Privacy Policy — ph8789 Casino

This Privacy Policy is issued by ph8789 ("the Platform", "we", "us", "our"), the operator of the online gaming platform accessible at ph8789.net. ph8789 is a premium online gaming platform serving the Philippines market, operating under PAGCOR regulatory oversight and in compliance with all applicable Philippine data privacy legislation.

For the purposes of Republic Act No. 10173 (the Data Privacy Act of 2012, or "DPA") and its Implementing Rules and Regulations, ph8789 acts as the Personal Information Controller in respect of the personal data of players and visitors collected through the ph8789 platform and related services.

This Privacy Policy applies to all personal data collected by ph8789 through the ph8789.net website, any associated mobile applications, customer support communications, and any other channel through which you interact with ph8789. It applies to all registered members as well as to unregistered visitors who browse the platform.

ph8789 processes personal data in accordance with the following Philippine legal instruments and regulatory frameworks:

• Republic Act No. 10173 — Data Privacy Act of 2012 (DPA), as enforced by the National Privacy Commission (NPC)
• IRR of Republic Act No. 10173 — Implementing Rules and Regulations of the Data Privacy Act
• Republic Act No. 9160 — Anti-Money Laundering Act of 2001, as amended by Republic Act Nos. 9194, 10167, 10365, and 11521, which mandates collection and retention of certain player identity and transaction data
• PAGCOR Regulations — Know Your Customer (KYC) and player data requirements issued by the Philippine Amusement and Gaming Corporation
• NPC Circular No. 16-03 and subsequent NPC issuances concerning data breach notification obligations

Where these instruments impose obligations on ph8789 that require the processing of your personal data without the possibility of consent-based withdrawal — such as AML transaction monitoring and PAGCOR reporting — those obligations take precedence over any individual data subject preference not to have their data processed for those specific purposes. ph8789 will always inform you when mandatory legal processing of this type applies to your data.

ph8789 collects personal data through several channels and for distinct purposes. The following table summarises the categories of personal data we collect, along with the context in which each category is collected.

3.1 Sensitive Personal Information

Under the DPA, certain categories of personal information are classified as sensitive personal information and receive heightened protection. ph8789 may process the following sensitive personal information where strictly necessary:

• Government-issued ID numbers (e.g., PhilSys National ID number, passport number, driver's license number) — collected for KYC identity verification only
• Financial account information — collected solely for processing deposits and withdrawals and for AML compliance purposes

ph8789 does not collect health information, political opinions, religious beliefs, or other categories of sensitive personal information that are not necessary for the operation of the ph8789 gaming platform.

3.2 Data You Do Not Need to Provide

Providing personal data to ph8789 is voluntary, except where a specific data point is required for a mandatory purpose (such as KYC identity verification before withdrawal processing). If you choose not to provide data that is required for a specific service, ph8789 may be unable to provide that service to you — for example, withdrawals cannot be processed without completed KYC verification.

ph8789 uses the personal data we collect for the following purposes:

• Account creation and management: To register your ph8789 account, verify your identity, maintain your account profile, and communicate account-related information to you
• KYC and regulatory compliance: To verify your age (21+ requirement), identity, and payment method ownership as required by PAGCOR and Philippine AML regulations
• Payment processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported Philippine payment methods, and to verify that payment accounts are registered in your name
• Platform operation and security: To detect and prevent fraud, account sharing, bonus abuse, money laundering, and other prohibited conduct; to monitor for multiple account creation; and to maintain platform integrity
• Responsible gaming: To monitor gaming activity patterns that may indicate problem gambling behaviour and to administer self-exclusion, deposit limit, and cooling-off requests in accordance with PAGCOR responsible gaming requirements
• Customer support: To respond to your enquiries, complaints, and support requests, and to maintain records of support interactions for quality assurance purposes
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and platform news via email or SMS — only where you have opted in to receive such communications
• Platform improvement: To analyse aggregated, anonymised usage data to improve the ph8789 platform, user experience, and game offering
• Legal and regulatory obligations: To comply with PAGCOR reporting requirements, AMLC suspicious transaction reporting obligations, NPC data breach notification requirements, and court orders or legal process issued by competent Philippine authorities

