ph897 Privacy Policy

ph897 ("ph897," "we," "us," or "our") is the operator of the online gaming platform accessible at ph897.co. ph897 acts as the Personal Information Controller ("PIC") as defined under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR").

ph897 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation ("PAGCOR"). As a PAGCOR-regulated entity, ph897 is subject to PAGCOR's data governance requirements in addition to the DPA. This Privacy Policy describes how ph897 handles the personal data of all users of the ph897 Platform, including registered players, visitors, and applicants for account registration.

For any privacy-related queries or requests, you may contact our Data Protection Officer ("DPO") at: [email protected]

ph897 collects only the personal data necessary to provide gaming services, comply with regulatory obligations, and maintain account security. The categories of personal data we collect include:

Identity Data:

• Full legal name (as appearing on your government-issued Philippine ID);
• Date of birth and age verification information;
• Government ID type, ID number, and ID images submitted for KYC verification (e.g., PhilSys National ID, UMID, passport, driver's licence, SSS/GSIS card);
• Selfie or live photo for biometric matching during KYC, where applicable.

Contact Data:

• Philippine mobile number (used as primary account identifier and for OTP verification);
• Email address;
• Residential address in the Philippines (for account correspondence and AML records).

Financial Data:

• GCash or Maya account number and registered name;
• BPI, BDO, or Metrobank account details where used for deposits or withdrawals;
• Visa or Mastercard partial card details (card number masked — full card numbers are never stored by ph897);
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references.

Gaming Activity Data:

• Gaming session records, bet history, win/loss records, and game preferences;
• Bonus and promotion utilisation records;
• Responsible gaming settings, including self-imposed limits and self-exclusion status.

Technical Data:

• IP address and approximate geolocation (city/region level);
• Device type, operating system, and browser version;
• Session logs and login timestamps;
• Cookies and similar tracking technologies as described in Section 9.

Communications Data:

• Records of correspondence with ph897 support, including live chat transcripts and email exchanges;
• Responses to surveys, promotions, or feedback requests.

ph897 collects personal data through the following channels:

• Direct registration: Data you provide when creating a ph897 account, completing KYC verification, or updating your account profile;
• Platform usage: Data generated automatically through your interaction with the ph897 Platform — gaming sessions, cashier transactions, and navigation activity;
• Payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and card payment gateways when you make deposits or withdrawals;
• Third-party KYC providers: Identity verification data from accredited eKYC service providers engaged by ph897 to perform document authentication and biometric checks;
• Cookies and analytics: Behavioural and technical data collected via browser cookies and server-side session logs as described in Section 9;
• Regulatory sources: Data received from PAGCOR or other competent Philippine government authorities in the exercise of their regulatory functions.

ph897 processes your personal data for the following purposes:

• Account creation and management: To register, verify, and maintain your ph897 account;
• KYC and AML compliance: To verify your identity, confirm your eligibility to use the Platform, and comply with PAGCOR AML requirements under the Anti-Money Laundering Act (AMLA) and its implementing regulations;
• Service delivery: To enable gaming activity, process deposits and withdrawals, manage bonuses and Perya Points loyalty rewards, and provide 24/7 customer support;
• Security and fraud prevention: To detect and prevent fraudulent transactions, account takeovers, and other security threats — including unusual login location alerts and multi-device session monitoring;
• Responsible gaming: To enforce deposit limits, session controls, reality check reminders, and self-exclusion orders in compliance with PAGCOR's responsible gaming framework;
• Communications: To send transactional messages (deposit confirmations, withdrawal notifications, OTP codes), security alerts, and — where you have consented — promotional communications about ph897 offers and events;
• Legal and regulatory compliance: To comply with applicable Philippine law, PAGCOR directives, tax reporting requirements, court orders, and other legal obligations;
• Platform improvement: To analyse aggregate usage data and improve the ph897 Platform's performance, design, and feature set.

ph897 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing necessary for the performance of the ph897 user agreement (account registration, gaming services, payment processing);
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, AMLA obligations, and National Privacy Commission ("NPC") guidelines;
• Legitimate interest: Processing for fraud detection, security monitoring, and Platform analytics, where ph897's interests are not overridden by your data protection rights;
• Consent: Processing for optional marketing communications and non-essential cookies, where you have provided specific, informed, and freely given consent. You may withdraw consent at any time by contacting ph897 at [email protected].

