This Privacy Policy ("Policy") describes how phil789 ("phil789," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("you," "Player," or "User") who access or use the phil789 online gaming platform at phil789.org and any associated services (collectively, the "Platform").
phil789 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.
By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.
Your data is yours. phil789 does not sell your personal information to third parties for their own marketing purposes. We collect only what we need to provide you with a safe, fair, and enjoyable gaming experience.
01 Data Controller
For the purposes of the Philippine Data Privacy Act of 2012, phil789 acts as the Personal Information Controller (PIC) in respect of the personal data you provide when using the Platform. This means phil789 determines the purposes and means of processing your personal information.
Where phil789 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors (PIPs) and are contractually bound to process your data only in accordance with phil789's instructions and this Policy.
If you have any questions about how your personal data is handled, or wish to exercise any of your data subject rights, please contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.
02 Personal Data We Collect
phil789 collects the following categories of personal data from players and Platform users:
- Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine passport number, SSS/GSIS number, driver's license number, PhilSys ID number).
- Contact Data: Residential address (including barangay, city/municipality, province), email address, and mobile phone number.
- Account Data: Username, encrypted password, account registration date, account status, and player preferences.
- Financial Data: Payment method details (e.g., GCash mobile number, bank account details for BPI, BDO, or Metrobank), transaction history, deposit and withdrawal records, and wallet balance history.
- Verification Data: Copies of government-issued identification documents, selfies or photographs submitted for identity verification, and proof of address documents submitted as part of our Know Your Customer (KYC) process.
- Gaming Data: Game history, betting records, wagering amounts, win/loss records, session duration, and responsible gaming tool settings (e.g., deposit limits, self-exclusion status).
- Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and unique device identifiers.
- Usage Data: Pages visited on the Platform, features used, time and duration of visits, clickstream data, and referral source.
- Communications Data: Records of your communications with phil789 customer support, including Live Chat transcripts and email correspondence.
phil789 does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect information about your religious beliefs, political affiliations, or health conditions unless directly relevant to a responsible gaming assessment.
03 How We Collect Your Data
phil789 collects personal data through the following means:
- Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
- Automated Collection: Technical and usage data collected automatically when you access the Platform, through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 10 for details).
- Third-Party Sources: Identity verification data from licensed KYC/AML service providers; fraud prevention data from industry databases; payment confirmation data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank.
- Regulatory Sources: Information received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.
04 How We Use Your Personal Data
phil789 uses your personal data for the following purposes:
- Account Management: To register and maintain your player account, verify your identity, and manage your account settings and preferences.
- Service Delivery: To provide access to games, process bets, calculate and pay out winnings, and deliver all features of the phil789 Platform.
- Financial Transactions: To process deposits, withdrawals, and refunds; to verify payment methods; and to maintain accurate financial records.
- Regulatory Compliance: To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other applicable Philippine laws and regulations.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the Platform.
- Responsible Gaming: To monitor gaming behavior, enforce responsible gaming tools (deposit limits, self-exclusion), and identify players who may be at risk of problem gambling.
- Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
- Marketing & Promotions: To send you information about phil789 promotions, bonuses, and new features — but only where you have provided consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.
- Platform Improvement: To analyze usage patterns, conduct research, and improve the performance, features, and user experience of the Platform.
- Legal Proceedings: To establish, exercise, or defend legal claims in connection with the Platform or these Terms.
05 Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, phil789 processes your personal data on the following legal bases:
- Contractual Necessity: Processing necessary to perform our contract with you — i.e., to provide the Platform services you have registered for, including account management, game access, and financial transactions.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing requirements, AML/KYC obligations, and tax reporting requirements.
- Legitimate Interests: Processing necessary for phil789's legitimate business interests, including fraud prevention, Platform security, and service improvement — provided these interests are not overridden by your rights and interests.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
06 Sharing Your Personal Data
phil789 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
- Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals.
- Identity Verification Providers: Licensed KYC and AML service providers engaged to verify your identity and screen for sanctions or politically exposed person (PEP) status.
- Technology Service Providers: Cloud hosting providers, cybersecurity firms, and software vendors who support the operation and maintenance of the Platform, under strict data processing agreements.
- Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where required by law or regulatory obligation.
- Law Enforcement: Philippine law enforcement agencies, where required by a valid court order, subpoena, or other legal process.
- Professional Advisors: Lawyers, auditors, and accountants engaged by phil789, subject to professional confidentiality obligations.
All third parties with whom phil789 shares personal data are required to maintain appropriate technical and organizational security measures and to process your data only for the specified purpose.
