ph 29 Privacy Policy

1. Who We Are

ph 29 ("ph 29", "we", "us", or "our") operates the online casino and gaming platform accessible at ph29.lat (the "Platform"). ph 29 is licensed by the Philippine Amusement and Gaming Corporation ("PAGCOR") and operates in accordance with applicable Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA").

ph 29 is the personal information controller in respect of any personal data you provide when registering for, accessing, or using the Platform. This Privacy Policy describes how ph 29 fulfills its obligations as a personal information controller and how it handles the personal data of Filipino players from Manila to Cebu to Davao and across the Philippines.

2. Data We Collect

ph 29 collects the following categories of personal information:

• Registration Data: Full name, date of birth, nationality, residential address, email address, and mobile number provided when creating a ph 29 account.
• Identity Verification Data: Government-issued ID (e.g., Philippine passport, driver's license, SSS/GSIS ID, PhilSys national ID), selfie photographs, and proof of address documents submitted to verify your identity and age.
• Financial Data: Payment method details (GCash number, PayMaya account, BPI/BDO/Metrobank account information used for deposits and withdrawals), transaction amounts, dates, and references. ph 29 does not store full card numbers or CVV codes.
• Gaming Activity Data: Game sessions, bets placed, wins, losses, bonus usage, game preferences, and session duration records.
• Technical Data: IP address, device type and operating system, browser type, approximate location derived from IP, Platform access timestamps, and session tokens.
• Communications Data: Records of your interactions with ph 29 customer support, including live chat transcripts, email correspondence, and complaint records.
• Responsible Gaming Data: Self-imposed limits, cooling-off requests, self-exclusion records, and any information you provide in relation to responsible gaming support.

3. How We Use Your Data

ph 29 uses your personal information for the following purposes:

• To create and manage your ph 29 account and verify your identity and age (21+ requirement) in compliance with PAGCOR regulations.
• To process deposits and withdrawals through your chosen Philippine payment method (GCash, PayMaya, BPI, BDO, Metrobank).
• To provide access to games, live dealer tables, bingo rooms, and sports betting services on the Platform.
• To administer bonuses, promotions, and the ph 29 VIP loyalty program in accordance with applicable promotional terms.
• To comply with anti-money laundering (AML) obligations under Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR compliance requirements, including transaction monitoring and suspicious activity reporting.
• To detect and prevent fraud, account abuse, cheating, and other prohibited conduct as described in the ph 29 Terms & Conditions.
• To provide customer support and resolve disputes or complaints.
• To administer responsible gaming tools and communicate with players who may be experiencing gambling-related harm.
• To improve the Platform through analytics, testing, and product development activities, using aggregated or anonymized data where possible.
• To send you service-related communications (account notifications, security alerts, policy updates). Marketing communications are subject to your separately provided consent and may be opted out of at any time.

4. Legal Basis for Processing

ph 29 processes your personal data on the following legal bases under the DPA and its implementing rules:

• Contract Performance: Processing necessary to provide the ph 29 service to you under our Terms & Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, court orders, and other requirements of Philippine law.
• Legitimate Interest: Processing for fraud detection, security monitoring, and Platform improvement, where ph 29's legitimate interests are balanced against your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where you have provided clear and explicit consent that may be withdrawn at any time.

5. Data Sharing

ph 29 does not sell your personal data. ph 29 may share your personal information with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, solely to facilitate your financial transactions.
• Identity Verification Providers: Third-party KYC (Know Your Customer) and age verification services used to confirm your identity and comply with PAGCOR requirements.
• Game Providers: Suppliers of casino games and live dealer software licensed to operate on the Platform, who may receive anonymized session data for game integrity purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where disclosure is required by law or regulation.
• Professional Advisors: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where necessary for legal or compliance purposes.
• Technology Service Providers: Cloud hosting providers, cybersecurity firms, and Platform infrastructure providers who process data on ph 29's behalf under strict data processing agreements.

6. Cookies & Tracking Technologies

ph 29 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for Platform functionality, including maintaining your login session, remembering your account preferences, and ensuring Platform security. These cannot be disabled without affecting Platform functionality.
• Analytics Cookies: Used to understand how players navigate the Platform in aggregate, enabling ph 29 to improve the user experience. These use anonymized or pseudonymized data.
• Responsible Gaming Cookies: Used to track session duration and display responsible gaming reminders at intervals you have configured in your account settings.

You may manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from logging into your ph 29 account or accessing certain Platform features.

7. Data Retention

ph 29 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Account Data: Retained for the duration of your active ph 29 account plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Identity Verification Documents: Retained for five (5) years following account closure or the last verified transaction, whichever is later.
• Customer Support Records: Retained for three (3) years following resolution of the relevant support interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus one (1) year thereafter for compliance purposes.

Upon expiry of the applicable retention period, ph 29 will securely delete or anonymize your personal data.

8. Data Security

ph 29 implements technical and organizational security measures proportionate to the nature of the personal data processed and the risks involved. These measures include 256-bit SSL/TLS encryption for all data in transit, encryption of sensitive data at rest, access controls limiting data access to authorized personnel only, regular security audits and vulnerability assessments, and incident response procedures for detecting, reporting, and addressing personal data breaches in accordance with NPC (National Privacy Commission) requirements.

In the event of a personal data breach that is likely to result in a serious risk to your rights, ph 29 will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected individuals as required by the DPA and NPC guidelines.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph 29:

• Right to be Informed: The right to be notified of how your personal data is collected, processed, and used — as set out in this Privacy Policy.
• Right to Access: The right to obtain a copy of your personal data held by ph 29 and information about how it is being processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected or updated.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph 29's legal retention obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interest.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph 29 has not handled your personal data in accordance with the DPA.

To exercise any of these rights, please contact the ph 29 Data Protection Officer at [email protected]. ph 29 will respond to data subject requests within thirty (30) days of receipt, subject to verification of your identity.

10. Children's Privacy

ph 29 does not knowingly collect personal data from persons under 21 years of age. The Platform is strictly intended for adults aged 21 and above in compliance with PAGCOR regulations. If ph 29 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account suspended. If you believe a minor has registered a ph 29 account, please contact [email protected] immediately.

11. International Data Transfers

ph 29 primarily processes and stores personal data within the Philippines. Where personal data is transferred to or processed by third-party service providers located outside the Philippines (for example, cloud infrastructure providers), ph 29 ensures that such transfers are made only to countries or organizations that provide an adequate level of data protection, or under appropriate contractual safeguards including standard data processing agreements that comply with NPC requirements.

12. Changes to This Privacy Policy

ph 29 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or PAGCOR regulations. Material changes will be communicated to registered players via email notification and/or a Platform notice at least seven (7) days prior to the changes taking effect. The "Last Updated" date at the top of this page will be revised accordingly. Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

13. Contact & Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or to contact ph 29's Data Protection Officer, please use the following contact details:

• Data Protection Officer, ph 29
• Email: [email protected]
• Response Time: Within 72 hours for general inquiries; within 30 days for formal data subject rights requests

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information about the NPC complaint process is available through official Philippine government channels.