ph998 Privacy Policy
How ph998 collects, uses, stores, and protects your personal data in compliance with the Philippine Data Privacy Act and PAGCOR regulations.
This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal information by ph998 (referred to herein as "ph998", "we", "us", or "our") in connection with the ph998 online gaming platform accessible at ph998.net. ph998 is committed to safeguarding the privacy of all Filipino players and operates in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines. Our platform is also regulated by PAGCOR, and this Privacy Policy reflects the data handling obligations imposed under that regulatory framework.
Table of Contents
- 1. Who We Are
- 2. Data We Collect
- 3. How We Collect Data
- 4. Legal Basis for Processing
- 5. How We Use Your Data
- 6. Data Sharing & Disclosure
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Data Security
- 10. Your Rights
- 11. Children & Minors
- 12. Cross-Border Transfers
- 13. Changes to This Policy
- 14. Contact & DPO
Who We Are
ph998 is a premier Philippine online gaming platform offering slots, live dealer games, sports betting, bingo, sabong, Tongits Go, Money Coming, and other interactive entertainment services to registered Filipino players aged 21 and above. ph998 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to all applicable Philippine laws governing online gaming and personal data protection.
As the operator of ph998.net, ph998 acts as the Personal Information Controller (PIC) within the meaning of the Data Privacy Act of 2012, responsible for determining the purposes and means by which your personal data is processed. ph998 has appointed a designated Data Protection Officer (DPO) to oversee compliance with all data privacy obligations and to serve as your primary point of contact for privacy-related concerns.
Data We Collect
ph998 collects the minimum personal data necessary to provide our services securely and in compliance with PAGCOR and anti-money laundering (AML) obligations. The categories of personal data we collect include:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID type and number (Passport, UMID, SSS, PhilHealth, Voter's ID, Driver's License) | Yes — KYC/AML required |
| Contact Data | Email address, Philippine mobile number, current residential address (city, province, barangay) | Yes — account registration |
| Financial Data | GCash number, PayMaya account, BPI/BDO/Metrobank account details, deposit and withdrawal transaction records in PHP | Yes — payment processing |
| Account Data | Username, hashed password, account creation date, login history, session duration, game activity history, wagering records, bonus history | Yes — platform operation |
| Technical Data | IP address, device type, browser type and version, operating system, cookies, session tokens, approximate geolocation | Yes — security and compliance |
| Communications Data | Live chat transcripts, email correspondence, support ticket history, promotional preference records | Conditional — if you contact us |
| Responsible Gaming Data | Deposit limit settings, self-exclusion requests, reality check preferences, session time limit configurations | Conditional — if tools are used |
How We Collect Your Data
ph998 collects personal data through the following means:
- Direct Submission: When you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or update your account settings, you directly provide personal data to ph998.
- Automated Collection: When you access ph998.net, we automatically collect technical data such as your IP address, device identifiers, browser fingerprint, and session activity through cookies, server logs, and similar tracking technologies. See Section 7 for full details.
- Payment Processors: When you transact via GCash, PayMaya, BPI, BDO, or Metrobank, those providers share transaction confirmation data with ph998 for payment verification and AML compliance purposes.
- Identity Verification Partners: During KYC verification, ph998 may use accredited third-party identity verification services to confirm the authenticity of government-issued ID documents submitted by players.
- Regulatory Authorities: PAGCOR, the AMLC, and other Philippine government agencies may share information with ph998 relating to self-exclusion registers, sanctions lists, or ongoing regulatory investigations.
Legal Basis for Processing
ph998 processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and its IRR:
- Contractual Necessity: Processing is required to fulfill our contractual obligations to you under the ph998 Terms & Conditions — including account management, game delivery, payment processing, and customer support.
- Legal Obligation: Philippine law requires ph998 to collect, verify, and retain certain personal data. This includes KYC verification under PAGCOR licensing conditions, AML reporting obligations under Republic Act No. 9160, and transaction record-keeping requirements.
- Legitimate Interests: ph998 processes technical and behavioral data to detect fraud, prevent money laundering, ensure platform security, and optimize the gaming experience for Filipino players — provided these interests do not override your fundamental rights.
- Consent: For optional data processing activities — such as receiving promotional communications, push notifications, or personalized bonus offers — ph998 relies on your explicit, freely given, and revocable consent.
How We Use Your Data
ph998 uses the personal data we collect for the following specific purposes:
- Account Creation & Management: To register your ph998 account, verify your identity and age (21+ requirement), and maintain your account profile throughout your relationship with ph998.
- Game & Platform Delivery: To provide access to all ph998 gaming products — slots, live dealer tables, bingo, Tongits Go, sports betting, and sabong — and to record game outcomes and transaction history in your account.
- Payment Processing: To process PHP deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels, and to maintain accurate financial records as required by Philippine law.
