ph28.com Privacy
Policy

1. Introduction

ph28.com ("ph28.com," "we," "us," or "our") is committed to protecting the privacy and personal data of all players and visitors who access the ph28.com online gaming platform at ph28com.org (the "Platform"). This Privacy Policy ("Policy") describes how ph28.com collects, uses, discloses, stores, and protects your personal information when you register for an account, use our services, or interact with the Platform in any way.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered and enforced by the National Privacy Commission ("NPC") of the Philippines. By registering an account or using the ph28.com Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

ph28.com collects personal data that you provide directly to us, as well as data generated automatically through your use of the Platform. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 21+ age requirement);
• Residential address in the Philippines;
• Mobile number registered in the Philippines;
• Email address;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID);
• Selfie or live photo for facial verification purposes;
• Proof of address documents where required.

2.3 Financial Data

• GCash or Maya mobile wallet number;
• Bank account details (account name, account number, bank name) for withdrawal processing;
• Transaction history, including deposit amounts, withdrawal amounts, and dates;
• Debit card details where applicable (card number is tokenized and never stored in plain text).

2.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, win/loss records, and session duration;
• Bonus and promotion participation history;
• Responsible gaming tool usage (deposit limits, self-exclusion requests, session reminders).

2.5 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Pages visited, features used, and time spent on the Platform;
• Session cookies and authentication tokens.

2.6 Communications Data

• Records of your communications with ph28.com customer support, including live chat transcripts and email correspondence;
• Feedback, complaints, and dispute records.

3. How We Use Your Personal Data

ph28.com uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your ph28.com player account, including verifying your identity and age (21+) at registration and during KYC verification;
• Service Delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver all features of the ph28.com Platform;
• Payment Processing: To process financial transactions through GCash, Maya, and Philippine bank transfers in Philippine Peso (PHP);
• Legal & Regulatory Compliance: To comply with the Data Privacy Act of 2012, PAGCOR-regulated anti-money laundering (AML) requirements, and other applicable Philippine laws and regulations;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer self-exclusion, deposit limit, and reality check tools;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Platform Improvement: To analyze usage patterns and improve the performance, features, and user experience of the ph28.com Platform;
• Communications: To send you account-related notifications, security alerts, and, where you have consented, promotional communications about ph28.com offers and games.

4. Legal Basis for Processing

ph28.com processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its IRR:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving promotional communications;
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and ph28.com (i.e., the Terms & Conditions), including account management, game access, and payment processing;
• Legal Obligation: Where processing is required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR-regulated requirements, and the Data Privacy Act of 2012;
• Legitimate Interests: Where processing is necessary for the legitimate interests of ph28.com, such as fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your rights and freedoms.

5. Data Sharing & Disclosure

ph28.com does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

5.1 Service Providers

ph28.com engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, Maya, Philippine banks), identity verification providers, cloud hosting providers, and customer support technology providers. These service providers are contractually bound to process your personal data only on ph28.com's instructions and in accordance with applicable data protection laws.

5.2 Regulatory Authorities

ph28.com may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ph28.com's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in accordance with applicable law.

5.4 Fraud Prevention

ph28.com may share personal data with fraud prevention agencies, responsible gaming registries (including PAGCOR self-exclusion lists), and law enforcement agencies where necessary to prevent, detect, or investigate fraud, money laundering, or other illegal activity.

6. Cookies & Tracking Technologies

ph28.com uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and remember your preferences.

6.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled without affecting Platform functionality.
• Performance Cookies: Used to collect anonymized data about how players use the Platform, helping us identify and fix technical issues and improve performance.
• Preference Cookies: Used to remember your language, display, and notification preferences across sessions.

ph28.com does not use third-party advertising cookies, cross-site tracking pixels, or behavioral profiling technologies. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair your ability to use the ph28.com Platform.

7. Data Security

ph28.com implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph28.com Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Multi-factor authentication (MFA) options for player accounts;
• Regular security audits and penetration testing by independent security professionals;
• Strict access controls limiting employee access to personal data on a need-to -know basis;
• Incident response procedures for detecting and responding to personal data breaches in accordance with NPC notification requirements.

While ph28.com takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your ph28.com account credentials and for notifying us immediately of any suspected unauthorized access to your account.

8. Data Retention

ph28.com retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law and PAGCOR-regulated obligations. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in compliance with AMLC record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications are retained for three (3) years from the date of the last interaction;
• Technical and usage data is retained for up to twelve (12) months, after which it is anonymized or deleted;
• Marketing consent records are retained for as long as you remain subscribed and for one (1) year following unsubscription.

Upon expiry of the applicable retention period, ph28.com will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data held by ph28.com:

• Right to be Informed: The right to be informed of how your personal data is collected, used, and processed, as described in this Policy;
• Right of Access: The right to request a copy of the personal data ph28.com holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to ph28.com's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact ph28.com's Data Protection Officer (DPO) using the contact details in Section 13 of this Policy. ph28.com will respond to all data subject rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

10. Children's Privacy

The ph28.com Platform is strictly intended for adults aged 21 years and above. ph28.com does not knowingly collect personal data from individuals under the age of 21. If ph28.com becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete such data and close the associated account.

If you are a parent or guardian and believe that your child has registered on the ph28.com Platform, please contact our support team immediately so that we can investigate and take appropriate action.

11. Third-Party Links

The ph28.com Platform may contain links to third-party websites or services for informational purposes. ph28.com is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit. This Policy applies solely to personal data collected by ph28.com through the ph28.com Platform.

12. Changes to This Privacy Policy

ph28.com reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. Where changes are material, ph28.com will provide reasonable advance notice to registered players via email or a prominent notice on the Platform.

The date of the most recent revision is indicated at the top of this page. Your continued use of the ph28.com Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed of how ph28.com protects your personal data.

13. Contact & Data Protection Officer

ph28.com has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, please contact us through the following channel:

• DPO Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the ph28.com Platform
• Response Time: Within 15 business days for data subject rights requests; within 24 hours for general privacy inquiries

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that ph28.com has violated your data privacy rights under RA 10173.