ph96 Privacy
Policy

1 Overview

ph96 is committed to protecting the privacy and personal data of every player on our platform. We operate in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). We are also subject to the anti-money laundering data obligations under the Anti-Money Laundering Act (AMLA) as amended, and the data requirements of PAGCOR's online gaming regulatory framework.

This Policy applies to all personal data collected through the ph96 website, mobile platform, customer support channels, and any other touchpoint where you interact with ph96. It does not apply to third-party websites or services that may be linked from ph96 — those are governed by their own privacy policies.

We do not sell your personal data to third parties. We do not use your data for purposes beyond those described in this Policy without your prior consent, except where required by law.

2 Personal Data We Collect

ph96 collects the following categories of personal data:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth and age verification data
• Residential address (barangay, city/municipality, province, ZIP code)
• Philippine mobile number
• Email address
• Nationality and citizenship

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., PhilSys national ID, passport, driver's license, SSS ID, GSIS ID, PRC ID, voter's ID)
• Selfie photographs submitted for facial verification
• Source of funds declarations where required by PAGCOR or AMLC regulations

2.3 Financial Data

• GCash or PayMaya account reference numbers (we do not store full wallet credentials)
• Bank account details for withdrawal processing (account name, bank name, account number)
• Transaction history: deposits, withdrawals, bonus credits, and adjustments
• Debit card details (card number is tokenized; we do not store full card numbers)

2.4 Gaming Activity Data

• Game session logs, bet history, win/loss records
• Bonus and promotion participation records
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Game preferences and platform usage patterns

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Unique device identifiers
• Login timestamps and session duration data
• Cookie and tracking technology data (see Section 9)

2.6 Communications Data

• Records of customer support interactions via live chat or email
• Feedback, complaints, and dispute records
• Marketing communication preferences and opt-in/opt-out records

3 How We Collect Your Data

ph96 collects personal data through the following means:

• Direct collection: Information you provide when registering your ph96 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the ph96 platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment verification data from payment processors such as GCash and PayMaya.
• Regulatory sources: Data received from PAGCOR, AMLC, or other Philippine regulatory authorities in connection with our compliance obligations.

4 Purposes of Processing

ph96 processes your personal data for the following purposes:

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ph96 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR regulations, AMLA obligations, and NPC requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

ph96 does not sell your personal data. We share your data only in the following circumstances:

6.1 Service Providers

We share data with carefully selected third-party service providers who process data on our behalf under strict data processing agreements. These include KYC and identity verification providers, payment processors (GCash, PayMaya, and Philippine banks), fraud and AML screening providers, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually bound to process your data only for the purposes we specify and in compliance with applicable Philippine data protection law.

6.2 Regulatory and Law Enforcement Authorities

ph96 is required by Philippine law to share certain data with regulatory and law enforcement authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities. We will disclose your data to these authorities when required by law, court order, or regulatory directive.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ph96's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. We will notify you of any such transfer via email or in-platform notification.

6.4 With Your Consent

We may share your data with third parties for purposes not described above where you have given your explicit prior consent.

7 Data Retention

ph96 retains your personal data for as long as necessary to fulfill the purposes described in this Policy, and in accordance with applicable Philippine legal and regulatory requirements. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR regulations and AMLA obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLA.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the activity.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing data: Retained until you withdraw consent or opt out, plus one (1) year thereafter for suppression list purposes.
• Technical and device data: Retained for twelve (12) months from collection, unless required longer for fraud or security investigations.

Upon expiry of the applicable retention period, ph96 will securely delete or anonymize your personal data in accordance with NPC-approved disposal procedures.

8 Security Measures

ph96 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• TLS/SSL encryption for all data transmitted between your device and ph96 servers
• Encryption of sensitive data at rest, including financial and KYC data
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Multi-factor authentication for staff accessing systems containing personal data
• Regular security audits and penetration testing by independent security professionals
• Incident response procedures compliant with NPC breach notification requirements
• Staff training on data privacy and security obligations

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph96 will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.

While ph96 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your ph96 Login credentials and for notifying us immediately of any suspected unauthorized access to your account.

9 Cookies & Tracking Technologies

ph96 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies: Required for the platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect aggregated, anonymized data about how players use the ph96 platform to help us improve the user experience. Used only with your consent.
• Marketing cookies: Used to deliver relevant promotions and measure campaign effectiveness. Used only with your explicit consent.

You can manage your cookie preferences through the cookie consent banner displayed on your first visit to ph96, or through your browser settings. Disabling non-essential cookies will not affect your ability to use core ph96 gaming services.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph96:

• Right to be informed: The right to know what personal data ph96 collects about you and how it is processed — which is the purpose of this Policy.
• Right of access: The right to request a copy of the personal data ph96 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations under PAGCOR regulations and AMLA.
• Right to object: The right to object to processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph96 has violated your data privacy rights.

To exercise any of these rights, please contact ph96's Data Protection Officer (DPO) using the contact details in Section 14. ph96 will respond to all data subject requests within fifteen (15) days of receipt, in accordance with NPC guidelines. Some requests may be subject to identity verification before processing.

11 Minors & Age Verification

ph96 does not knowingly collect personal data from persons under 21 years of age. Age verification is a mandatory step in the ph96 KYC process, and accounts that cannot verify the player's age as 21 or older will not be permitted to make deposits or place bets.

If ph96 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the account, delete the associated personal data, and refund any deposits made, subject to verification. If you believe a minor has registered on ph96, please contact our support team immediately.

12 Cross-Border Data Transfers

ph96 primarily processes and stores your personal data within the Philippines. Where it is necessary to transfer your personal data to service providers located outside the Philippines — for example, cloud infrastructure providers or KYC technology providers — ph96 ensures that such transfers are made only to countries or organizations that provide an adequate level of data protection, or under contractual arrangements that impose data protection obligations equivalent to those required under Philippine law, in accordance with NPC guidelines on cross-border data transfers.

ph96 will not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent, except where required by Philippine law.

13 Changes to This Privacy Policy

ph96 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. Where changes are material, ph96 will provide reasonable advance notice to registered players via email or in-platform notification. The effective date of the current version of this Policy is stated at the top of this page. Your continued use of ph96 services after the effective date of any update constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically.

14 Contact & Data Protection Officer

ph96 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions about this Privacy Policy, wish to exercise your data privacy rights, or wish to lodge a privacy complaint, please contact the ph96 DPO:

You may also contact ph96 customer support via live chat, available 24 hours a day, 7 days a week, for general privacy inquiries. For formal data subject requests, please contact the DPO directly by email.

If you are not satisfied with ph96's response to your privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.