ph957 Privacy Policy

1 Introduction

ph957 ("ph957," "we," "us," "the Company") operates the online gaming platform accessible at ph957.app and its associated mobile applications. We are committed to protecting the privacy and personal data of all users — particularly our Filipino player community — in accordance with Republic Act No. 10173, known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and all issuances of the National Privacy Commission (NPC).

This Privacy Policy ("Policy") describes: what personal information ph957 collects from you, how and why it is used, with whom it may be shared, how long it is retained, what security measures are in place, and what rights you have over your data. This Policy applies to all interactions with ph957 — account registration, gameplay, deposits, withdrawals, customer support communications, and use of our mobile application.

By registering a ph957 account or otherwise using the platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal information as described herein. If you do not consent, you must discontinue use of the ph957 platform immediately.

2 Data Controller

The Data Controller responsible for your personal information processed through the ph957 platform is the operating entity behind ph957.app, which holds PAGCOR authorization for the Philippines market.

ph957 has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act. The DPO is responsible for overseeing compliance with data privacy obligations, handling data subject rights requests, and serving as the point of contact for the National Privacy Commission. Contact details for the DPO are provided in Section 14 of this Policy.

3 Personal Data We Collect

3.1 Registration Data

When you create a ph957 account, we collect: your full legal name, date of birth, Philippine mobile number, email address, and preferred username. This information is required to establish and manage your account.

3.2 Identity Verification (KYC) Data

As required by PAGCOR regulations and the Anti-Money Laundering Act (AMLA), ph957 conducts Know Your Customer (KYC) verification. For full KYC, we collect: a copy of your government-issued photo ID (e.g., PhilSys ID, passport, driver's license, UMID, SSS ID), a selfie photograph for liveness verification, and proof of address where required.

3.3 Financial Data

We collect payment method details necessary to process deposits and withdrawals — including GCash or Maya account numbers, BPI/BDO/UnionBank account details, and cryptocurrency wallet addresses where applicable. ph957 does not store full card numbers for credit or debit card transactions; these are processed by PCI-DSS compliant payment processors.

3.4 Transaction Data

All financial transactions are logged: deposit and withdrawal amounts, dates, payment methods, transaction reference numbers, and associated account balances. Game session data — game type, bets placed, outcomes, and session duration — is also recorded for PAGCOR compliance and responsible gaming monitoring purposes.

3.5 Technical and Usage Data

When you access ph957, we automatically collect: IP address, device type and operating system, browser type and version, pages visited, session duration, referral source, and error logs. This data is used for platform security, fraud detection, and service improvement.

3.6 Customer Support Data

Communications with ph957 customer support — including live chat transcripts, email correspondence, and any documents submitted in support of a complaint — are retained as part of your account record.

4 How We Use Your Personal Data

ph957 processes your personal data for the following purposes:

• Account creation and management: To register, verify, and maintain your ph957 player account.
• Identity verification (KYC): To comply with PAGCOR licensing requirements, AMLA obligations, and to prevent underage gambling and fraud.
• Processing transactions: To process deposits and withdrawals accurately and securely via GCash, Maya, BPI, BDO, UnionBank, and other supported methods.
• Game operation: To deliver game services, record results, and maintain game integrity.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, enforce self-exclusion orders, and provide responsible gaming tools including deposit and loss limits.
• Customer support: To investigate and resolve queries, complaints, and disputes.
• Security and fraud prevention: To detect and prevent unauthorized account access, money laundering, bonus abuse, and other fraudulent activity.
• Regulatory compliance: To meet reporting obligations to PAGCOR, the AMLC, the NPC, and other competent Philippine authorities.
• Platform improvement: To analyse usage patterns and improve ph957's features, performance, and user experience.
• Communications: To send you transaction confirmations, security alerts, account notifications, and — where you have opted in — promotional offers and platform news.

5 Legal Basis for Processing

ph957 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: For marketing communications and optional analytics. You may withdraw consent at any time by contacting support or adjusting your account notification settings.
• Contractual necessity: Processing necessary to fulfil our obligations to you under the ph957 Terms and Conditions — including account management, game operation, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA, the DPA, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for platform security, fraud prevention, and service improvement, where such interests do not override your fundamental privacy rights.

