Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ph988 ("ph988," "we," "us," "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "Player," "User") who access or use the ph988 online gaming platform at ph988.app ("Platform").

ph988 is committed to protecting your privacy and handling your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as all other applicable data protection laws and regulations in the Philippines.

By registering an account on ph988 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

This Policy should be read together with ph988's Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

The data controller responsible for your personal data collected through the ph988 Platform is ph988, the operator of ph988.app. As data controller, ph988 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection law.

ph988 has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. You may contact the DPO using the contact details provided in Section 14 of this Policy.

3. Data We Collect

ph988 collects the following categories of personal data:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Gender
• Nationality
• Government-issued identification number (e.g., Philippine passport, driver's license, SSS/UMID card)

3.2 Contact Data

• Email address
• Mobile number
• Residential address (including barangay, city/municipality, province, and postal code)

3.3 Financial Data

• Payment method details (GCash account number, PayMaya account number, BPI, BDO, or Metrobank account details)
• Transaction history (deposits, withdrawals, wagers, winnings)
• Account balance information

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and login timestamps
• Pages visited and features used on the Platform
• Betting and gaming activity logs

3.5 Communications Data

• Records of communications between you and ph988 support, including live chat transcripts and email correspondence
• Survey responses and feedback submitted to ph988

3.6 Responsible Gaming Data

• Deposit limits, session limits, and self-exclusion settings you have configured
• Responsible gaming assessments or disclosures you have provided

4. How We Collect Your Data

ph988 collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the Platform, including through cookies, log files, and similar tracking technologies (see Section 11).
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; geolocation data from IP intelligence services.

5. How We Use Your Data

ph988 uses your personal data for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact
Age and identity verification (KYC)	Identity, Contact
Processing deposits and withdrawals	Financial, Identity
Providing gaming services and platform features	Technical & Usage, Identity
Customer support and dispute resolution	Communications, Identity, Financial
Fraud prevention and security monitoring	Technical & Usage, Financial, Identity
Responsible gaming monitoring and intervention	Responsible Gaming, Financial, Usage
Regulatory compliance and anti-money laundering	Identity, Financial, Communications
Marketing communications (where consented)	Contact, Usage
Platform improvement and analytics	Technical & Usage (anonymized)

6. Legal Basis for Processing

ph988 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations and regulatory reporting requirements.
• Legitimate interests: Processing necessary for ph988's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent, including for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing

ph988 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• KYC and identity verification providers: To verify your identity and age in compliance with regulatory requirements.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals.
• Game content providers: Third-party game studios and live casino operators whose content is available on the ph988 Platform, to the extent necessary to deliver their services.
• IT and cloud service providers: Providers of hosting, data storage, security, and analytics infrastructure that support the operation of the Platform.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, including disclosures to the Philippine gaming regulatory authority and anti-money laundering authorities.
• Fraud prevention and security services: To detect, investigate, and prevent fraudulent activity and security threats.

All third-party service providers who process personal data on ph988's behalf are bound by data processing agreements that require them to process data only on ph988's instructions and to implement appropriate security measures.

8. Data Security

ph988 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of personal data in transit using TLS/SSL protocols and at rest using AES-256 encryption.
• Role-based access controls that restrict access to personal data to authorized personnel only.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and responding to personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph988 will notify the National Privacy Commission and affected players in accordance with the requirements of the Philippine Data Privacy Act and its Implementing Rules and Regulations.

While ph988 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying ph988 immediately if you suspect unauthorized access to your account.

9. Data Retention

ph988 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and regulatory record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial regulations.
• Communications data: Retained for three (3) years from the date of the communication, or longer where relevant to an ongoing dispute or regulatory matter.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it may be anonymized and retained for analytical purposes.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized.

10. Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph988:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data ph988 holds about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most of your account information directly through your ph988 account dashboard.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph988's legal obligations to retain certain data.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time through your account settings or by contacting ph988 support.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph988 has not handled your personal data in accordance with applicable law.

To exercise any of these rights, please contact ph988's Data Protection Officer using the contact details in Section 14. ph988 will respond to all valid requests within thirty (30) days, or within such other period as required by applicable law.

11. Cookies & Tracking Technologies

ph988 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform.

11.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function, including session management, authentication, and security. These cannot be disabled.
• Functional cookies: Remember your preferences and settings to improve your experience on the Platform.
• Analytics cookies: Collect anonymized information about how players use the Platform to help us improve performance and usability.
• Security cookies: Used to detect and prevent fraudulent activity and unauthorized access.

11.2 Managing Cookies

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. ph988 does not use cookies to serve third-party advertising.

12. Minors

The ph988 Platform is strictly intended for individuals who are 21 years of age or older. ph988 does not knowingly collect personal data from individuals under the age of 21. If ph988 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.

If you believe that a minor has registered on ph988, please contact our support team immediately so that we can take appropriate action.

13. Changes to This Policy

ph988 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The date of the most recent update is displayed at the top of this page.

Where changes are material, ph988 will provide reasonable advance notice by posting a notice on the Platform and, where practicable, notifying registered players by email. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the changes.

We encourage you to review this Policy periodically to stay informed about how ph988 protects your personal data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or ph988's handling of your personal data, please contact our Data Protection Officer:

Data Protection Officer — ph988

Email: [email protected]

General Support: [email protected]

ph988 support is available 24 hours a day, 7 days a week via live chat on the Platform. We aim to acknowledge all privacy-related inquiries within 72 hours and to resolve them within 30 days.