Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how ph 2026 ("ph 2026," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Data Subject") who access or use the ph 2026 online gaming platform, including the website at ph2026.org and all associated services, games, and features.

ph 2026 is committed to protecting your privacy and handling your personal data with transparency, integrity, and full compliance with applicable Philippine data protection law. We recognise that your personal information is important to you, and we take our obligations as a data controller seriously.

By registering on ph 2026, accessing the platform, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions, which govern your use of the ph 2026 platform.

Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, ph 2026 is the data controller responsible for the personal data collected through the ph 2026 platform.

As data controller, ph 2026 determines the purposes and means of processing your personal data. ph 2026 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection law. You may contact the DPO using the contact details provided in Section 15 of this Policy.

ph 2026 is registered with the National Privacy Commission (NPC) of the Philippines as required under the Data Privacy Act of 2012. Where ph 2026 engages third-party service providers to process personal data on its behalf, those providers act as data processors and are bound by data processing agreements that require them to process data only on ph 2026's documented instructions and to maintain appropriate security measures.

Personal Data We Collect

ph 2026 collects the following categories of personal data. Each category is labelled for easy reference:

Identity Contact Financial Technical Gaming

• Identity Full legal name, date of birth, nationality, government-issued ID number (e.g., PhilSys ID, passport, driver's licence), and a copy of your identity document submitted for KYC verification.
• Contact Residential address (including barangay, city, province, and ZIP code), email address, and mobile number.
• Financial GCash account number, Maya/PayMaya account details, bank account details (bank name, account number, account name), debit card details (card number masked except last four digits), transaction history, deposit and withdrawal records, and account balance information.
• Technical IP address, device type and model, operating system, browser type and version, session duration, pages visited, referring URL, and cookie identifiers.
• Gaming Game history, wager amounts, win/loss records, bonus usage, session timestamps, and responsible gaming tool settings (deposit limits, self-exclusion status, cooling-off periods).

ph 2026 does not collect data relating to your racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than as required for identity verification), health data (other than as relevant to responsible gaming assessments), or sexual orientation.

How We Collect Your Data

ph 2026 collects personal data through the following channels:

• Registration: When you create a ph 2026 account, you provide identity and contact information directly through the registration form.
• KYC Verification: When you submit identity documents to verify your account, ph 2026 collects copies of those documents and the information contained within them.
• Deposits and Withdrawals: When you make a deposit or request a withdrawal, ph 2026 collects the financial account details associated with the transaction.
• Gameplay: ph 2026 automatically records game activity, wager data, and session information as you use the platform.
• Customer Support: When you contact ph 2026 customer support via live chat or email, we collect the content of your communications and any personal data you provide in the course of seeking assistance.
• Cookies and Tracking Technologies: ph 2026 uses cookies and similar technologies to collect technical data about your device and browsing behaviour on the platform. See Section 8 for full details.
• Third-Party Sources: ph 2026 may receive personal data about you from third-party identity verification providers, fraud prevention services, and payment processors where this is necessary to verify your identity or protect the integrity of the platform.

How We Use Your Personal Data

ph 2026 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your ph 2026 player account, including processing deposits, withdrawals, and bonus credits.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR regulatory requirements and anti-money laundering obligations under Republic Act No. 9160 (Anti-Money Laundering Act), as amended.
• Transaction Processing: To process deposits and withdrawals via GCash, Maya/PayMaya, bank transfer, and debit card, and to maintain accurate financial records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other security threats to the ph 2026 platform and its players.
• Regulatory Compliance: To comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act of 2012, and other applicable Philippine laws.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling, to administer responsible gaming tools (deposit limits, self-exclusion, cooling-off periods), and to fulfil our duty of care obligations to players.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the features, performance, and user experience of the ph 2026 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided your consent to receive such communications. See Section 13 for details on managing your marketing preferences.
• Legal Claims: To establish, exercise, or defend legal claims arising from your use of the ph 2026 platform.

ph 2026 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate legal basis for the new processing activity.

Legal Basis for Processing

Under the Data Privacy Act of 2012, ph 2026 must have a lawful basis for each processing activity. The legal bases on which ph 2026 relies are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between you and ph 2026 (i.e., the Terms & Conditions), including account management, transaction processing, and customer support.
• Legal Obligation: Processing that is required to comply with ph 2026's legal obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act of 2012, and other applicable Philippine laws — including KYC verification and transaction record-keeping.
• Legitimate Interests: Processing that is necessary for ph 2026's legitimate interests, where those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and platform improvement activities.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing and Disclosure

ph 2026 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya/PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the financial data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and anti-money laundering service providers receive identity documents and personal data necessary to verify your identity and screen against sanctions lists.
• Game Software Providers: Game suppliers integrated with the ph 2026 platform receive the minimum data necessary to deliver game content and record game outcomes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies may receive personal data where ph 2026 is required by law to disclose it.
• Law Enforcement: Philippine law enforcement authorities may receive personal data where ph 2026 is required to disclose it pursuant to a valid legal order, warrant, or subpoena.
• IT and Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who process data on ph 2026's behalf under data processing agreements that impose equivalent data protection obligations.
• Professional Advisers: Lawyers, auditors, and accountants who require access to personal data in the course of providing professional services to ph 2026, subject to professional confidentiality obligations.

