ph957 Privacy Policy

1 Introduction

ph957 ("we", "us", "our", "ph957") is a PAGCOR-licensed online gaming platform operating at ph957.club, serving Filipino players across all 17 regions of the Philippines. We are committed to protecting the personal information of every individual who interacts with the ph957 Platform — whether as a registered player in Manila, a visitor browsing from Cebu, or a user accessing the Platform from anywhere in the Philippines.

This Privacy Policy is issued pursuant to the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and the applicable issuances of the National Privacy Commission ("NPC") of the Philippines. It applies to all personal data processed by ph957 in connection with the ph957 online gaming platform, including data collected through the website, mobile interface, customer support channels, and marketing communications.

By registering for a ph957 account or by using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must discontinue use of the Platform.

2 Data Controller Details

For the purposes of the Data Privacy Act of 2012, ph957 is the personal information controller (PIC) with respect to all personal data collected and processed in connection with the ph957 Platform. ph957 determines the purposes for which, and the manner in which, any personal data is processed.

ph957 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to PAGCOR's data handling and player protection requirements in addition to the requirements of the DPA.

Data subjects wishing to exercise their rights or submit privacy-related inquiries may do so by:

• Contacting the ph957 Data Protection Officer at [email protected]
• Submitting a request via the live chat function available within your ph957 account

ph957 aims to acknowledge all data subject requests within seventy-two (72) hours and to substantively respond within fifteen (15) business days, in accordance with NPC guidelines.

3 Personal Data We Collect

ph957 collects and processes the following categories of personal data in connection with your use of the Platform:

3.1 Identity and Contact Data

• Full legal name (as it appears on your government-issued Philippine ID)
• Date of birth (to verify the 21+ age requirement mandated by PAGCOR)
• Email address and mobile phone number
• Residential address in the Philippines
• Government-issued ID documents (PhilSys ID, Driver's License, Passport, UMID, Voter's ID) submitted during KYC verification
• Selfie photographs taken for identity matching during KYC

3.2 Account and Gaming Data

• ph957 username and account credentials (password stored in hashed form — never in plaintext)
• Account registration date and account history
• Gaming activity: games played, session durations, wagers placed, game results, and bonus usage
• Responsible gaming settings: deposit limits, session time limits, and self-exclusion status
• Customer support communications and complaint history

3.3 Financial Data

• GCash account details, Maya (PayMaya) account details, or Philippine bank account information used for deposits and withdrawals
• Deposit and withdrawal transaction records including amounts, timestamps, and transaction references
• Source-of-funds documentation submitted for anti-money laundering compliance purposes

3.4 Technical and Usage Data

• IP address, device type, operating system, and browser type at the time of Platform access
• Geolocation data at the session level (used for fraud prevention and regulatory compliance)
• Cookies and session data as described in Section 11
• Pages visited, features accessed, and navigation behaviour on the Platform

4 How We Collect Your Data

ph957 collects personal data through the following channels and mechanisms:

• Directly from you — when you register for a ph957 account, complete KYC verification, make deposits or withdrawals, contact customer support, or interact with any feature of the Platform;
• Automatically during your use of the Platform — through cookies, web analytics tools, server logs, and session tracking technologies as described in Section 11;
• From third-party identity verification services — ph957 may use PAGCOR-approved third-party KYC and AML screening services to verify your identity and screen against sanctions lists. These services process your identity documents on ph957's behalf;
• From Philippine payment providers — GCash, Maya, and other payment service providers may share transaction confirmation data with ph957 to reconcile deposits and withdrawals;
• From PAGCOR and Philippine regulatory authorities — in connection with compliance requests, license conditions, and anti-money laundering reporting requirements.

5 How We Use Your Personal Data

ph957 uses the personal data it collects for the following purposes:

6 Legal Bases for Processing

Under the Data Privacy Act of 2012, ph957 processes personal data on the following lawful bases:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you as a ph957 account holder — including providing gaming services, processing payments, and maintaining your account;
• Legal obligation: Processing is required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable statutes;
• Legitimate interest: Processing is carried out for ph957's legitimate interests, including fraud prevention, platform security, and service improvement — provided such interests are not overridden by your data subject rights;
• Consent: Where ph957 relies on your consent as the legal basis for processing — particularly for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal requests can be submitted to [email protected].

7 Sharing Your Personal Data

ph957 does not sell, rent, or trade personal data. We share personal data only in the following limited circumstances:

7.1 Service Providers (Personal Information Processors)

ph957 engages third-party service providers who process personal data on our behalf as personal information processors (PIPs) under the DPA. These include: KYC verification service providers, payment processing partners (GCash, Maya, banking partners), cloud hosting providers, IT security and fraud detection vendors, customer support platform providers, and analytics providers. All PIPs are bound by data processing agreements that require them to process data solely on ph957's documented instructions and in compliance with the DPA.

7.2 Regulatory and Law Enforcement Authorities

ph957 is required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities as required by law, court order, or regulatory direction. ph957 cooperates fully with all lawful requests from Philippine regulatory and law enforcement bodies.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ph957's business, personal data held by ph957 may be transferred to the acquiring entity, subject to equivalent privacy protections and with notification to affected users where legally required.

