Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ph979 ("ph979," "we," "us," or "our") collects, uses, stores, shares, and protects personal information relating to you when you access or use the ph979 Platform at ph979.app, including all related services, games, and features offered through it.

By registering an account on ph979, making a deposit, or using any part of the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the ph979 Platform.

This Policy should be read together with ph979's Terms & Conditions and Responsible Gaming Policy, which are available at ph979.app. In the event of any inconsistency between this Policy and the Terms & Conditions on a matter of data privacy, this Policy shall prevail.

2. Who We Are (Data Controller)

For the purposes of the Data Privacy Act of 2012 and applicable Philippine data protection law, ph979 is the personal information controller in respect of personal data it collects and processes through the ph979 Platform.

ph979 operates an online casino and sports betting platform specifically serving Filipino players in accordance with applicable Philippine gaming regulations overseen by PAGCOR. As a regulated gaming operator, ph979 is subject to data processing obligations arising from both data privacy law and gaming-specific regulatory requirements.

For all data privacy matters, ph979 can be contacted via the details set out in Section 15 of this Policy.

3. Personal Data We Collect

ph979 collects and processes the following categories of personal data depending on how you interact with the Platform:

ph979 does not collect sensitive personal information as defined under RA 10173 (such as health information, sexual orientation, or religious affiliation) unless strictly necessary for a specific regulatory or responsible gaming purpose, and only with your explicit consent.

4. How We Collect Your Data

ph979 collects personal data through the following means:

4.1 Direct Collection

You provide data directly to ph979 when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or respond to a survey or feedback request.

4.2 Automated Collection

As you interact with the ph979 Platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser settings, and interaction data such as pages visited, games launched, and time spent on each section of the Platform. See Section 11 for more on cookies.

4.3 Third-Party Sources

ph979 may receive personal data about you from third parties in certain circumstances, including:

• Payment processors (GCash, PayMaya, banks) when verifying transaction authenticity
• Identity verification service providers during KYC checks
• Fraud prevention and AML compliance databases
• PAGCOR or other regulatory bodies where legally required
• Self-exclusion registers maintained by Philippine gaming regulators

5. Why We Process Your Personal Data

ph979 processes your personal data for the following purposes:

1. Account Registration and Management — To create, maintain, and administer your ph979 account, including verifying your identity and age (21+ requirement).
2. Service Delivery — To provide access to games, live dealer tables, sports betting, bingo, and sabong; to process bets and display results; and to credit winnings to your wallet.
3. Financial Transactions — To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment methods.
4. KYC and Regulatory Compliance — To verify identity in compliance with PAGCOR requirements and AML/CTF obligations under Philippine law.
5. Responsible Gaming — To monitor gaming activity, implement player-requested limits, identify at-risk behaviour, and enforce self-exclusion requests.
6. Fraud Detection and Security — To detect and prevent unauthorized access, fraudulent accounts, money laundering, and other prohibited conduct.
7. Customer Support — To respond to your inquiries, resolve disputes, and maintain records of support interactions.
8. Marketing and Promotions — To send you relevant offers, bonus notifications, and promotional communications where you have provided consent or where ph979 has a legitimate interest. You may opt out of marketing communications at any time.
9. Platform Improvement — To analyse usage patterns, conduct internal research, and improve the performance, design, and content of the ph979 Platform.
10. Legal Obligations — To comply with court orders, regulatory investigations, tax reporting requirements, and other legal or governmental demands applicable in the Philippines.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph979 relies on the following lawful bases to process your personal data:

• Contractual Necessity — Processing required to perform the contract between ph979 and you (account registration, game delivery, payment processing).
• Legal Obligation — Processing required to comply with Philippine laws and PAGCOR regulations, including AML, KYC, and tax obligations.
• Legitimate Interests — Processing conducted for ph979's legitimate business interests, including fraud prevention, security monitoring, responsible gaming, and platform improvement, where these interests are not overridden by your data protection rights.
• Consent — Processing based on your freely given, specific, informed consent — primarily for direct marketing communications and the processing of any sensitive personal information. Consent may be withdrawn at any time without affecting the lawfulness of processing that occurred before withdrawal.

7. How We Share Your Personal Data

ph979 does not sell your personal data to third parties. We share personal data only as described below and only to the extent necessary for the stated purpose:

7.1 Service Providers

ph979 engages third-party service providers who process personal data on our behalf under binding data processing agreements. These include payment processors (GCash, PayMaya, and banking partners), identity verification providers, cloud hosting providers, customer support software providers, and analytics platforms. All service providers are required to process data solely on ph979's documented instructions.

7.2 Regulatory and Government Bodies

ph979 may disclose personal data to PAGCOR, the National Privacy Commission, Philippine law enforcement, the Anti-Money Laundering Council (AMLC), and other government bodies where required by law, regulation, court order, or official request.

7.3 Fraud Prevention and AML

ph979 may share personal data with fraud prevention agencies and AML compliance databases where we have a legal obligation to report suspicious activity or verify the legitimacy of transactions.

