Privacy Policy — ph989

1. Overview

ph989 ("we," "us," "our," or "ph989") operates the online gaming platform accessible at ph989.app and through associated mobile applications (collectively, the "Platform"). As a data controller, ph989 is responsible for the personal data you provide to us and the data we collect about you through your use of the Platform.

This Privacy Policy applies to all users of the ph989 Platform, including registered account holders, visitors who browse the Platform without registering, and individuals who contact our customer support team. By using the ph989 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. If you have any questions about how ph989 handles your personal data, please refer to Section 14 for our contact details.

2. Data We Collect

ph989 collects the following categories of personal data from users of the Platform:

ph989 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law.

3. How We Collect Your Data

ph989 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the Platform, including cookies, web beacons, log files, and similar tracking technologies that record your device information, IP address, and browsing behavior on the Platform.
• Third-party sources: Data received from identity verification service providers, payment processors, fraud prevention services, and PAGCOR-mandated reporting systems, where applicable.
• Publicly available sources: In limited circumstances, ph989 may supplement your profile with information from publicly available sources for fraud prevention or AML compliance purposes.

4. How We Use Your Data

ph989 uses your personal data for the following purposes:

• To create, manage, and maintain your ph989 account
• To verify your identity and age in compliance with PAGCOR regulations and the Anti-Money Laundering Act
• To process deposits, withdrawals, and other financial transactions
• To provide customer support and resolve disputes
• To detect, investigate, and prevent fraud, cheating, and other prohibited conduct
• To monitor your gaming activity for responsible gaming purposes, including identifying signs of problem gambling
• To send you transactional communications, including account notifications, security alerts, and support responses
• To send you promotional communications about ph989 offers and new games, where you have consented to receive such communications
• To improve the ph989 Platform through analytics and user research
• To comply with our legal and regulatory obligations under Philippine law

5. Legal Basis for Processing

ph989 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for ph989's legitimate business interests, including fraud prevention, platform security, and analytics — provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional personalization features.

6. Data Sharing & Disclosure

6.1 Service Providers

ph989 shares personal data with trusted third-party service providers who assist us in operating the Platform, including payment processors (GCash, Maya, banking partners), identity verification providers, cloud hosting services, customer support platforms, and analytics providers. All service providers are contractually bound to process your data only on ph989's instructions and in accordance with applicable data protection laws.

6.2 Regulatory Authorities

ph989 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and other government authorities where required by law or where ph989 has a good-faith belief that disclosure is necessary to comply with a legal obligation, protect the rights or safety of ph989 or its users, or investigate suspected fraud or illegal activity.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ph989's assets, your personal data may be transferred to the acquiring entity. ph989 will notify you of any such transfer and the privacy practices of the acquiring entity before your data is transferred and becomes subject to a different privacy policy.

6.4 No Sale of Personal Data

ph989 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is used solely for the purposes described in this Privacy Policy.

7. Data Retention

ph989 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulation. Specifically:

• Account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC documents: Retained for a minimum of five (5) years after the end of the business relationship.
• Support communications: Retained for two (2) years from the date of the interaction, unless a longer retention period is required for dispute resolution.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, ph989 will securely delete or anonymize the data.

8. Data Security

ph989 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ph989 Platform
• Encryption of sensitive data at rest, including financial information and identity documents
• Multi-factor authentication options for account access
• Regular security audits and penetration testing
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Staff training on data protection and information security
• Incident response procedures for detecting and responding to data breaches

While ph989 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ph989 will notify the National Privacy Commission (NPC) and affected users in accordance with the requirements of the Data Privacy Act of 2012.

9. Cookies & Tracking Technologies

ph989 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, and gather analytics data. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and login status to provide a more personalized experience.
• Analytics cookies: Collect anonymized data about how users interact with the Platform — such as pages visited, time spent, and features used — to help ph989 improve the Platform's performance and usability.
• Marketing cookies: Used to deliver relevant promotional content within the ph989 Platform based on your gaming activity and preferences. These are only activated with your consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ph989 Platform. For more information on managing cookies, refer to your browser's help documentation.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph989:

• Right to be informed: You have the right to know what personal data ph989 collects about you and how it is used — which is the primary purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data ph989 holds about you at any time.
• Right to rectification: You may request that ph989 correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request that ph989 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on ph989's legitimate interests.
• Right to data portability: You may request that ph989 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph989 has violated your data privacy rights.

11. Minors

The ph989 Platform is strictly intended for individuals aged 21 years and above, in accordance with PAGCOR regulations governing online casino gambling in the Philippines. ph989 does not knowingly collect personal data from individuals under the age of 21.

If ph989 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to ph989, please contact us immediately using the details in Section 14.

12. Cross-Border Data Transfers

ph989 may transfer your personal data to service providers and partners located outside the Philippines where necessary to operate the Platform — for example, cloud hosting infrastructure or international payment processing networks. Where such transfers occur, ph989 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that meet the standards required by the Data Privacy Act of 2012 and the National Privacy Commission.

ph989 will not transfer your personal data to a country or territory that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

13. Changes to This Privacy Policy

ph989 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, ph989 will notify registered users via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how ph989 protects your personal data. Your continued use of the ph989 Platform following the posting of changes constitutes your acceptance of the revised Privacy Policy.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or ph989's handling of your personal data, please contact our Data Protection Officer (DPO):

ph989 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within fifteen (15) business days. If you are not satisfied with ph989's response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.