ph989 Privacy Policy

1.1 ph989 ("ph989," "we," "us," "our") is committed to protecting the privacy and personal data of every Filipino player who uses the ph989 platform. This Privacy Policy sets out, in clear and transparent terms, how we collect, use, retain, share, and protect personal information in connection with your use of ph989.

1.2 ph989 processes personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines and its implementing rules and regulations, as well as other applicable data protection laws. Our processing of your data is governed by the principles of transparency, legitimate purpose, and proportionality.

1.3 This Privacy Policy should be read alongside ph989's Terms & Conditions, which govern your overall use of the platform. In the event of a conflict between this Privacy Policy and the Terms & Conditions on a data protection matter, this Privacy Policy shall prevail.

1.4 We encourage all ph989 players to read this policy in full. If you have questions about any provision, our customer support team is available 24/7 and our designated Data Protection Officer can be contacted as described in Section 15.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained.
• "Sensitive Personal Information" means personal data about an individual's race, ethnic origin, marital status, age, religious affiliation, health, education, government-issued identifiers, and financial information.
• "Processing" means any operation performed upon personal data, including collection, recording, organisation, storage, updating, retrieval, use, disclosure, and deletion.
• "Data Subject" means any natural person whose personal data is processed by ph989 – in the context of this policy, primarily ph989 players and registered account holders.
• "Third Party" means any person or entity other than the Data Subject and ph989.
• "Data Protection Officer (DPO)" means the individual designated by ph989 to ensure compliance with applicable data protection laws and to serve as the point of contact for data privacy matters.
• "Cookies" means small text files stored by your browser on your device when you visit ph989.org.

3.1 ph989 collects the following categories of personal data from players:

3.2 ph989 does not collect special categories of sensitive personal information beyond the identity and financial data described above unless specifically required by law or with your explicit consent.

3.3 Where you choose not to provide personal data that is mandatory for a particular function (e.g., KYC documents for withdrawal), ph989 may be unable to provide that function but your account will otherwise remain accessible.

4.1 ph989 collects personal data through the following mechanisms:

• Direct provision: Information you actively provide when registering for a ph989 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and activity data automatically generated as you use the ph989 platform, including through cookies, log files, and session tracking tools.
• Payment processors: Transaction confirmation data received from payment service providers such as GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay when you conduct financial transactions through ph989.
• Identity verification services: Data received from third-party KYC and identity verification providers used to confirm the authenticity of identification documents submitted to ph989.
• Fraud prevention and AML screening: Data received from anti-money laundering screening services and regulatory databases in connection with ph989's compliance obligations.

4.2 ph989 does not collect personal data from social media platforms or third-party advertising networks in connection with your ph989 account.

5.1 ph989 processes your personal data for the following specific, legitimate purposes:

• Account registration and management: To create, verify, operate, and maintain your ph989 player account.
• Identity verification (KYC): To verify your identity, confirm your eligibility to use ph989 (including the 21+ age requirement), and comply with regulatory obligations.
• Payment processing: To process deposits and withdrawals in Philippine Peso via GCash, PayMaya, bank transfer, and other accepted methods.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct described in the ph989 Terms & Conditions.
• Legal and regulatory compliance: To comply with applicable Philippine gaming regulations, the Data Privacy Act of 2012, AML legislation, and any regulatory directions or court orders.
• Customer support: To respond to your queries, resolve disputes, and provide assistance through live chat, email, and other support channels.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and overall experience of the ph989 platform.
• Responsible gaming monitoring: To monitor play patterns that may indicate problem gambling and, where necessary, apply responsible gaming tools or contact the player in accordance with ph989's responsible gaming obligations.
• Marketing communications (with consent only): To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

6.1 ph989 processes your personal data based on the following legal grounds under the Data Privacy Act of 2012 and applicable Philippine law:

• Contractual necessity: Processing required to perform ph989's obligations under the contract formed by your acceptance of the Terms & Conditions (e.g., account management, payment processing, gameplay).
• Legal obligation: Processing required to comply with Philippine law, including KYC obligations, AML reporting, and regulatory requirements applicable to ph989's operations.
• Legitimate interests: Processing necessary for ph989's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential data uses where ph989 has obtained your prior, freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time.

6.2 Where processing is based on consent, withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

7.1 ph989 shares personal data with third parties only in the following circumstances and categories:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, and Mastercard, to the extent necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services used to verify government-issued identification documents submitted during account registration.
• AML and fraud screening services: Providers used to screen transactions against regulatory watchlists and detect potentially fraudulent or suspicious activity.
• Game content providers: Game software providers whose titles are hosted on the ph989 platform. These providers may receive technical session data necessary to deliver game functionality.
• IT and infrastructure providers: Cloud hosting and infrastructure services used to operate the ph989 platform. These providers process data only on ph989's instructions under strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine gaming regulators, the National Privacy Commission, anti-money laundering authorities, and law enforcement agencies, where ph989 is legally required to disclose information or has a reasonable belief that disclosure is necessary to prevent or investigate criminal activity.
• Business successors: In the event of a merger, acquisition, or sale of ph989's business or assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections. Players will be notified of any such transfer.

