ph978 Privacy Policy – How We Collect, Use, and Protect Your Data

1. Data Controller Information

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the personal information controller responsible for your data is ph978, operating the platform accessible at ph978.vip (hereinafter referred to as "ph978," "we," "us," or "our").

ph978 operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR) and complies with all applicable Philippine data protection legislation. If you have any questions or concerns about how ph978 handles your personal data, you may contact our Data Protection Officer at the email address provided in Section 12 of this policy.

2. Personal Data We Collect

ph978 collects personal data from you in the following categories, depending on how you interact with the platform:

Registration Data: When you create a ph978 account, we collect your full legal name, date of birth, Philippine mobile number, email address, and a username and password of your choosing.

Identity Verification (KYC) Data: To comply with PAGCOR requirements and the Anti-Money Laundering Act, ph978 collects copies of government-issued Philippine identification documents (e.g., PhilSys ID, passport, driver's license, UMID), proof of address, and proof of payment method ownership.

Financial Data: ph978 collects information about your deposits, withdrawals, and transaction history on the platform. We do not store full GCash or bank account numbers — payment processing is handled by certified third-party payment processors who are bound by their own data protection obligations.

Gaming Activity Data: We collect records of your gaming sessions, game selections, bet amounts, win/loss history, and bonus usage. This data is used for account management, responsible gaming monitoring, and regulatory reporting.

Technical Data: We automatically collect your IP address, device type, operating system, browser type, and session timestamps when you access ph978. This data is used for security monitoring, fraud prevention, and platform optimization.

Communications Data: If you contact ph978 customer support, we retain records of those communications, including chat transcripts and any information you provide during the interaction.

3. How ph978 Uses Your Personal Data

ph978 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your ph978 player account, including processing deposits and withdrawals, managing your gaming wallet, and providing access to platform features.
• Identity Verification: To verify your identity and age (21+) in compliance with PAGCOR regulations and the Anti-Money Laundering Act of the Philippines.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the ph978 platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce deposit and loss limits you have set, and administer self-exclusion requests in accordance with our Responsible Gaming Policy.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws, PAGCOR regulations, NPC requirements, and any lawful requests from competent authorities.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the performance, features, and user experience of the ph978 platform.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about ph978 offers and new games.

ph978 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

4. Legal Basis for Processing

ph978 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary for the performance of the contract between you and ph978 (i.e., the Terms & Conditions you agreed to at registration), including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), and NPC requirements.
• Legitimate Interests: Processing necessary for ph978's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your data protection rights.
• Consent: Where ph978 relies on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time by contacting customer support or updating your account preferences.

5. Data Sharing and Third-Party Disclosure

ph978 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:

• Payment Processors: ph978 shares necessary financial data with certified Philippine payment processors (GCash, Maya, and banking partners) to facilitate deposits and withdrawals. These processors are bound by their own data protection obligations and applicable Philippine financial regulations.
• Game Providers: ph978 shares limited technical data (e.g., session tokens, game results) with our licensed game providers to enable game functionality. Game providers do not receive your full personal profile.
• Identity Verification Services: ph978 may use third-party KYC verification services to assist with identity and age verification. These services process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• Regulatory Authorities: ph978 is required to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities upon lawful request or as required by applicable regulations.
• Legal Proceedings: ph978 may disclose personal data where required by a court order, subpoena, or other lawful legal process issued by a competent Philippine authority.

All third parties with whom ph978 shares personal data are required to maintain appropriate technical and organizational security measures and to process your data only for the purposes specified in their agreements with ph978.

6. Cookies and Tracking Technologies

ph978 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that help detect fraudulent activity. These cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the ph978 platform, which pages are visited most frequently, and where technical errors occur. This data helps us improve the platform experience.
• Preference Cookies: Used to remember your platform preferences, such as language settings and display options, so you don't have to reconfigure them on each visit.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the ph978 platform. ph978 does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

7. Data Retention

ph978 retains your personal data for the following periods:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with the Anti-Money Laundering Act of the Philippines.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years in compliance with PAGCOR reporting requirements and the Anti-Money Laundering Act.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant inquiry or dispute.
• Technical Logs: Retained for twelve (12) months for security monitoring purposes, after which they are deleted or anonymized.

Upon expiry of the applicable retention period, ph978 will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures.

8. Data Security Measures

ph978 implements the following technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph978 servers
• AES-256 encryption for sensitive data stored in ph978 databases
• Multi-factor authentication options for player accounts
• Regular penetration testing and security audits by independent third-party security firms
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Comprehensive security incident response procedures aligned with NPC Circular 16-03
• Regular staff training on data protection obligations and security best practices

While ph978 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph978 login credentials and for notifying ph978 immediately if you suspect unauthorized access to your account.

9. Your Data Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph978:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph978 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data ph978 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph978's legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact ph978's Data Protection Officer using the contact details provided in Section 12. ph978 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case ph978 will notify you of the extension and the reasons for it.

If you believe ph978 has not adequately addressed your data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

10. Children's Privacy and Age Restriction

The ph978 platform is strictly intended for individuals aged twenty-one (21) years and older. ph978 does not knowingly collect personal data from individuals under the age of 21. This requirement is mandated by PAGCOR regulations governing online gaming in the Republic of the Philippines.

ph978 employs age verification procedures during the KYC process to confirm that all registered players meet the minimum age requirement. If ph978 discovers that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds to the originating payment method.

If you are a parent or guardian and believe that a minor in your care has registered an account on ph978, please contact our customer support team immediately so that we can take appropriate action.

11. Updates to This Privacy Policy

ph978 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, ph978 will notify registered players via the mobile number or email address on file at least seven (7) days before the changes take effect, where practicable.

The most current version of this Privacy Policy will always be available on this page at ph978.vip/privacy-policy. The effective date at the top of this document will be updated to reflect the date of the most recent revision. Your continued use of the ph978 platform after the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how ph978 is protecting your personal data.

12. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or ph978's handling of your personal data, you may contact our Data Protection Officer using the following details:

• Email: [email protected]
• Response Time: ph978 aims to acknowledge all data privacy inquiries within forty-eight (48) hours and to provide a substantive response within thirty (30) days.

For complaints that cannot be resolved directly with ph978, you may contact the National Privacy Commission of the Philippines. ph978 cooperates fully with NPC investigations and will provide all information required by the Commission in the exercise of its regulatory functions.