This Privacy Policy explains how ph798 collects, uses, stores, discloses, and protects the personal data of Members and visitors to the ph798 Platform, in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines and its implementing rules.
This Privacy Policy ("Policy") applies to all personal data collected and processed by ph798 in connection with: (a) the ph798 website accessible at ph798.co and all associated subdomains and pages; (b) any progressive web application or mobile-optimized interface offered by ph798; (c) all gaming products available on the ph798 Platform, including live casino, slots, bingo, sabong wagering, and sports betting; (d) ph798 promotional activities, customer support communications, and loyalty programme administration; and (e) any other service or interaction through which ph798 obtains personal data from or about you.
This Policy applies to registered Members of ph798, prospective Members who initiate but do not complete registration, and unregistered visitors to the Platform. By accessing or using the ph798 Platform, you acknowledge that you have read and understood this Policy. Where this Policy refers to "processing" personal data, that term has the meaning given to it under Republic Act No. 10173 (Data Privacy Act of 2012) and its implementing rules and regulations issued by the National Privacy Commission of the Philippines.
ph798 (operating as ph798.co) is the personal information controller ("PIC") with respect to all personal data processed under this Policy. As PIC, ph798 determines the purposes for which, and the manner in which, personal data is collected and processed.
ph798 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with RA 10173 and this Policy. The DPO is the point of contact for all data privacy enquiries, rights requests, and complaints. Contact details for the DPO are provided in Section 14 of this Policy.
Where ph798 engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification providers), those service providers act as personal information processors ("PIPs") and are contractually bound to process personal data only in accordance with ph798's instructions and applicable Philippine data privacy law.
ph798 collects the following categories of personal data from Members and Platform visitors:
ph798 collects personal data through the following means:
The majority of personal data ph798 holds about you is provided directly by you when you: register an Account on the Platform; complete KYC verification; make a deposit or withdrawal; contact ph798 customer support; participate in a promotion or survey; or update your Account profile settings.
When you access and use the ph798 Platform, certain technical and usage data is collected automatically through cookies, session tracking, and server logs. This includes your IP address, device identifiers, session duration, pages visited, and game events. See Section 9 for full details of our cookies and tracking practices.
To fulfil KYC and AMLA compliance obligations, ph798 works with licensed third-party identity verification providers. These providers may return verification outcomes, document authenticity assessments, and politically exposed person (PEP) or sanctions screening results to ph798. ph798 does not receive raw biometric data from these providers — only verification outcomes.
When you initiate a GCash, Maya, BPI, BDO, Metrobank, or other payment method transaction, the relevant payment processor shares with ph798 the transaction reference, amount, and confirmation status necessary to credit or debit your ph798 Wallet. ph798 does not receive your full payment account credentials from these providers.
ph798 processes your personal data only for specified, legitimate purposes. The table below sets out the primary purposes for which ph798 processes personal data and the legal basis for each under RA 10173:
| Processing Purpose | Data Categories Used | Legal Basis (RA 10173) |
|---|---|---|
| Account registration and management | Identity, contact, technical data | Performance of contract; consent |
| KYC identity and age verification | Identity, KYC documents, sensitive PI | Compliance with legal obligation (PAGCOR, AMLA) |
| Payment processing — deposits and withdrawals | Financial, identity data | Performance of contract |
| Gaming product operation and bet settlement | Gaming, financial, technical data | Performance of contract |
| AMLA transaction monitoring and reporting | Financial, identity, gaming data | Compliance with legal obligation (RA 9160 as amended) |
| Fraud detection and security monitoring | Technical, gaming, financial data | Legitimate interests; legal obligation |
| Customer support communications | Identity, contact, communications data | Performance of contract; legitimate interests |
| Responsible gaming monitoring | Gaming, financial, identity data | Legal obligation (PAGCOR responsible gaming rules) |
| Bonus and promotion administration | Identity, gaming, financial data | Performance of contract; consent |
| Platform improvement and analytics | Technical, gaming data (aggregated/anonymised) | Legitimate interests |
| Compliance with PAGCOR reporting obligations | Identity, gaming, financial data | Compliance with legal obligation |
ph798 does not process your personal data for direct marketing communications without your explicit consent. Where consent is the legal basis for a specific processing activity, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
ph798 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing or commercial purposes. ph798 discloses personal data to third parties only in the following limited circumstances:
ph798 engages carefully selected third-party service providers to support the operation of the Platform. These include: KYC and identity verification providers; payment processing networks (GCash, Maya, BPI, BDO, Metrobank, and other Philippine payment providers); cloud infrastructure and data hosting providers; fraud detection and cybersecurity service providers; and customer support platform providers. All such providers are bound by data processing agreements that restrict them to processing personal data only on ph798's documented instructions and in compliance with RA 10173.