6 Data Sharing and Disclosure

ph957 does not sell, rent, or trade your personal data. We may share your data only in the following circumstances:

• Service providers: Third-party vendors engaged by ph957 to provide services integral to platform operation — including KYC verification providers, payment processors, cloud infrastructure providers, and customer support software vendors. All service providers operate under data processing agreements that restrict use of your data to the specified purpose.
• Game providers: Licensed game content providers (e.g., JILI, PG Soft, Pragmatic Play) receive technical session data necessary to deliver game services. Game providers do not receive your full identity or financial data.
• Regulatory authorities: ph957 is required to report to and share data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government bodies upon lawful request or as part of routine regulatory reporting.
• Law enforcement: Where required by court order, subpoena, or other lawful directive from a Philippine government authority.
• Corporate transactions: In the event of a merger, acquisition, or asset sale involving ph957, player data may be transferred to the successor entity, subject to equivalent privacy protections.

7 Data Retention

ph957 retains your personal data for as long as your account is active and for such additional periods as are required by law or regulation. Key retention periods include:

• Account data and KYC records: Retained for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLA requirements.
• Transaction records: Retained for five (5) years from the date of the transaction.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Technical logs: Retained for twelve (12) months for security and fraud detection purposes.

Upon expiry of the applicable retention period, data is securely deleted or anonymized. You may request early deletion of non-legally-required data via the data subject rights process described in Section 10.

8 Security Measures

ph957 implements technical and organizational security measures proportionate to the sensitivity of the personal data processed:

• TLS 1.3 encryption for all data in transit between your device and ph957 servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment details
• Access controls and role-based permissions limiting employee access to personal data on a need-to-know basis
• Multi-factor authentication required for all ph957 internal system access
• Regular security audits and penetration testing by independent third-party security firms
• Automated anomaly detection for suspicious login patterns and unusual transaction behaviour
• Incident response procedures aligned with NPC breach notification requirements (72-hour notification timeline for qualifying breaches)

While ph957 employs industry-standard security practices, no system is entirely immune to breach. Players are encouraged to use strong unique passwords for their ph957 account, enable SMS two-factor authentication, and report any suspected unauthorized access to support immediately.

9 Cookies and Tracking Technologies

ph957 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used are:

• Strictly necessary cookies: Essential for platform operation — session authentication, security tokens, and load balancing. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences — language settings, last login method, and display preferences. These improve your experience but are not required for core function.
• Analytics cookies: Used to collect aggregated, anonymized data about how players navigate and use the platform. This helps ph957 identify performance issues and improve features. Analytics cookies are optional and can be declined via your browser settings.

ph957 does not use third-party advertising or tracking cookies. No player behaviour data is shared with advertising networks.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph957:

• Right to be Informed: To know what personal data ph957 holds about you, the purpose for its collection, and how it is processed.
• Right of Access: To request a copy of the personal data ph957 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purposes collected and where no legal retention obligation applies.
• Right to Object: To object to the processing of your personal data for marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: To receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, contact ph957's Data Protection Officer at the address provided in Section 14. ph957 will respond to data subject rights requests within thirty (30) calendar days of receipt.

11 Children's Privacy

ph957 services are strictly for persons aged 21 and above. ph957 does not knowingly collect personal data from individuals under the age of 21. If ph957 discovers that personal data has been collected from a person under 21 — whether through a fraudulent registration or otherwise — the account will be immediately terminated, all funds returned to the registered payment method (where feasible), and all data deleted in accordance with applicable legal requirements.

If you are a parent or guardian and believe your child has registered on ph957, please contact our support team immediately at the contact details provided in Section 14.

12 International Data Transfers

ph957 primarily processes and stores data within the Philippines. Where data is processed or stored by service providers located outside the Philippines — for example, cloud infrastructure providers with data centres in Asia-Pacific regions — ph957 ensures that appropriate safeguards are in place, including contractual clauses requiring the recipient to apply data protection standards equivalent to those required by the Philippine Data Privacy Act.

ph957 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate supplementary measures as required by the NPC.

13 Updates to This Privacy Policy

ph957 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to registered players via SMS to their registered Philippine mobile number and/or email notification prior to taking effect.

The current version of this Policy is always available at ph957.app/privacy-policy. The "Last Updated" date at the top of this page indicates when changes were last made. Continued use of the ph957 platform following an update constitutes acceptance of the revised Policy.

14 Contact and Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or concerns regarding ph957's handling of your personal information, please contact:

Data Protection Officer – ph957

Email: [email protected]

Live Chat: 24/7 via the ph957 platform. Request to speak with the Data Protection Officer or submit your request via live chat and it will be routed to the DPO within one (1) business day.

If you are unsatisfied with ph957's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

ph957 is operated under PAGCOR authorization for the Philippines market. All services and data practices are subject to applicable Philippine law including the Data Privacy Act of 2012 (RA 10173). Players must be 21 or older.