & Conditions and Responsible Gaming Policy. By registering for or using ph898, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2.Data Controller Information

ph898 is the data controller responsible for the personal information collected through the Platform. As data controller, ph898 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules and regulations.

ph898 has designated a Data Protection Officer (DPO) who oversees compliance with applicable data privacy laws and serves as the primary point of contact for data subject inquiries and complaints. Contact details for the ph898 DPO are provided in Section 14 of this Policy.

3.Personal Data We Collect

ph898 collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity and Contact Information

• Full legal name as it appears on government-issued identification;
• Date of birth (for age verification — you must be 21+);
• Philippine mobile number;
• Email address (where provided);
• Residential address (required for enhanced verification);
• Government-issued identification documents (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID, PRC ID) — collected at withdrawal verification stage.

3.2 Financial and Transaction Data

• GCash mobile number and account details;
• Maya (PayMaya) account details;
• Bank account information (BPI, BDO, Metrobank, or other Philippine bank) where used for deposits or withdrawals;
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method identifiers;
• Cryptocurrency wallet addresses (where USDT or other crypto methods are used).

3.3 Gaming and Account Activity Data

• Account username and login credentials (password stored in hashed, non-recoverable form);
• Game play history: games played, bets placed, outcomes, timestamps;
• Bonus and promotion participation records;
• VIP tier status and loyalty points balance;
• Responsible gaming settings: deposit limits, self-exclusion status, cool-off periods.

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Session logs: login timestamps, session duration, navigation paths within the Platform;
• Cookie and tracking technology data (see Section 6).

3.5 Communications Data

• Records of live chat conversations with ph898 support;
• Email correspondence with ph898;
• Content of complaints or dispute submissions.

4.How We Collect Your Personal Data

ph898 collects personal data through the following means:

• Direct provision by you: Information you enter during registration, during KYC/identity verification, when making deposits or withdrawal requests, when contacting support, or when completing any form on the Platform;
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, server logs, and similar technologies;
• Payment providers: Transaction confirmation data received from GCash, Maya, BPI, BDO, and other payment processors when you make deposits or withdrawals;
• Identity verification services: Data received from third-party KYC and identity verification providers used to authenticate your identity documents;
• Fraud detection services: Risk signals and device fingerprinting data from anti-fraud technology partners;
• Regulatory sources: Self-exclusion register data from PAGCOR or other applicable Philippine gaming regulatory bodies where ph898 is required to cross-check registrations.

5.Legal Basis and Purposes of Processing

ph898 processes your personal data on the following legal bases under the Philippine Data Privacy Act:

ph898 will not use your personal data for any purpose incompatible with those listed above without your prior consent or as otherwise required by Philippine law.

6.Cookies and Tracking Technologies

ph898 uses cookies and similar tracking technologies on the Platform to deliver and improve our services. The categories of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and whether you've opted into 2FA. Disable these and some Platform features may not work as expected.
• Analytics cookies: Used to understand how players use the Platform — pages visited, session duration, error events. Data is aggregated and anonymized where possible. ph898 uses analytics data to improve Platform performance and user experience.
• Security and fraud-detection cookies: Support our fraud prevention systems by maintaining session integrity and detecting anomalous patterns across sessions.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect your ability to use some features of the ph898 Platform. ph898 does not use third-party advertising cookies or behavioral targeting cookies.

7.Data Sharing and Disclosure

ph898 does not sell your personal data to any third party. We share personal data only in the following circumstances:

7.1 Service Providers

ph898 engages third-party service providers who process personal data on our behalf as data processors. These include payment processors (GCash, Maya, BPI, BDO), KYC/identity verification providers, cloud hosting infrastructure providers, fraud detection technology providers, and customer support platform providers. All such providers are bound by data processing agreements and may not use your data for any purpose other than performing services for ph898.

7.2 Regulatory and Legal Compliance

ph898 may disclose personal data to Philippine government authorities including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies where required by applicable Philippine law, court order, or regulatory direction. ph898 will notify you of such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of ph898's business assets, personal data held by ph898 may be transferred to the acquiring entity, subject to that entity's commitment to maintain equivalent privacy standards. You will be notified of any such transfer.

7.4 With Your Consent

ph898 may share your data with third parties for purposes beyond those listed above where you have provided explicit, informed consent to such sharing. You may withdraw consent at any time by contacting ph898's Data Protection Officer.

