ph978 Privacy Policy

This Privacy Policy ("Policy") describes how ph978 ("ph978," "we," "us," "our") collects, processes, stores, and protects the personal data of individuals ("Player," "User," "you") who register for and use the ph978 online gaming platform at ph978.win, including all casino games, sports betting, bingo, live dealer services, and related support channels.

ph978 is committed to protecting the privacy and personal data of all Filipino players in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its implementing rules and regulations, and any applicable issuances by the National Privacy Commission ("NPC") of the Philippines.

By creating a ph978 account or continuing to use the ph978 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree, please discontinue use of ph978 and contact our support team to close your account.

For the purposes of the Data Privacy Act of 2012 and this Policy, ph978 acts as the Personal Information Controller in respect of the personal data of registered players and website visitors. ph978 determines the purposes and means by which your personal data is processed in connection with the delivery of the ph978 gaming platform and related services.

ph978 operates in compliance with PAGCOR regulatory requirements. Where ph978 engages third-party service providers who process personal data on ph978's behalf — such as payment processors, game providers, and KYC verification services — those providers act as Personal Information Processors under written agreements that impose data protection obligations consistent with this Policy and applicable Philippine law.

ph978 collects personal data through several channels, including account registration, financial transactions, platform usage, and customer support interactions. The categories of personal data collected are set out in the table below.

ph978 does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (e.g., racial origin, political opinions, health information, sexual life) unless directly required for a specific regulatory compliance purpose, in which case explicit consent will be sought.

ph978 processes personal data on the following lawful bases as recognized under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform ph978's obligations under the Terms and Conditions you accepted upon registration — including account maintenance, payment processing, and service delivery;
• Legal Obligation: Processing required for ph978 to comply with PAGCOR regulatory requirements, Philippine AML laws (Republic Act 9160 as amended), tax obligations, and lawful orders from competent Philippine authorities;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of ph978 services — where ph978's legitimate interests do not override your fundamental rights;
• Consent: Processing for direct marketing communications, non-essential analytics, and other optional features — where ph978 will request your explicit consent, which may be withdrawn at any time.

ph978 uses personal data collected from Filipino players for the following specific purposes:

• Account Administration: Creating, verifying, and maintaining your ph978 account; processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank; and managing VIP tier status and loyalty rewards;
• Regulatory Compliance: Fulfilling ph978's obligations under PAGCOR guidelines, conducting AML screening, processing KYC documentation, and responding to lawful inquiries from Philippine regulatory and law enforcement authorities;
• Responsible Gaming: Monitoring gaming activity for indicators of problem gambling; administering deposit limits, session controls, and self-exclusion requests; and complying with responsible gaming requirements;
• Platform Security: Detecting and preventing fraud, account takeovers, money laundering, bonus abuse, and other prohibited activities; maintaining the integrity of ph978's gaming environment;
• Customer Support: Handling inquiries, complaints, and dispute resolution through ph978's 24/7 Filipino-English support team via live chat and email;
• Service Improvement: Analyzing aggregated platform usage data to improve game library curation, payment processing efficiency, mobile performance on Philippine networks, and overall player experience;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have provided consent to receive such communications.

ph978 does not sell, rent, or trade your personal data to third-party marketers or unaffiliated organizations. ph978 shares personal data only in the following circumstances and with the following categories of recipients:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process deposits and withdrawals. These parties operate under their own privacy policies and applicable Philippine financial regulations;
• Game Providers: Where a game provider's platform requires player session data (such as player ID, session token, and stake amounts), ph978 shares the minimum data necessary. Game providers — including JILI, Pragmatic Play, PG Soft, and others — are bound by data processing agreements with ph978;
• KYC / Identity Verification Services: ph978 may engage third-party identity verification providers to validate documents submitted for KYC compliance. These providers process data solely for verification purposes under ph978's instructions;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government agencies may receive player data where required by law, regulation, or court order;
• Legal Proceedings: ph978 may disclose personal data where required to protect the rights, property, or safety of ph978, its players, or the public, or in connection with any actual or threatened litigation;
• Business Transfers: In the event of a merger, acquisition, or sale of ph978's business or assets, personal data held by ph978 may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

ph978 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, and in accordance with applicable Philippine legal and regulatory retention requirements, including those imposed by PAGCOR and the AMLC.

• Active Account Data: Retained for the duration of your active ph978 account relationship;
• Closed Account Data: Following account closure, ph978 retains personal and financial data for a minimum of five (5) years in compliance with AML record-keeping requirements under RA 9160;
• KYC Documentation: Retained for a minimum of five (5) years following the end of the account relationship;
• Transaction Records: Retained for a minimum of five (5) years in accordance with PAGCOR and AMLC requirements;
• Support Communications: Live chat transcripts and support ticket records retained for a minimum of two (2) years from the date of the interaction;
• Marketing Consent Records: Retained for the period of consent plus three (3) years as evidence of consent.

Upon expiry of the applicable retention period, ph978 will securely delete or anonymize personal data in accordance with ph978's data disposal procedures. Anonymized data — from which individuals cannot be identified — may be retained indefinitely for statistical and platform improvement purposes.

ph978 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit Transport Layer Security (TLS) encryption on all data transmitted between your browser or device and ph978 servers;
• One-way cryptographic hashing of all account passwords — ph978 does not store passwords in recoverable plain text form;
• Role-based access controls ensuring that ph978 staff access personal data only on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability management of ph978's infrastructure;
• Real-time fraud detection and anomaly monitoring to identify unauthorized access attempts;
• Physical and logical access controls on servers and systems that store personal data.

