ph78 Privacy Policy

1. Data Controller

1.1 The data controller responsible for personal data processed through ph78.biz is ph78 ("ph78", "the Platform"), operating under applicable Philippine gaming and data privacy regulations.

1.2 ph78's Data Protection Officer (DPO) can be reached at [email protected]. All data privacy concerns, access requests, and complaints should be directed to the DPO in the first instance.

2. Personal Data We Collect

2.1 Registration Data. When you create a ph78 account, we collect your full legal name, date of birth, residential address (including barangay, city, and province), email address, mobile number, and a username of your choice.

2.2 Identity Verification (KYC) Data. To comply with PAGCOR requirements and the Anti-Money Laundering Act (RA 9160, as amended), ph78 requires government-issued identification. This may include a copy of your Philippine Passport, SSS card, UMID, PhilSys National ID, or driver's licence, together with a selfie photograph where required for liveness verification.

2.3 Financial Data. We collect information about deposits, withdrawals, and transaction history on your ph78 account. We record the payment methods used (e.g., GCash, PayMaya, BPI, BDO, Metrobank account references) but we do not store full payment credentials such as GCash PINs or bank account passwords.

2.4 Gaming Activity Data. ph78 records your gameplay history, including games played, wagers placed, results, bonus participation, and session duration. This data is used for account management, responsible gaming monitoring, and regulatory reporting.

2.5 Technical Data. ph78 automatically collects device and connection information when you access ph78.biz, including IP address, browser type and version, operating system, device identifiers, and session timestamps.

2.6 Communications Data. If you contact ph78 support via email or live chat, we retain records of your communications including the content of messages and any attachments provided.

3. How We Collect Your Data

3.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, participate in promotions, or contact support.

3.2 Automatically — through cookies, web beacons, and server logs when you visit or use ph78.biz. See Section 8 for more detail on cookies.

3.3 From third parties — ph78 may receive identity verification results from licensed KYC service providers, and fraud or AML signals from financial crime screening services. ph78 does not purchase marketing data lists from third parties.

4. Purpose and Legal Basis for Processing

4.1 ph78 processes your personal data for the following purposes and on the following legal bases:

• Account management and service delivery — necessary for the performance of the contract between you and ph78;
• Identity verification and KYC — compliance with legal obligations under PAGCOR regulations and RA 9160;
• Payment processing — necessary for contract performance and compliance with financial regulations;
• Fraud prevention and security monitoring — legitimate interest in protecting players and the platform from financial crime and abuse;
• Responsible gaming monitoring — legitimate interest and regulatory compliance in identifying and assisting at-risk players;
• Customer support — necessary for contract performance;
• Regulatory reporting — compliance with PAGCOR, AMLC, and other applicable Philippine regulatory requirements;
• Marketing communications — with your separate, opt-in consent only.

4.2 ph78 does not process your data for automated decision-making that produces legal or similarly significant effects without human review, except for initial fraud screening flags which are reviewed by a ph78 compliance officer before any account action is taken.

5. Sharing of Personal Data

5.1 ph78 does not sell, rent, or trade your personal data to any third party for commercial purposes.

5.2 ph78 may share your personal data with the following categories of recipients, strictly for the purposes described in Section 4:

• PAGCOR and other Philippine regulatory authorities — as required by gaming licence conditions and applicable law;
• Anti-Money Laundering Council (AMLC) — as required under RA 9160 and related regulations;
• KYC and identity verification providers — to verify your identity documents;
• Payment processors — GCash, PayMaya, and banking partners, to process your deposits and withdrawals;
• Game providers — game studios and live dealer operators receive a player identifier and session token necessary to deliver games; they do not receive your full personal profile;
• IT service providers — hosting, security, and infrastructure providers operating under data processing agreements that bind them to ph78's privacy standards;
• Law enforcement and courts — where disclosure is required by valid legal process or court order under Philippine law.

5.3 All third-party service providers with whom ph78 shares personal data are required to process that data only for the specified purpose, maintain appropriate security measures, and comply with applicable Philippine data privacy law.

