ph78 Privacy Policy

This Privacy Policy ("Policy") describes how ph78 ("ph78", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "Player", "User") who access or use the ph78 website at ph78.onl and all related products, services, and applications ("Platform").

ph78 is committed to protecting your privacy in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the standards set by the National Privacy Commission (NPC) of the Philippines. Where ph78's operations are subject to additional regulatory oversight by PAGCOR, we also comply with applicable data protection requirements imposed under that framework.

By registering a ph78 account or using the Platform, you acknowledge that you have read, understood, and consent to the collection and use of your personal data as described in this Policy. If you do not agree with the terms of this Policy, you should not register an account or continue to use the Platform.

ph78 collects personal data across several categories, depending on the nature of your interaction with the Platform. The table below summarises the main categories of data ph78 collects and their primary purpose:

ph78 does not collect sensitive personal information as defined under the Data Privacy Act — such as health data, political affiliation, religious beliefs, or biometric data — except where expressly required for identity verification purposes (e.g., facial match on government ID photographs during KYC).

ph78 collects personal data through the following channels and methods:

• Direct collection: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a promotion.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including through server logs, session tracking, and analytics tools. This includes your IP address, device identifiers, and in-session activity.
• Cookies and similar technologies: Information collected through cookies, web beacons, and local storage objects when you visit ph78.onl. See Section 7 for full cookie details.
• Third-party sources: Identity verification data received from KYC/AML service providers in connection with your account registration or withdrawal request. Payment confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and card processors when you transact on the Platform.
• Publicly available sources: In limited fraud and AML investigation contexts, ph78 may verify information against publicly available records.

ph78 uses your personal data for the following purposes:

• Account creation and management: To register your ph78 account, verify your identity and age, maintain your account settings, and manage your player profile.
• Platform delivery: To provide access to games, process bets, calculate and credit winnings, and deliver all features of the ph78 Platform.
• Payment processing: To process deposits, validate withdrawal requests, and communicate transaction confirmations through your registered payment methods.
• Regulatory compliance: To fulfil our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act, including KYC, record-keeping, and regulatory reporting.
• Security and fraud prevention: To monitor login activity, detect and prevent fraudulent transactions, investigate suspicious behaviour, and protect the integrity of the Platform.
• Responsible gaming: To monitor wagering patterns for signs of problem gambling, apply self-exclusion and deposit limits as requested by players, and fulfil responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions.
• Platform improvement: To analyse usage patterns, conduct product testing, and improve the functionality and user experience of the ph78 Platform.
• Marketing communications: To send you promotions, bonuses, and updates about ph78 where you have provided consent or where a legitimate interest applies. You may opt out at any time.

ph78 processes your personal data on the following legal bases as established under the Data Privacy Act of 2012 and its Implementing Rules:

• Contractual necessity: Processing required to fulfil the agreement between you and ph78 — including account registration, game provision, payment processing, and customer support.
• Legal obligation: Processing necessary to comply with Philippine law, including PAGCOR licensing requirements, AML/CTF obligations under the AMLA, and data retention requirements under applicable regulations.
• Legitimate interests: Processing necessary for ph78's legitimate interests, including fraud prevention, platform security, and improving our products and services — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ph78 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients for the purposes described:

• KYC and identity verification providers: Third-party services engaged to verify your identity, age, and document authenticity as part of ph78's regulatory compliance obligations.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and their authorised processors, to the extent necessary to process deposits and withdrawals.
• Game providers: Certified game studios and software providers whose games are hosted on ph78 may receive session-level data necessary for game delivery, RNG certification, and technical support.
• Platform infrastructure providers: Cloud hosting, CDN, and cybersecurity service providers who maintain and protect the ph78 Platform under contractual obligations to process data only as directed by ph78.
• Regulatory and law enforcement authorities: PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where ph78 is required by law or regulatory obligation to disclose information.
• Professional advisers: Legal, audit, and compliance advisers who are bound by confidentiality obligations and who require access to data in connection with their professional services to ph78.

