ph75 Privacy Policy

This Privacy Policy ("Policy") is issued by ph75 ("ph75," "we," "us," "our") and applies to all personal data collected from users ("you," "User," "Player") of ph75.asia and all associated services and communications. ph75 operates an online casino and sports betting platform serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, and other regions throughout the archipelago.

ph75 recognises that your personal data belongs to you. This Policy is designed to give you a clear, transparent account of how we handle your information — from the moment you first visit ph75.asia through account registration, gameplay, deposits and withdrawals, and beyond. We encourage all ph75 players to read this Policy carefully so you understand your rights and our obligations.

This Policy is to be read in conjunction with the ph75 Terms and Conditions. By registering a ph75 account or using ph75 services, you acknowledge that you have read and accepted the terms of this Privacy Policy.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, ph75 acts as the Personal Information Controller (PIC) in respect of the personal data collected through the ph75.asia platform. As PIC, ph75 determines the purposes for which, and the manner in which, personal data is processed.

ph75 operates its platform for the Philippines market. All inquiries regarding this Privacy Policy, data subject rights requests, and privacy complaints should be directed to the ph75 Data Protection Officer (DPO). Contact details for the DPO are provided in Section 14 of this Policy.

ph75 collects the minimum amount of personal data necessary to operate the platform, comply with regulatory requirements, and provide a safe and personalised experience for Filipino players. The categories of personal data we collect are described below.

ph75 does not intentionally collect sensitive personal information as defined under the Data Privacy Act of 2012 (e.g., racial or ethnic origin, health data, political opinions, religious beliefs) unless such information is voluntarily provided by the User in the context of a responsible gaming or support interaction, and only where its collection is strictly necessary.

ph75 collects personal data through the following methods:

ph75 processes personal data only where there is a lawful basis for doing so under the Data Privacy Act of 2012. The primary legal bases for ph75's data processing activities are: (a) performance of a contract (your Account Agreement with ph75), (b) compliance with a legal obligation (PAGCOR regulations, AML/CFT requirements, NPC registration), (c) legitimate interests of ph75, and (d) your consent where explicitly obtained.

Where ph75 relies on your consent as the legal basis for processing (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal. Withdrawal of consent does not affect your ability to use the ph75 platform.

ph75 does not sell, rent, or trade personal data with third parties for commercial purposes. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Processors: Transaction data is shared with GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other payment processors solely for the purpose of processing deposits and withdrawals. These providers are contractually bound to handle your data in compliance with applicable Philippine data protection law.
• Game Software Providers: Game activity data may be shared with third-party game providers (including JILI, PG Soft, and Pragmatic Play) to the extent necessary to deliver and support the game. These providers act as data processors under instructions from ph75.
• Regulatory Authorities: ph75 will disclose personal data to PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies where required by law, court order, or regulatory directive.
• KYC / Identity Verification Services: Where ph75 uses a third-party identity verification service to process KYC documentation, your identity data is shared with that provider solely for verification purposes under a strict data processing agreement.
• Fraud Prevention Services: Anonymised or pseudonymised behavioural data may be shared with fraud detection services to protect the ph75 platform and its players from fraudulent activity.
• Law Enforcement: ph75 will cooperate with law enforcement agencies in the Philippines where legally compelled to do so by valid legal process, or where necessary to prevent or investigate criminal activity including fraud, money laundering, or underage gambling.

ph75 retains personal data for the period necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply as general guidelines:

• Account Registration Data: Retained for the duration of your active ph75 account plus a minimum of 5 years after account closure, as required by PAGCOR record-keeping regulations.
• KYC / Identity Verification Data: Retained for a minimum of 5 years after the date of verification, consistent with AMLC and PAGCOR requirements for player due diligence records.
• Transaction Records: Deposit and withdrawal records are retained for a minimum of 5 years from the date of each transaction in accordance with AMLC record-keeping obligations under RA 9160, as amended.
• Game Activity Data: Retained for 2 years from the date of the relevant game session, or longer where required for dispute resolution or regulatory inquiry.
• Customer Support Communications: Retained for 2 years from the date of the communication, or until any related dispute is fully resolved, whichever is later.
• Technical / Log Data: Server log and session data is retained for up to 12 months for security and fraud monitoring purposes.
• Marketing Preferences: Retained for the duration of your account plus a reasonable period to demonstrate compliance with opt-out requests.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ph75's data disposal procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

ph75 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful processing. These measures are reviewed and updated regularly to reflect evolving threats and industry best practices.

