ph87 Privacy Policy

1.1 This Privacy Policy applies to all personal data processed by ph87 in connection with the operation of the ph87 Platform at ph87.org, including all games, financial services, customer support channels, promotional communications, and KYC and AML compliance activities. It applies to all ph87 players, account applicants, and visitors to the ph87 website.

1.2 For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, ph87 is the Personal Information Controller in respect of player data collected and processed through the ph87 Platform. This means ph87 determines the purposes and means by which your personal data is processed.

1.3 ph87 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the applicable data protection framework. Contact details for the ph87 DPO are set out in Section 16.

1.4 This Privacy Policy should be read together with the ph87 Terms & Conditions. Capitalized terms used in this Privacy Policy and not defined herein have the meanings ascribed to them in the ph87 Terms & Conditions.

ph87 collects the following categories of personal data from players and Platform visitors:

ph87 collects personal data through the following channels:

• Direct Collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting ph87 support, or submitting a complaint or feedback.
• Automatic Technical Collection: Technical data collected automatically by ph87's servers when you access the Platform, including IP address, device identifiers, browser information, and session data. This collection occurs whether or not you are logged in to your ph87 Account.
• Payment Processors: ph87 receives confirmation data and transaction references from GCash, PayMaya, BDO, BPI, Metrobank, and USDT gateway providers when you initiate payment transactions. ph87 does not receive or store your GCash or PayMaya PINs or full bank account passwords.
• Identity Verification Providers: Where ph87 uses third-party identity verification services for KYC, those providers may share verification outcomes and relevant identity data with ph87 as part of the KYC process.
• Compliance Screening Services: ph87 uses third-party AML and sanctions screening services that process your name and identity data against regulatory watchlists. The results of such screenings are shared with ph87 for compliance purposes.
• Game Providers: Technical and gameplay data is generated by ph87's certified game providers during your gaming sessions and transmitted to ph87's systems for account management, dispute resolution, and responsible gaming monitoring.
• Cookies and Tracking Technologies: As described in Section 11, ph87 uses cookies and similar technologies to collect technical and behavioral data when you visit the Platform. Specific details are set out in ph87's Cookie Policy incorporated into Section 11.

ph87 processes personal data only where there is a lawful basis for doing so under the Philippine Data Privacy Act. The primary lawful bases applicable to ph87's processing activities are:

• Contractual Necessity: Processing required to perform the contract with you as a ph87 player — including account creation, game provision, payment processing, and customer support. Without this processing, ph87 cannot deliver its Services to you.
• Legal Obligation: Processing required to comply with applicable law, including PAGCOR regulatory requirements, the Anti-Money Laundering Act of 2001 (as amended), the Philippine Data Privacy Act, and any other applicable Philippine legislation or regulatory direction.
• Legitimate Interests: Processing for ph87's legitimate business interests where those interests are not overridden by your data subject rights — including fraud prevention, security monitoring, Platform improvement, responsible gaming monitoring, and basic analytics.
• Consent: For specific processing activities — primarily direct marketing communications — ph87 relies on your consent as expressly provided during registration or through Account settings. You may withdraw consent for these activities at any time without affecting the lawfulness of prior processing.

ph87 processes your personal data for the following specific and documented purposes:

• Account Management: Creating, maintaining, and administering your ph87 Account, including authentication, profile management, and Account communication.
• Service Delivery: Providing access to and operation of all Platform games and betting services, processing deposits and withdrawals, and administering bonuses and promotions.
• Identity Verification & KYC: Verifying your identity and age in compliance with PAGCOR regulations and ph87's obligation to prevent underage gambling and fraudulent account creation.
• AML and Financial Crime Prevention: Conducting transaction monitoring, screening against sanctions and PEP lists, and performing enhanced due diligence as required by the Philippine Anti-Money Laundering Act and PAGCOR.
• Responsible Gaming: Monitoring gaming behavior patterns for indicators of problem gambling, administering player-set limits and self-exclusion requests, and fulfilling ph87's duty of care obligations to players.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraud, cheating, account takeover attempts, and other prohibited conduct on the Platform.
• Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance through ph87's 24/7 Filipino-speaking support team.
• Legal and Regulatory Compliance: Complying with applicable Philippine law, responding to regulatory inquiries from PAGCOR or AMLC, and responding to valid court orders or law enforcement requests.
• Platform Improvement: Analyzing aggregated usage data (not personally identified where possible) to understand Platform performance, identify technical issues, and improve the ph87 user experience for Filipino players.
• Marketing Communications: Sending promotional offers, bonus notifications, and ph87 news to players who have consented to receive such communications. This is always opt-in and can be withdrawn at any time.