ph798 is required by Philippine law to disclose certain personal data and transaction information to government and regulatory authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), the National Privacy Commission (NPC), and any other competent Philippine authority, pursuant to legally binding orders, warrants, subpoenas, or statutory reporting obligations. Such disclosures are mandatory and do not require your prior consent.
In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of ph798's assets, personal data held by ph798 may be disclosed to the prospective counterparty and, upon completion of such transaction, transferred to the successor entity. ph798 will notify affected Members of any such transfer that materially affects the processing of their personal data and will ensure that the successor entity is bound by obligations no less protective than those in this Policy.
ph798 may disclose personal data where it believes in good faith that such disclosure is necessary to: enforce these Terms and Conditions or other agreements; protect the rights, property, or safety of ph798, its Members, or the public; detect, prevent, or investigate fraud, security incidents, or violations of applicable law.
ph798 primarily stores and processes Member personal data within the Republic of the Philippines. Where the use of third-party service providers involves the transfer of personal data outside the Philippines (for example, to cloud infrastructure providers with data centres in other jurisdictions), ph798 ensures that such transfers are carried out only under conditions that provide a standard of protection for personal data that is at least equivalent to that afforded under RA 10173, including through: contractual data transfer agreements incorporating the standard clauses approved by the National Privacy Commission; or transfers to jurisdictions that have been assessed by the NPC as providing adequate levels of data protection.
ph798 maintains a register of cross-border data transfers and reviews the legal basis for each such transfer periodically to ensure continued compliance with NPC guidance.
ph798 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data (active accounts) | Duration of account relationship | Contract performance |
| Account data after closure | Minimum 5 years post-closure | AMLA, PAGCOR, BIR requirements |
| Transaction and financial records | Minimum 5 years | RA 9160 (AMLA) as amended |
| KYC verification documents | Minimum 5 years after last transaction | AMLA, PAGCOR compliance |
| Customer support communications | 3 years from last interaction | Legitimate interests; legal claims |
| Technical/server logs | 12 months from generation | Security and fraud detection |
| Marketing consent records | Until withdrawal of consent + 3 years | Regulatory record-keeping |
Upon expiry of the applicable retention period, ph798 will securely delete, anonymize, or pseudonymize personal data in accordance with NPC-approved data disposal procedures. Anonymized or aggregated data that can no longer be linked to an individual may be retained indefinitely for analytical purposes.
ph798 uses cookies and similar tracking technologies (including local storage, session tokens, and device fingerprinting signals) on the Platform for the purposes described below. Cookies are small data files stored on your device by your browser when you visit the Platform.
Strictly Necessary Cookies: These cookies are essential to the operation of the Platform and cannot be disabled. They are used to maintain your logged-in session, authenticate your identity, manage security tokens, and remember your responsible gaming settings. Without these cookies, the Platform cannot function.
Functional Cookies: These cookies remember your preferences (such as language settings, game display preferences, and notification settings) to provide a more personalized experience. They are set based on your interaction with the Platform and do not track your activity across third-party websites.
Analytics Cookies: ph798 uses aggregated analytics data collected via first-party analytics tools to understand how Members use the Platform, identify technical issues, and improve the overall gaming experience. Analytics data is anonymized before use for product improvement and is not used to identify individual users.
ph798 does not use third-party advertising cookies or allow third-party advertising networks to place tracking cookies on the Platform.