- Regulatory Compliance: To fulfill PAGCOR licensing conditions, report to the AMLC where required, respond to lawful government requests, and maintain records for the mandatory retention periods prescribed by Philippine law.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent account activity, collusion, money laundering, unauthorized access, and other prohibited conduct using automated monitoring and manual review.
- Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide 24/7 assistance in English and Filipino.
- Responsible Gaming: To administer deposit limits, session controls, self-exclusion requests, and reality check notifications, and to identify patterns of play that may indicate problem gambling requiring intervention.
- Marketing & Promotions: With your consent, to send personalized bonus offers, promotional notifications, and news about new games and features via email, SMS, or in-platform messaging. You may opt out at any time.
- Platform Improvement: To analyze aggregated, anonymized usage data to improve platform performance, game selection, payment processing speed, and the overall ph998 player experience.
Data Sharing & Disclosure
ph998 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the following strictly limited circumstances:
- Game Providers: Licensed third-party game studios and live dealer platform providers receive the minimum data necessary (e.g., player session tokens) to deliver their games on the ph998 platform. These providers are bound by data processing agreements aligned with the Data Privacy Act.
- Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive transaction data strictly necessary to process your deposits and withdrawals in Philippine Peso.
- KYC & Identity Verification Partners: Accredited identity verification services receive copies of your government-issued ID documents solely for the purpose of completing mandatory KYC verification.
- Regulatory Authorities: ph998 is legally required to share player data with PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine government authorities upon lawful request or where mandatory reporting thresholds are triggered.
- Fraud Prevention Networks: With your awareness, ph998 may share data with industry fraud prevention databases to protect all players on the platform from fraudulent activity and multi-accounting.
- Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by ph998 may access player data on a strictly need-to-know basis and are bound by confidentiality obligations.
Cookies & Tracking Technologies
ph998.net uses cookies and similar tracking technologies to operate the platform securely, maintain your session, remember your preferences, and analyze platform usage patterns. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
- Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences to personalize your ph998 experience.
- Analytics Cookies: Collect aggregated, anonymized data about how players navigate ph998.net — which game categories are most visited, page load performance, and navigation paths — to improve the platform. No personally identifiable information is included in analytics reports.
- Security Cookies: Used by ph998's fraud detection and bot prevention systems to distinguish legitimate human players from automated scripts and to flag unusual account activity for review.
You can manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging into your ph998 account. ph998 does not use third-party advertising or retargeting cookies.
Data Retention
ph998 retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account & KYC Records | 5 years from account closure | PAGCOR licensing conditions; RA 9160 (AMLA) |
| Financial Transaction Records | 5 years from transaction date | RA 9160 (AMLA); Bureau of Internal Revenue regulations |
| Game Activity Logs | 2 years from activity date | PAGCOR dispute resolution requirements |
| Customer Support Communications | 2 years from last interaction | Legitimate interests — dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 1 year | NPC accountability requirements |
| Technical/Security Logs | 12 months from creation | Legitimate interests — security monitoring |
After the applicable retention period expires, personal data is securely deleted or irreversibly anonymized. Data subject to active legal proceedings, regulatory investigations, or unresolved disputes may be retained beyond the standard retention period until the matter is fully resolved.
Data Security
ph998 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
- Encryption: All data in transit between your device and ph998 servers is protected by TLS 1.3 encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted using industry-standard AES-256 encryption.
- Access Controls: Personal data is accessible only to ph998 staff and systems that have a verified operational need for that specific data. Role-based access controls and multi-factor authentication are enforced for all administrative systems.
- Password Security: Player passwords are stored exclusively as salted cryptographic hashes. ph998 never stores plaintext passwords and will never ask you for your password via any communication channel.
- Infrastructure Security: ph998's platform infrastructure is hosted in secure data centers with physical access controls, network intrusion detection, and regular third-party security audits.
- Data Breach Response: ph998 maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk of serious harm, ph998 will notify the National Privacy Commission within 72 hours of discovery and will notify affected players without undue delay, as required by the Data Privacy Act and NPC Circular No. 16-03.
Your Rights Under the Data Privacy Act
As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by ph998. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14:
- Right to Be Informed: You have the right to know what personal data ph998 collects about you, why it is collected, how it is used, and with whom it is shared. This Privacy Policy is the primary means by which ph998 fulfills this obligation.
- Right of Access: You may request a copy of the personal data ph998 holds about you, including information about its source, the processing purposes, and any third parties to whom it has been disclosed.
- Right to Rectification: You may request correction of any inaccurate, incomplete, or outdated personal data we hold about you. Some corrections (e.g., changes to your registered legal name) may require supporting documentation for verification.