All third parties with whom ph78 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the purposes specified by ph78, in accordance with applicable Philippine data protection law.

ph78 uses cookies and similar tracking technologies on ph78.onl. Cookies are small text files placed on your device that help us deliver a functional, personalised, and secure platform experience. The categories of cookies ph78 uses are:

• Strictly necessary cookies: Required for the Platform to function. These include session management, login authentication, and security tokens. You cannot opt out of strictly necessary cookies without ceasing to use the Platform.
• Functional cookies: Remember your preferences, such as language settings, game lobby filters, and notification preferences. These improve your experience but are not essential.
• Analytics cookies: Collect anonymised usage data — pages visited, session duration, game categories explored — to help ph78 understand how the Platform is used and improve it. These are only deployed with your consent.
• Security and fraud detection cookies: Help ph78 identify unusual or suspicious access patterns that may indicate unauthorised account access or fraudulent activity.

You may manage your cookie preferences via the cookie settings panel available on ph78.onl. Note that disabling functional or analytics cookies may affect the quality of your experience on the Platform but will not affect your ability to play games, deposit, or withdraw.

ph78 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Key retention periods are:

• Account data and transaction records: Retained for a minimum of five (5) years after account closure, as required by anti-money laundering regulations applicable to PAGCOR-licensed operators.
• KYC documentation: Retained for a minimum of five (5) years from the date of the last transaction on the account, in compliance with AMLA record-keeping requirements.
• Customer support records: Retained for three (3) years from the date of the most recent interaction, to support dispute resolution and quality assurance.
• Technical and usage logs: Typically retained for twelve (12) months for security monitoring purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained until consent is withdrawn, after which we retain a record of the withdrawal of consent for compliance purposes.

Where ph78 is no longer required to retain your data, it is securely deleted or anonymised in a manner that prevents re-identification. Secure deletion procedures are applied to both physical and electronic records.

ph78 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL encryption on all data in transit between your device and ph78 servers.
• Encryption of sensitive data fields at rest in ph78's database infrastructure.
• Hashed storage of account passwords — ph78 never stores your password in readable form.
• Role-based access controls limiting data access to authorised personnel with a legitimate need.
• Regular security audits, penetration testing, and vulnerability assessments of the ph78 Platform.
• Two-factor authentication (2FA) available to all players and required for ph78 administrative systems.
• 24/7 security monitoring with automated alerting for anomalous access patterns.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph78 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with the Data Privacy Act and NPC breach notification procedures. Affected players will also be notified without undue delay where the breach poses a high risk to their rights.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ph78:

• Right to Access Request a copy of the personal data ph78 holds about you, including information on how it is used and with whom it has been shared.
• Right to Rectification Request correction of any inaccurate or incomplete personal data held by ph78. For most account information, you may update details directly via Account Settings.
• Right to Erasure Request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing was unlawful. Note that retention obligations under AMLA and PAGCOR regulations may limit the scope of erasure requests.
• Right to Object Object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to ph78's assessment of overriding grounds.
• Right to Data Portability Request that ph78 provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another controller, where technically feasible.
• Right to Lodge a Complaint File a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph78 has not handled your personal data in accordance with the Data Privacy Act.

To exercise any of these rights, contact ph78's Data Protection Officer via live chat or at [email protected]. ph78 will respond to data rights requests within thirty (30) days, or notify you if a longer period is required due to complexity.

ph78 is strictly an adult platform. Our services are intended exclusively for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gambling in the Philippines.

ph78 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is conducted during account registration and at key financial milestones. If ph78 becomes aware that personal data has been collected from an individual under 21 years of age, the account will be immediately suspended, all data associated with the minor will be deleted, and any deposits will be returned subject to verification.

ph78 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, special events, and platform updates. We will only send marketing communications where you have consented to receive them or where we have a legitimate interest based on an existing player relationship.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any ph78 marketing email.
• Updating your communication preferences in Account Settings.
• Contacting ph78 support via live chat and requesting removal from marketing lists.

Opting out of marketing communications does not affect your ability to continue using the ph78 Platform or receiving essential transactional communications — such as deposit confirmations, withdrawal notifications, or security alerts — which are necessary for account management and are not subject to marketing opt-out.

ph78 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or operational structure. When material changes are made, ph78 will:

• Update the "Last Updated" date at the top of this Policy.
• Notify registered players via email and/or a prominent in-platform notification at least seven (7) days before the change takes effect.
• Where required by law, seek fresh consent for any new processing activities that were not covered by the original Policy under which you registered.

Continued use of the ph78 Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any material change, you may contact ph78 to close your account and request deletion of your data, subject to applicable retention obligations.

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how ph78 has handled your personal information, please contact our Data Protection team:

If you are not satisfied with ph78's response to your data privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the independent government body responsible for the administration and enforcement of the Data Privacy Act in the Philippines.