ph80 Privacy Policy

ph80 ("ph80," "we," "us," or "our") is the data controller responsible for personal information collected through the ph80 online gaming platform, accessible at ph80.club and any associated services. ph80 operates under a license granted by the Philippine Amusement and Gaming Corporation (PAGCOR) and processes personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines.

For all data privacy inquiries, please contact ph80's Data Protection Officer at the contact details provided in Section 14 of this policy.

ph80 collects the following categories of personal data in connection with your use of the Platform:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for age verification — you must be 21 or older).
• Residential address in the Philippines (province, city/municipality, barangay, street).
• Email address (used as your ph80 login identifier).
• Philippine mobile number (used for SMS verification and two-factor authentication).

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (Philippine passport, driver's license, SSS/UMID card, Voter's ID, or PhilSys National ID).
• Proof of address documents where required.
• Selfie or facial verification image where required for enhanced verification procedures.

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers (e.g., GCash mobile number, PayMaya account, bank account number — stored in masked format).
• Account balance history and gaming transaction logs.
• Source of funds declarations where required for compliance with AMLC regulations.

2.4 Gaming and Usage Data

• Game session data: games played, wagers placed, outcomes, session duration, and timestamps.
• Bonus and promotion redemption history.
• Responsible gaming settings, limit configurations, and self-exclusion records.

2.5 Technical and Device Data

• IP address and general geographic location derived therefrom.
• Device type, operating system, and browser information.
• Platform access logs including login times, session durations, and logout events.
• Cookie and tracking technology data as described in Section 7.

2.6 Communications Data

• Records of communications between you and ph80's customer support team, including live chat transcripts and email correspondence.
• Records of consent to marketing communications and subsequent opt-out requests.

ph80 collects personal data through the following means:

• Directly from you: When you register an account, complete identity verification, make deposits or withdrawals, contact support, or update your account settings.
• Automatically: When you access and use the Platform, through server logs, cookies, and similar tracking technologies as described in Section 7.
• From payment providers: ph80 receives transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers to verify deposit and withdrawal transactions. ph80 does not store full payment credentials.
• From identity verification services: Where ph80 engages third-party KYC verification providers, those providers may return verification results and document validity confirmations to ph80 in connection with your identity check.
• From PAGCOR and AMLC: ph80 may receive regulatory information about players from PAGCOR or AMLC in the exercise of their oversight functions, including self-exclusion registry information.

ph80 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing necessary to perform the contract between you and ph80, including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), AMLC regulations, the Data Privacy Act, and other applicable Philippine laws and regulations.
• Legitimate interests: Processing necessary for ph80's legitimate business interests, including fraud prevention, platform security, abuse detection, and service improvement, where those interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional enhanced platform features. You may withdraw consent at any time.

ph80 uses your personal data for the following purposes:

• Creating and managing your ph80 account, including verifying your identity and eligibility.
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Providing access to the Platform's games, including slots, live dealer casino, bingo, and sports betting.
• Administering bonuses, promotions, and loyalty programs.
• Complying with PAGCOR licensing requirements, including maintaining gaming transaction records and player identification records.
• Fulfilling obligations under the Anti-Money Laundering Act, including transaction monitoring and suspicious transaction reporting to the AMLC.
• Enforcing ph80's Terms & Conditions, including detecting and preventing fraud, bonus abuse, and multi-accounting.
• Providing and improving customer support services.
• Sending you service communications (account alerts, security notifications, transaction confirmations) — these are not optional as they are necessary for account operation.
• Sending you marketing communications where you have given consent — always opt-in, always withdrawable.
• Administering responsible gaming measures, including processing self-exclusion requests and deposit limit settings.
• Analysing Platform usage patterns to improve performance, user experience, and game offerings.

ph80 does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. ph80 may share your personal data with the following categories of third parties strictly for the purposes described in this policy:

• PAGCOR: As ph80's licensing authority, PAGCOR may request player data in the exercise of its regulatory oversight functions. ph80 is legally obligated to comply with such requests.
• Anti-Money Laundering Council (AMLC): ph80 is required to report covered and suspicious transactions to the AMLC in accordance with the Anti-Money Laundering Act of the Philippines.
• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to Philippine banking and financial regulations.
• Identity verification providers: Third-party KYC service providers who verify your identity documents receive the data necessary to perform document and identity verification. These providers are bound by contractual data processing agreements with ph80.
• Game software providers: Game providers (e.g., Evolution Gaming, Pragmatic Play) may receive anonymized or pseudonymized session data necessary to operate their games and detect technical issues. They do not receive full personal identity data.
• IT and infrastructure providers: Cloud hosting, data storage, and security service providers who process data on ph80's behalf under contractual data processing agreements.
• Law enforcement and courts: Where required by a valid court order, subpoena, or lawful directive from a Philippine government authority.

