ph898 Privacy Policy

This Privacy Policy applies to all personal information collected, processed, stored, or disclosed by ph898 ("ph898," "we," "us," "our") in connection with the operation of the ph898 online gaming platform accessible at ph898.bio (the "Platform") and all associated services offered to registered players.

This Policy applies to all individuals who interact with ph898, including registered account holders, prospective players who browse the Platform, and individuals who contact ph898 customer support. It applies to personal data collected through the Platform itself, through our customer support channels, and through any ph898-operated communications.

This Privacy Policy is incorporated by reference into ph898's Terms & Conditions and should be read alongside those Terms. By registering a ph898 account or continuing to use the Platform, you confirm your acceptance of this Privacy Policy as it stands on the date of your continued use.

ph898 is the personal information controller ("PIC") in respect of the personal data processed under this Policy, as defined under Section 3(h) of the Philippine Data Privacy Act of 2012. ph898 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection law.

ph898 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection legislation. The DPO can be contacted via the details provided in Section 16 of this Policy.

ph898 collects the following categories of personal information, depending on the nature of your interaction with the Platform:

ph898 does not intentionally collect sensitive personal information beyond what is strictly required for legal compliance — including government ID numbers, which are collected solely for age and identity verification purposes mandated by PAGCOR.

ph898 collects personal information through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technical Collection: Information collected automatically when you browse or use the Platform, including through cookies, session tokens, log files, and analytics tools. See Section 7 for details on cookies.
• Third-Party Sources: Information ph898 may receive from payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank) for the purpose of verifying deposit and withdrawal transactions, or from identity verification service providers during KYC processing.
• Regulatory Sources: Information ph898 may be required to obtain or verify in response to PAGCOR instructions, court orders, or law enforcement requests under applicable Philippine law.

ph898 processes personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

Where ph898 relies on legitimate interests as a legal basis, we have assessed that our interests do not override the rights and freedoms of data subjects. You have the right to object to processing based on legitimate interests — see Section 10.

6.1 ph898 does not sell, rent, or license your personal data to third parties. Disclosure of your personal information is limited to the following categories of recipients, each bound by appropriate confidentiality and data protection obligations:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive the minimum financial data necessary to process your transactions. These providers are governed by their own privacy policies and applicable Philippine financial regulations.
• Game and Software Providers: Third-party game providers integrated into the ph898 Platform may receive anonymized or pseudonymized game session data required to operate their games and verify outcomes. Full identity data is not routinely shared with game providers.
• Identity Verification Services: ph898 uses regulated third-party KYC providers to assist with document verification during the onboarding process. These providers process identity data under data processing agreements and strict confidentiality terms.
• PAGCOR and Regulatory Bodies: ph898 is legally required to report certain information to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities. Such disclosures are made only to the extent required by law.
• Law Enforcement and Courts: ph898 will disclose personal data in response to valid legal processes including court orders, subpoenas, or lawful requests from Philippine law enforcement agencies.
• Professional Advisers: Legal, financial, and technical advisers engaged by ph898 may access personal data on a need-to-know basis, subject to professional confidentiality obligations.

7.1 What Are Cookies. Cookies are small data files stored on your device when you visit the ph898 Platform. They are widely used across the internet to make platforms work efficiently, enhance functionality, and provide usage information to operators.

7.2 Cookies ph898 Uses. ph898 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management, security tokens, and login state cookies. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Enhance your experience by remembering preferences such as your preferred language settings, game lobby layout, and responsible gaming settings you have applied to your account.
• Analytics Cookies: Aggregate, anonymized data about how users interact with the Platform — which pages are visited, how long sessions last, and which games are accessed — used to improve Platform performance and design.
• Security Cookies: Used for fraud detection, bot prevention, and identification of unusual account activity patterns.

7.3 Cookie Control. You can manage non-essential cookies through your browser settings. Note that disabling functional or analytics cookies may affect your experience on the ph898 Platform. Strictly necessary cookies cannot be disabled, as they are required for account security and Platform access.

7.4 No Cross-Site Tracking. ph898 does not use third-party tracking technologies for cross-site behavioral advertising or retargeting on other websites without your explicit consent.

8.1 Technical Safeguards. ph898 implements industry-standard technical measures to protect personal data against unauthorized access, disclosure, alteration, or destruction, including:

• 256-bit Transport Layer Security (TLS) encryption for all data in transit between your device and ph898 servers;
• Encryption of sensitive data fields at rest in ph898 databases;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Firewalls, intrusion detection systems, and regular security vulnerability assessments;
• Secure deletion protocols for data no longer required under retention policies.

