ph79 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy is issued by ph79 ("ph79," "we," "us," "our"), the operator of the online gaming and sports betting platform accessible at ph79.vip, which serves Filipino players across the Philippines. ph79 operates under PAGCOR regulatory guidelines and is subject to the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines.

ph79 acts as the Data Controller in respect of the personal data it collects from registered players and website visitors. As Data Controller, ph79 is responsible for determining the purposes and means of processing your personal data and for ensuring that processing is carried out in compliance with applicable Philippine data protection law.

ph79 collects personal data from you in the following categories, depending on your interaction with the Platform:

2.1 Registration & Account Data

• Full legal name as it appears on your Philippine government-issued ID;
• Philippine mobile number used as your account identifier;
• Date of birth (for mandatory 21+ age verification);
• Residential address in the Philippines;
• Username and hashed (never plain-text) password;
• Email address, if provided voluntarily.

2.2 Identity Verification (KYC) Data

• Government-issued ID type and number (PhilSys, Passport, UMID, or Driver's License);
• Scanned copy or photograph of your government-issued ID;
• Selfie or live photograph for biometric liveness verification where required;
• Proof of address documentation (utility bill or bank statement) where requested;
• Source-of-funds documentation where triggered by AML thresholds.

2.3 Financial Transaction Data

• GCash account number, Maya account number, or bank account details associated with your deposits and withdrawals;
• Transaction amounts, dates, references, and statuses;
• Payment method ownership verification data.

2.4 Gaming Activity Data

• Game session logs, bet amounts, game results, and wagering history;
• Bonus and promotion participation records;
• Responsible gaming tool settings (deposit limits, self-exclusion requests, cool-off periods).

2.5 Technical & Device Data

• IP address and approximate geolocation at login;
• Device type, operating system, and browser information;
• Session timestamps, login history, and access logs;
• Cookie identifiers and session tokens (see Section 7).

ph79 processes your personal data strictly for the following purposes:

• Account Management: Creating and maintaining your ph79 player account, authenticating your identity at ph79 Login, and managing your account settings and preferences;
• Identity & Age Verification: Conducting KYC checks to verify that you are 21 years of age or older and that your identity matches the documents provided, in compliance with PAGCOR requirements;
• Payment Processing: Processing deposits via GCash, Maya, GrabPay, BPI, BDO, Metrobank, and 7-Eleven CLiQQ, and processing withdrawal requests to your verified Philippine payment method;
• Regulatory Compliance: Fulfilling ph79's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), the Terrorism Financing Prevention and Suppression Act (RA 10168), and reporting obligations to Philippine regulatory authorities;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, collusion, money laundering, and unauthorized account access;
• Responsible Gaming: Monitoring gaming behavior to identify indicators of problem gambling, applying responsible gaming tools set by the player, and complying with PAGCOR self-exclusion obligations;
• Customer Support: Responding to player inquiries, complaints, and support requests through ph79's live chat service;
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game library curation, and user experience.

ph79 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where required by PAGCOR or law enforcement authorities under applicable Philippine law.

ph79 processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173) and its IRR:

• Contractual Necessity: Processing necessary for the performance of the player agreement between you and ph79, including account registration, game access, payment processing, and customer support;
• Legal Obligation: Processing required to comply with ph79's legal and regulatory obligations under PAGCOR licensing conditions, RA 9160 (Anti-Money Laundering Act), RA 10173 (Data Privacy Act), and other applicable Philippine law;
• Legitimate Interests: Processing necessary for ph79's legitimate interests in preventing fraud, securing the Platform, and improving services — where such interests are not overridden by your rights and interests as a data subject;
• Consent: Where ph79 relies on your consent for specific processing activities (such as optional marketing communications), you may withdraw that consent at any time by contacting ph79 support.

ph79 does not sell, rent, or trade your personal data. ph79 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to data processing agreements where applicable:

• Payment Service Providers: GCash (Mynt / Globe Fintech), Maya Philippines, GrabPay, and partner Philippine banks (BPI, BDO, Metrobank) for the processing of deposits and withdrawals;
• Game Content Providers: Licensed game studios and live dealer operators (including Ezugi and other certified providers) for the purpose of delivering game content and maintaining game integrity;
• Identity Verification Services: Third-party KYC and identity verification providers used to verify the authenticity of government-issued IDs and perform liveness checks during account verification;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where disclosure is required by law, court order, or regulatory directive;
• IT Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers engaged by ph79 to operate and secure the Platform infrastructure, subject to contractual data protection obligations.

