ph128 Casino Privacy Policy

This Privacy Policy applies to all personal data collected and processed by ph128 Casino ("ph128", "we", "our", or "us") in connection with the operation of the ph128 website at ph128.net (the "Platform") and all related services available to Members, including but not limited to account registration, deposits and withdrawals, gaming activities, customer support interactions, and marketing communications.

This policy governs the data of all Members and visitors to the ph128 Platform regardless of their location within the Philippines, including those based in Metro Manila, Cebu, Davao, Quezon City, Makati, and all regions across Luzon, Visayas, and Mindanao. This policy should be read alongside the ph128 Terms & Conditions, which together form the complete agreement governing your relationship with ph128.

ph128 acts as the Personal Information Controller in respect of personal data collected through the Platform. Where ph128 engages third-party service providers to process data on its behalf, those parties act as Personal Information Processors under binding contractual arrangements that require them to maintain confidentiality and security standards consistent with this policy and applicable Philippine law.

ph128 collects the minimum personal data necessary to operate the Platform, verify Member identities, process transactions, and comply with applicable legal and regulatory obligations. The categories of personal data we collect include:

ph128 does not intentionally collect sensitive personal information beyond what is strictly required by law or regulation, such as Anti-Money Laundering Council (AMLC) reporting obligations. Where sensitive personal information is collected, it is handled with additional safeguards as described in Section 9 of this policy.

ph128 collects personal data through the following means:

• Direct submission: Data you provide when registering a ph128 account, completing identity verification (KYC), making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you access or interact with the Platform, including through cookies, web beacons, pixel tags, and server log files. See Section 7 for full details on cookies.
• Third-party sources: Data received from identity verification service providers, payment processors (such as GCash, PayMaya, and partner banks), fraud detection agencies, and regulatory databases where ph128 is required or permitted to conduct background checks.
• Publicly available sources: In limited circumstances relevant to AML compliance, ph128 may cross-reference data against publicly available sanctions lists, politically exposed persons (PEP) registers, and adverse media sources.

ph128 processes your personal data only for specific, legitimate, and declared purposes. The primary purposes for which ph128 processes Member data are:

• Account creation and management: To register your ph128 account, maintain your account profile, and administer your membership throughout its lifecycle.
• Identity verification (KYC): To verify your identity and age (21+ requirement) as required by PAGCOR regulations and applicable AML legislation, and to prevent the use of ph128 services by ineligible or fraudulent individuals.
• Transaction processing: To process deposits via GCash, PayMaya, BPI, BDO, Metrobank, and other approved channels, and to process withdrawal requests to verified accounts in Philippine Peso (₱).
• Gaming services: To enable you to access and enjoy all ph128 gaming categories, including slots, live casino, WL Live sports betting, table games, and bingo, and to maintain accurate records of your gaming activity.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and training purposes.
• Legal and regulatory compliance: To meet ph128's obligations under Philippine law, including the Anti-Money Laundering Act, the Data Privacy Act, and applicable PAGCOR licensing conditions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal conduct on the Platform.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools requested by Members.
• Marketing communications: Where you have given your consent, to send you promotional offers, bonus notifications, and platform updates by email, SMS, or push notification. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the functionality, content, and user experience of the ph128 Platform.

Under the Data Privacy Act of 2012, ph128 is required to identify a lawful basis for each processing activity involving your personal data. The legal bases ph128 relies upon are:

• Contractual necessity: Processing required to perform the contract between you and ph128 — namely, operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML reporting, KYC verification, and tax obligations.
• Legitimate interests: Processing carried out for ph128's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for the purposes of direct marketing communications. You may withdraw consent at any time by contacting ph128 support or updating your communication preferences in your account dashboard.

ph128 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. ph128 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers engaged to process your deposits and withdrawals. These providers receive only the data strictly necessary to complete the relevant transaction.
• Identity verification providers: Third-party KYC and AML screening services engaged by ph128 to verify Member identities, conduct PEP and sanctions screening, and support fraud detection.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform technology vendors who process data on ph128's behalf under binding data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and any other Philippine government authority to which ph128 is legally required to disclose data.
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged in connection with ph128's business operations, subject to professional confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of all or a substantial part of ph128's business, your personal data may be transferred to the successor entity, who will be required to honour the terms of this policy.

ph128 uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and gather analytics data. The types of cookies ph128 uses are:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your ph128 account and security cookies that help protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings, and to provide enhanced features within the Platform.
• Analytics cookies: Used to collect aggregated information about how visitors use the Platform, which pages are most visited, and how users navigate between sections. This helps ph128 improve the platform experience over time. Analytics data is anonymised where possible.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content based on your activity on the Platform and to measure the effectiveness of ph128 marketing campaigns.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the Platform. Note that strictly necessary cookies cannot be disabled without rendering the Platform unusable.

ph128 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by applicable Philippine law and regulation. The general retention periods applied by ph128 are:

• Account and identity data: Retained for the duration of your active membership and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations under Republic Act No. 9160 (Anti-Money Laundering Act) as amended.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial and tax regulations.
• Customer support records: Retained for three (3) years following the resolution of each support interaction.
• Marketing consent records: Retained for as long as you remain subscribed to ph128 marketing communications and for two (2) years following any withdrawal of consent, to demonstrate compliance with consent obligations.
• Technical and usage data: Generally retained for a period of up to twelve (12) months in identifiable form, after which data may be retained in anonymised and aggregated form for analytical purposes without time limit.

Upon expiry of the relevant retention period, ph128 will securely delete or anonymise your personal data in accordance with industry-standard data destruction procedures.

ph128 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the ph128 Platform.
• Encryption of sensitive data at rest, including identity documents and financial information, using industry-standard encryption algorithms.
• Role-based access controls ensuring that ph128 staff can only access personal data that is necessary for the performance of their specific role.
• Regular security assessments, penetration testing, and vulnerability scanning of ph128 systems.
• Multi-factor authentication requirements for privileged access to ph128 internal systems.
• Staff training on data privacy obligations and security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph128 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected Members as required by law and NPC Circular No. 16-03.

Under the Data Privacy Act of 2012, all ph128 Members are entitled to exercise the following rights in relation to their personal data. To exercise any of these rights, please contact ph128's Data Protection Officer (DPO) using the contact details in Section 14.

ph128 will respond to all verified data subject requests within thirty (30) days of receipt. Complex or multiple requests may require up to an additional thirty (30) days, in which case ph128 will notify you of the extension within the initial thirty-day period.