Privacy Policy

1. Introduction

php828 ("php828," "we," "us," or "our") operates the online gaming platform accessible at php828.app, offering bingo, slots, live dealer casino games, and sports betting services to players in the Philippines. We are committed to protecting the privacy and personal data of all users of the php828 platform.

This Privacy Policy ("Policy") describes how php828 collects, uses, stores, shares, and protects personal information in connection with your use of the php828 platform. It applies to all registered players, visitors, and any other individuals whose personal data php828 processes in the course of operating its services.

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). By registering on or using the php828 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions, which govern your use of the php828 platform and are incorporated herein by reference.

2. Personal Data We Collect

php828 collects the following categories of personal data from players and platform users:

2.1 Identity & Contact Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth
• Gender
• Nationality and country of residence
• Residential address (including barangay, city/municipality, province)
• Email address
• Philippine mobile number

2.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, driver's license, SSS/UMID card, PhilSys National ID)
• Proof of address documents
• Selfie or facial image for identity verification purposes
• Source of funds documentation where required by PAGCOR or AMLC regulations

2.3 Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks)
• Transaction history, including deposits, withdrawals, and wager amounts in Philippine Peso (₱)

2.4 Gaming & Behavioral Data

• Game history, including bingo sessions, slot spins, live dealer rounds, and sports bets placed
• Wagering patterns and session duration
• Bonus and promotion usage history
• Responsible gaming settings (deposit limits, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Unique device identifiers
• Log data, including access times, pages visited, and error reports

2.6 Communications Data

• Records of communications with php828 customer support
• Feedback, complaints, and dispute records
• Marketing preferences and communication opt-in/opt-out records

3. How We Collect Your Data

php828 collects personal data through the following means:

• Direct collection: Information you provide when registering your php828 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and behavioral data collected automatically when you access and use the php828 platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment data from GCash, PayMaya, and banking partners; and regulatory data from PAGCOR or the Anti-Money Laundering Council (AMLC) where required by law.

4. How We Use Your Personal Data

php828 uses your personal data for the following purposes:

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, php828 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the php828 Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming enforcement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

6. Sharing Your Personal Data

php828 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• PAGCOR and regulatory authorities: As required by our operating licence and applicable Philippine gaming regulations.
• Anti-Money Laundering Council (AMLC): As required under the Anti-Money Laundering Act and related regulations.
• KYC and identity verification providers: Third-party service providers engaged to verify player identity and age.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners engaged to process deposits and withdrawals.
• Fraud prevention and security providers: Third-party partners engaged to detect and prevent fraud, cheating, and unauthorized access.
• Game software providers: Licensed game studios and software providers whose games are offered on the php828 platform, to the extent necessary for game operation and audit purposes.
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers engaged to operate the php828 platform.
• Legal and professional advisers: Lawyers, auditors, and other professional advisers engaged by php828 in connection with legal proceedings or compliance matters.
• Law enforcement: Where required by a valid court order, subpoena, or other lawful demand from Philippine law enforcement or judicial authorities.

All third-party service providers engaged by php828 are contractually required to process personal data only for the purposes specified by php828 and in compliance with the Data Privacy Act of 2012.

7. Data Retention

php828 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC reporting obligations.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

After the applicable retention period expires, php828 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

8. Data Security

php828 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the php828 platform.
• Encryption of sensitive data at rest, including financial and identity data.
• Access controls limiting personal data access to authorized php828 personnel on a need-to-know basis.
• Regular security assessments and penetration testing of the php828 platform.
• Multi-factor authentication for administrative access to systems containing personal data.
• Staff training on data privacy and security obligations under the Data Privacy Act of 2012.

While php828 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your php828 login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, php828 will notify the National Privacy Commission (NPC) and affected players in accordance with the Data Privacy Act of 2012 and NPC Circular 16-03.

9. Cookies & Tracking Technologies

php828 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies: Required for the php828 platform to function, including session management and security. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits.
• Analytics cookies: Used to collect anonymized data about how players use the php828 platform, helping us improve performance and user experience.
• Marketing cookies: Used to deliver relevant promotional content about php828 games and offers, where you have consented.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the php828 platform. Consent to non-essential cookies may be withdrawn at any time.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by php828:

• Right to be informed: The right to be informed of how your personal data is collected, used, and shared by php828.
• Right of access: The right to request a copy of the personal data php828 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to php828's legal retention obligations under PAGCOR regulations and the Anti-Money Laundering Act.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the php828 Data Privacy Officer at [email protected]. php828 will respond to all data privacy requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.

11. Minors

The php828 platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. php828 does not knowingly collect personal data from individuals under 21 years of age.

If php828 discovers that personal data has been collected from a person under 21 years of age, the associated account will be immediately suspended, the personal data will be deleted, and any deposited funds will be returned to the original payment method. If you believe a minor has registered on php828, please contact our support team immediately at [email protected].

12. International Data Transfers

php828 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software studios operating internationally.

Where personal data is transferred outside the Philippines, php828 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

13. Changes to This Policy

php828 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The updated Policy will be posted on this page with a revised effective date.

Where changes are material, php828 will provide reasonable notice to registered players via the platform or by email. Your continued use of the php828 platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by php828, please contact our Data Privacy Officer:

• Email: [email protected]
• Platform: php828.app
• Response time: Within 30 days of receipt, as required by the Data Privacy Act of 2012

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. php828 encourages players to contact us first so we can address your concerns directly.