ph9898 Privacy Policy

1 About This Privacy Policy

ph9898 ("ph9898," "we," "us," "our") operates the online gaming platform accessible at ph9898.club. We are committed to protecting the privacy and security of the personal information of all players and visitors ("you," "your," "Data Subject") who interact with our platform.

This Privacy Policy is issued pursuant to the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together govern your use of the ph9898 platform.

2 Data Controller

ph9898 acts as the Personal Information Controller (PIC) in respect of the personal data of players and visitors collected through the ph9898 platform. As PIC, ph9898 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out in accordance with applicable data protection law.

Where ph9898 engages third-party service providers to process personal data on its behalf (for example, payment processors, game content providers, or analytics services), those parties act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with ph9898's instructions and applicable law.

3 Personal Data We Collect

3.1 Registration & Account Data

• Full name and date of birth (for age and identity verification)
• Philippine mobile number (for account creation and OTP verification)
• Username and encrypted password
• Email address (where provided)
• Residential address (for KYC verification where required)

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, UMID, driver's license, PhilSys ID, SSS/GSIS ID)
• Proof of address documentation
• Source of funds declarations where required by regulatory obligations
• Facial verification data where biometric KYC is applied

3.3 Financial & Transaction Data

• GCash account reference, Maya account reference, or bank account details used for deposits and withdrawals
• Deposit and withdrawal transaction history
• Bonus and promotional transaction records
• Wagering history and game activity records

3.4 Technical & Usage Data

• IP address and approximate geolocation at the time of login and gameplay
• Device type, operating system, and browser information
• Session duration, pages visited, and feature usage within the ph9898 platform
• Login timestamps and access logs

3.5 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with the ph9898 team
• Records of any complaints, disputes, or responsible gaming requests

4 How We Collect Personal Data

ph9898 collects personal data through the following means:

• Directly from you — when you register for an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions
• Automatically — through cookies, session tracking, and server logs when you access the ph9898 website or use the platform
• From third-party payment providers — transaction confirmation data from GCash, Maya, BPI, BDO, and other payment services when you initiate a deposit or withdrawal
• From identity verification services — where ph9898 uses third-party KYC verification partners to validate identity documents

5 Purpose & Legal Basis for Processing

ph9898 processes your personal data for the following purposes and on the following legal bases:

• Account management and service delivery — processing necessary to perform the contract between you and ph9898 (Terms & Conditions)
• Identity and age verification (KYC) — processing necessary to comply with legal and regulatory obligations, including PAGCOR-aligned KYC requirements and the Anti-Money Laundering Act (AMLA)
• Payment processing — processing necessary to execute deposit and withdrawal transactions requested by you
• Fraud prevention and security — processing in pursuit of ph9898's legitimate interest in detecting and preventing fraud, money laundering, and platform abuse
• Customer support — processing necessary to respond to your inquiries, resolve complaints, and provide assistance
• Responsible gaming compliance — processing necessary to comply with responsible gaming obligations, including implementing deposit limits, cooling-off periods, and self-exclusion measures
• Marketing communications — processing based on your consent, where you have opted in to receive promotional communications from ph9898
• Platform improvement and analytics — processing based on ph9898's legitimate interest in understanding how the platform is used and improving the service for Filipino players

6 Data Sharing & Disclosure

ph9898 does not sell, rent, or trade your personal data. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers (GCash, Maya, BPI, BDO, and others) — to process your deposits and withdrawals
• Identity verification and KYC providers — to validate identity documents and comply with regulatory requirements
• Game content providers — limited technical data shared with game studios (e.g., JILI, PG Soft) to facilitate gameplay and resolve game-related disputes
• Regulatory and law enforcement authorities — where disclosure is required by applicable Philippine law, court order, or regulatory direction, including PAGCOR and the Anti-Money Laundering Council (AMLC)
• Professional advisors — lawyers, auditors, and compliance consultants engaged by ph9898, subject to professional confidentiality obligations
• Business successors — in the event of a merger, acquisition, or restructuring of ph9898, personal data may be transferred as part of the business assets subject to equivalent data protection obligations

7 Data Retention

ph9898 retains personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying any applicable legal, regulatory, or reporting requirements.

Specifically:

• Account and KYC records are retained for a minimum of five (5) years following account closure, in compliance with the Anti-Money Laundering Act and PAGCOR record-keeping requirements
• Transaction records are retained for a minimum of five (5) years
• Support communications are retained for three (3) years following resolution
• Technical and usage logs are retained for up to twelve (12) months

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph9898's data disposal procedures.

8 Data Security

ph9898 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and ph9898 servers
• Encrypted storage of passwords (industry-standard hashing — passwords are never stored in plain text)
• Two-factor authentication (2FA) available for all player accounts
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security reviews and vulnerability assessments of the ph9898 platform infrastructure
• Incident response procedures to address any potential data security breaches

While ph9898 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your own account credentials.

9 Cookies & Tracking Technologies

ph9898 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session state, and collect analytical data about platform usage.

Types of Cookies Used

• Strictly necessary cookies — required for the platform to function, including session management and authentication. These cannot be disabled without disrupting platform functionality.
• Functional cookies — remember your preferences (e.g., language, preferred payment method) to improve your experience on return visits.
• Analytics cookies — collect anonymized data about how visitors use the ph9898 platform, helping us identify areas for improvement.
• Security cookies — assist in fraud prevention and detecting suspicious login activity.

By continuing to use the ph9898 platform after being notified of cookie use, you consent to the placement of cookies on your device in accordance with this Policy. You may disable non-essential cookies through your browser settings, though this may affect the functionality of certain platform features.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 (R.A. 10173), you have the following rights in respect of your personal data held by ph9898:

To exercise any of these rights, please contact the ph9898 Data Protection Officer via the support channels listed in Section 14. ph9898 will respond to data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. Note that certain rights are subject to legal limitations — for example, the right to erasure cannot be exercised where retention is required by law (e.g., AML record-keeping obligations).

11 Children's Privacy

The ph9898 platform is strictly intended for individuals aged 21 years and above. ph9898 does not knowingly collect personal data from any person under the age of 21. If ph9898 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account suspended. If you believe a minor has accessed ph9898, please contact our support team immediately.

12 Cross-Border Data Transfers

Some of ph9898's service providers and technical infrastructure may be located outside the Philippines. Where personal data is transferred to a country or territory outside the Philippines, ph9898 ensures that appropriate safeguards are in place to protect your personal data, including contractual arrangements with receiving parties that impose equivalent data protection standards to those required under Philippine law.

ph9898 will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without your explicit consent or without implementing appropriate protective measures.

13 Changes to This Privacy Policy

ph9898 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The revised Policy will be posted on this page with an updated effective date. Where changes are material, ph9898 will endeavor to notify registered players via in-platform notification or email (where an email address is registered).

Continued use of the ph9898 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you should cease using the platform and may request account closure by contacting support.

14 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph9898, you may contact our Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 directly from the ph9898 platform — fastest resolution for most inquiries
• Email: [email protected] (plain text — not a clickable link)

ph9898 is committed to resolving all privacy-related inquiries promptly and transparently. If you are not satisfied with ph9898's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.