ph82 Privacy Policy – How We Protect Your Personal Data

1. Introduction and Scope

This Privacy Policy ("Policy") describes how ph82 ("ph82", "we", "us", "our"), the operator of the online gaming platform at ph82.org, collects, uses, stores, shares, and protects the personal data of individuals who access or use the ph82 Platform ("you", "User", "Player").

This Policy applies to all personal data collected through the ph82 website, mobile browser interface, customer support channels, and any other interaction you have with ph82 as an organisation. It covers both registered players and anonymous visitors to ph82.org.

ph82 is the Data Controller for personal data processed under this Policy. ph82 is registered with the National Privacy Commission (NPC) of the Philippines as required under the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"). All ph82 data processing activities are conducted in compliance with the DPA, its Implementing Rules and Regulations, and applicable PAGCOR regulatory requirements.

2. Personal Data We Collect

2.1 Registration and Identity Data

When you create a ph82 account, we collect: full legal name, date of birth, Philippine mobile number, email address, username, and password (stored in hashed form). This information is required to create and manage your account.

2.2 KYC and Identity Verification Data

To comply with PAGCOR anti-money laundering (AML) requirements and verify age eligibility (21+), ph82 collects government-issued identification documents including, but not limited to: Philippine National ID (PhilSys), passport, driver's licence, SSS/GSIS ID, or UMID. We may also collect a selfie photograph for biometric matching purposes during the KYC process.

2.3 Financial and Payment Data

ph82 collects transaction data associated with your deposits and withdrawals, including: GCash or Maya wallet reference numbers, bank account names and numbers (for bank transfer withdrawals), transaction amounts and timestamps, and payment method identifiers. ph82 does not store full card numbers; payment card data (if applicable) is processed by PCI-DSS compliant third-party processors.

2.4 Gaming Activity Data

ph82 records all gaming activity on the Platform, including: games played, bet amounts, game outcomes, session durations, bonus usage, and wagering history. This data is required for fair gaming certification, PAGCOR regulatory reporting, and responsible gaming monitoring.

2.5 Device and Technical Data

When you access ph82, our systems automatically collect: IP address, device type and operating system, browser type and version, session tokens, login timestamps, and approximate geographic location derived from IP. This data is used for fraud detection, security monitoring, and platform optimisation.

2.6 Communications Data

If you contact ph82 customer support via live chat, email, or any other channel, we retain records of those communications including the content, timestamps, and resolution details. This data is used to provide support and to improve our services.

2.7 Voluntary Data

You may voluntarily provide additional information such as preferred language, responsible gaming self-assessments, or feedback survey responses. Providing this information is optional and will not affect your access to the Platform.

3. How ph82 Uses Your Personal Data

ph82 processes your personal data for the following specific purposes:

• Account creation and management — to register, authenticate, and maintain your ph82 player account
• Identity and age verification (KYC) — to comply with PAGCOR requirements and verify that all players are 21 years of age or older
• Payment processing — to process deposits, withdrawals, and refunds via GCash, Maya, and other accepted Philippine payment methods
• Game operation and fairness — to record game results, settle bets, distribute winnings, and maintain the integrity of all gaming outcomes
• Customer support — to respond to enquiries, resolve disputes, and provide technical assistance
• Fraud and security monitoring — to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct
• Regulatory compliance — to fulfil PAGCOR reporting obligations, AML/CTF obligations under Philippine law, and NPC data processing requirements
• Responsible gaming — to monitor gaming patterns, enforce self-exclusion requests, apply player-set limits, and identify players who may need responsible gaming interventions
• Marketing communications — to send promotional offers, bonuses, and platform updates to players who have consented to receive such communications (opt-out available at any time)
• Platform improvement — to analyse usage patterns, identify technical issues, and improve the ph82 user experience

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, ph82 processes personal data on the following legal bases:

• Contractual necessity — processing required to provide the ph82 Platform services as described in the Terms & Conditions you accepted upon registration (account management, payment processing, game operation)
• Legal obligation — processing required to comply with PAGCOR licensing conditions, AML/CTF obligations under RA 9160 (as amended), and NPC registration requirements
• Legitimate interests — fraud detection, security monitoring, and platform improvement where ph82's legitimate interests are not overridden by your data protection rights
• Consent — marketing communications and optional data collection, where you have given explicit, informed, and freely given consent. You may withdraw consent at any time.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

ph82 shares personal data with carefully selected third-party service providers who assist in operating the Platform, under strict data processing agreements that prohibit those parties from using ph82 player data for any purpose other than providing the contracted service. Categories of providers include: payment processors (GCash, Maya, BancNet-connected banks), KYC verification providers, game software providers (JILI, PG Soft, Pragmatic Play, Evolution Gaming), fraud detection services, and customer support platform operators.

