Privacy Policy

Welcome to ph98. This Privacy Policy ("Policy") describes how ph98 ("ph98," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("you," "Player," or "User") who access or use the ph98 online gaming platform at ph98.net, including our mobile application and all associated services (collectively, the "Platform").

ph98 takes your privacy seriously. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By registering an account on ph98, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Policy and consent to the collection and use of your data as described herein. If you do not agree with any part of this Policy, please do not use the ph98 Platform.

For the purposes of applicable data protection legislation, ph98 is the data controller responsible for your personal information collected through the Platform. As data controller, ph98 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, you may contact our Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy.

ph98 collects the following categories of personal data from players and Platform users:

Identity and Contact Data

• Full legal name
• Date of birth (for age verification purposes — ph98 is strictly 21+ only)
• Email address
• Mobile phone number
• Residential address (city, province, postal code)
• Government-issued identification number (for KYC verification)
• Nationality

Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details (BPI, BDO, Metrobank, or other supported banks)
• Transaction history, including deposits, withdrawals, and bet records
• Account balance information

Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Login timestamps and session duration
• Pages visited and features used on the Platform
• Game history and betting activity
• Cookies and similar tracking technologies (see Section 10)

Communications Data

• Records of your communications with ph98 customer support
• Feedback, complaints, and survey responses
• Promotional preferences and marketing consent records

ph98 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the Platform, including cookies, web beacons, server logs, and similar tracking technologies that record your device, browser, and usage behaviour.
• Payment processors: Transaction data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers when you conduct financial transactions on ph98.
• Identity verification providers: Data received from third-party KYC and identity verification services used to confirm your identity and age in compliance with regulatory requirements.
• Fraud prevention services: Data received from third-party fraud detection and anti-money laundering screening services used to protect the integrity of the Platform.
• Publicly available sources: In limited circumstances, ph98 may supplement your data with information from publicly available sources, such as public records or regulatory watchlists, for compliance purposes.

ph98 uses your personal data for the following purposes:

ph98 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 and applicable data protection principles:

• Contractual necessity: Processing required to perform our contract with you — including account registration, game delivery, and payment processing — is necessary to provide the ph98 service you have signed up for.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML monitoring, age verification, and regulatory reporting obligations.
• Legitimate interests: Processing carried out for ph98's legitimate business interests, including fraud prevention, Platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw your consent at any time by contacting ph98 support or updating your account preferences.

ph98 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, solely to facilitate deposits and withdrawals on your ph98 account.
• Identity verification and KYC providers: Third-party services engaged to verify your identity, age, and the authenticity of documents submitted during the KYC process.
• Fraud prevention and AML screening services: Third-party providers used to detect and prevent fraudulent activity, money laundering, and other prohibited conduct.
• Technology and infrastructure providers: Cloud hosting, data storage, and IT service providers who process data on ph98's behalf under strict data processing agreements.
• Game content providers: Third-party game studios and live dealer operators whose games are made available on the ph98 Platform, to the extent necessary to deliver those games.
• Regulatory and law enforcement authorities: Government agencies, regulators, and law enforcement bodies where disclosure is required by law, court order, or regulatory direction, including PAGCOR and the Anti-Money Laundering Council (AMLC) of the Philippines.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by ph98 in connection with legal proceedings, compliance reviews, or business operations, subject to professional confidentiality obligations.

All third parties with whom ph98 shares personal data are required to handle that data in accordance with applicable data protection laws and ph98's data processing standards. ph98 does not permit third-party service providers to use your personal data for their own purposes beyond the specific services they provide to ph98.

ph98 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status on ph98, plus a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
• Transaction records: Financial transaction records, including deposit and withdrawal history and bet records, are retained for a minimum of five (5) years from the date of the transaction.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the communication, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of your consent history.

Upon expiry of the applicable retention period, ph98 will securely delete or anonymise your personal data in accordance with our data disposal procedures.

ph98 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the ph98 Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) options for player accounts to prevent unauthorised access.
• Secure, redundant data storage with regular backups to prevent data loss.
• Staff training on data protection obligations and security best practices.

While ph98 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your ph98 account credentials confidential and for notifying ph98 immediately if you suspect any unauthorised access to your account.

ph98 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support Platform functionality. A cookie is a small text file placed on your device when you visit the ph98 website or use our app.

ph98 uses the following categories of cookies:

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph98 Platform. For strictly necessary cookies, no consent is required as they are essential to the operation of the service.

Under the Philippine Data Privacy Act of 2012 and applicable data protection principles, you have the following rights with respect to your personal data held by ph98:

• Right to be informed: The right to be informed about how ph98 collects and uses your personal data, as set out in this Policy.
• Right of access: The right to request a copy of the personal data ph98 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data ph98 holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph98's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on ph98's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact ph98's Data Protection Officer using the contact details in Section 14. ph98 will respond to all verified data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior notification to you.

The ph98 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine regulations governing online casino-style gaming. ph98 does not knowingly collect personal data from individuals under the age of 21.

If ph98 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any winnings accrued by an underage player will be forfeited in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to ph98, please contact us immediately at the details provided in Section 14 so that we can take appropriate action.

ph98 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, ph98 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The updated Policy will display a revised "Last Updated" date at the top of this page. Your continued use of the ph98 Platform following the posting of any revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how ph98 protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ph98, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing ph98's compliance with data protection obligations and will handle all data privacy enquiries.

You may reach the ph98 Data Protection Officer by email at:

For general account or support enquiries, please contact ph98 customer support via live chat on the Platform or at [email protected]. Our support team is available 24 hours a day, 7 days a week.

ph98 aims to respond to all data privacy enquiries within ten (10) business days of receipt. For formal data subject access requests, the response period is as described in Section 11 of this Policy.