6. International Data Transfers

6.1 Some game providers and infrastructure partners may be located outside the Philippines. Where personal data is transferred internationally, ph78 ensures that appropriate safeguards are in place, including contractual obligations consistent with National Privacy Commission (NPC) guidelines on cross-border data transfers.

6.2 ph78 does not transfer your KYC identity documents or financial transaction data outside Philippine jurisdiction except where required by applicable law or explicitly necessary for fraud prevention purposes under documented legitimate interest.

7. Data Retention

7.1 ph78 retains your personal data for as long as your account is active and for a period of at least five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and RA 9160 obligations.

7.2 Transaction records are retained for a minimum of ten (10) years for AML compliance purposes.

7.3 Communications records are retained for three (3) years from the date of communication.

7.4 Where data is no longer required for its original purpose and no legal retention obligation applies, ph78 will securely delete or anonymise the data.

8. Cookies and Tracking Technologies

8.1 ph78.biz uses cookies and similar tracking technologies to operate the platform, maintain your session login, remember your preferences, detect fraud, and analyse usage patterns to improve the platform.

8.2 Essential cookies are necessary for the platform to function and cannot be disabled without breaking core functionality (such as keeping you logged in during a gaming session).

8.3 Analytics cookies help ph78 understand how players navigate the platform. This data is aggregated and anonymised. ph78 does not use third-party advertising cookies or cross-site tracking pixels.

8.4 You may manage non-essential cookies through your browser settings. Disabling essential cookies will impair your ability to use ph78.biz.

9. Your Data Subject Rights

9.1 Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ph78:

• Right to be informed — to know how your data is collected and used (this Policy fulfils that obligation);
• Right of access — to request a copy of the personal data ph78 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking — to request deletion or blocking of data that is no longer necessary, unlawfully processed, or processed in violation of your rights;
• Right to data portability — to receive your data in a structured, commonly used format;
• Right to object — to object to processing based on legitimate interest, including direct marketing;
• Right to damages — to claim compensation for damages suffered as a result of ph78's violation of the Data Privacy Act.

9.2 To exercise any of these rights, submit a written request to ph78's DPO at [email protected]. ph78 will respond within thirty (30) calendar days of receiving a complete, verified request. Identity verification may be required before processing access or erasure requests.

9.3 If you are not satisfied with ph78's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10. Data Security

10.1 ph78 implements technical and organisational security measures appropriate to the nature of the data processed, including 256-bit SSL/TLS encryption of data in transit, encryption of sensitive data at rest, role-based access controls limiting employee access to personal data, regular security audits and penetration testing, and an incident response plan meeting NPC breach notification requirements.

10.2 In the event of a personal data breach that is likely to affect your rights and freedoms, ph78 will notify affected players and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act.

11. Minors

11.1 ph78 services are strictly available to individuals who are twenty-one (21) years of age or older. ph78 does not knowingly collect personal data from persons under 21. If ph78 discovers that personal data has been collected from an underage individual, that account will be immediately closed and all associated data will be securely deleted, with any deposits returned.

11.2 If you believe a minor has registered an account on ph78, please contact us immediately at [email protected].

12. Changes to This Policy

12.1 ph78 may update this Privacy Policy from time to time. Material changes will be communicated to registered account holders via email and/or a prominent notice on ph78.biz at least seven (7) days before the change takes effect. The revised Policy will be published on ph78.biz with an updated effective date.

12.2 Your continued use of ph78.biz following the effective date of any amendment constitutes your acceptance of the updated Policy.

13. Contact and Complaints

For questions about this Privacy Policy, to exercise your data subject rights, or to submit a privacy complaint, contact ph78's Data Protection Officer:

Email: [email protected]
Response time: Within 30 calendar days for data subject rights requests; within 2 business days for general privacy inquiries
Operating hours: 24 hours a day, 7 days a week (Philippine Time)

If you are not satisfied with ph78's response, you may file a complaint with the National Privacy Commission of the Philippines through its official channels.