You can control cookie settings through your browser's privacy settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the ph798 Platform. Disabling functional cookies may limit certain personalization features.
ph798 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction, in accordance with RA 10173 and NPC Circular No. 16-03 (Security of Personal Data in Government Agencies) and applicable best practices for private sector data controllers.
Under Republic Act No. 10173 (Data Privacy Act of 2012), Filipino data subjects are granted the following rights with respect to their personal data. ph798 is committed to honoring these rights within the response timeframes established by the NPC:
You have the right to be informed whether ph798 holds personal data about you and the general terms under which it is being processed — which this Policy provides.
You have the right to request a copy of the personal data ph798 holds about you, including the purposes for which it is processed and the recipients to whom it has been disclosed.
You have the right to request correction of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data ph798 holds about you.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies.
You have the right to object to the processing of your personal data where ph798 relies on legitimate interests as the legal basis, including profiling for analytics purposes.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.
Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph798 has processed your personal data in violation of RA 10173.
To exercise any of the above rights, please contact ph798's Data Protection Officer using the details in Section 14. ph798 will respond to rights requests within fifteen (15) calendar days of receipt. Where a request is complex or involves a large volume of data, ph798 may extend this period by a further fifteen (15) days, with notice to you.
ph798 may request proof of identity before processing a rights request to ensure that personal data is not disclosed to or amended at the request of an unauthorized person.
If you are a parent or guardian and believe that a minor under your care has provided personal data to ph798 or created a ph798 Account, please contact ph798 support immediately. ph798 will act promptly to investigate and take appropriate corrective action, including Account closure and secure deletion of any personal data belonging to the minor.
ph798 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, the introduction of new Platform features, amendments to applicable Philippine data privacy law, or guidance issued by the National Privacy Commission. The date of the most recent revision is indicated at the top of this Policy.
Where changes are material — meaning they significantly affect the rights of Members or the manner in which ph798 processes personal data — ph798 will notify Members through prominent notice on the Platform homepage, an in-Platform notification upon next login, or notification via the Member's registered contact details, at least fourteen (14) days before the changes take effect.
Your continued use of the ph798 Platform after the effective date of any revised Policy constitutes acceptance of the updated terms. We encourage you to review this Policy periodically. The current version is always accessible at ph798.co/privacy-policy.
For any questions, concerns, or formal requests relating to this Privacy Policy or ph798's processing of your personal data, please contact ph798's Data Protection Officer:
If you are not satisfied with ph798's response to your data privacy request or complaint, or if you believe that ph798 has violated your rights under RA 10173, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC accepts complaints through its official channels as published on the NPC website (privacy.gov.ph).
ph798 takes all data privacy complaints seriously and cooperates fully with NPC investigations. We encourage Members to raise concerns with our DPO in the first instance so that we have the opportunity to address your concern before any NPC escalation.
Six concrete practices that define how we handle Filipino players' personal data every day.
ph798 processes personal data in full compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and implementing rules issued by the National Privacy Commission. A designated DPO oversees compliance.
ph798 does not sell, rent, or broker your personal data to advertisers, data brokers, or any third party for their own commercial purposes. Your data is used only to operate the platform and meet legal obligations.
All data in transit is encrypted with TLS 1.3. Sensitive data at rest — including government ID copies and financial records — is encrypted in the database. Passwords are hashed with bcrypt and are unreadable to staff.
ph798 honors all eight data subject rights under RA 10173 — access, correction, erasure, portability, objection, and more. Rights requests are processed within 15 calendar days by our Data Protection Officer.
In the unlikely event of a personal data breach that meets the NPC notification threshold, ph798 notifies the National Privacy Commission within 72 hours and affected Members without undue delay.
ph798 retains data only as long as necessary — legally required minimums for financial and KYC records, with active deletion of data that no longer serves a documented purpose. No indefinite data hoarding.
Your personal data is protected under Philippine law and by ph798's security infrastructure. Sign in to your account or explore everything the platform has to offer — responsibly, securely, and on your terms. 21+ only.
Gambling involves financial risk. Play responsibly. 21+ only. ph798 supports responsible gaming in the Philippines.