8 Data Retention

ph957 retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and Philippine AML law. This period may be extended if required by ongoing regulatory proceedings or legal disputes.
• Transaction and gaming records: Retained for five (5) years from the date of each transaction, in compliance with RA 9160 (Anti-Money Laundering Act) record-keeping requirements.
• Customer support records: Retained for three (3) years from the date of each interaction, or longer if the matter is subject to an ongoing dispute or regulatory inquiry.
• Marketing data: Retained until you withdraw consent or for a maximum of two (2) years from the date of your last interaction with ph957 marketing communications, whichever occurs first.
• Technical and usage data (server logs): Retained for ninety (90) days under standard operations; may be retained longer where fraud or security investigations are ongoing.

9 Data Security

ph957 implements appropriate organisational and technical measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph957 servers;
• Encryption of sensitive data at rest, including government ID documents and financial data;
• Passwords stored exclusively in hashed, salted form — ph957 staff cannot view your plaintext password;
• Two-factor authentication (2FA) available to all account holders and required for ph957 staff accessing internal systems;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular internal security audits, vulnerability assessments, and penetration testing;
• A documented data breach response procedure in accordance with NPC Circular 16-03 (Personal Data Breach Management).

In the event of a personal data breach that is likely to result in harm to affected data subjects, ph957 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay as required by the DPA.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph957:

To exercise any of the above rights, please contact ph957's Data Protection Officer at [email protected] with the subject line "Data Subject Request." You may be required to provide proof of identity before ph957 can process your request. ph957 will not charge a fee for data subject requests except where requests are manifestly unfounded or excessive.

11 Cookies and Tracking Technologies

ph957 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device by your browser. ph957 uses cookies for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function, including session management, login authentication, and fraud prevention. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to measure how users interact with the Platform — pages visited, games played, time spent. This data is used in aggregate form to improve the ph957 user experience. No individual player is identified in analytics reports.
• Functionality Cookies: Used to remember your preferences, such as language settings, preferred games, and responsible gaming configurations, so these are applied consistently across sessions.
• Marketing Cookies (with consent only): Where you have consented to receiving marketing communications, cookies may be used to personalise promotional content displayed on the Platform. You may withdraw consent at any time via your account settings or by contacting [email protected].

You can control cookies through your browser settings. Disabling non-essential cookies will not affect your ability to play games or manage your ph957 account, though some personalisation features may be unavailable.

12 Children and Minors

The ph957 Platform is strictly for individuals aged twenty-one (21) and above, as required by PAGCOR regulations governing casino-style gaming in the Philippines. ph957 does not knowingly collect personal data from persons under the age of 21.

Age verification is enforced during KYC registration. Any account found to belong to a person under 21 will be permanently closed without notice and any associated personal data will be deleted, except where retention is required by applicable law.

ph957 encourages parents and guardians to use device-level parental controls and to keep ph957 login credentials out of the reach of minors. If ph957 becomes aware that a person under 21 has provided personal data in connection with a ph957 account, the relevant account will be immediately closed and associated data deleted or flagged for retention only to the extent required by PAGCOR compliance obligations.

13 International Data Transfers

ph957 primarily processes personal data within the Republic of the Philippines. Where personal data is transferred to service providers or infrastructure operating outside the Philippines — for example, cloud hosting or game server providers — ph957 ensures that such transfers comply with Section 21 of the Data Privacy Act of 2012, which requires that personal data transferred outside the Philippines be afforded a comparable level of protection.

ph957 ensures international transfers are governed by appropriate safeguards, which may include: contractual clauses approved by the NPC, binding corporate rules, or transfers to jurisdictions recognised by the NPC as providing an adequate level of data protection. ph957 will not transfer personal data internationally where doing so would breach Philippine data privacy law or PAGCOR requirements.

14 Third-Party Links and Services

The ph957 Platform may contain references to third-party game providers and payment services. ph957 is not responsible for the privacy practices of third-party operators whose systems you interact with in connection with ph957 services.

Game providers who supply games to the ph957 Platform may process limited technical data (such as game session data) as personal information processors under their own data handling arrangements with ph957. ph957's agreements with all game providers include data processing obligations consistent with the DPA.

When you make a deposit via GCash, Maya, or a Philippine bank, your transaction is also subject to the privacy policy of the relevant payment provider. ph957 encourages you to review the privacy practices of any third-party service you use in connection with your ph957 account.

15 Changes to This Privacy Policy

ph957 reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, Platform features, or data processing practices. Material changes will be communicated to registered users via email to their registered address, or via a prominent notice on the Platform, prior to the changes taking effect. The effective date of any revised Privacy Policy will be updated at the top of this page.

Continued use of the ph957 Platform after any update to this Privacy Policy constitutes your acknowledgement of the revised policy. ph957 recommends reviewing this Privacy Policy periodically. The most current version is always accessible at ph957.club/privacy-policy.

16 Contact Us and Data Protection Officer

For all privacy-related inquiries, data subject access requests, complaints, or queries regarding this Privacy Policy, please contact ph957's Data Protection Officer:

• Email: [email protected] — use the subject line "Data Subject Request" or "Privacy Inquiry"
• Live Chat: Available 24/7 within your logged-in ph957 account — for urgent privacy-related concerns

ph957 aims to acknowledge all privacy inquiries within seventy-two (72) hours and to provide a substantive response within fifteen (15) business days. Where a request requires additional time due to complexity, ph957 will inform you of the extended timeline within the initial acknowledgement.

If you are not satisfied with ph957's response to your privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). The NPC's contact details are available at the official NPC website.