Under the Data Privacy Act of 2012, ph8789 must have a valid legal basis for each processing activity. The legal bases ph8789 relies upon are as follows:

• Contractual necessity: Processing required to fulfil the ph8789 player account agreement — including account registration, game provision, payment processing, and customer support — is based on the contract between ph8789 and the registered player.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine laws is based on legal obligation. This processing cannot be refused or restricted by a data subject.
• Legitimate interests: Processing for fraud prevention, platform security, bonus abuse detection, and responsible gaming monitoring is based on ph8789's legitimate interest in operating a secure, fair, and compliant gaming platform — provided that such interests are not overridden by the rights and freedoms of the data subject.
• Consent: Processing for optional marketing communications (email and SMS promotions) is based on your explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ph8789 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

6.1 Third-Party Processors

ph8789 engages third-party service providers who process personal data on our behalf as data processors. These include:

• Payment processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), and Philippine banking partners (BPI, BDO, Metrobank, UnionBank) — for deposit and withdrawal processing
• KYC verification providers: Third-party identity verification services that assist ph8789 in verifying government-issued identification documents
• Platform technology providers: Game content suppliers, platform software providers, and hosting infrastructure providers who may process technical and gaming activity data in the course of providing services to ph8789
• Customer support tools: Live chat and ticketing platform providers used to deliver ph8789 customer support services

All third-party processors engaged by ph8789 are bound by data processing agreements that require them to process personal data only in accordance with ph8789's instructions, to maintain appropriate security measures, and to comply with applicable Philippine data privacy law.

6.2 Regulatory and Legal Disclosure

ph8789 is required by law to disclose certain player data to the following Philippine regulatory bodies and authorities without the option of withholding consent:

• PAGCOR — for player registration records, gaming activity reports, and regulatory audits
• Anti-Money Laundering Council (AMLC) — for covered transaction reports (CTRs) and suspicious transaction reports (STRs) as required under the Anti-Money Laundering Act
• National Privacy Commission (NPC) — in the event of a personal data breach, as required under NPC Circular No. 16-03
• Courts and law enforcement agencies — where ph8789 receives a valid court order, subpoena, or other lawful directive from a competent Philippine authority

ph8789 uses cookies and similar tracking technologies on the ph8789.net platform to ensure proper platform functionality, maintain session security, and analyse aggregated usage patterns. The types of cookies used by ph8789 are as follows:

• Essential cookies: Required for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your login state and account preferences. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors use the ph8789 platform — such as which pages are most visited and how users navigate between sections. This data is used to improve the platform experience and does not identify individual users.
• Security cookies: Used by ph8789's fraud prevention and bot detection systems to identify suspicious access patterns and protect player accounts from unauthorised access.

ph8789 does not use advertising or cross-site tracking cookies. We do not place cookies on your device for the purpose of tracking your activity on other websites or serving you targeted advertising on third-party platforms.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the ph8789 platform, but may affect certain analytics features. Disabling essential cookies will likely prevent login and normal platform operation.

ph8789 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer mandatory retention period imposed by applicable Philippine law. The following retention schedule applies:

Upon expiry of the applicable retention period, ph8789 will securely delete or anonymise your personal data. Anonymised data — which cannot be re-linked to any individual — may be retained indefinitely for statistical and platform improvement purposes.

ph8789 implements technical and organisational security measures proportionate to the sensitivity of the personal data we process. Our security framework includes the following measures:

• Encryption: All personal data transmitted between your browser or device and the ph8789 platform is protected using Transport Layer Security (TLS 1.2 or higher). Personal data stored in ph8789 databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within ph8789's systems is restricted on a need-to-know basis. All ph8789 personnel with access to personal data are bound by confidentiality obligations and receive data privacy training.
• Account security: ph8789 supports two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised account access. Players are encouraged to enable 2FA in their account security settings.
• Fraud and intrusion detection: ph8789 operates automated monitoring systems to detect unusual access patterns, login anomalies, and potential data security incidents in real time.
• Third-party security assessments: ph8789's platform infrastructure undergoes periodic security reviews to identify and remediate vulnerabilities.