6.1 General Principle. ph87 does not sell your personal data to third parties. ph87 shares personal data only where necessary for the operation of the Platform, compliance with legal obligations, or with your explicit consent.

6.2 Categories of Third-Party Recipients. Personal data may be shared with the following categories of third parties:

• Payment Processors: GCash (Mynt/Globe Telecom), PayMaya (Voyager Innovations), BDO, BPI, Metrobank, and USDT gateway operators receive transaction-relevant data necessary to process deposits and withdrawals on your ph87 account.
• Identity Verification Providers: Third-party KYC service providers receive identity data to perform electronic verification of government IDs and to conduct liveness checks as part of the ph87 onboarding process.
• AML and Compliance Screening Providers: Name and identity data is shared with AML screening service providers for sanctions list and PEP screening as required by Philippine AML law.
• Game Providers: Game session data is processed by ph87's certified third-party game providers (including Pragmatic Play, Evolution, and others) to deliver gameplay. These providers process data under agreements with ph87 that include data protection obligations.
• Cloud and Infrastructure Providers: ph87 uses third-party cloud infrastructure and hosting services to operate the Platform. These providers process data as data processors under ph87's instruction and are bound by data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies receive data as required by applicable law and regulatory direction. ph87 cooperates fully with lawful regulatory requests.
• Law Enforcement: Where ph87 is required by law, court order, or valid legal process to disclose player data to law enforcement authorities, ph87 will do so in compliance with applicable Philippine law.

6.3 All third-party service providers that process personal data on ph87's behalf are engaged under contracts that include data protection obligations consistent with the Philippine Data Privacy Act and ph87's security standards.

7.1 Some of ph87's third-party service providers — including certain game providers and cloud infrastructure operators — are located outside the Philippines. When personal data is transferred to these recipients, ph87 ensures that appropriate safeguards are in place to protect the data in a manner consistent with Philippine data protection standards.

7.2 Safeguards applied to international transfers include: (a) contractual data protection clauses binding the overseas recipient to ph87's data protection standards; (b) transfer only to jurisdictions or recipients assessed to provide an adequate level of data protection; and (c) where permitted by Philippine law, implementation of ph87's own binding corporate rules where applicable.

7.3 ph87 will provide information about specific international transfers of your personal data upon request to the ph87 Data Protection Officer.

8.1 ph87 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce ph87's agreements with players.

8.2 The following retention periods apply as a general guide, subject to applicable law:

• Active Account Data: Retained for the duration of your ph87 Account plus a post-closure retention period of five (5) years, as required by PAGCOR and AML regulations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, in compliance with Philippine AML retention requirements.
• Transaction Records: Retained for a minimum of five (5) years as required by the Anti-Money Laundering Act and PAGCOR.
• Communications and Support Records: Retained for three (3) years following the close of the relevant inquiry or complaint, unless retention is required for longer by applicable law.
• Technical and Log Data: Retained for twelve (12) months in operational systems, then archived for an additional period where required for security investigation purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever is earlier, subject to applicable legal retention obligations.

8.3 At the expiry of applicable retention periods, ph87 will securely delete or irreversibly anonymize personal data in accordance with its data disposal procedures.

9.1 ph87 implements technical and organizational security measures appropriate to the risk level of the personal data processed. These measures are reviewed and updated regularly in response to the evolving threat environment.

9.2 Technical security measures at ph87 include:

• 256-bit SSL/TLS encryption for all data in transit between players and ph87 servers.
• Encryption of sensitive data fields (including KYC documents and financial identifiers) at rest.
• Multi-factor authentication available for all ph87 player accounts and mandatory for ph87 administrative systems.
• Intrusion detection and prevention systems monitoring ph87's network infrastructure 24/7.
• Role-based access controls ensuring ph87 staff access only the personal data necessary for their specific job functions.
• Regular penetration testing and security audits conducted by qualified third-party security professionals.
• Secure development lifecycle practices applied to all ph87 Platform updates and new features.

9.3 Organizational security measures include: mandatory data protection training for all ph87 staff; a documented data breach response procedure; vendor due diligence for all data processors; and a designated Data Protection Officer responsible for ongoing compliance oversight.

As a data subject under the Philippine Data Privacy Act, you have the following rights in respect of personal data processed by ph87:

11.1 The ph87 Platform uses cookies and similar tracking technologies (including local storage and session tokens) to deliver and improve Platform functionality, maintain your logged-in session, apply your Account preferences, and measure Platform performance.