8.2 Organizational Safeguards. Access to personal data within ph898 is restricted to personnel who require it to perform their duties. All relevant staff undergo data protection training. Third-party service providers with access to personal data are subject to contractual data processing agreements.

8.3 Data Breach Response. In the event of a personal data breach that is reasonably likely to affect your rights and freedoms, ph898 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC regulations, and will notify affected data subjects without undue delay where the breach poses a high risk of harm.

8.4 Player Responsibilities. You are responsible for maintaining the security of your ph898 account credentials. ph898 recommends using a unique password, enabling two-factor authentication, and logging out on shared devices. ph898 is not liable for unauthorized access resulting from your failure to maintain reasonable account security.

ph898 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention schedule applies:

At the end of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph898's data disposal procedures.

Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data processed by ph898. To exercise any of these rights, contact ph898's Data Protection Officer at [email protected].

ph898 does not knowingly collect personal data from individuals under 21 years of age. The ph898 Platform is strictly restricted to adults aged 21 and over in compliance with PAGCOR gaming regulations. Age verification is required for all registrations.

If ph898 discovers that personal data has been inadvertently collected from a person under 21 years of age, that data will be immediately deleted, the associated account will be closed, and the matter will be reported to PAGCOR as required. Parents or guardians who believe a minor may have registered on ph898 using false information should contact [email protected] immediately.

ph898 strongly recommends that parents and guardians use parental control software on shared devices to prevent minors from accessing gaming platforms. A list of reputable parental control resources is available on our Responsible Gaming page.

12.1 The primary processing and storage of personal data collected from ph898 players is conducted within the Philippines or by service providers operating under Philippine law.

12.2 Certain third-party service providers — including game engine providers, some payment infrastructure partners, and cloud infrastructure providers — may be located outside the Philippines. Where personal data is transferred to entities in other jurisdictions, ph898 ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law;
• Verification that the recipient jurisdiction provides adequate data protection, or that specific contractual protections are in place;
• Compliance with any NPC approval requirements applicable to cross-border data transfers of sensitive personal information.

12.3 ph898 does not transfer personal data to jurisdictions that do not provide adequate protections without implementing the supplementary safeguards described above.

13.1 Transactional Communications. ph898 will send you account-related communications — including deposit confirmations, withdrawal notifications, security alerts, and mandatory regulatory communications — regardless of your marketing preferences. These are required for the operation of your ph898 account and cannot be fully opted out of while your account remains active.

13.2 Marketing Communications. ph898 sends promotional communications — including bonus offers, new game announcements, tournament invitations, and platform news — only to players who have given explicit opt-in consent at registration or subsequently through account settings. Marketing messages will identify ph898 as the sender and will include clear opt-out instructions.

13.3 Withdrawing Consent. You may withdraw consent for marketing communications at any time by: (a) updating your notification preferences in your ph898 account settings; or (b) contacting [email protected] with a clear withdrawal request. Opt-out requests for marketing are processed within 5 business days. Withdrawal of marketing consent does not affect the lawfulness of prior processing or transactional communications.

The ph898 Platform may display information about or reference third-party services, particularly in the context of payment methods (GCash, PayMaya, BPI, BDO, Metrobank) and game providers. ph898 does not control the privacy practices of these third parties and is not responsible for their data handling.

Where you interact with a third-party service in connection with your ph898 account — such as completing a GCash payment — your interaction with that service is governed by the third party's own privacy policy. ph898 recommends that you review the privacy policies of any third-party services you use in connection with ph898 transactions.

15.1 ph898 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or ph898's data processing practices. Material amendments will be communicated to registered players via account notification or email at least fourteen (14) days prior to taking effect, except where immediate changes are required by law.

15.2 The "Last Updated" date at the top of this Policy reflects the most recent revision. By continuing to use the ph898 Platform following the effective date of any amendment, you accept the revised Privacy Policy.

15.3 Prior versions of this Privacy Policy are available upon written request to ph898's Data Protection Officer.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to lodge a complaint about ph898's data processing practices, please contact ph898's Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Request" or "DPO Inquiry")
• Response Time: Acknowledgement within 3 business days; substantive response within 15 business days
• Language: English (Filipino-English)
• Hours: Support available 24/7; DPO responses during Philippine business hours

National Privacy Commission. If you are not satisfied with ph898's handling of a data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information on the NPC complaints process is available through the NPC's official channels.

ph898 — Operated under PAGCOR regulation. Data processed in accordance with the Philippine Data Privacy Act of 2012 (RA 10173). This Privacy Policy was last revised on January 1, 2026. All rights reserved.