ph989 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ph989 ("ph989", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of players and visitors who access the ph989 online gaming platform at ph989.club ("the Platform").

ph989 is committed to handling all personal data responsibly and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). This Policy should be read together with ph989's Terms & Conditions.

By registering an account on ph989, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not register for or continue to use the ph989 platform.

2. Data Controller

ph989 is the data controller of the personal information collected through the ph989 platform. As data controller, ph989 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the DPA.

ph989 has appointed a Data Protection Officer ("DPO") in compliance with Section 21 of RA 10173. The DPO oversees ph989's data protection compliance program and serves as the primary point of contact for data privacy matters. Contact details for the DPO are provided in Section 14 of this Policy.

3. Data We Collect

ph989 collects the following categories of personal data from players and platform users:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth
• Philippine mobile phone number
• Email address
• Username and encrypted password
• Residential address in the Philippines

3.2 Identity Verification (KYC) Data

• Government-issued ID type and number (e.g., PhilSys National ID, passport, driver's license, UMID)
• Photograph or scan of government-issued ID
• Selfie or liveness verification image where required
• Proof of address documentation where required

3.3 Financial Data

• GCash account number or Maya account linked to your ph989 wallet
• Bank account details (BPI, BDO, Metrobank, or other Philippine bank) where provided for withdrawal
• Transaction history — all deposits, withdrawals, and bet records
• Source of funds documentation where required for large transactions

3.4 Usage and Technical Data

• IP address and geolocation at time of login and each session
• Device type, operating system, and browser information
• Game history, session duration, and betting patterns
• Platform navigation and click-stream data
• Customer support conversation records

4. How We Collect Personal Data

ph989 collects personal data through the following channels:

• Account registration form: when you create your ph989 account.
• KYC submission: when you submit identity documents for verification.
• Platform use: automatically as you navigate and interact with ph989.
• Payment transactions: when you deposit or withdraw funds via GCash, Maya, or bank transfer.
• Customer support: when you contact ph989 via live chat or email.
• Cookies and tracking technologies: as described in Section 10 of this Policy.

5. Purposes of Processing

ph989 processes your personal data for the following purposes:

• To create and manage your ph989 account and provide access to the platform's gaming services.
• To verify your identity and age (21+) in compliance with PAGCOR regulations and RA 10173.
• To process deposits and withdrawals via GCash, Maya, and Philippine bank transfer.
• To comply with anti-money laundering (AML) obligations and report suspicious transactions as required by law.
• To detect and prevent fraud, cheating, and unauthorized account access.
• To provide customer support and respond to your inquiries and complaints.
• To send you transactional communications (account notifications, security alerts, deposit/withdrawal confirmations).
• To send you promotional communications about ph989 offers and promotions, subject to your consent or opt-out preferences.
• To analyze platform usage patterns and improve ph989's products, services, and user experience.
• To operate ph989's responsible gaming tools — deposit limits, self-exclusion, reality checks — and monitor for problem gambling indicators.
• To fulfill ph989's regulatory reporting obligations to PAGCOR and other Philippine government authorities.

6. Legal Basis for Processing

ph989 processes personal data on the following legal bases under RA 10173:

• Consent: For promotional communications and cookie-based tracking beyond strictly necessary cookies, where you have given explicit consent.
• Contractual necessity: For processing required to perform our obligations under the ph989 Terms & Conditions — account management, payment processing, and game provision.
• Legal obligation: For processing required by PAGCOR regulations, AML legislation, tax reporting, and other applicable Philippine law.
• Legitimate interests: For fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.

7. Data Sharing and Third Parties

ph989 does not sell your personal data. ph989 may share your personal data with the following categories of third parties only to the extent necessary for the stated purpose:

• Payment service providers: GCash (Mynt), Maya (Voyager Innovations), InstaPay network participants, and Philippine banking partners, for the sole purpose of processing deposits and withdrawals.
• KYC / identity verification providers: Third-party identity verification services used to process and validate the government ID documents you submit during the KYC process.
• Game software providers: Game providers (such as Pragmatic Play, JILI, PG Soft) receive necessary technical identifiers to facilitate gameplay. These providers do not receive your name, contact details, or financial data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory obligation.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who operate under strict data processing agreements with ph989 and are bound to process data only on ph989's instructions.

8. Data Retention

ph989 retains personal data for as long as your account is active and for a period following account closure as required by applicable law. Retention periods by data category are as follows:

• Account registration data: Duration of account plus 5 years post-closure, in compliance with PAGCOR record-keeping requirements.
• KYC / identity documents: Duration of account plus 5 years post-closure, or longer where required by AML legislation.
• Transaction and bet records: 5 years from the date of each transaction, as required by Philippine AML regulations.
• Customer support records: 3 years from the date of each interaction.
• Technical / usage data: Up to 24 months from collection, after which it is aggregated or anonymized.

Upon expiry of the applicable retention period, ph989 will securely delete or anonymize personal data in accordance with its data disposal procedures.

9. Security Measures

ph989 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph989 platform.
• Encryption of sensitive data fields (passwords, ID numbers) at rest using industry-standard algorithms.
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular penetration testing and vulnerability assessments of the ph989 platform infrastructure.
• Incident response procedures — in the event of a personal data breach, ph989 will notify affected data subjects and the NPC within the timeframes required by RA 10173.

10. Cookies & Tracking Technologies

ph989 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help ph989 recognize your session, remember your preferences, and analyze platform usage.

ph989 uses the following types of cookies:

• Strictly necessary cookies: Required for the platform to function — session authentication, security tokens, and basic functionality. These cannot be disabled.
• Functional cookies: Remember your language preferences, display settings, and platform preferences to improve your experience.
• Analytics cookies: Collect anonymized usage data to help ph989 understand how players interact with the platform and identify areas for improvement.

You may control non-essential cookies through your browser settings. Disabling analytics cookies will not affect your ability to access and use ph989.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act (RA 10173), you have the following rights regarding your personal data held by ph989:

• Right to be informed: The right to know what personal data ph989 holds about you, how it was collected, and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data ph989 holds about you.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data ph989 holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ph989's legal retention obligations.
• Right to object: The right to object to ph989's processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe ph989 has violated your data privacy rights.

To exercise any of these rights, please contact ph989's Data Protection Officer using the contact details in Section 14. ph989 will respond to all verified data subject requests within 30 days.

12. Minors

ph989 does not knowingly collect personal data from individuals under 21 years of age. Registration on ph989 is strictly limited to individuals who are at least 21 years old, in accordance with PAGCOR regulations. Age verification is a mandatory step in the account registration and KYC process.

If ph989 becomes aware that personal data has been collected from a person under 21 years of age without verified parental consent, ph989 will immediately suspend the relevant account, delete the collected data, and return any deposited funds.

13. Changes to This Privacy Policy

ph989 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, ph989 will notify registered players via email and/or a prominent notice displayed upon next login, with the updated effective date reflected at the top of this page.

Continued use of ph989 following notification of changes to this Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with any changes, you must discontinue use of the platform and may request account closure.

14. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or ph989's handling of your personal data, please contact ph989's Data Protection Officer:

Data Protection Officer, ph989
Email: [email protected]
General Support: [email protected]

ph989 aims to respond to all data privacy inquiries within 5 business days. For urgent security concerns, the 24/7 live chat function on the platform provides the fastest initial response.

If you are not satisfied with ph989's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.