- Right to Erasure / "Right to be Forgotten": You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where it has been unlawfully processed. Note that this right is subject to overriding retention obligations under Philippine law.
- Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. Objection to direct marketing will be honored immediately.
- Right to Data Portability: Where technically feasible, you may request that ph998 provide your personal data in a structured, commonly used, machine-readable format, or transmit it directly to another service provider of your choosing.
- Right to Lodge a Complaint: If you believe ph998 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.
Children & Minors — Strict 21+ Policy
The ph998 platform is strictly prohibited for individuals under 21 years of age, in full compliance with PAGCOR regulations and Philippine law. ph998 does not knowingly collect, process, or retain personal data from persons below the age of 21.
- Age verification is a mandatory step during the account registration process. All applicants must provide a valid Philippine government-issued ID confirming they are 21 years of age or older before an account can be activated.
- If ph998 discovers — through KYC review, player report, or any other means — that an account is operated by a person under 21 years of age, the account will be immediately suspended, all associated personal data will be securely deleted (subject only to mandatory legal retention obligations), and any winnings will be forfeited.
- Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gambling platforms including ph998.
Cross-Border Data Transfers
As an online gaming platform, ph998 may engage service providers — including licensed game studios, payment processing infrastructure providers, and cloud hosting services — whose operations are based outside the Philippines. Where personal data is transferred to recipients in other countries, ph998 ensures that appropriate safeguards are in place, including:
- Data processing agreements that impose data protection obligations equivalent to those required under Philippine law.
- Transfer only to jurisdictions that the NPC has recognized as providing an adequate level of data protection, or to recipients who have implemented NPC-approved standard contractual clauses.
- Limiting cross-border data transfers to the minimum personal data necessary for the specific service being provided by the overseas recipient.
All cross-border data transfers involving Filipino player data are registered with the National Privacy Commission as required under NPC regulations. A record of all such transfers is maintained by our Data Protection Officer and is available to players upon request.
Changes to This Privacy Policy
ph998 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulations, or NPC guidance. The following process applies:
- The "Last Updated" date at the top of this document will be revised with each amendment. The effective date of the revised policy will be clearly indicated.
- For material changes — particularly those that affect your rights or the legal basis for processing — ph998 will notify registered players via a prominent notice on the platform and, where practicable, by email to your registered address at least 15 days before the changes take effect.
- Your continued use of the ph998 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the changes, you must cease using the platform and may request account closure via Customer Support.
- Previous versions of this Privacy Policy are archived and available upon request from our Data Protection Officer.
Contact Us & Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or ph998's handling of your personal data — including the exercise of your data subject rights under Republic Act No. 10173 — please contact ph998's designated Data Protection Officer:
- Data Protection Officer, ph998
- Platform: ph998.net
- Email: [email protected]
- Support Hours: 24/7, Philippine Standard Time (PST, UTC+8)
- Service Coverage: Metro Manila, Cebu, Davao, and all regions of the Philippines
If you are not satisfied with ph998's response to your privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.
How ph998 Protects Your Privacy
Your personal data deserves real protection — not just legal boilerplate. Here are the concrete measures ph998 has in place for every Filipino player.
TLS 1.3 & AES-256 Encryption
Every byte of data you send to ph998 is protected in transit by TLS 1.3 encryption. Your KYC documents, financial records, and account credentials are stored at rest with AES-256 encryption — the same standard used by global financial institutions.
Data Privacy Act Compliance
ph998 operates in full compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and all NPC-issued circulars and guidelines. A designated Data Protection Officer oversees every aspect of our data processing operations.
No Third-Party Data Sales
ph998 will never sell, rent, or license your personal data to advertisers, data brokers, or marketing networks. Your information exists solely to support your gaming experience and to meet our regulatory obligations under PAGCOR and Philippine AML law.
Full Control Over Your Data
Under the Data Privacy Act, you have the right to access, correct, delete, and port your personal data held by ph998. Exercise any of your data subject rights by contacting our Data Protection Officer — we will respond within 30 calendar days.
Defined Retention Periods
ph998 keeps your data only for as long as legally required — no indefinite storage. Retention periods are mapped to specific legal obligations under PAGCOR licensing conditions and Republic Act No. 9160, after which data is securely deleted or anonymized.
Breach Notification Protocol
In the unlikely event of a data breach, ph998 will notify the National Privacy Commission within 72 hours and inform affected players without undue delay. Our documented incident response plan ensures swift, transparent action in compliance with NPC Circular No. 16-03.
Play at ph998 — Where Your Privacy Comes First
Now that you know exactly how ph998 protects your personal data, experience the Philippines' most trusted online casino — PAGCOR-regulated, Data Privacy Act compliant, and built for Filipino players who value security. For players 21 and above only.
PAGCOR Regulated · Data Privacy Act Compliant · 21+ Only · Play Responsibly