While ph8789 takes all reasonable measures to protect your personal data, no internet-based system can guarantee absolute security. You play a role in your own account security by keeping your ph8789 login credentials confidential and enabling two-factor authentication.

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in relation to your personal data held by ph8789. To exercise any of these rights, please contact ph8789 at [email protected] with the subject line "Data Privacy Request".

• Right to be informed: You have the right to be informed whether ph8789 processes personal data about you, and if so, what data is processed and for what purpose. This Privacy Policy is the primary means by which ph8789 fulfils this obligation.
• Right of access: You may request a copy of the personal data ph8789 holds about you. ph8789 will respond to access requests within 15 business days, subject to identity verification.
• Right to rectification: If any personal data ph8789 holds about you is inaccurate or incomplete, you have the right to request correction. You may update most account details directly via your ph8789 account profile settings.
• Right to erasure (right to be forgotten): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no legal obligation requires its retention. Deletion requests cannot override mandatory AML and PAGCOR retention periods.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on ph8789's legitimate interests, subject to ph8789's right to demonstrate compelling legitimate grounds that override your interests.
• Right to data portability: Where technically feasible and where processing is based on consent or contract, you may request that ph8789 provide your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: If you believe ph8789 has processed your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The ph8789 platform is strictly limited to individuals aged 21 years or older, in accordance with the minimum legal age for real-money gambling in the Philippines as governed by PAGCOR regulations. ph8789 does not knowingly collect, process, or retain personal data from any individual under the age of 21.

During the account registration and KYC verification process, ph8789 requires proof of age and will close any account found to be held by a person under 21 years of age. Any personal data inadvertently collected from a person under 21 will be permanently deleted upon discovery, and any account balances or winnings associated with such an account will be handled in accordance with PAGCOR regulatory requirements.

If you are a parent or guardian and believe that a minor under your care has registered an account on ph8789, please contact us immediately at [email protected] so that the account can be reviewed and closed without delay.

ph8789's primary data processing infrastructure is located in the Philippines or in jurisdictions approved for cross-border data transfers by the National Privacy Commission. In limited circumstances, personal data may be processed by ph8789's technology service providers in data centres located outside the Philippines — for example, where a game content provider or platform technology partner operates infrastructure in another jurisdiction.

Where cross-border transfers of personal data occur, ph8789 ensures that appropriate safeguards are in place in accordance with NPC requirements, including:

• Contractual clauses in data processing agreements that require the recipient to maintain data protection standards equivalent to those required under Philippine law
• Transfers only to jurisdictions with comparable data protection frameworks, or to recipients who have implemented binding corporate rules approved by a recognised data protection authority

ph8789 does not transfer your personal data to third parties in other countries for commercial or marketing purposes. All cross-border transfers are limited to operational necessity in the context of delivering the ph8789 platform services.

ph8789 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or changes to the ph8789 platform. The most current version of this Privacy Policy is always available at ph8789.net/privacy-policy, with the effective date indicated at the top of the page.

Where a proposed update materially affects your rights or the way ph8789 processes your personal data, ph8789 will provide advance notice to registered players via email to the address on file, at least seven (7) calendar days before the changes take effect.

Your continued use of the ph8789 platform after the effective date of any Privacy Policy update constitutes your acknowledgment of the updated policy. If you object to any changes, you should cease using the platform and contact [email protected] to request account closure and withdrawal of your remaining balance.

ph8789 has designated a Data Protection Officer (DPO) as required under Republic Act No. 10173 and the NPC's registration requirements for personal information controllers. The ph8789 DPO is responsible for overseeing compliance with this Privacy Policy and with applicable Philippine data privacy law.

To exercise your data subject rights, raise a privacy concern, or contact the ph8789 Data Protection Officer, please use the following contact details:

• Email: [email protected] — please include "Data Privacy" or "DPO Request" in the subject line for priority routing
• Live Chat: Available 24/7 via the chat widget on the ph8789 platform — request to be connected to the Data Privacy team
• Response Time: ph8789 acknowledges all privacy-related enquiries within five (5) business days

If you are not satisfied with ph8789's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) through the NPC's official complaint process.