Where ph79 shares data with third-party processors, such sharing is governed by written data processing agreements that require processors to implement appropriate technical and organizational security measures and to process data only in accordance with ph79's documented instructions.

ph79 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and KYC records: Retained for a minimum of five (5) years from account closure, in compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with RA 9160 and PAGCOR requirements;
• Gaming activity logs: Retained for a minimum of two (2) years from the date of each gaming session;
• Technical access and security logs: Retained for a minimum of one (1) year from the date of each log entry;
• Customer support communications: Retained for two (2) years from the date of the last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph79's data disposal procedures, unless a longer retention period is required by a court order, regulatory directive, or ongoing investigation.

ph79 uses cookies and similar tracking technologies on the ph79.vip website to provide, secure, and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication tokens that keep you logged in to ph79, CSRF protection cookies, and load-balancing cookies. These cannot be disabled;
• Functional Cookies: Remember your preferences such as game lobby display settings, language, and responsible gaming tool configurations across sessions;
• Analytics Cookies: Aggregate, anonymized usage statistics used to understand how Filipino players navigate the Platform, which games are most accessed, and where technical issues occur — used solely to improve platform performance.

ph79 does not deploy third-party advertising or retargeting cookies on the Platform. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to ph79 and using Platform features that require authentication.

ph79 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the ph79 Platform;
• AES-256 encryption for sensitive personal data stored at rest, including KYC documents and financial records;
• Passwords are stored as cryptographic hashes (bcrypt) — ph79 never stores passwords in plain text;
• Two-factor authentication (2FA) via SMS OTP for ph79 Login, particularly for new device logins and high-value transactions;
• Role-based access controls limiting employee access to personal data to only those with a business need;
• Regular security audits, penetration testing, and vulnerability assessments of the ph79 Platform infrastructure;
• Incident response procedures for detecting, containing, and notifying affected players and the NPC of data breaches within the timeframes required by RA 10173.

Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. ph79 will notify affected Filipino players and the National Privacy Commission in accordance with RA 10173 in the event of a personal data breach that poses a real risk of serious harm. You can reduce your personal risk by using a strong, unique password for your ph79 Login and enabling 2FA in Account Settings.

As a Filipino data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by ph79:

• Right to be Informed: The right to be informed of what personal data ph79 collects, how it is processed, and with whom it is shared — as set out in this Privacy Policy;
• Right of Access: The right to request a copy of the personal data ph79 holds about you, and information about how it is processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your ph79 account;
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where processing is no longer necessary, subject to ph79's legal retention obligations under PAGCOR and AML regulations;
• Right to Object: The right to object to processing of your personal data where ph79 relies on legitimate interests as the legal basis, subject to ph79's overriding compliance obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the ph79 Data Protection Officer at [email protected] with the subject line "Data Privacy Request." ph79 will respond within 15 business days of receipt of your verified request. ph79 may need to verify your identity before processing your request to protect against unauthorized access to your data.

The ph79 Platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR minimum age requirements and Philippine law. ph79 does not knowingly collect personal data from individuals under 21 years of age. If ph79 becomes aware that personal data has been collected from a person under 21, the associated account will be suspended immediately, the data will be securely deleted, and any deposits will be returned to the original payment method where technically feasible.

Parents and guardians are encouraged to use parental control software on shared devices to prevent access to online gaming platforms by minors. If you believe a minor has registered on ph79, please contact ph79 support immediately so the account can be investigated and closed without delay.

ph79 reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine data protection law, PAGCOR regulatory requirements, or ph79's data processing practices. Where material changes are made, ph79 will provide notice by posting a prominently dated update notice on the ph79 Platform and, where appropriate, by sending an SMS notification to your registered Philippine mobile number.

The date of the most recent update is indicated at the top of this Privacy Policy. Your continued use of the ph79 Platform following notification of material changes constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated Privacy Policy, you must cease using the Platform and contact ph79 support to close your account.

For all data privacy matters, including rights requests, complaints, and general inquiries about how ph79 handles your personal data, please contact the ph79 Data Protection Officer:

If you are not satisfied with ph79's response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for enforcing RA 10173. Ang inyong privacy ay aming pananagutan — lagi.