ph928 Privacy Policy

 Effective Date: 1 June 2026  ·  Last Updated: June 2026

1. Introduction & Scope

ph928 ("ph928," "we," "us," "our") operates the online gaming platform at ph928.org and is committed to protecting the privacy and personal data of all users ("Player," "User," "you," "your"). This Privacy Policy describes the types of personal information we collect, the purposes for which we process it, the parties with whom we may share it, and the choices and rights available to you in connection with your personal data.

This Policy applies to all personal data collected through the ph928 website, mobile interface, customer support communications, and any other service offered by ph928. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

ph928 processes personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its implementing rules and regulations, and applicable issuances of the National Privacy Commission ("NPC") of the Philippines. Our operations are also subject to PAGCOR licensing requirements, which include specific data handling and player protection obligations.

2. Data Controller Information

ph928 is the data controller responsible for your personal information collected through the ph928 platform. Our designated Data Protection Officer ("DPO") can be reached at:

• Email: [email protected] (subject line: "Privacy Request")
• Live Chat: Available 24/7 via the ph928 platform

3. Personal Data We Collect

Depending on how you interact with the ph928 platform, we may collect the following categories of personal data:

Category	Examples
Identity Data	Full name, date of birth, nationality, government-issued ID (e.g., Philippine passport, SSS, UMID, PhilHealth, driver's licence)
Contact Data	Email address, Philippine mobile number, residential address (city, province)
Financial Data	GCash account number, PayMaya account, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records
Account Data	Username, encrypted password, account balance, bonus wallet details, gaming history, session logs
Technical Data	IP address, device type, browser type and version, operating system, time zone, geolocation data
Usage Data	Pages visited, games played, time and duration of sessions, click data, search queries within the platform
Communications Data	Records of your communications with ph928 support via Live Chat, Viber, or email

ph928 does not collect sensitive personal information as defined by the DPA (e.g., health data, biometric data) unless expressly required by PAGCOR or applicable law.

4. How We Collect Your Data

We collect personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, use customer support, or voluntarily provide information on the platform.
• Automatically — through cookies, log files, and similar tracking technologies when you browse or use the ph928 platform.
• Third parties — from payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, and fraud detection services that we engage in connection with platform operations.

5. Legal Basis for Processing

ph928 processes your personal data on the following legal grounds under the DPA:

• Contract performance — processing necessary to provide the services you have requested, including account management, game play, and payment processing.
• Legal obligation — processing required to comply with PAGCOR licensing conditions, Philippine anti-money laundering laws (R.A. 9160, as amended), and NPC regulations.
• Legitimate interests — processing necessary for fraud prevention, platform security, and responsible gaming enforcement, where these interests are not overridden by your rights.
• Consent — for certain marketing communications, where we will obtain your explicit opt-in consent before processing.

6. How We Use Your Data

ph928 uses your personal data for the following purposes:

• To register and manage your ph928 account, including ph928 login authentication and security.
• To process deposits and withdrawals via GCash, PayMaya, and partner banks.
• To verify your identity (KYC) and age in compliance with PAGCOR requirements.
• To detect and prevent fraud, money laundering, and other prohibited activities.
• To provide customer support through Live Chat, Viber, and email.
• To administer bonuses, promotions, and loyalty programmes.
• To enforce our Responsible Gaming Policy, including age verification and self-exclusion management.
• To comply with reporting obligations to PAGCOR and other Philippine regulatory authorities.
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications).
• To send promotional communications, where you have provided your consent.
• To analyse platform usage and improve the ph928 product and user experience.

7. Sharing Your Data with Third Parties

ph928 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We may share your data in the following circumstances:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, and Cebuana, to facilitate deposits and withdrawals.
• Game providers — Pragmatic Play, JILI, PG Soft, Evolution Gaming, Habanero, and Spadegaming, to the extent necessary to operate and audit games played on ph928.
• Identity verification providers — third-party KYC service providers engaged to verify your government-issued Philippine ID.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies, where required by law or licence condition.
• Legal proceedings — law enforcement or courts in the Philippines, in response to a valid legal order or where we reasonably believe disclosure is required to protect rights, property, or safety.

Where ph928 engages third-party processors, we require them to process personal data only on our instructions and in accordance with the DPA and its implementing rules.

8. Cookies & Tracking Technologies

8.1  ph928 uses cookies and similar technologies to operate the platform, remember your preferences, maintain your ph928 login session, and analyse usage patterns.

8.2  The types of cookies we use include:

• Strictly necessary cookies — required for core platform functionality, including session management and security. These cannot be disabled.
• Functional cookies — used to remember your preferences, such as language settings and display options.
• Analytics cookies — used to collect aggregated, anonymised data about how players use the platform, to help us improve the ph928 experience.

8.3  You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain features of the ph928 platform.

9. Data Security

ph928 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the ph928 platform.
• Encrypted storage of passwords using industry-standard hashing algorithms.
• Optional two-factor authentication (2FA) on all ph928 accounts.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments.

Notwithstanding these measures, no system is completely immune from security risks. ph928 will notify affected players and the NPC in the event of a personal data breach, in accordance with DPA requirements.

10. Data Retention

ph928 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

• For active accounts: for the duration of your account and for five (5) years after account closure, as required by PAGCOR licensing conditions and applicable AML law.
• For transaction records: a minimum of five (5) years, in compliance with the Anti-Money Laundering Act.
• For support communications: up to three (3) years from the date of the communication, unless a longer retention period is required by law.
• For marketing data: until you withdraw your consent or opt out of marketing communications.

Upon expiry of the applicable retention period, ph928 will securely delete or anonymise your personal data in accordance with NPC guidelines.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph928:

• Right to be informed — to know how your personal data is being collected and processed.
• Right of access — to request a copy of the personal data ph928 holds about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking — to request deletion or blocking of your personal data where processing is unlawful or the data is no longer necessary for its original purpose, subject to legal retention obligations.
• Right to object — to object to processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to data portability — to receive a copy of your personal data in a structured, commonly used format.
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph928 has violated your data privacy rights.

To exercise any of the above rights, please contact our DPO at [email protected] with the subject line "Privacy Request." ph928 will respond within fifteen (15) days of receiving a verified request, in accordance with NPC guidelines.

12. Children's Privacy

The ph928 platform is strictly intended for persons aged 21 years or older, in compliance with PAGCOR licensing requirements applicable in the Philippines. ph928 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately suspend the relevant account and delete the associated data.

If you believe that a minor has registered on ph928, please contact us immediately at [email protected].

13. Changes to This Policy

ph928 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR requirements. The revised Policy will be posted on this page with an updated effective date. We encourage you to review this Policy periodically. Where changes are material, we will provide notice via the platform or by email to your registered address. Continued use of the ph928 platform following the posting of a revised Policy constitutes your acceptance of the changes.

14. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph928, please contact:

• Data Protection Officer
• Email: [email protected] (subject: "Privacy Request")
• Live Chat: Available 24/7 via the ph928 platform
• Viber: Available 24/7 — contact details provided upon account registration

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information on how to file a complaint is available on the NPC's official website.