ph9898 Privacy Policy

1 Introduction

ph9898 ("we," "us," "our," or "the Operator") operates the online casino and sports betting platform accessible at ph9898.vip. We are committed to protecting the privacy and personal data of every Filipino player and visitor who interacts with our platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. It also reflects our obligations under PAGCOR licensing requirements governing the collection and management of player data.

By accessing, registering on, or using the ph9898 platform, you acknowledge that you have read, understood, and consented to the data processing practices described in this Privacy Policy. If you do not agree to this Policy, you must discontinue use of the ph9898 platform and close your Account.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, ph9898 — the entity operating the ph9898.vip platform under a valid PAGCOR license — acts as the Personal Information Controller in respect of all personal data collected from players and users in the Philippines.

As Personal Information Controller, ph9898 determines the purposes and means by which your personal data is processed. Our Data Protection Officer (DPO) is responsible for overseeing compliance with the DPA and this Privacy Policy. Contact details for the DPO are provided in Section 17 of this Policy.

3 Personal Data We Collect

ph9898 collects the categories of personal data described below. We collect and process only the data that is necessary for the specific purposes outlined in this Policy and required under applicable Philippine law and PAGCOR regulations.

3.1 Registration Data

• Full legal name (as it appears on your government-issued Philippine ID)
• Date of birth (used to verify the 18+ age requirement)
• Philippine mobile number (used as primary account identifier and for OTP verification)
• Email address
• Username or display name chosen by the player
• Account password (stored in hashed, non-reversible form — ph9898 never stores plaintext passwords)

3.2 Identity Verification (KYC) Data

• Copy or image of a valid Philippine government-issued identification document (e.g., Philippine Passport, Driver's License, SSS ID, PhilHealth ID, Postal ID, UMID)
• Selfie or live photo for biometric matching, where required for enhanced verification
• Taxpayer Identification Number (TIN), where required for tax-related reporting

3.3 Financial Data

• GCash mobile number and account reference (for GCash deposits and withdrawals)
• Maya account reference (for Maya transactions)
• Bank account details (account name, account number, bank name) where bank transfers are used
• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references

3.4 Gameplay and Betting Data

• Game session logs including games played, stakes wagered, outcomes, and session duration
• Sports betting history including markets selected, odds, stake amounts, and settlement results
• Bonus activation and wagering history
• Responsible gaming tool usage (deposit limits set, self-exclusion events, cooling-off periods)

3.5 Technical and Device Data

• IP address at time of login and during active sessions
• Device type, operating system, and browser version
• Unique device identifiers
• Session timestamps and duration
• Geolocation data (country/region level, derived from IP address)

3.6 Communications Data

• Customer support chat transcripts and ticket history
• Email correspondence with ph9898
• Records of SMS communications including OTP delivery logs
• Survey or feedback responses submitted voluntarily by the player

4 How We Collect Personal Data

ph9898 collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically — when you access and use the ph9898 platform, through server logs, cookies, and analytics tools that record technical data about your device and session behavior;
• From payment processors — GCash, Maya, BPI, BDO, Metrobank, and other approved payment partners provide transaction reference data necessary to process and reconcile deposits and withdrawals;
• From identity verification services — where ph9898 uses a third-party KYC or biometric verification service to process identity documents, that service transmits a verification result and relevant extracted data to ph9898;
• From fraud prevention and analytics services — device fingerprint data, IP reputation scores, and behavioral analytics may be received from third-party fraud prevention services engaged by ph9898 to protect the platform and its players.

5 Purposes of Processing

ph9898 processes your personal data for the following specific purposes:

6 Lawful Bases for Processing

ph9898 processes personal data only when a lawful basis under the Data Privacy Act of 2012 exists. The lawful bases we rely on are:

• Consent — where you have given specific, informed consent to the processing of your data, such as for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contractual Necessity — where processing is necessary to perform our obligations under the ph9898 Terms & Conditions that you have accepted, including account operation, payment processing, and game delivery.
• Legal Obligation — where processing is required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), the Data Privacy Act of 2012, and other applicable Philippine law.
• Legitimate Interests — where processing is necessary for ph9898's legitimate interests, including fraud detection, platform security, abuse prevention, and service quality improvement, provided these interests are not overridden by your fundamental rights and freedoms.