8.Data Retention

ph898 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Philippine law. Key retention periods include:

• Account data: Retained for the duration of your active account plus five (5) years following account closure, in accordance with AMLA record-keeping requirements;
• Transaction records: Minimum five (5) years from the date of each transaction, as required under Philippine anti-money laundering regulations;
• Identity verification documents: Retained for five (5) years from account closure or last transaction, whichever is later;
• Support communications: Retained for three (3) years from the date of the communication, or for the duration of any active dispute;
• Marketing data: Retained until you withdraw consent or request erasure, subject to applicable legal holds;
• Technical/log data: Typically retained for 12 months for security and analytics purposes, then deleted or anonymized.

Upon expiry of the applicable retention period, ph898 will securely delete or anonymize personal data in accordance with our internal data lifecycle management procedures.

9.Data Security

ph898 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS 256-bit encryption for all data transmitted between your device and ph898's servers;
• Hashed and salted storage of all account passwords — plain-text passwords are never stored;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication required for all ph898 system administrators;
• Regular security audits and penetration testing of Platform infrastructure;
• Segregated data storage environments for different categories of sensitive data;
• Incident response procedures enabling prompt detection and reporting of data breaches to the National Privacy Commission (NPC) within the legally required timeframe.

While ph898 takes all reasonable precautions, no data transmission or storage system can be guaranteed absolutely secure. If you have reason to believe that your ph898 account has been compromised, please contact our support team immediately via live chat on the Platform.

10.Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ph898:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed — this Policy fulfills that obligation;
• Right to Access: The right to request a copy of the personal data ph898 holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to ph898's legal retention obligations (e.g., AMLA requirements may prevent immediate deletion of certain financial records);
• Right to Object: The right to object to processing of your personal data on grounds of legitimate interest, including for direct marketing purposes;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used electronic format;
• Right to Lodge a Complaint: The right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe ph898 has processed your personal data unlawfully.

To exercise any of the above rights, please contact ph898's Data Protection Officer using the details provided in Section 14. ph898 will respond to all data subject requests within 15 business days. ph898 may require identity verification before processing a request to ensure data is not disclosed to unauthorized parties.

11.Children's Privacy and Age Restriction

ph898 performs age verification checks on all registered accounts, with enhanced verification required at withdrawal stage. If ph898 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, the data will be deleted (subject to any applicable legal hold obligations), and any deposited funds will be processed for return through the original payment method. ph898 cooperates with any Philippine authority investigating underage gambling.

If you believe that an individual under 21 may have created an account with ph898, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

12.Cross-Border Data Transfers

ph898's primary data processing infrastructure is located within or connected to the Asia-Pacific region. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, when using internationally-based cloud infrastructure providers or game technology partners.

Where personal data is transferred outside the Philippines, ph898 ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act, including: (a) transfer to countries with adequate data protection laws as recognized by the NPC; (b) standard contractual clauses approved by the NPC; or (c) the recipient's binding corporate rules where applicable. ph898 does not transfer personal data to jurisdictions that do not provide an adequate level of protection for data subjects' rights.

13.Changes to This Privacy Policy

ph898 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new legal obligations, or changes to the Platform. The effective date at the top of this Policy will be updated with each revision.

For material changes that significantly affect your rights or how ph898 processes your data, ph898 will provide advance notice via the email address associated with your registered account at least 14 days before the changes take effect. For minor or clarifying changes, the updated Policy will be posted on ph898.co and continued use of the Platform will constitute acceptance.

We encourage you to review this Policy periodically. If you disagree with any material change to this Policy, you may close your ph898 account before the effective date of the change.

14.Contact and Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or concerns about ph898's handling of your personal data, please contact ph898's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the ph898 platform — for urgent account or security issues, this is the fastest channel
• DPO Email: [email protected] — for formal data subject requests, breach notifications, or regulatory correspondence
• General Support: [email protected]

ph898's DPO will acknowledge all formal privacy requests within 3 business days and provide a substantive response within 15 business days. Complex requests involving large volumes of data or legal review may take longer, in which case ph898 will notify you of the extended timeline.

You also have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you are not satisfied with ph898's response to your privacy concern. The NPC's contact information is available on the official Philippine government NPC website.