All third-party data processors engaged by ph 2026 are required to process personal data only on ph 2026's documented instructions, to maintain appropriate technical and organisational security measures, and to assist ph 2026 in fulfilling its obligations to data subjects under the Data Privacy Act of 2012.

Cookies and Tracking Technologies

ph 2026 uses cookies and similar tracking technologies (collectively, "cookies") on the ph 2026 platform. Cookies are small text files placed on your device that allow ph 2026 to recognise your browser, remember your preferences, and collect information about how you use the platform.

ph 2026 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the ph 2026 platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional Cookies: These cookies remember your preferences (such as language settings and responsible gaming tool configurations) to provide a more personalised experience.
• Analytics Cookies: These cookies collect anonymised information about how visitors use the ph 2026 platform — such as which pages are visited most frequently and how users navigate between pages — to help ph 2026 improve the platform.
• Security Cookies: These cookies support ph 2026's fraud detection and account security systems by identifying unusual patterns of access or behaviour.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the ph 2026 platform and may prevent you from accessing certain features, including your player account.

Data Retention

ph 2026 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your active account and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with financial record-keeping obligations.
• Customer Support Records: Retained for two (2) years following the resolution of the relevant support interaction, unless the records are relevant to an ongoing legal claim.
• Technical and Analytics Data: Retained for a maximum of thirteen (13) months from the date of collection, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your marketing subscription and for three (3) years following withdrawal of consent, to demonstrate compliance with consent requirements.

Where ph 2026 is required by law to retain personal data beyond the periods specified above, the data will be retained for the legally mandated period and then securely deleted or anonymised.

Data Security

ph 2026 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the ph 2026 platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Encryption at Rest: Sensitive personal data stored on ph 2026 servers — including identity documents and financial records — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within ph 2026 is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: ph 2026 supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised account access.
• Penetration Testing: ph 2026 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the platform.
• Incident Response: ph 2026 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, ph 2026 will notify the National Privacy Commission and affected data subjects within the timeframes required by the Data Privacy Act of 2012.

Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph 2026:

To exercise any of the above rights, please submit a written request to the ph 2026 Data Protection Officer using the contact details in Section 15. ph 2026 will respond to all data subject requests within 15 business days of receipt. In complex cases, this period may be extended by a further 15 business days, in which case ph 2026 will notify you of the extension and the reason for it.

ph 2026 may request proof of your identity before processing a data subject request to ensure that personal data is not disclosed to an unauthorised person.

Children's Privacy

The ph 2026 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. ph 2026 does not knowingly collect personal data from individuals under the age of 21.

If ph 2026 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed. Any deposits made by an underage player will be returned (less amounts already wagered), and all winnings will be forfeited.

If you are a parent or guardian and believe that your child has registered on ph 2026 or provided personal data to ph 2026, please contact our customer support team immediately so that we can take appropriate action.

Marketing Communications

ph 2026 may send you promotional offers, bonus notifications, new game announcements, and other marketing communications by email or in-platform notification, where you have provided your explicit consent to receive such communications during the registration process or at a later date.

You can manage your marketing preferences at any time through the following methods:

• Updating your communication preferences in the Account Settings section of your ph 2026 account.
• Clicking the unsubscribe link included in any marketing email sent by ph 2026.
• Contacting ph 2026 customer support via live chat or email and requesting removal from marketing communications.

Opting out of marketing communications will not affect transactional communications that ph 2026 is required to send you in connection with your account — such as deposit confirmations, withdrawal notifications, security alerts, and account verification requests.

Changes to This Privacy Policy

ph 2026 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The following process applies to amendments:

• Material changes to this Policy — such as changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — will be communicated to registered players via in-platform notification and/or email at least 7 days before the changes take effect.
• Non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy) may be made without prior notice.
• The date of the most recent revision is displayed at the top of this page. ph 2026 recommends that you review this Policy periodically to stay informed of how your data is being handled.
• Your continued use of the ph 2026 platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and close your account.

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or ph 2026's handling of your personal data, please contact our Data Protection Officer:

• Live Chat: Available 24/7 through the ph 2026 platform — the fastest way to reach us.
• Email: [email protected]

ph 2026 aims to respond to all privacy-related enquiries within 5 business days of receipt. Data subject rights requests (Section 11) are handled within 15 business days.

If you are not satisfied with ph 2026's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official Philippine government channels.