11.2 The main categories of cookies used by ph87 are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, load-balancing cookies, and security tokens. These cannot be disabled without preventing access to the Platform. No consent is required for strictly necessary cookies.
• Functional Cookies: Cookies that remember your preferences — such as your language setting, responsible gaming notification preferences, and game display settings. These enhance your ph87 experience but are not strictly required.
• Analytics Cookies: Cookies that collect aggregated data on how players use the ph87 Platform — which games are most accessed, where players encounter errors, and general navigation patterns. ph87 uses this data solely to improve the Platform. Analytics cookies require consent.
• Marketing Cookies (if applicable): Where ph87 uses cookies for personalizing promotional content displayed within the Platform, such cookies require consent and are only activated where you have opted in to marketing communications.

11.3 You can manage cookie preferences through your browser settings. Note that disabling certain cookies may impair Platform functionality, including the ability to maintain a logged-in session at ph87.

12.1 The ph87 Platform is not intended for persons under 21 years of age. ph87 does not knowingly collect or process personal data of individuals below the age of 21.

12.2 If ph87 becomes aware that it has collected personal data from a person under 21 years of age, ph87 will promptly close the associated Account, delete or securely retain only the data required by law for compliance purposes, and, where appropriate, report the incident to PAGCOR.

12.3 If you believe a person under 21 is using the ph87 Platform or has submitted personal data to ph87, please contact ph87 support or the Data Protection Officer immediately using the details in Section 16.

13.1 ph87 may send you promotional communications — including bonus offers, game launch notifications, tournament invitations, and ph87 news — by email or SMS where you have expressly consented to receive such communications during Account registration or through your Account settings.

13.2 You may withdraw consent for marketing communications at any time by: (a) clicking the unsubscribe link in any ph87 marketing email; (b) updating your communication preferences in your ph87 Account settings; or (c) contacting ph87 support and requesting removal from marketing communications.

13.3 Withdrawal of marketing consent does not affect your ability to use the ph87 Platform. You will continue to receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing preference — these are required for Account management and cannot be unsubscribed from.

13.4 ph87 does not purchase or otherwise acquire third-party mailing lists for marketing purposes. All marketing is directed only at registered ph87 players who have provided consent.

14.1 ph87 maintains a documented data breach response procedure. In the event that ph87 becomes aware of a personal data breach, ph87 will: (a) contain the breach and assess its scope within the shortest practicable timeframe; (b) notify the National Privacy Commission (NPC) within 72 hours of becoming aware of a breach that is likely to result in serious harm to data subjects, as required by the Philippine Data Privacy Act; and (c) notify affected players without undue delay where the breach poses a high risk to their rights and freedoms.

14.2 Breach notifications to affected ph87 players will include: the nature of the breach; the categories and approximate number of individuals affected; the likely consequences; the measures ph87 has taken or proposes to take; and recommended actions for affected players to protect themselves.

14.3 ph87 maintains records of all personal data breaches regardless of severity, as required by the Philippine Data Privacy Act and its Implementing Rules.

15.1 ph87 may update this Privacy Policy from time to time to reflect changes in ph87's data processing practices, applicable law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this page will be revised on any update.

15.2 Material changes — those that significantly affect how ph87 processes your personal data or your rights as a data subject — will be communicated to registered players by email and/or prominent notice on the ph87 Platform before taking effect.

15.3 Non-material changes — such as clarifications, corrections, or formatting improvements that do not alter the substantive content — may be made without advance notice. Players are encouraged to review this Privacy Policy periodically.

For any matters relating to this Privacy Policy, exercise of data subject rights, privacy complaints, or general data protection inquiries, please contact ph87 using the following details:

• Data Protection Officer (DPO): ph87 has appointed a Data Protection Officer responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act. DPO contact is available through the ph87 support team — request escalation to the DPO when initiating contact.
• Live Chat Support: Available 24/7 on the ph87 Platform. For data subject requests, identify the nature of your request clearly at the start of the chat conversation to facilitate prompt routing to the appropriate team.
• Email: [email protected] (plain text — not a clickable link). For data subject requests, use the subject line "Data Privacy Request" to ensure prompt handling.
• Response Timeline: ph87 acknowledges all privacy-related requests within 3 business days and provides a substantive response within 30 calendar days. Complex requests may require up to 60 days with prior notification to you.
• National Privacy Commission: If you are not satisfied with ph87's handling of your data protection concern, you have the right to file a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.