ph969 Privacy Policy

1.1 This Privacy Policy ("Policy") describes how ph969 ("we," "us," "our," or "the Platform") collects, uses, discloses, stores, and protects the personal data of individuals ("you," "User," or "Account Holder") who access or use the ph969 online casino and sports betting platform at ph969.vip and all associated services.

1.2 ph969 is committed to protecting the privacy of all persons whose data it processes, with particular attention to the rights of Filipino users under the Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its Implementing Rules and Regulations.

1.3 This Policy should be read alongside ph969's Terms & Conditions and Responsible Gaming policy, which together form the complete agreement governing your use of the platform.

1.4 ph969 may update this Policy from time to time. The current version will always be accessible on this page with the "Last Updated" date clearly displayed at the top. Continued use of the ph969 platform following notification of any material change constitutes acceptance of the revised Policy.

ph969 collects the following categories of personal data:

2.1 Identity Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (required for age verification — 21+ only);
• Nationality and country of residence;
• Government-issued photo ID number (passport, driver's license, SSS ID, PhilSys national ID, etc.);
• Selfie or photograph for ID matching purposes (where required for enhanced KYC).

2.2 Contact Data

• Email address;
• Philippine mobile number (e.g., Globe, Smart, DITO);
• Residential address (street, city/municipality, province, postal code).

2.3 Financial Data

• GCash account details (mobile number associated with GCash);
• PayMaya / Maya account details;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where used for deposits or withdrawals;
• Transaction history including deposits, withdrawals, wagering activity, and bonus usage.

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session timestamps, login history, and activity logs;
• Game play history, bet amounts, and game preferences;
• Customer support interaction records.

3.1 Direct Collection. The majority of your personal data is collected directly from you during registration, KYC verification, deposit or withdrawal requests, customer support interactions, and participation in promotions or surveys.

3.2 Automated Collection. Technical and usage data is collected automatically as you interact with the ph969 platform, using cookies, server logs, and similar tracking technologies (see Section 7).

3.3 Third-Party Sources. ph969 may receive identity verification data from third-party KYC service providers who cross-reference your submitted ID details against official records. We may also receive fraud risk data from payment processors and financial crime prevention services.

3.4 Payment Processors. When you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, or other supported methods, the relevant payment processor shares transaction confirmation data with ph969 to reconcile your account balance.

ph969 uses personal data for the following purposes:

• Account management: creating, maintaining, and securing your ph969 account;
• Identity and age verification: confirming you are who you say you are and that you are aged 21 or above, as required by PAGCOR's age restriction framework;
• Transaction processing: facilitating deposits and withdrawals via GCash, PayMaya, and bank transfers;
• Platform operation: delivering games, live casino tables, sports betting markets, bingo rooms, and all other ph969 services;
• Customer support: responding to your queries, resolving disputes, and providing technical assistance;
• Legal compliance: fulfilling obligations under the DPA, PAGCOR requirements, anti-money laundering (AML) laws, and other applicable regulations;
• Fraud prevention: detecting, investigating, and preventing fraudulent, abusive, or illegal activity on the platform;
• Responsible gaming: monitoring account activity for indicators of problem gambling and applying responsible gaming tools where appropriate;
• Marketing communications: sending you information about ph969 promotions, bonuses, and new features — subject to your marketing preferences (see Section 9 for how to opt out);
• Platform improvement: analyzing aggregated usage data to improve platform design, game selection, and user experience.

ph969 processes personal data under the following legal grounds as recognized by the Data Privacy Act of 2012:

• Contractual necessity: processing required to perform the contract with you (i.e., providing your ph969 account and associated services);
• Legal obligation: processing required to comply with applicable laws, including KYC/AML obligations and PAGCOR regulatory requirements;
• Legitimate interests: processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent: processing for direct marketing communications, where you have provided explicit consent and retain the right to withdraw consent at any time.

6.1 ph969 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes.

6.2 ph969 may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to contractual confidentiality obligations:

• Payment service providers: GCash (GXI), PayMaya / Maya, BPI, BDO, Metrobank, and other payment processors necessary to facilitate transactions;
• KYC and identity verification providers: third-party services used to verify government-issued IDs and confirm age;
• Game providers: Pragmatic Play, JILI Games, PG Soft, Evolution Gaming, Habanero, and other licensed providers whose games are integrated into the ph969 platform;
• Fraud prevention and AML services: third-party services used to detect and prevent financial crime;
• IT and hosting providers: cloud infrastructure and security service providers used to operate the ph969 platform;
• Regulatory and law enforcement authorities: where ph969 is legally required to disclose personal data by court order, PAGCOR directive, or applicable law.

