ph927 Privacy Policy

1. Introduction

ph927 ("ph927", "we", "us", "our") is committed to protecting the privacy and personal data of every player who uses the ph927 Platform. This Privacy Policy ("Policy") describes how ph927 collects, uses, stores, shares, and protects personal data in connection with the ph927 website, mobile platform, and all associated services (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines. By registering a ph927 account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with the ph927 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, ph927 is the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. ph927 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data privacy law.

ph927 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and the DPA. Contact details for the DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

ph927 collects the following categories of personal data, depending on how you interact with the Platform:

ph927 does not collect sensitive personal information (as defined under Section 3 of the DPA) unless strictly required for regulatory compliance, in which case explicit consent will be obtained separately.

4. How We Collect Your Data

ph927 collects personal data through the following means:

• Direct interactions: Information you provide when registering a ph927 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs (see Section 8 for more detail on cookies).
• Third parties: Identity verification providers, payment processors (GCash, Maya, Philippine banks), fraud prevention services, and regulatory bodies where required by law.

5. Legal Basis for Processing

ph927 processes your personal data on the following legal bases under the DPA:

• Contractual necessity: Processing required to fulfil our obligations under the ph927 Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with Philippine law, including Anti-Money Laundering Act (AMLA) obligations, PAGCOR regulatory requirements, and NPC directives.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have given explicit, informed consent. You may withdraw consent at any time.

6. How We Use Your Personal Data

ph927 uses your personal data for the following purposes:

• Creating and managing your ph927 account;
• Verifying your identity and age (21+ requirement) in compliance with Philippine gaming regulations;
• Processing deposits and withdrawals via GCash, Maya, and Philippine bank transfers;
• Detecting and preventing fraud, money laundering, and other prohibited conduct;
• Monitoring gameplay for responsible gaming purposes, including identifying problem gambling indicators;
• Providing customer support and resolving disputes;
• Sending transactional communications (account alerts, OTPs, withdrawal confirmations);
• Sending promotional communications where you have opted in — you may opt out at any time;
• Complying with PAGCOR, AMLC, NPC, and other applicable Philippine regulatory requirements;
• Improving the ph927 Platform through aggregated, anonymised analytics.

7. Data Sharing and Disclosure

ph927 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data-sharing agreements:

• Payment processors: GCash, Maya, and Philippine banking partners, solely for the purpose of processing your transactions;
• KYC/AML providers: Third-party identity verification and anti-money laundering screening services engaged by ph927;
• IT and hosting providers: Cloud infrastructure and security service providers who process data on ph927's behalf under strict data processing agreements;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies, where disclosure is required by Philippine law or a valid legal order;
• Professional advisers: Lawyers, auditors, and insurers, where necessary for the conduct of ph927's business and subject to professional confidentiality obligations.

All third-party service providers engaged by ph927 are contractually required to process personal data only on ph927's documented instructions and to implement appropriate technical and organisational security measures.

8. Cookies and Tracking Technologies

ph927 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language, display settings) to improve your experience on ph927.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform, helping ph927 identify areas for improvement.
• Security cookies: Used for fraud detection and to protect the integrity of the ph927 Platform.

You can manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the ph927 Platform. ph927 does not use cookies to serve third-party advertising.

9. Data Retention

ph927 retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your ph927 account and for a minimum of five (5) years after account closure, in compliance with AMLA record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Customer support communications: Retained for three (3) years from the date of the interaction;
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, ph927 will securely delete or anonymise your personal data in accordance with NPC-approved disposal methods.

10. Data Security

ph927 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data at rest;
• Multi-factor authentication for ph927 administrative systems;
• Regular penetration testing and vulnerability assessments;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Comprehensive security incident response procedures aligned with NPC Circular 16-03.

While ph927 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your ph927 account credentials.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph927:

• Right to be informed: The right to know how your personal data is being collected and processed — which this Policy fulfils;
• Right of access: The right to request a copy of the personal data ph927 holds about you;
• Right to rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to erasure: The right to request deletion of your personal data, subject to ph927's legal retention obligations;
• Right to object: The right to object to the processing of your personal data on grounds of legitimate interest or for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the ph927 Data Protection Officer using the details in Section 15. ph927 will respond to all verified data subject requests within fifteen (15) business days, as required by the DPA IRR.

12. Children's Privacy

The ph927 Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. ph927 does not knowingly collect personal data from individuals under the age of 21. If ph927 becomes aware that personal data has been collected from an underage individual, the account will be immediately suspended, all data will be deleted, and the matter will be reported to the relevant authorities where required.

If you believe that a minor has registered a ph927 account, please contact ph927 support immediately so that appropriate action can be taken.

13. Cross-Border Data Transfers

Where ph927 transfers personal data outside the Philippines — for example, to cloud infrastructure providers or international KYC service providers — such transfers are conducted in compliance with Section 21 of the Data Privacy Act and NPC guidelines on cross-border data transfers. ph927 ensures that recipient countries or organisations provide an adequate level of data protection, or that appropriate contractual safeguards (such as NPC-approved standard contractual clauses) are in place before any transfer occurs.

14. Amendments to This Policy

ph927 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. Material changes will be communicated to registered players via the email address or mobile number on file at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the ph927 Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph927, please contact our Data Protection Officer:

ph927 Data Protection Officer
Email: [email protected]

For general support enquiries, you may also reach the ph927 customer support team via live chat on the Platform or at: [email protected]

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.