7.4 Self-Exclusion Registers

Where a player requests self-exclusion, ph979 may be required to share relevant account information with PAGCOR-maintained exclusion registers to ensure the exclusion is honoured across regulated gaming platforms.

7.5 Business Transfers

In the event of a merger, acquisition, or transfer of business assets involving ph979, your personal data may be transferred to a successor entity. We will notify affected players in advance of any such transfer and the applicable Privacy Policy at that time will govern the processing of transferred data.

8. International Data Transfers

ph979 primarily stores and processes personal data within systems operating in or accessible from the Philippines. Where personal data is transferred to service providers or infrastructure located outside the Philippines, ph979 ensures that such transfers comply with the Data Privacy Act of 2012, including the requirement that the receiving country provides an adequate level of data protection, or that appropriate contractual safeguards (such as data transfer agreements) are in place.

ph979 does not transfer your financial credentials — including GCash details, PayMaya account information, or bank credentials — to any international third party. Payment credentials are processed exclusively through the relevant Philippine-regulated payment gateways.

9. Data Retention

ph979 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to mandatory retention periods imposed by applicable Philippine law and PAGCOR regulations.

• Account Data — Retained for the duration of your active account plus a minimum of five (5) years following account closure, in line with AML and gaming regulatory requirements.
• Transaction Records — Retained for a minimum of five (5) years in compliance with AMLC and tax reporting obligations.
• KYC Documents — Retained for the duration of the account plus five (5) years post-closure.
• Customer Support Records — Retained for three (3) years from the date of the most recent interaction.
• Marketing Consent Records — Retained until consent is withdrawn plus an additional three (3) years for compliance evidence.
• Technical and Usage Data — Typically retained for up to twelve (12) months in identifiable form, after which it is anonymised or deleted.

Following the applicable retention period, personal data is securely deleted, anonymised, or rendered non-recoverable in accordance with ph979's data disposal procedures.

10. Data Security

ph979 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption — All data transmitted between your device and the ph979 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols — the same technology used by Philippine banks and financial institutions.
• Encrypted Data Storage — Sensitive personal and financial data stored in ph979's systems is encrypted at rest using industry-standard algorithms.
• Access Controls — Access to personal data is restricted to ph979 personnel and authorised service providers who have a legitimate need to process such data. All staff with data access are subject to confidentiality obligations.
• Two-Factor Authentication — ph979 offers optional 2FA for player accounts to provide an additional security layer for login and high-value transaction authentication.
• Regular Security Reviews — ph979 conducts periodic security assessments and vulnerability reviews of its systems and infrastructure.
• Incident Response — ph979 maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected individuals in accordance with the Data Privacy Act's breach notification requirements.

While ph979 takes all reasonable steps to protect your data, no system is completely immune to security risk. You are also responsible for maintaining the security of your ph979 account credentials.

11. Cookies and Tracking Technologies

ph979 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit ph979.app. We use the following categories of cookies:

• Strictly Necessary Cookies — Required for the Platform to function correctly. These include session management, security tokens, and login state. These cannot be disabled without impairing core functionality.
• Performance and Analytics Cookies — Used to collect anonymised data about how players interact with the Platform, including which pages are most visited and error reports. This data helps ph979 improve the user experience.
• Functional Cookies — Used to remember your preferences such as language settings, display options, and previously visited game sections.
• Marketing and Targeting Cookies — Used to deliver relevant promotional content to you on the Platform based on your interaction history. These are only set where you have provided consent.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ph979 Platform. Detailed cookie management instructions are available in your browser's help documentation.

12. Your Data Privacy Rights

Under the Data Privacy Act of 2012, as a Philippine data subject you have the following rights in relation to your personal data held by ph979:

To exercise any of the above rights, please contact ph979 via the details in Section 15. ph979 will respond to all verified data subject requests within the timeframes prescribed by the Data Privacy Act of 2012. We may require identity verification before processing a request to protect against unauthorised disclosure.

13. Children and Minors

If ph979 discovers or is notified that personal data of a person under 21 has been collected through the Platform, we will take immediate steps to delete that data and close the associated account. The relevant deposit will be returned in accordance with PAGCOR guidelines.

Parents and guardians who become aware that a minor has registered on ph979 are requested to contact customer support immediately so the account can be investigated and closed without delay.

14. Changes to This Privacy Policy

ph979 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email to the address associated with their ph979 account and/or by a prominent notice on the Platform prior to the changes taking effect. The revised Policy will bear an updated effective date.

Where changes involve new processing purposes or new categories of data that require your consent, ph979 will seek your consent before commencing such processing. Your continued use of the ph979 Platform after the effective date of a revised Policy constitutes your acknowledgement that you have reviewed the updated Policy.

Previous versions of this Privacy Policy are archived by ph979 and are available to players upon written request to customer support.

15. Contact and Data Privacy Complaints

For all data privacy-related inquiries, requests to exercise your rights, or to report a data privacy concern, please contact ph979 using the following details:

ph979 aims to acknowledge all data privacy requests within three (3) business days and to resolve them within thirty (30) calendar days of receipt, unless a legal extension applies.

If you are not satisfied with ph979's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. The NPC can be contacted via the official government channels of the Republic of the Philippines.