ph188 Privacy Policy

1. Introduction

ph188 ("ph188," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who interact with our online gaming platform. This Privacy Policy ("Policy") describes how ph188 collects, uses, stores, shares, and protects personal data in connection with the operation of the ph188 platform and related services (collectively, the "Service").

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. It applies to all personal data processed by ph188 in connection with the Service, regardless of the medium through which such data is collected.

This Policy should be read together with the ph188 Terms & Conditions, which govern your use of the Service. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, ph188 is the personal information controller responsible for the personal data collected through the ph188 platform. ph188 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out in accordance with applicable data protection laws.

ph188 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

ph188 collects the following categories of personal data in connection with the provision of the Service:

ph188 does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required for regulatory compliance purposes, in which case your explicit consent will be obtained.

4. How We Collect Your Data

ph188 collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Data collected automatically when you access and use the ph188 platform, including through cookies, log files, and similar tracking technologies. See Section 9 for more details on cookies.
• Third-Party Sources: Data received from payment processors (such as GCash and PayMaya), identity verification service providers, fraud prevention services, and regulatory authorities, where permitted by applicable law.
• Publicly Available Sources: In limited circumstances, ph188 may collect data from publicly available sources for the purposes of fraud prevention and regulatory compliance.

5. Purpose and Legal Basis for Processing

ph188 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The following table sets out the primary purposes for which ph188 processes personal data and the corresponding legal basis:

Where ph188 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

6. Data Sharing and Disclosure

ph188 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to assist with identity verification and fraud prevention.
• Game Software Providers: Licensed game developers and providers whose games are available on the ph188 platform, to the extent necessary for game operation and fairness auditing.
• Regulatory Authorities: PAGCOR and other competent Philippine regulatory or law enforcement authorities, where disclosure is required by law or regulatory direction.
• IT and Platform Service Providers: Cloud hosting, cybersecurity, and technical support providers engaged by ph188 to operate and maintain the platform.
• Professional Advisers: Lawyers, auditors, and accountants engaged by ph188, subject to professional confidentiality obligations.

All third parties with whom ph188 shares personal data are required to process such data in accordance with applicable data protection laws and ph188's data processing instructions. ph188 does not permit third parties to use your personal data for their own marketing purposes.

7. Data Retention

ph188 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• Identity Verification Documents: Retained for five (5) years following account closure or the completion of the relevant KYC process, whichever is later.
• Gaming History: Retained for five (5) years from the date of each gaming session, for regulatory compliance and dispute resolution purposes.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, ph188 will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for analytical purposes, as it no longer constitutes personal data.

8. Data Security

ph188 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the ph188 platform.
• Encryption of sensitive data at rest, including financial data and identity verification documents.
• Role-based access controls ensuring that ph188 staff can only access personal data that is necessary for their specific job function.
• Regular security assessments, penetration testing, and vulnerability scanning of the ph188 platform.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Staff training on data protection obligations and information security best practices.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph188 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the requirements of the Data Privacy Act of 2012.

9. Cookies and Tracking Technologies

ph188 uses cookies and similar tracking technologies to operate and improve the platform, personalize your experience, and analyze usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the ph188 platform, including session management, authentication, and security functions. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as language preferences and display options, to provide a more personalized experience.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the ph188 platform, helping us identify areas for improvement. These cookies do not identify you personally.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats to the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph188 platform. ph188 does not use third-party advertising cookies or behavioral tracking cookies for marketing purposes on behalf of external advertisers.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph188:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data that ph188 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data that ph188 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph188's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that ph188 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact ph188's Data Protection Officer using the contact details provided in Section 14. ph188 will respond to all valid data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified accordingly.

11. Minors and Age Restriction

The ph188 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. ph188 does not knowingly collect personal data from individuals under the age of 21.

If ph188 becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. Any winnings or balances associated with an underage account will be forfeited in accordance with the ph188 Terms & Conditions.

If you are a parent or guardian and believe that your child has registered on the ph188 platform, please contact our support team immediately so that we can take appropriate action.

12. International Data Transfers

ph188 primarily processes personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers or partners located outside the Philippines — for example, cloud infrastructure providers or game software developers operating internationally.

Where such transfers occur, ph188 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized under applicable Philippine law.
• Implementing contractual data protection clauses with international service providers that impose obligations equivalent to those under the Data Privacy Act of 2012.
• Conducting due diligence on international service providers to verify their data protection practices prior to engagement.

13. Changes to This Privacy Policy

ph188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, ph188 will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The date of the most recent revision to this Policy is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how ph188 protects your personal data.

Your continued use of the ph188 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you must stop using the platform and may request account closure by contacting our support team.

14. Contact Us and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or ph188's processing of your personal data, please contact our Data Protection Officer:

ph188 aims to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 days. For complex requests, we will keep you informed of progress throughout the process.

If you are not satisfied with ph188's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.