ph80 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and analyse usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for core Platform functions, including maintaining your logged-in session, processing transactions, and applying your account security settings. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your Platform preferences (e.g., language, game view settings, responsible gaming configurations) to improve your experience.
• Analytics cookies: Used by ph80 to understand how players navigate the Platform — which games are most popular, where users encounter difficulties, and how Platform performance can be improved. Analytics data is aggregated and not linked to individual player identities in published reports.
• Marketing cookies: Used only where you have consented to receive personalized promotional content. These cookies help ph80 deliver relevant bonus offers and promotions based on your gaming preferences and activity patterns.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain Platform features, including the ability to log in to your ph80 account.

ph80 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph80's servers.
• Encryption of sensitive data at rest, including password hashes (stored using strong one-way hashing algorithms — ph80 does not store plain-text passwords) and payment method identifiers.
• Role-based access controls limiting ph80 staff access to personal data on a strict need-to-know basis.
• Two-factor authentication (2FA) available for player accounts and mandatory for internal administrative access.
• Continuous login monitoring with automated alerts for anomalous access patterns.
• Regular security audits and penetration testing by independent third-party security firms.
• Incident response procedures for personal data breaches, including notification to the National Privacy Commission and affected players as required under the Data Privacy Act.

No method of electronic transmission or storage is 100% secure. While ph80 employs industry-leading safeguards, we cannot guarantee absolute security. Players are strongly encouraged to use strong, unique passwords, enable 2FA, and avoid logging in from public or unsecured networks.

ph80 retains personal data for the following periods:

• Account data and gaming transaction records: Retained for a minimum of five (5) years from the date of account closure or last transaction, as required by PAGCOR licensing conditions and AMLC regulations.
• KYC and identity verification documents: Retained for the duration of account activity and for five (5) years following account closure, in compliance with AML regulatory requirements.
• Financial transaction records: Retained for ten (10) years where required by AMLC regulations applicable to covered transactions.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless retention is required for longer by an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for three (3) years from the date consent was given or last renewed, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted, destroyed, or irreversibly anonymized in accordance with ph80's data disposal procedures.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ph80:

• Right to be informed: The right to know how ph80 collects and processes your personal data — which is the purpose of this Privacy Policy.
• Right of access: The right to obtain a copy of the personal data ph80 holds about you, together with information about how it is processed.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update basic account information directly through your ph80 account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph80's regulatory retention obligations under PAGCOR and AMLC requirements.
• Right to object: The right to object to processing of your personal data for direct marketing purposes. Marketing opt-outs take effect immediately.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph80 has violated your data privacy rights.

To exercise any of these rights, contact ph80's Data Protection Officer using the details in Section 14. ph80 will respond to all data subject rights requests within fifteen (15) calendar days of receipt, or within thirty (30) calendar days for complex requests, in accordance with NPC guidelines.

The ph80 Platform is strictly for individuals aged twenty-one (21) years and above, as required by PAGCOR regulations. ph80 does not knowingly collect or process personal data from persons under 21 years of age.

If ph80 discovers or is informed that a person under 21 years of age has registered an account or provided personal data to ph80, ph80 will immediately: (a) suspend the account; (b) delete or anonymize any personal data collected from the underage individual; (c) return any deposits where possible; and (d) forfeit any winnings generated by the underage account.

If you believe that a person under 21 has provided personal data to ph80, please contact ph80 support immediately so that appropriate action can be taken.

ph80's primary data processing activities are conducted within the Republic of the Philippines or through service providers bound by contracts that impose data protection standards equivalent to those required under the Data Privacy Act of 2012.

Where personal data is transferred to service providers located outside the Philippines — for example, cloud infrastructure providers or game software providers with servers in other jurisdictions — such transfers are subject to the following safeguards:

• Contractual data processing agreements incorporating standard data protection clauses.
• Verification that the recipient country or organization provides an adequate level of data protection.
• Where required, notification to and authorization from the National Privacy Commission in accordance with NPC guidelines on cross-border data transfers.

ph80 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, ph80 will notify registered players by email to the address on file and/or by a prominent notice on the Platform at least seven (7) days before the changes take effect.

The effective date of the current version of this policy is stated at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of ph80 following the effective date of any amendment constitutes your acknowledgement of the updated policy.

For all data privacy inquiries, data subject rights requests, or complaints relating to ph80's processing of your personal data, please contact ph80's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the ph80 Platform. State that your inquiry is a data privacy matter and it will be routed to the DPO team. Average initial response: under 5 minutes.
• Email: [email protected] — please include "Data Privacy Request" in the subject line. Responses within 3 business days for standard inquiries.

If you are not satisfied with ph80's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through its official channels. Please also review ph80's Terms & Conditions for the full contractual framework governing your use of the Platform.