While ph978 takes reasonable steps to protect your data, no system can guarantee absolute security. In the event of a personal data breach that is likely to result in harm to you as a data subject, ph978 will notify you and the National Privacy Commission within the timeframes required under the Data Privacy Act of 2012 and NPC Circular 16-03.

ph978 uses cookies and similar tracking technologies (collectively, "Cookies") on the ph978 website and platform. The categories of Cookies used by ph978 are as follows:

• Strictly Necessary Cookies: These Cookies are essential to the operation of the ph978 platform. They enable core functions such as maintaining your logged-in session, security token management, and load balancing. These Cookies cannot be disabled without impacting platform functionality;
• Functional Cookies: These Cookies remember your preferences (such as preferred language, currency display, and game lobby filters) to provide a more personalized ph978 experience;
• Analytics Cookies: ph978 uses analytics cookies to understand aggregate patterns in how Filipino players use the platform — page visits, session duration, game navigation paths. This data is used in anonymized form to improve ph978's services;
• Marketing Cookies: Where you have provided explicit consent, ph978 may use cookies to deliver relevant promotional content and measure the effectiveness of ph978's marketing activities. You may withdraw consent at any time.

You may manage Cookie settings through your browser's privacy controls. Note that disabling certain categories of Cookies may affect the functionality of the ph978 platform. Most modern browsers — including Chrome for Android (widely used by Filipino players) and Safari for iOS — allow granular Cookie management in their settings menus.

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights in relation to your personal data held by ph978. ph978 will respond to all valid data subject requests within 30 calendar days of receipt.

• Right to Be Informed: The right to receive clear information about how ph978 collects, uses, and processes your personal data — as provided in this Policy;
• Right of Access: The right to request a copy of all personal data ph978 holds about you, including the purposes for which it is processed and the recipients to whom it has been disclosed;
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by ph978. You may update basic account information directly through your ph978 account dashboard;
• Right to Erasure: The right to request deletion of your personal data where processing is no longer necessary, consent has been withdrawn, or processing is unlawful — subject to ph978's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, or where processing is based on ph978's legitimate interests and you have grounds relating to your specific situation;
• Right to Data Portability: The right to receive personal data you have provided to ph978 in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines (www.privacy.gov.ph) if you believe ph978 has violated your data privacy rights.

To exercise any of the above rights, please contact ph978's Data Protection Officer at [email protected] with the subject line "Data Rights Request." ph978 may request verification of your identity before processing data subject requests.

ph978 does not knowingly collect personal data from individuals under the age of 21. Access to the ph978 platform is strictly restricted to persons who are 21 years of age or older, in compliance with PAGCOR requirements applicable to online gaming in the Philippines.

If ph978 discovers that personal data has been collected from a person under the age of 21, ph978 will promptly delete the personal data and close the associated account. Balances and winnings associated with accounts found to belong to individuals under the applicable age restriction are subject to forfeiture in accordance with ph978's Terms and Conditions.

ph978 may send you promotional communications about bonuses, new games, VIP offers, and platform news where you have provided consent to receive such communications, or where ph978 has a legitimate interest in contacting you about similar services under conditions permitted by applicable Philippine law.

You may withdraw consent to receive marketing communications at any time by:

• Using the unsubscribe link included in any marketing email sent by ph978;
• Updating your communication preferences in your ph978 account settings;
• Contacting ph978 support via live chat or email to opt out.

Withdrawal of marketing consent does not affect the lawfulness of processing conducted prior to withdrawal, and does not prevent ph978 from sending service-related communications necessary for the operation of your account (such as withdrawal confirmations, security alerts, or KYC requests).

ph978's operations and the third-party service providers engaged by ph978 — including game platform providers and certain technical infrastructure partners — may process personal data in jurisdictions outside the Republic of the Philippines.

Where ph978 transfers personal data outside the Philippines, ph978 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012. These safeguards may include:

• Transfers to jurisdictions that the National Privacy Commission has recognized as providing adequate data protection;
• Data processing agreements containing standard contractual clauses that impose data protection obligations on the recipient consistent with Philippine law;
• Other mechanisms approved by the National Privacy Commission.

ph978 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or PAGCOR regulatory requirements. When material changes are made, ph978 will notify registered players via the mobile number or email address associated with their ph978 account and will update the "Last Reviewed" date at the top of this page.

Your continued use of the ph978 platform following notification of changes to this Policy constitutes acknowledgment of the updated terms. ph978 recommends reviewing this Privacy Policy periodically to remain informed about how your personal data is protected.

If you have objections to changes made to this Privacy Policy, you may exercise your right to close your ph978 account and request erasure of personal data (subject to applicable retention requirements) by contacting ph978 support.

ph978 has designated a Data Protection Officer ("DPO") responsible for overseeing ph978's compliance with the Data Privacy Act of 2012 and this Privacy Policy. The ph978 DPO serves as the primary point of contact for all data privacy inquiries, data subject rights requests, and privacy complaints.

To contact the ph978 Data Protection Officer:

• Email: [email protected] — subject line: "Privacy / Data Request" or "DPO Inquiry";
• Live Chat: Available 24/7 via the ph978 website — advise the support agent that your inquiry is for the Data Protection Officer;
• Response Time: ph978 will acknowledge all privacy inquiries within 5 business days and provide a substantive response within 30 calendar days.

If you are unsatisfied with ph978's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012.