Privacy Policy – ph8ph8

01 Introduction

ph8ph8 is the Philippines' premier online gaming platform, serving over 2.4 million registered Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and beyond. As a personal information controller under the Philippine Data Privacy Act, ph8ph8 is responsible for the lawful, fair, and transparent processing of all personal data entrusted to us by our players and website visitors.

This Privacy Policy applies to all personal data collected through the ph8ph8 website, mobile platform, customer support channels, and any other touchpoint through which you interact with ph8ph8. It should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are available on this website.

ph8ph8 takes data privacy seriously. We have appointed a Data Protection Officer (DPO) to oversee our compliance with the DPA and to serve as your point of contact for all privacy-related concerns. Contact details for our DPO are provided in Section 14 of this policy.

02 Personal Data We Collect

ph8ph8 collects the following categories of personal data from players and website visitors:

ph8ph8 does not collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required for responsible gaming purposes, in which case your explicit consent will be obtained.

03 How We Collect Your Data

ph8ph8 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the ph8ph8 platform, including IP addresses, device identifiers, browser information, and session activity logs, via cookies and similar tracking technologies.
• Third-Party Sources: Identity and financial verification data received from KYC service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention partners, where permitted by applicable law.
• Publicly Available Sources: Information from public registries or databases where necessary for identity verification or fraud prevention purposes.

04 How We Use Your Data

ph8ph8 processes your personal data only for specified, explicit, and legitimate purposes. The following table outlines the primary purposes for which we use your data:

• Account Management: Creating, maintaining, and administering your ph8ph8 player account, including identity verification and KYC compliance.
• Payment Processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank in Philippine Peso (PHP), and maintaining accurate transaction records.
• Platform Operation: Delivering the games, features, and services available on the ph8ph8 platform, including slots, live casino, sports betting, sabong, and bingo.
• Regulatory Compliance: Meeting our obligations under PAGCOR regulations, the Anti-Money Laundering Act (Republic Act No. 9160), and other applicable Philippine laws, including mandatory reporting to the Anti-Money Laundering Council (AMLC).
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, cheating, and other prohibited conduct.
• Responsible Gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling, and administering self-exclusion, deposit limit, and session reminder tools.
• Customer Support: Responding to your inquiries, resolving disputes, and improving the quality of our support services.
• Marketing & Promotions: Sending you personalized bonus offers, promotional communications, and platform updates — only where you have provided explicit consent or where a legitimate interest applies.
• Platform Improvement: Analyzing aggregated usage data to improve the ph8ph8 platform, optimize game performance, and enhance the overall player experience.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act, ph8ph8 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act itself, and other applicable Philippine laws.
• Legitimate Interests: Processing necessary for ph8ph8's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

ph8ph8 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing your deposits and withdrawals in PHP.
• KYC & Identity Verification Providers: Third-party service providers engaged to verify your identity and age in compliance with PAGCOR and AML requirements.
• Game Content Providers: Certified third-party game studios and live casino operators whose games are available on the ph8ph8 platform, to the extent necessary for game delivery and fairness certification.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory instruction.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and fraud detection partners engaged to maintain the security and integrity of the ph8ph8 platform.
• Legal & Professional Advisors: Lawyers, auditors, and compliance consultants engaged by ph8ph8, subject to professional confidentiality obligations.

All third-party service providers engaged by ph8ph8 are required to process your personal data only on our documented instructions and in compliance with the Philippine Data Privacy Act. ph8ph8 does not authorize any third party to use your data for their own independent purposes.

07 Cookies & Tracking Technologies

7.1 Types of Cookies Used

ph8ph8 uses the following categories of cookies and similar tracking technologies on its platform:

• Strictly Necessary Cookies: Essential for the operation of the ph8ph8 platform, including session management, login authentication, and security functions. These cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how players use the ph8ph8 platform, helping us identify areas for improvement. No personally identifiable information is collected through these cookies.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalized experience.
• Marketing Cookies: Used to deliver relevant promotional content and bonus offers based on your gaming activity and preferences. These are only activated with your explicit consent.

7.2 Managing Cookies

You may manage your cookie preferences through the ph8ph8 cookie consent tool available on the platform, or through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the ph8ph8 platform. Withdrawing consent for marketing cookies will not affect your ability to play games or access your account.

08 Data Retention

ph8ph8 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account & Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with PAGCOR and AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Gaming Activity Data: Retained for the duration of your account and for 3 years following account closure, for regulatory reporting and dispute resolution purposes.
• Customer Support Communications: Retained for 2 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted within 30 days.

Upon expiry of the applicable retention period, ph8ph8 will securely delete or anonymize your personal data in accordance with our data disposal procedures.

09 Data Security

ph8ph8 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and the ph8ph8 platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized ph8ph8 personnel on a strict need-to-know basis. All staff with access to personal data undergo mandatory data privacy training.
• Intrusion Detection: ph8ph8 operates 24/7 security monitoring systems to detect and respond to unauthorized access attempts and suspicious activity in real time.
• Penetration Testing: Regular third-party security audits and penetration tests are conducted to identify and remediate vulnerabilities in the ph8ph8 platform.
• Data Breach Response: In the event of a personal data breach that poses a real risk to your rights and freedoms, ph8ph8 will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, in accordance with the DPA.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by ph8ph8:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which this Privacy Policy fulfills.
• Right of Access: The right to request a copy of the personal data ph8ph8 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another personal information controller.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 14. ph8ph8 will respond to all data subject requests within 15 business days of receipt. We may request proof of identity before processing your request.

11 Children's Privacy

If you are a parent or guardian and believe that a person under 21 in your care has registered on the ph8ph8 platform, please contact our support team immediately at the email address provided in Section 14. We will investigate and take appropriate action without delay.

12 Cross-Border Data Transfers

In certain circumstances, ph8ph8 may transfer your personal data to service providers or partners located outside the Philippines — for example, to international game content providers or cloud infrastructure providers. Any such cross-border transfer of personal data will only be carried out where:

• The recipient country provides an adequate level of data protection as recognized by the National Privacy Commission; or
• Appropriate safeguards are in place, such as contractual clauses approved by the NPC; or
• The transfer is necessary for the performance of a contract between you and ph8ph8 (e.g., delivering a game from an international provider); or
• You have given your explicit consent to the transfer.

ph8ph8 will not transfer your personal data to any jurisdiction that does not provide adequate protections equivalent to those required under the Philippine Data Privacy Act.

13 Amendments to This Policy

ph8ph8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email notification or prominent in-platform notice at least 7 days prior to the effective date of the change.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this policy periodically. Your continued use of the ph8ph8 platform following any amendment constitutes your acknowledgment of the updated policy.

14 Contact & Data Protection Officer

For all data privacy inquiries, requests to exercise your data subject rights, or concerns regarding ph8ph8's data processing practices, please contact our Data Protection Officer:

If you are not satisfied with ph8ph8's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available through their official government channels.