7.2 All third-party service providers engaged by ph989 that process personal data are required to enter into data processing agreements that comply with applicable Philippine data protection law and impose obligations equivalent to those described in this policy.

8.1 ph989 uses cookies and similar technologies on ph989.org to operate the platform, maintain security, and collect basic analytics data. The categories of cookies used by ph989 are as follows:

8.2 ph989 does not use advertising cookies, retargeting pixels, or cross-site tracking technologies that would monitor your activity outside of the ph989.org domain.

8.3 You may manage optional cookies through your browser settings or through the ph989 cookie preference centre available on the platform. Disabling essential or security cookies may impair core platform functionality.

9.1 ph989 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data in transit between your device and ph989 servers is encrypted using SSL/TLS 256-bit encryption.
• Password hashing: Account passwords are stored using industry-standard one-way hashing algorithms. ph989 does not store passwords in plain text and cannot read your password.
• Two-factor authentication (2FA): SMS OTP-based 2FA is available and strongly recommended for all ph989 accounts to prevent unauthorised login.
• Access controls: Access to personal data is restricted on a strict need-to-know basis among ph989 staff. All staff with data access are bound by confidentiality obligations.
• Infrastructure security: ph989's platform infrastructure employs firewalls, intrusion detection systems, and regular security audits to protect against external threats.
• Incident response: ph989 maintains a data breach response procedure to detect, investigate, and notify affected players and the National Privacy Commission in the event of a reportable security incident, in accordance with applicable Philippine law.

9.2 While ph989 takes all reasonable and appropriate measures to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to maintain strong unique passwords and enable 2FA on their ph989 accounts.

9.3 If you suspect unauthorised access to your ph989 account, please contact ph989 customer support immediately so we can investigate and take appropriate action.

10.1 ph989 retains personal data for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable Philippine law. The following general retention periods apply:

• Active account data: Retained for the duration of your ph989 account and for a period of five (5) years following account closure, in compliance with AML and gaming regulatory retention requirements.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction as required by Philippine AML legislation.
• KYC documentation: Identity verification documents are retained for the lifetime of the account and five (5) years following account closure.
• Support communications: Records of customer support interactions are retained for two (2) years from the date of the interaction.
• Marketing data: Retained until you opt out or withdraw consent, at which point marketing-related data is deleted within 30 days.

10.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with ph989's data deletion procedures. Anonymised data retained for aggregated analytics purposes can no longer be used to identify any individual.

10.3 In the event of an ongoing dispute, legal claim, regulatory investigation, or law enforcement matter, ph989 may be required to retain relevant data beyond the standard retention periods described above until the matter is fully resolved.

11.1 As a data subject under the Data Privacy Act of 2012 of the Republic of the Philippines, you have the following rights with respect to your personal data held by ph989:

11.2 To exercise any of the above rights, please submit a written request to ph989 customer support via live chat or to the Data Protection Officer email address listed in Section 15. ph989 will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days.

11.3 You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that ph989 has failed to handle your personal data in accordance with the Data Privacy Act of 2012.

12.1 ph989 implements age verification as part of its KYC process to prevent account access by minors. Any person who provides false information about their age to circumvent ph989's age verification procedures is in breach of the ph989 Terms & Conditions, and any associated account will be terminated.

12.2 If you are a parent or legal guardian and believe that a minor under your care may have created a ph989 account, please contact ph989 customer support immediately. We will investigate and take appropriate action without delay.

13.1 ph989 is operated for the Philippine market and primarily processes data within or in connection with the Philippines. However, certain service providers engaged by ph989 (including cloud infrastructure providers and game content providers) may process data in other jurisdictions.

13.2 Where personal data is transferred outside the Philippines to a jurisdiction that does not provide an equivalent level of data protection, ph989 will ensure that appropriate safeguards are in place, which may include contractual data transfer agreements, standard contractual clauses, or other mechanisms recognised under the Data Privacy Act of 2012 and its implementing rules.

13.3 By using the ph989 platform, you acknowledge and consent to the transfer of your personal data to service providers operating in other jurisdictions, subject to the safeguards described above.

14.1 ph989 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. Any material changes to this policy will be communicated to players via a notice posted on the ph989 platform and, where appropriate, via the registered email address on the player's account.

14.2 The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage players to review this Privacy Policy periodically.

14.3 Where required by law, ph989 will obtain your consent before making material changes to how we process your personal data. Continued use of ph989 after notification of a policy update constitutes acceptance of the updated Privacy Policy.

14.4 If you object to any update to this Privacy Policy, you should stop using ph989 and contact our support team to discuss your options, including account closure if appropriate.

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or ph989's processing of your personal data, please contact us through the following channels:

15.2 ph989 has designated a Data Protection Officer responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. All formal data privacy requests, complaints, and inquiries should be directed to the DPO via the email address above.

15.3 ph989 values every Filipino player's trust. Our commitment to privacy is not simply a legal obligation – it is part of how we run a platform that respects the people who use it. Salamat sa inyong tiwala sa ph989.