7 Data Sharing and Disclosure

ph9898 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. We may disclose personal data to the following categories of third parties, and only to the extent necessary for the stated purpose:

7.1 Regulatory and Law Enforcement Authorities

ph9898 is required by Philippine law to disclose personal data — including player identity, transaction history, and gameplay records — to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent authorities upon lawful request or where mandatory reporting obligations apply.

7.2 Payment Processing Partners

To process deposits and withdrawals, ph9898 shares necessary financial and identity data with approved payment service providers including GCash (Mynt), Maya Philippines, and partnering banks (BPI, BDO, Metrobank). These partners are bound by their own data protection obligations and applicable Philippine financial regulations.

7.3 Game Content and Platform Service Providers

ph9898 shares limited technical and gameplay data with game content providers and platform infrastructure service providers as necessary to deliver game services, maintain platform stability, and ensure RNG audit compliance. All such providers are contractually bound to process data only for specified, agreed purposes.

7.4 KYC and Fraud Prevention Services

Where ph9898 uses third-party identity verification or fraud prevention services, identity documents and technical data may be transmitted to those service providers for processing. Providers are selected for their compliance with international data protection standards and Philippine legal requirements.

7.5 Professional Advisors

ph9898 may share personal data with legal counsel, auditors, and compliance consultants on a strictly confidential basis where required for legal proceedings, audits, or regulatory compliance assessments.

8 Data Retention

ph9898 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, regulatory, accounting, or reporting requirements.

• Active Account Data: Retained for the duration of your active ph9898 Account plus a minimum of five (5) years following Account closure, as required under PAGCOR licensing conditions and anti-money laundering regulations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following Account closure or the completion of the relevant transaction, in accordance with AMLC record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years as required by the Anti-Money Laundering Act of the Philippines.
• Customer Support Records: Retained for three (3) years following resolution of the relevant support interaction or dispute.
• Marketing Consent Records: Retained for the duration of the relevant marketing relationship and for a period of three (3) years following withdrawal of consent.
• Server Logs and Technical Data: Retained for a rolling period of twelve (12) months unless a longer period is required for an ongoing security investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ph9898's data disposal procedures.

9 Data Security

ph9898 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

9.1 Technical Measures

• All data transmitted between your device and ph9898 servers is protected by Transport Layer Security (TLS 1.2 or higher), providing 256-bit encryption of data in transit;
• Player passwords are stored exclusively as salted cryptographic hashes — plaintext passwords are never stored;
• Personal data at rest on ph9898 servers is encrypted using AES-256 or equivalent encryption standards;
• Access to production systems containing personal data is restricted by role-based access controls, multi-factor authentication, and audit logging;
• Regular penetration testing and vulnerability assessments are conducted by qualified third-party security professionals.

9.2 Organisational Measures

• ph9898 staff who handle personal data are trained on data protection obligations and the requirements of the Data Privacy Act of 2012;
• Access to personal data is granted on a need-to-know basis only;
• Data breach response procedures are in place, including notification protocols for the National Privacy Commission and affected data subjects as required by the DPA;
• Third-party service providers with access to ph9898 player data are bound by data processing agreements that impose security standards equivalent to those applied by ph9898.

10 Cookies and Similar Technologies

ph9898 uses cookies and similar tracking technologies on its platform to provide core functionality, enhance your user experience, and gather analytics data. A cookie is a small text file stored on your device by your browser when you visit a website.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the ph9898 platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and remembered payment methods to improve your experience on subsequent visits to ph9898.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the ph9898 platform — pages visited, features used, and session duration — to help us identify areas for improvement.
• Security Cookies: Used by ph9898's fraud detection systems to identify suspicious login patterns, bot activity, and unusual account behavior.

10.2 Cookie Management

Most modern browsers allow you to control cookie settings through their privacy or settings menu. You may configure your browser to reject non-essential cookies or to notify you when cookies are being set. Note that disabling certain cookies may affect the functionality of the ph9898 platform.

11 Minors and Age Restriction

ph9898 does not knowingly collect personal data from, or provide any Services to, persons under the age of 18. The ph9898 platform is strictly for adult use, and age verification is a mandatory component of the player registration and KYC process.