• 256-Bit SSL / TLS Encryption: All data transmitted between your device and ph75.asia is encrypted using TLS (Transport Layer Security) with 256-bit encryption. This protects your login credentials, financial data, and personal information in transit.
• Password Hashing: Account passwords are never stored in plain text. ph75 uses industry-standard cryptographic hashing algorithms (bcrypt) to store password data securely. ph75 staff cannot view or retrieve your password.
• Access Controls: Access to systems containing personal data is restricted on a need-to-know basis. ph75 employees with data access are subject to confidentiality obligations and undergo data privacy training.
• Two-Factor Authentication (2FA): ph75 supports SMS OTP-based two-factor authentication for player accounts to prevent unauthorised access even where credentials are compromised.
• Intrusion Detection and Monitoring: ph75's infrastructure is continuously monitored for suspicious access attempts, anomalous transactions, and security incidents. Automated alerts trigger investigation procedures when thresholds are exceeded.
• Data Minimisation: ph75 collects only the personal data strictly necessary for the stated processing purposes, reducing the volume of personal data at risk.
• Vendor Security Assessment: Third-party data processors engaged by ph75 (including payment processors and KYC providers) are assessed for data security compliance before engagement and are contractually required to maintain adequate security standards.

In the event of a personal data breach that poses a real risk to the rights and freedoms of affected Players, ph75 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach. Affected individuals will be notified promptly where the breach is likely to result in high risk to their rights or interests.

ph75.asia uses cookies and similar technologies to operate the platform, maintain your session, remember your preferences, and analyse how Filipino players interact with the site. A cookie is a small text file placed on your device when you visit a website.

You can manage your cookie preferences through your browser settings. Note that disabling non-essential cookies does not affect your ability to use ph75's core gaming and payment features. Essential and security cookies cannot be disabled as they are necessary for platform operation and player account security.

As a Filipino data subject, you are entitled to the following rights under Republic Act No. 10173, the Data Privacy Act of 2012, in respect of your personal data held by ph75. ph75 is committed to facilitating the exercise of these rights promptly and without undue restriction.

To exercise any of the above rights, please contact ph75's Data Protection Officer at [email protected] with the subject line "Data Rights Request." ph75 will respond to all data rights requests within 15 business days in accordance with NPC guidelines. Identity verification may be required before processing a data rights request.

The ph75 platform is strictly restricted to persons aged 21 years or older, consistent with PAGCOR regulations governing online gaming in the Philippines. ph75 does not knowingly collect personal data from individuals under the age of 21, and registration by underage individuals is a violation of the ph75 Terms and Conditions.

Some of the third-party service providers engaged by ph75 — including certain game software providers, cloud infrastructure providers, and fraud prevention services — may be located outside the Philippines. Where personal data is transferred to a third country or international organisation, ph75 ensures that appropriate safeguards are in place as required by the Data Privacy Act of 2012 and NPC guidelines.

• ph75 enters into data processing agreements with all international service providers that include standard data protection clauses compliant with Philippine law.
• Cross-border transfers are limited to what is strictly necessary for the delivery of the contracted service.
• ph75 conducts due diligence on the data protection standards of international processors before engaging their services.
• Where required by NPC regulations, ph75 registers cross-border data sharing arrangements with the National Privacy Commission.

ph75.asia may contain references to third-party services (such as GCash or Maya) in the context of payment processing. ph75 is not responsible for the privacy practices or content of any third-party website or service. This Privacy Policy applies exclusively to data processed by ph75 through ph75.asia.

Players who access third-party services — including payment providers, identity verification platforms, or game studios — through ph75 are subject to the privacy policies of those third parties. ph75 encourages all players to review the relevant privacy policies of third-party services before engaging with them.

ph75 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ph75 will revise the "Last Updated" date at the top of this page and will endeavour to notify active players via their registered email or mobile number.

Continued use of the ph75 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a material change, you may request account closure and data erasure in accordance with Section 9 of this Policy. We recommend checking this page periodically to stay informed about how ph75 handles your personal data.

If you have any questions about this Privacy Policy, wish to exercise your data rights under RA 10173, or wish to raise a privacy-related complaint, please contact ph75's Data Protection Officer using the details below. All privacy enquiries are handled by the DPO in strict confidence.

If you are not satisfied with ph75's handling of a privacy complaint, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012. The NPC can be reached through their official government portal.

ph75 takes all privacy complaints seriously and will acknowledge receipt of every formal complaint within 3 business days, with a full response provided within 15 business days. Complex complaints requiring investigation may take longer, and ph75 will keep you informed of progress throughout the process.