6.3 In the event of a merger, acquisition, or sale of ph969's business or assets, your personal data may be transferred to a successor entity, provided that the successor is bound by privacy obligations no less protective than those in this Policy.

7.1 ph969 uses cookies and similar tracking technologies (local storage, session storage, tracking pixels) to operate the platform, remember your preferences, and analyze how the platform is used.

7.2 The main categories of cookies used by ph969 are:

• Essential cookies: required for the platform to function — session management, authentication, and security. Cannot be disabled without impairing platform functionality;
• Functional cookies: remember your preferences such as language settings, game view preferences, and "Remember Me" login status;
• Analytics cookies: collect aggregated, anonymized data about how users interact with the ph969 platform, used to improve UX and identify technical issues;
• Responsible gaming cookies: track session duration to power session time alerts and support responsible gaming features.

7.3 You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair or prevent access to the ph969 platform.

8.1 ph969 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your active account relationship with ph969.

8.2 Following account closure, ph969 retains personal data for a minimum of five (5) years as required by applicable AML regulations and PAGCOR compliance obligations. Transaction records may be retained for longer periods where required by law or for the purpose of resolving disputes.

8.3 Technical and usage data (log files, IP records) is typically retained for a shorter period, unless required to be retained longer for security investigation or legal purposes.

8.4 When personal data is no longer required and the retention period has expired, ph969 will securely delete or anonymize the data in accordance with applicable data destruction standards.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph969:

• Right to be informed: you have the right to know how your personal data is being collected, used, and shared — which is the purpose of this Policy;
• Right of access: you may request a copy of the personal data ph969 holds about you;
• Right to rectification: you may request correction of inaccurate or incomplete personal data;
• Right to erasure: in certain circumstances, you may request deletion of your personal data — note that this right is subject to ph969's legal retention obligations;
• Right to object: you may object to processing based on legitimate interests or for direct marketing purposes;
• Right to data portability: you may request your personal data in a commonly used, machine-readable format;
• Right to withdraw consent: where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting prior processing.

To exercise any of the above rights, please contact ph969's Data Protection Officer via the contact details in Section 14. ph969 will respond to verified requests within 30 days.

10.1 ph969 does not knowingly collect personal data from persons under the age of 21. The ph969 platform is strictly for adults aged 21 and above, in compliance with PAGCOR's minimum gambling age requirements for the Philippines.

10.2 Age verification is a mandatory step in the ph969 registration process. If ph969 discovers that personal data has been collected from a person under 21, the associated account will be immediately suspended, the data will be deleted, and any deposits will be returned subject to verification of the source of funds.

10.3 Parents and guardians who believe a minor has registered on ph969 should contact support immediately via live chat or email.

11.1 ph969 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and ph969 servers;
• Encryption of sensitive data at rest, including passwords (stored as irreversible cryptographic hashes) and payment credentials;
• Access controls limiting internal access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing;
• Two-factor authentication available for all account holders and required for all administrative access.

11.2 Despite ph969's security measures, no platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, ph969 will notify affected users and the National Privacy Commission (NPC) as required by the DPA within the prescribed timeframes.

12.1 Some of ph969's service providers and game partners operate outside the Philippines. Where personal data is transferred to a third country, ph969 takes steps to ensure that such transfers are covered by appropriate safeguards, including contractual data processing agreements that impose obligations equivalent to those under Philippine law.

12.2 ph969 does not transfer personal data to jurisdictions that the National Privacy Commission has identified as providing inadequate levels of data protection without implementing additional safeguards.

13.1 ph969 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, applicable law, or regulatory requirements. The revised Policy will be posted on this page with an updated "Last Updated" date.

13.2 Where changes are material — for example, where we introduce a new purpose for processing your data — ph969 will provide advance notice to registered account holders via the email address on file and will, where required by law, seek fresh consent for the new processing activity.

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or ph969's data processing activities, please contact ph969 via:

• Live Chat: Available 24/7 on the ph969 platform — the fastest way to reach support
• Email: [email protected] (plain text — not a clickable link)

14.2 ph969 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. Data subject rights requests and privacy-related complaints should be addressed to the DPO via the contact channels above, clearly marked "Data Privacy Request."

14.3 If you believe your data privacy rights have been violated and ph969's response to your complaint is unsatisfactory, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).