ph92 Privacy Policy

1. Who We Are and How to Contact Us

This Privacy Policy is issued by ph92 ("ph92," "we," "us," or "our"), the operator of the online gaming platform accessible at ph92.one (the "Platform"). ph92 is the data controller responsible for the personal data collected through the Platform.

ph92 operates within a PAGCOR-regulated framework and is committed to protecting the privacy and personal data of all registered players and visitors to the Platform, in accordance with Republic Act No. 10173 (Data Privacy Act of 2012) and its implementing rules and regulations.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact the ph92 Data Privacy Officer at: [email protected]

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected by ph92 through:

• The ph92 website at ph92.one and all associated pages and subdomains;
• The ph92 mobile application, where available;
• Communications between you and ph92, including live chat, email, and any other support channels;
• Your use of any games, features, promotions, or services offered on the Platform.

This Privacy Policy does not apply to third-party websites, applications, or services that may be referenced on the Platform. ph92 is not responsible for the privacy practices of any third party.

3. Personal Data We Collect

ph92 collects personal data in the following categories, depending on how you interact with the Platform:

4. How We Use Your Personal Data

ph92 uses the personal data we collect for the following purposes:

• Account Registration and Management: To create and maintain your ph92 player account, verify your identity and age (21+ requirement), and manage your account settings and preferences.
• Platform Operation: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver all features and services available on the ph92 Platform.
• Regulatory Compliance: To comply with PAGCOR regulations, anti-money laundering (AML) obligations under Republic Act No. 9160 (Anti- Money Laundering Act), the Data Privacy Act of 2012, and any other applicable Philippine laws and regulations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other conduct that may violate these Terms or applicable law.
• Responsible Gaming: To monitor gaming behavior for signs of problem gambling, enforce deposit limits and self-exclusion orders, and provide responsible gaming support in accordance with PAGCOR guidelines.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance through our 24/7 support channels.
• Marketing and Promotions: To send you information about ph92 promotions, bonuses, and new games, where you have consented to receive such communications. You may withdraw consent at any time as described in Section 11.
• Platform Improvement: To analyze usage patterns, conduct internal research, and improve the performance, security, and user experience of the ph92 Platform.
• Legal Claims: To establish, exercise, or defend legal claims in connection with your use of the Platform.

5. Legal Bases for Processing

ph92 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its implementing rules:

• Contractual Necessity: Processing is necessary to perform the contract between you and ph92 — specifically, to operate your player account and deliver the services you have registered for.
• Legal Obligation: Processing is necessary to comply with applicable Philippine laws, including PAGCOR regulations, AML obligations, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for ph92's legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your data privacy rights.
• Consent: Where ph92 relies on your consent as the legal basis for processing — for example, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing Your Personal Data

ph92 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, and partner banks (BPI, BDO, UnionBank, Metrobank, Security Bank, Landbank, PNB) receive the financial data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC (Know Your Customer) service providers may receive your identity documents and biometric data solely for the purpose of verifying your identity and age in compliance with PAGCOR requirements.
• Game Software Providers: Licensed game providers may receive anonymized or pseudonymized session data necessary to deliver game content and resolve technical disputes. They do not receive your full identity or financial data.
• Regulatory Authorities: ph92 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities in response to lawful requests, court orders, or regulatory obligations.
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by ph92 may access personal data on a confidential basis where necessary to provide their services.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ph92's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom ph92 shares personal data are required to handle that data in accordance with applicable Philippine data privacy laws and ph92's data processing standards.

7. Cookies and Tracking Technologies

ph92 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and analyze Platform usage. The following types of cookies are used:

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the ph92 Platform, including your ability to log in and play games.

8. Data Retention

ph92 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Identity Data: Retained for the duration of your active ph92 account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AML obligations under Philippine law.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and its implementing rules.
• Gaming and Behavioral Data: Retained for a minimum of three (3) years from the date of each session, for dispute resolution and regulatory audit purposes.
• Communications Data: Retained for a minimum of two (2) years from the date of each communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, ph92 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9. Security of Your Personal Data

ph92 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the ph92 Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorized ph92 personnel with a legitimate operational need can access personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication requirements for ph92 administrative systems.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with the National Privacy Commission's breach notification requirements.

While ph92 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your ph92 Login credentials and for notifying ph92 immediately if you suspect unauthorized access to your account.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by ph92:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph92 holds about you, together with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data ph92 holds about you.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph92's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation where ph92 relies on legitimate interests as the legal basis for processing.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph92 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact the ph92 Data Privacy Officer at [email protected]. ph92 will respond to all verified requests within fifteen (15) business days of receipt. ph92 may request proof of identity before processing your request.

11. Marketing Communications

With your consent, ph92 may send you promotional communications about new games, bonuses, special offers, and platform updates via email, SMS, or in-platform notifications. You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any ph92 marketing email;
• Updating your communication preferences in your ph92 account settings; or
• Contacting ph92 support via live chat or email.

Withdrawal of marketing consent will not affect your ability to use the ph92 Platform or receive essential service communications such as transaction confirmations, security alerts, and account notifications.

12. Children and Minors

The ph92 Platform is strictly intended for persons aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. ph92 does not knowingly collect personal data from any person under the age of 21.

If ph92 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be deleted or returned to the payment source where feasible, and any winnings will be forfeited in accordance with ph92's Terms and Conditions.

If you believe that a minor has registered an account on the ph92 Platform, please contact ph92 support immediately via live chat or at [email protected].

13. Changes to This Privacy Policy

ph92 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services offered on the Platform. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect your rights or the way ph92 processes your personal data — ph92 will provide advance notice to registered players via email or an in-platform notification at least fourteen (14) days before the changes take effect.

Your continued use of the ph92 Platform following the effective date of any amendment to this Privacy Policy constitutes your acknowledgment of the updated policy. If you do not agree to the amended Privacy Policy, you must cease using the Platform and may request closure of your account.

14. Complaints and Data Privacy Officer

ph92 takes data privacy complaints seriously. If you have a concern about how ph92 has handled your personal data, we encourage you to contact us in the first instance so that we can attempt to resolve the matter directly.

ph92 Data Privacy Officer
Email: [email protected]
Response time: Within fifteen (15) business days of receipt of a verified complaint.

If you are not satisfied with ph92's response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available on the NPC's official website.