Privacy Policy

1. Introduction & Scope

ph899 ("ph899," "we," "us," or "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the ph899 online gaming platform at ph899.club (the "Platform"). This Privacy Policy describes in detail the types of personal information we collect, the purposes for which we process it, the parties with whom we may share it, the measures we take to protect it, and the rights you have in relation to your personal data.

This Policy applies to all users of the ph899 Platform, including registered account holders, visitors, and any individual who contacts ph899 through its support channels. This Policy is incorporated by reference into ph899's Terms & Conditions and should be read alongside that document.

2. Data Controller

The data controller responsible for personal data processed through the ph899 Platform is ph899, operating under PAGCOR oversight. For all privacy-related inquiries, requests to exercise data subject rights, or concerns regarding this Policy, you may contact ph899's designated Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy.

ph899's DPO is responsible for ensuring compliance with the Data Privacy Act of 2012, maintaining the platform's registration with the National Privacy Commission, conducting Privacy Impact Assessments for high-risk processing activities, and serving as the primary point of contact for data subjects and the NPC.

3. Categories of Personal Data We Collect

ph899 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

ph899 does not intentionally collect sensitive personal information beyond what is required for identity verification purposes (specifically, government ID documents containing nationality and other mandatory fields). ph899 does not collect biometric data, religious beliefs, political affiliations, or health information other than self-disclosed responsible gaming declarations.

4. How We Collect Personal Data

ph899 collects personal data through the following mechanisms:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting customer support.
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, web beacons, and server logs. See Section 10 for details on cookies.
• Third-party sources: Identity verification data from government-authorized ID verification services; payment confirmation data from GCash, PayMaya, and banking partners; fraud screening data from licensed anti-fraud service providers.
• Regulatory sources: Information provided by PAGCOR, AMLC, or other competent Philippine government authorities in the course of regulatory oversight activities.

5. Purposes & Legal Basis for Processing

ph899 processes your personal data for the following purposes, each of which has a corresponding legal basis under the Data Privacy Act of 2012:

• Account management and service delivery — Contractual necessity: to fulfill our obligations under the Terms & Conditions accepted upon registration.
• KYC identity verification — Legal obligation: required by PAGCOR regulations and the Anti-Money Laundering Act.
• Payment processing — Contractual necessity: to process deposits and withdrawals as requested by the account holder.
• Fraud prevention and platform security — Legitimate interests: to protect ph899 and its users from unauthorized access, fraudulent activity, and financial crime.
• Regulatory reporting — Legal obligation: to comply with PAGCOR reporting requirements and AMLC Suspicious Transaction Report (STR) obligations.
• Responsible gaming monitoring — Legal obligation and legitimate interests: to identify and support players who may be experiencing gambling-related harm.
• Customer support — Contractual necessity and legitimate interests: to respond to and resolve user inquiries and complaints.
• Marketing communications — Consent: promotional emails and SMS are sent only to users who have explicitly opted in. Consent may be withdrawn at any time through account settings.

6. Sharing of Personal Data

ph899 does not sell your personal data. We may share personal data with the following categories of recipients, strictly for the purposes described in Section 5:

• PAGCOR and other Philippine regulatory authorities — as required by our operating license and applicable regulations.
• Anti-Money Laundering Council (AMLC) — for the reporting of covered and suspicious transactions as mandated by RA 9160.
• Payment service providers — GCash, PayMaya, BPI, BDO, Metrobank, and other authorized payment partners, to process your deposits and withdrawals.
• Identity verification service providers — licensed third-party KYC vendors who assist in document verification on our behalf under data processing agreements.
• IT infrastructure and cloud service providers — who host and operate the ph899 Platform under contractual data processing agreements that impose equivalent data protection obligations.
• Law enforcement and courts — where required by valid legal process, court order, or legitimate law enforcement request under Philippine law.

All third-party service providers who process personal data on ph899's behalf are required to enter into Data Processing Agreements (DPAs) that impose data protection obligations no less stringent than those applicable to ph899 under Philippine law.

