ph898 Privacy Policy

01 Introduction & Scope

ph898 is committed to protecting the privacy and personal data of all Filipino players who access the platform at ph898.cam. This Privacy Policy applies to all personal data collected through the ph898 website, any associated mobile-optimised interfaces, live chat and customer support interactions, account registration and KYC processes, and all payment and financial transaction flows. This Policy does not extend to third-party websites or services that may be linked from ph898, as ph898 does not control those external environments and accepts no responsibility for their privacy practices.

By registering a ph898 account or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood how ph898 processes your personal data as described herein. If you do not agree to the practices described in this Policy, you should discontinue use of the ph898 Platform and contact our support team to request account closure.

ph898 processes personal data in accordance with Republic Act No. 10173, known as the Data Privacy Act of 2012 ("DPA"), and its implementing rules and regulations issued by the National Privacy Commission ("NPC"). Where PAGCOR licensing requirements impose additional obligations on data handling, ph898 complies with those requirements in full. ph898 also observes applicable provisions of the Anti-Money Laundering Act (Republic Act No. 9160) and the Cybercrime Prevention Act (Republic Act No. 10175) as they relate to data processing and retention.

02 Data Controller Identity

For purposes of the Philippine Data Privacy Act of 2012, ph898 acts as the personal information controller in respect of all player data processed through the ph898 Platform. ph898 has registered with the National Privacy Commission in accordance with NPC registration requirements applicable to personal information controllers in the online gaming industry.

ph898 has appointed a Data Protection Officer ("DPO") responsible for ensuring that data processing activities comply with the DPA, maintaining records of processing activities, conducting privacy impact assessments, and serving as the primary point of contact for data subject rights requests and NPC inquiries. Contact details for the ph898 DPO are provided in Section 15 of this Policy.

03 Categories of Personal Data We Collect

ph898 collects the following categories of personal data from players during registration, ongoing account use, and compliance processes:

04 How We Collect Personal Data

ph898 collects personal data through the following mechanisms:

• Direct Collection: Information you provide when registering a ph898 account, submitting KYC documents, completing deposit or withdrawal requests, configuring account settings, or contacting customer support.
• Automated Technical Collection: Technical data such as IP addresses, device identifiers, session tokens, and browsing behaviour within the Platform is collected automatically through server logs, cookies, and similar technologies when you access ph898.cam.
• Payment Processor Data: When you complete a transaction via GCash, PayMaya, BPI, BDO, or Metrobank, the relevant payment processor provides ph898 with transaction confirmation data necessary to credit or debit your account balance and maintain financial records.
• Identity Verification Providers: ph898 may use third-party KYC technology providers to assist in the automated review of identity documents. These providers operate under binding data processing agreements with ph898 and are not permitted to use your data for any purpose beyond identity verification.
• Fraud Detection Systems: ph898 uses automated systems that analyse gaming patterns, login behaviour, and transaction data to detect potential fraud, money laundering, and account compromise. These systems generate derived data that ph898 uses solely for security and compliance purposes.

05 Purposes of Processing

ph898 processes your personal data for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, verifying, and administering your ph898 player account, including authentication and access control;
• Service Delivery: Enabling you to access and use all gaming products, sports betting markets, live casino services, slots, bingo, Lucky Dice, and W Live available on ph898;
• Payment Processing: Processing deposits and withdrawal requests via GCash, PayMaya, BPI, BDO, and Metrobank, maintaining transaction records, and resolving payment disputes;
• Regulatory Compliance: Fulfilling PAGCOR licensing requirements, conducting KYC and AML checks, maintaining records required under Philippine gaming and financial regulations, and filing mandatory regulatory reports;
• Security: Detecting, investigating, and preventing fraud, money laundering, unauthorized account access, cheating, and other prohibited conduct on the Platform;
• Customer Support: Responding to your queries, complaints, and account-related requests through live chat, email, and other support channels;
• Responsible Gaming: Administering deposit limits, self-exclusion programs, session time restrictions, and other responsible gaming tools in compliance with PAGCOR requirements and ph898's responsible gaming commitments;
• Marketing Communications: With your consent, sending you information about ph898 promotions, bonuses, new games, and relevant platform updates. You may withdraw consent at any time through your account settings;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the ph898 user experience, fix technical issues, and develop new features that better serve Filipino players.

06 Legal Basis for Processing

ph898 relies on the following legal bases for processing personal data under the DPA:

• Contractual Necessity: Processing required to perform the contract between you and ph898 — including account operation, game delivery, and payment processing — is necessary for the performance of our agreement with you;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLC reporting obligations, NPC registration requirements, and other applicable Philippine legal obligations;
• Legitimate Interest: Processing for fraud detection, platform security, and aggregated analytics serves ph898's legitimate interest in operating a safe and compliant gaming platform — conducted with appropriate safeguards and proportionality;
• Consent: Processing for direct marketing communications is conducted only with your explicit consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Third-Party Disclosure

ph898 does not sell, rent, or otherwise commercially disclose your personal data to third parties. We share personal data only in the following limited circumstances, each subject to appropriate contractual safeguards:

• Payment Processors: GCash (GXchange Inc.), PayMaya Philippines, BPI, BDO Unibank, and Metrobank receive transaction data necessary to process your deposits and withdrawals. These institutions are regulated by the Bangko Sentral ng Pilipinas (BSP) and their data practices are governed by BSP regulations;
• KYC and Identity Verification Providers: Third-party identity verification technology providers receive copies of KYC documents solely for the purpose of identity confirmation in compliance with PAGCOR requirements;
• Game Content Providers: Online game providers whose titles are made available on ph898 receive anonymised session and wagering data necessary to deliver game functionality and fairness certification;
• Technology Service Providers: Cloud hosting, content delivery, and technical infrastructure providers who process data on ph898's behalf under binding data processing agreements limiting their use of your data to service provision only;
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies where disclosure is required by applicable Philippine law or a valid legal order.