07 Data Retention
phil789 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
- Active Accounts: Personal data is retained for the duration of your account's active status plus a minimum of five (5) years after account closure, in accordance with PAGCOR requirements and Philippine AML regulations.
- Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-
Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments.
- KYC Documents: Identity verification documents are retained for a minimum of five (5) years after the end of the business relationship, or longer if required by applicable law or ongoing legal proceedings.
- Marketing Data: Where processing is based on consent, data is retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.
- Support Communications: Customer support records are retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
When personal data is no longer required, phil789 will securely delete or anonymize it in accordance with industry best practices and applicable regulatory guidance.
08 Data Security
phil789 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
- Encryption: All data transmitted between your device and the phil789 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive data at rest, including financial records and identity documents, is encrypted using AES-256 encryption.
- Access Controls: Access to personal data is restricted to authorized phil789 personnel and service providers on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data privacy training.
- Two-Factor Authentication (2FA): phil789 offers and encourages the use of two-factor authentication to protect your account from unauthorized access.
- Penetration Testing & Audits: The Platform undergoes regular security assessments, vulnerability scans, and independent penetration testing to identify and remediate potential security weaknesses.
- Incident Response: phil789 maintains a data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, phil789 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act.
Your role in security: While phil789 takes every reasonable precaution to protect your data, you also play an important role. Keep your login credentials confidential, use a strong and unique password, enable 2FA, and contact our support team immediately if you suspect unauthorized access to your account.
09 Cookies & Tracking Technologies
phil789 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security functions. The following types of cookies may be used:
- Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that help detect fraudulent activity. These cookies cannot be disabled without affecting Platform functionality.
- Performance & Analytics Cookies: Used to collect anonymized information about how players use the Platform — such as which pages are visited most frequently and how long sessions last — to help us improve the user experience.
- Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations, so you do not have to re-enter them on each visit.
- Marketing Cookies: Used, with your consent, to deliver relevant promotional content about phil789 offers and features. You may opt out of marketing cookies at any time through your account settings or browser settings.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.
phil789 does not use cookies to track your activity on third-party websites unrelated to the Platform, and we do not share cookie data with third parties for their own advertising purposes.
10 Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phil789:
- Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which this Policy fulfills.
- Right of Access: The right to request a copy of the personal data phil789 holds about you, along with information about how it is being processed.
- Right to Rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data we hold about you.
- Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, or where processing is unlawful — subject to overriding legal retention obligations.
- Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests, on grounds relating to your particular situation.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
- Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.
To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. phil789 will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may need to verify your identity before processing your request.
Please note that certain rights may be limited where phil789 is required to retain or process your data to comply with a legal obligation, to establish or defend legal claims, or to fulfill our PAGCOR regulatory requirements.
11 Minors & Age Restriction
The phil789 Platform is strictly intended for persons aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. phil789 does not knowingly collect personal data from persons under the age of 21.
If phil789 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all associated data will be reviewed, and the data will be deleted or anonymized to the extent permitted by applicable law and regulatory requirements.
If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to phil789, please contact our support team immediately so that we can take appropriate action.
21+ Strictly Enforced. Protecting minors from gambling harm is a core commitment of phil789. Our age verification process is designed to prevent underage access to the Platform at the point of registration and at any time thereafter.
12 Changes to This Privacy Policy
phil789 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, phil789 will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect, where practicable.
The most current version of this Policy will always be available on this page, with the "Last Updated" date at the top reflecting the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how phil789 protects your personal data.
Your continued use of the Platform after any changes to this Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using the Platform and may request account closure by contacting our support team.
How phil789 Protects Your Privacy
Here is a quick summary of the key privacy protections built into the phil789 Platform for every Filipino player.
Data Privacy Act Compliant
phil789 fully complies with Republic Act No. 10173 and NPC guidelines, ensuring your personal data is handled lawfully, fairly, and transparently at all times.
End-to-End Encryption
All data transmitted between your device and phil789 is protected by TLS encryption. Sensitive stored data uses AES-256 — the same standard used by major banks.
Dedicated Data Protection Officer
phil789 has a designated DPO responsible for overseeing data privacy compliance and handling all player data subject requests promptly and professionally.
We Never Sell Your Data
phil789 does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes — full stop.
You Control Your Data
Access, correct, or request deletion of your personal data at any time. phil789 respects all data subject rights under Philippine law and responds within 15 business days.
Breach Notification Ready
In the unlikely event of a data breach, phil789 will notify the NPC and affected players promptly, in full compliance with the Data Privacy Act's breach notification requirements.