7. International Data Transfers

ph899 primarily stores and processes personal data within the Philippines. Where data processing involves service providers located outside the Philippines — such as global cloud infrastructure providers — ph899 ensures that adequate safeguards are in place, including standard contractual clauses approved by the National Privacy Commission, or transfers to jurisdictions recognized by the NPC as providing adequate data protection standards.

You may request information about the specific safeguards applicable to international transfers of your personal data by contacting ph899's DPO at the details in Section 14.

8. Data Retention

ph899 retains personal data for the following periods, or longer where required by law:

• Account and KYC data: For the duration of the account relationship and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial transaction records: For a minimum of five (5) years from the date of each transaction, as required by AMLC regulations and Bureau of Internal Revenue (BIR) requirements.
• Gaming session logs: For a minimum of two (2) years from the date of the relevant session, for regulatory audit and dispute resolution purposes.
• Support communications: For two (2) years from the closure of the relevant support ticket, for quality assurance and dispute resolution purposes.
• Marketing consent records: Until withdrawal of consent plus one (1) year, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph899's data destruction procedures.

9. Security Measures

ph899 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph899 servers.
• Encryption at rest for all personal and financial data stored in ph899's databases.
• Multi-factor authentication for all ph899 administrative systems and personnel accounts.
• Role-based access controls limiting staff access to personal data strictly to what is necessary for their job function.
• Regular penetration testing and vulnerability assessments by accredited third-party security firms.
• 24/7 intrusion detection and security monitoring systems.
• Mandatory data protection training for all ph899 personnel with access to personal data.

While ph899 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are encouraged to use a strong, unique password for your ph899 account and to enable two-factor authentication (2FA) to further protect your account.

10. Cookies & Tracking Technologies

ph899 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used by ph899 are:

• Strictly necessary cookies: Essential for the Platform to function, including session authentication cookies that keep you logged in to your ph899 account. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings, and to enable features like "Keep me signed in."
• Analytical cookies: Used to understand how users interact with the Platform, enabling ph899 to improve user experience. Data collected by analytical cookies is aggregated and not linked to individual identities.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other unauthorized use of the Platform.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the ph899 Platform.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by ph899:

• Right to be informed: To be notified about the processing of your personal data, as fulfilled by this Privacy Policy.
• Right of access: To obtain a copy of the personal data ph899 holds about you and information about how it is processed.
• Right to rectification: To have inaccurate or incomplete personal data corrected. Basic account information can be updated through your ph899 account dashboard; KYC data corrections require submission to support.
• Right to erasure: To request deletion of your personal data in certain circumstances, subject to ph899's legal obligations under PAGCOR, AMLC, and tax regulations that require mandatory retention.
• Right to object: To object to processing of your personal data based on legitimate interests, including direct marketing communications.
• Right to data portability: To receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: To file a complaint with the National Privacy Commission of the Philippines if you believe ph899 has violated your data privacy rights.

To exercise any of the above rights, contact ph899's DPO at the details provided in Section 14. ph899 will respond to valid requests within thirty (30) calendar days of receipt, or provide reasons for any delay where a longer period is required.

12. Minors

The ph899 Platform is strictly prohibited to persons under the age of 21 years. ph899 does not knowingly collect personal data from minors. If ph899 becomes aware that personal data has been collected from an individual who is under 21 years of age, it will immediately close the associated account, refund any deposits where legally required, and delete the personal data in accordance with its data destruction procedures. If you believe a minor has created an account on ph899, please contact support immediately.

13. Updates to This Privacy Policy

ph899 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR and NPC regulatory guidance. Material updates will be communicated to registered account holders via email and/or prominent notice on the Platform prior to the effective date of the change. The date of the most recent revision is displayed at the top of this Policy. Continued use of ph899 following the effective date of a revised Privacy Policy constitutes your acknowledgment of the changes.

14. Contact & Data Protection Officer

For all privacy-related inquiries, requests to exercise data subject rights, or formal complaints regarding ph899's data processing practices, please contact our Data Protection Officer:

If you are not satisfied with ph899's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (privacy.gov.ph). ph899 encourages Philippine data subjects to utilize the NPC's resources and complaint mechanisms where appropriate.