08 International Data Transfers

Some of ph898's third-party service providers — including game content providers and technology infrastructure partners — may be located outside the Republic of the Philippines. Where personal data is transferred outside the Philippines, ph898 ensures that appropriate safeguards are in place consistent with Section 21 of the DPA and NPC implementing rules, including contractual clauses that impose data protection standards equivalent to those required under Philippine law.

ph898 maintains a register of international data transfers and periodically reviews the adequacy of safeguards in place. Players who wish to obtain further information about the safeguards applied to international transfers may submit a request to the ph898 DPO as described in Section 15 of this Policy.

09 Data Retention

ph898 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention principles and mandatory legal requirements:

• Active Account Data: Retained for the duration of your active ph898 account relationship and for a period of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements;
• Financial and Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in compliance with the Anti-Money Laundering Act and BSP record-keeping standards;
• KYC Documents: Retained for five (5) years following account closure or the resolution of any regulatory investigation relating to the account, whichever is later;
• Customer Support Communications: Retained for two (2) years from the date of the interaction unless the content relates to an ongoing dispute, investigation, or legal proceeding;
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent to demonstrate compliance.

Upon expiry of the applicable retention period, ph898 will securely delete or anonymise personal data such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

10 Cookies & Tracking Technologies

ph898 uses cookies and similar technologies including web beacons and session tokens when you access the Platform. The following types of cookies are deployed on ph898.cam:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication tokens that keep you logged in to your ph898 account, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated information about how Filipino players interact with ph898 — which pages are visited most, how long sessions last, and where technical errors occur. This data is used to improve Platform performance and user experience. These cookies do not identify you individually.
• Functionality Cookies: Remember your Platform preferences such as language settings, game display preferences, and responsible gaming tool configurations so you do not need to re-enter them on each visit.
• Security Cookies: Support fraud detection and account security systems by establishing a baseline of normal behaviour patterns for your account and flagging deviations that may indicate unauthorized access.

ph898 does not deploy third-party advertising cookies or cross-site behavioral tracking cookies. You may configure your browser to block cookies entirely; however, doing so will impair core Platform functionality including the ability to log in to your ph898 account.

11 Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to personal data held by ph898. These rights may be exercised by contacting the ph898 DPO as described in Section 15 of this Policy:

12 Security Measures

ph898 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Our security framework includes the following controls:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including KYC documents and financial records, is stored using AES-256 encryption;
• Access Controls: Access to personal data within ph898's systems is restricted to authorised personnel on a strict need-to-know basis. Administrative access is protected by multi-factor authentication and audit logging;
• Two-Factor Authentication: Players are strongly encouraged to enable 2FA on their ph898 accounts, adding an OTP layer tied to their registered Philippine mobile number as an additional security control;
• Penetration Testing: ph898's security posture is assessed through periodic independent penetration testing and vulnerability scanning conducted by qualified cybersecurity professionals;
• Data Breach Response: ph898 maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk to data subjects, ph898 will notify the NPC within 72 hours of becoming aware of the breach and will notify affected players without undue delay.

Notwithstanding the security measures ph898 puts in place, no online transmission of data is completely secure. Players bear responsibility for maintaining the security of their own account credentials, including enabling 2FA and using strong, unique passwords for their ph898 account.

13 Minors & Age Restriction

ph898 is strictly restricted to players aged 21 years and older in accordance with PAGCOR gaming regulations. ph898 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted through mandatory KYC identity document review during the account registration process. If ph898 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately closed, all associated data will be deleted in accordance with DPA requirements, and any deposited funds will be returned through the original payment channel.

Parents and guardians who believe that a minor has registered on ph898 are encouraged to contact our support team immediately via live chat so that the account can be investigated and closed without delay.

14 Changes to This Privacy Policy

ph898 reserves the right to update or modify this Privacy Policy at any time to reflect changes in the platform's data processing practices, amendments to applicable Philippine privacy law, or changes in PAGCOR regulatory requirements. Where changes are material — meaning they affect your rights as a data subject or alter the purposes for which your personal data is used — ph898 will provide advance notice via email to your registered address or via a prominent notice on the ph898 Platform at least fourteen (14) days before the changes take effect.

Non-material changes, such as clarifications of existing practices, corrections of typographical errors, or updates to contact information, may be made without advance notice. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of the ph898 Platform after the effective date of any revised Policy constitutes your acceptance of the changes.

15 Contact Information & Data Protection Officer

If you wish to exercise any of your data subject rights, have a question about how ph898 processes your personal data, or need to report a potential privacy concern, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the ph898 Platform — the fastest channel for account-specific privacy queries
• Email: [email protected] — for formal data subject rights requests, please include "Data Privacy Request" in the subject line

When submitting a formal data subject rights request, please provide sufficient information to allow ph898 to verify your identity as the account holder. ph898 may request additional verification before processing access, rectification, or erasure requests. This is to protect against unauthorized requests made by third parties.

If you are dissatisfied with ph898's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about how to file an NPC complaint is available on the NPC's official website.