If ph9898 becomes aware that personal data has been collected from a person under 18 without verified parental or guardian consent, the relevant Account will be immediately closed, all associated data will be deleted (subject to any mandatory legal retention obligations), and any deposited funds will be returned to the original payment source.

If you believe that a minor has registered an Account or submitted personal data to ph9898, please contact our DPO at the contact details in Section 17 immediately.

12 Your Data Subject Rights

Under the Data Privacy Act of 2012, you — as a data subject — have the following rights in respect of your personal data held by ph9898:

• Right to Be Informed: The right to be notified of how your personal data is collected, processed, and protected — fulfilled by this Privacy Policy and at the point of collection.
• Right to Access: The right to obtain a copy of the personal data ph9898 holds about you and to receive information about how it is being processed.
• Right to Rectification: The right to have inaccurate, incomplete, or outdated personal data corrected. Minor corrections (e.g., email address updates) can typically be made via Account Settings. Material corrections (e.g., legal name changes) require submission of supporting documentation.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where processing is no longer necessary, where consent has been withdrawn, or where the data has been unlawfully processed — subject to legal retention obligations that override this right.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another data controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, or on grounds relating to your particular situation where ph9898 relies on legitimate interests as the lawful basis.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please contact the ph9898 DPO using the details in Section 17. ph9898 will respond to all verified data subject requests within thirty (30) calendar days of receipt, as required by the DPA Implementing Rules.

13 Marketing Communications

ph9898 may send you promotional communications — including information about bonuses, new games, seasonal promotions, and responsible gaming resources — via SMS, email, or in-platform notifications, where you have provided your consent to receive such communications during registration or subsequently through your Account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in the ph9898 Account Settings section;
• Clicking the "unsubscribe" link included in any marketing email from ph9898; or
• Contacting ph9898 customer support with an opt-out request.

Withdrawal of marketing consent does not affect your ability to receive transactional and operational communications from ph9898, such as Account security alerts, deposit and withdrawal confirmations, OTP codes, and KYC verification notices — these are sent regardless of marketing preferences as they are necessary for the operation of your Account.

14 Cross-Border Data Transfers

ph9898 is a Philippine platform and stores its primary player data on servers located within or accessible from the Philippines. However, certain service providers engaged by ph9898 — including game content providers and cloud infrastructure partners — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, ph9898 ensures that such transfers occur only:

• To recipients in countries whose data protection frameworks have been assessed as providing adequate protection by the National Privacy Commission; or
• Pursuant to contractual safeguards — including data processing agreements incorporating standard contractual clauses approved by the NPC — that ensure the transferred data receives equivalent protection to that provided under the Data Privacy Act of 2012.

15 Third-Party Links and Integrations

The ph9898 platform may include integrations with third-party services — such as GCash payment screens or game provider interfaces — that operate under their own privacy policies. When you interact with a third-party service accessed through or in connection with ph9898, that service's privacy policy governs the collection and use of your data in that interaction. ph9898 is not responsible for the data practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with.

16 Changes to This Privacy Policy

ph9898 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, our data processing practices, or the Services we offer. All changes will be published on the ph9898 website with the updated effective date displayed at the top of the Policy.

Where changes are material — for example, where we introduce a new purpose of processing or change how we share data — ph9898 will notify registered players via the email address or mobile number on file at least fourteen (14) calendar days before the amended Policy takes effect.

Your continued use of the ph9898 platform following the effective date of an amended Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must stop using the platform and close your Account by contacting customer support.

17 Contact Us and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph9898, please contact our Data Protection Officer (DPO) or customer support team:

• Customer Support (24/7): Live chat available on ph9898.vip
• Email: [email protected]
• DPO Email: [email protected]
• Registered Office: ph9898, Philippines

ph9898's DPO is responsible for overseeing compliance with the Data Privacy Act of 2012, maintaining the ph9898 data processing register, handling data subject rights requests, and serving as the primary point of contact with the National Privacy Commission.

If you believe your data rights have been violated and ph9898's internal process has not resolved your complaint satisfactorily, you have the right to file a complaint directly with the National Privacy Commission of the Philippines.