ph897 does not sell your personal data to third parties. ph897 shares your data only in the following circumstances:

• Service providers and processors: Third-party vendors engaged by ph897 to provide services on our behalf, including eKYC providers, payment gateway operators, cloud hosting providers, customer support platform operators, and game content suppliers. All third-party processors are contractually bound to process data only on ph897's documented instructions and to maintain appropriate security standards;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission ("NPC"), the Bureau of Internal Revenue ("BIR"), and other competent Philippine government authorities where disclosure is required by law, regulation, or lawful order;
• Law enforcement: Philippine law enforcement agencies where disclosure is required to prevent, detect, or investigate a crime, or to comply with a valid court order or subpoena;
• Business transfers: In the event of a merger, acquisition, or sale of ph897's business assets, your data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

ph897's primary data infrastructure is hosted in data centres located in the Philippines or in jurisdictions that maintain data protection standards equivalent to or exceeding those required by the Philippine Data Privacy Act. Where ph897 engages service providers whose systems are located outside the Philippines (for example, certain cloud-based infrastructure components or game server networks), ph897 ensures that appropriate safeguards are in place, including Data Processing Agreements ("DPAs") that comply with NPC cross-border transfer requirements.

ph897 does not transfer your personal data to jurisdictions that lack adequate legal frameworks for data protection without first implementing contractual or organisational safeguards as required by the DPA and its IRR.

ph897 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. Specific retention periods include:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, in accordance with AMLA record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years in compliance with AMLA and BIR requirements;
• Gaming activity logs: Retained for a minimum of three (3) years for regulatory audit purposes;
• Customer support communications: Retained for two (2) years following the resolution of the relevant inquiry;
• Marketing consent records: Retained for the duration of consent validity plus two (2) years following withdrawal of consent.

Upon expiry of the applicable retention period, ph897 will securely delete, destroy, or anonymise your personal data in accordance with NPC-approved data disposal procedures.

ph897 uses cookies and similar technologies on the ph897.co Platform to support essential Platform functions and to improve user experience. The categories of cookies used are:

• Strictly necessary cookies: Required for core Platform functionality including user authentication, session management, and fraud prevention. These cookies cannot be disabled without impairing Platform functionality;
• Functional cookies: Used to remember your preferences (e.g., language settings, game lobby display options) to provide a more personalised experience;
• Analytics cookies: Used to collect aggregate, anonymised data on how visitors use the ph897 Platform — pages visited, session duration, and navigation patterns. This data is used to improve Platform design and performance. Analytics cookies are only set with your consent;
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats.

You may manage non-essential cookie preferences through the cookie settings panel available on the ph897 Platform. Please note that disabling certain cookies may affect Platform functionality.

ph897 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph897 servers;
• Encrypted storage of sensitive data fields including passwords (hashed), financial identifiers, and ID document images;
• Role-based access controls limiting ph897 staff access to personal data to those with a verified operational need;
• Multi-factor authentication ("MFA") for ph897 administrative systems;
• Continuous intrusion detection and security monitoring of ph897 infrastructure;
• Regular third-party security assessments and penetration testing.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph897:

To exercise any of the above rights, please submit a written request to [email protected], identifying yourself as the data subject, specifying the right you wish to exercise, and providing sufficient information for ph897 to verify your identity. ph897 will respond to verified requests within the timeframe prescribed by the NPC.

The ph897 Platform is strictly for individuals who are 21 years of age or older. ph897 does not knowingly collect, process, or retain personal data of individuals under 21 years of age. If ph897 discovers that personal data of a minor has been collected — whether through misrepresentation during registration or otherwise — ph897 will immediately suspend the relevant account and delete the minor's personal data, subject to any overriding legal reporting obligations.

If you believe a minor has registered on the ph897 Platform, please notify ph897 immediately at [email protected].

ph897 may amend this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or ph897's data processing practices. Material changes will be communicated to registered players via email to their registered address and/or by prominent notice on the ph897 Platform prior to the effective date of the amendment.

Non-material clarifications — such as corrections to typographical errors or reorganisation of existing content — may be made without advance notice. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the ph897 Platform following the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or ph897's data processing practices, please contact ph897's Data Protection Officer:

• Email: [email protected] (plain text only)
• Live Chat: Available 24/7 through the ph897 Platform support widget

ph897 aims to resolve all data privacy inquiries within fifteen (15) business days of receipt of a verified request. If you are not satisfied with ph897's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.