5.2 Regulatory Authorities

ph82 is required by law to disclose player data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities when required by valid legal process, court order, or regulatory directive. ph82 will notify affected players of such disclosures where legally permitted to do so.

5.3 No Sale of Personal Data

ph82 does not sell, rent, or trade the personal data of its players to any third party for commercial or advertising purposes. Player data is never shared with advertisers or data brokers.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of ph82 or its assets, player personal data may be transferred to the acquiring entity. ph82 will notify players of any such transfer and the acquiring entity will be required to honour this Privacy Policy.

6. Cookies and Tracking Technologies

ph82.org uses cookies and similar tracking technologies to operate the Platform and improve the user experience. The categories of cookies used are:

• Strictly necessary cookies — required for the Platform to function, including session authentication tokens and security cookies. These cannot be disabled.
• Functional cookies — remember your preferences such as language, display settings, and whether you have accepted this Policy. Disabling these may affect Platform functionality.
• Analytics cookies — used to understand how players use the Platform (pages visited, session duration, errors encountered). Data is aggregated and anonymised. You may opt out through your browser settings.
• Security and fraud-detection cookies — used to identify unusual access patterns and protect accounts from unauthorised access.

ph82 does not use third-party advertising cookies or retargeting pixels. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from accessing your ph82 account.

7. Data Retention

ph82 retains personal data for the periods necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations:

• Account data — retained for the duration of your active account and for a minimum of five (5) years after account closure, as required by PAGCOR and AML regulations
• KYC and identity documents — retained for a minimum of five (5) years from the date of verification, in accordance with AML/CTF legal requirements
• Gaming and transaction records — retained for a minimum of five (5) years, as required by PAGCOR
• Customer support communications — retained for two (2) years from the date of the last interaction
• Marketing consent records — retained until consent is withdrawn, plus one (1) year for audit purposes

Following the expiry of the applicable retention period, ph82 will securely delete or anonymise personal data in accordance with NPC guidelines.

8. Data Security

ph82 implements technical and organisational security measures appropriate to the risk posed by the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph82 servers
• Encryption at rest for sensitive personal data including identity documents and payment identifiers
• Role-based access controls ensuring that ph82 employees can only access player data on a need-to-know basis
• Two-factor authentication required for all ph82 staff accessing production systems
• Regular security audits and penetration testing of the Platform
• Incident response procedures in compliance with NPC breach notification requirements

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, ph82 will notify affected players and report the breach to the National Privacy Commission within 72 hours of becoming aware of it, as required by NPC Circular 16-03.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph82:

ph82 will respond to all verified data subject requests within 15 business days. ph82 may request proof of identity before processing a request to protect against unauthorised access to personal data.

10. Children, Minors, and Age Protection

The ph82 Platform is strictly intended for individuals who are 21 years of age or older. ph82 does not knowingly collect personal data from persons under 21 years of age. Age verification is a mandatory component of the ph82 registration and KYC process.

If ph82 discovers or is made aware that personal data has been collected from a person under 21 years of age, ph82 will immediately suspend the associated account, delete the personal data to the extent not required to be retained for regulatory purposes, and report the matter to PAGCOR as required.

If you believe that ph82 may have inadvertently collected personal data from a minor, please contact our Data Protection Officer immediately at [email protected].

11. International Data Transfers

ph82 may transfer personal data to third-party service providers located outside the Philippines, including game software providers and cloud infrastructure partners. Where such transfers occur, ph82 ensures that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers, including contractual clauses requiring the recipient to provide a level of data protection equivalent to the Philippine DPA.

ph82 does not transfer personal data to countries that do not provide adequate data protection standards without the explicit consent of the affected player or a valid legal basis under the DPA.

12. Changes to This Privacy Policy

ph82 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ph82 will notify registered players via email or platform notification at least 14 days before the changes take effect. The "Last updated" date at the top of this Policy will be revised to reflect the date of the most recent changes.

Your continued use of the ph82 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated Policy. If you do not agree with the revised Policy, you must stop using the Platform and may request account closure via customer support.

13. Contact the Data Protection Officer

ph82 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. For all privacy-related enquiries, data subject rights requests, or concerns about ph82's data processing practices, please contact:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with ph82's response to your privacy concerns.