ph24 Privacy Policy

1. Introduction

ph24 is committed to protecting the privacy and personal data of all individuals who use the ph24 Platform. This Privacy Policy has been prepared in compliance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable guidelines issued by the National Privacy Commission (NPC) and PAGCOR.

This Policy describes the types of personal information ph24 collects, the purposes for which it is processed, the persons and entities with whom it may be shared, the security measures ph24 employs to protect it, the retention periods applicable to different categories of data, and the rights you hold as a data subject under Philippine law.

By registering a ph24 account or continuing to use the ph24 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, ph24 is the Personal Information Controller in respect of all personal data collected through the ph24 Platform.

ph24 operates under PAGCOR licensing and is subject to the data governance obligations applicable to PAGCOR-regulated online gaming operators in the Philippines. Our designated Data Protection Officer (DPO) can be contacted at [email protected] for any privacy-related enquiries.

3. Personal Data We Collect

ph24 collects the following categories of personal data:

3.1 Registration & Identity Data

• Full legal name as it appears on a Philippine government-issued ID;
• Date of birth (to verify compliance with the 21+ age restriction);
• Philippine mobile number and/or email address;
• Chosen username and encrypted password;
• Nationality and country of residence.

3.2 KYC Verification Data

• Government-issued photo identification (UMID, PhilSys National ID, driver's licence, or Philippine passport);
• Proof of address documents (utility bill, bank statement, or equivalent);
• Proof of source of funds documentation where required by PAGCOR AML obligations;
• Facial photograph or liveness check image collected during identity verification.

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records;
• GCash account identifier or PayMaya identifier linked to your ph24 account;
• Bank account or payment card details used for transactions (stored in tokenised form only);
• Transaction timestamps, amounts, and reference numbers.

3.4 Gaming Activity Data

• Game session logs including games played, stakes, outcomes, and session duration;
• Sports betting history including markets selected, odds accepted, and bet outcomes;
• Bonus usage history and wagering progress records;
• Responsible gaming settings and self-exclusion records.

3.5 Technical & Device Data

• IP address and approximate geolocation data;
• Device type, operating system, and browser version;
• Login timestamps and session activity logs;
• Cookie identifiers and similar tracking technology data (see Section 8).

3.6 Communication Data

• Records of communications with ph24 support (live chat transcripts, emails);
• Survey responses and feedback submissions.

4. How We Collect Your Data

ph24 collects personal data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or submit any form on the Platform;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you use the Platform;
• From third-party identity verification services — ph24 uses third-party KYC and AML screening providers to verify the identity and risk profile of account holders, as required by PAGCOR;
• From payment processors — GCash, PayMaya, and banking partners may transmit transaction-related data to ph24 as part of payment processing;
• From PAGCOR and regulatory bodies — where ph24 receives information about a Player from PAGCOR or other Philippine regulatory authorities in the course of its regulatory compliance obligations.

5. How We Use Your Personal Data

6. Legal Basis for Processing

ph24 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent — For optional communications such as marketing emails, promotional SMS, and non-essential cookies, ph24 relies on your explicit consent. You may withdraw consent at any time by contacting [email protected] or adjusting your account communication preferences.
• Contractual Necessity — Processing required to open, maintain, and operate your ph24 account, process transactions, and deliver gaming services under the ph24 Terms and Conditions.
• Legal Obligation — Processing mandated by PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act 9160 as amended), the Data Privacy Act, and other applicable Philippine law.
• Legitimate Interests — Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights.

7. Data Sharing & Disclosure

ph24 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only as necessary and lawful:

• PAGCOR and Philippine Government Authorities — ph24 is required to submit player data, transaction records, and suspicious activity reports to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory or law enforcement authorities as required by law.
• KYC and AML Service Providers — Third-party identity verification and AML screening providers engaged by ph24 to perform required compliance checks. These providers are contractually bound to process data only for the specified purpose.
• Payment Processors — GCash (Mynt), PayMaya (Voyager), and partner banks receive the transaction-related data necessary to process your deposits and withdrawals. Their use of your data is governed by their own privacy policies.
• Game Software Providers — Providers such as PG Soft, Pragmatic Play, Jili, and Habanero may receive anonymous game session data for audit and certification purposes. No personally identifiable information is transmitted to game providers beyond what is technically necessary.
• IT Infrastructure and Cloud Service Providers — ph24 uses third-party cloud hosting and infrastructure services. Data is stored on servers subject to contractual data processing agreements consistent with the Data Privacy Act requirements.
• Professional Advisers — Legal counsel, auditors, and compliance consultants engaged by ph24 may access personal data to the minimum extent necessary to provide their professional services.

In all cases of data sharing, ph24 implements appropriate contractual safeguards to ensure third-party recipients maintain data protection standards consistent with the Data Privacy Act of 2012.

8. Cookies & Tracking Technologies

ph24 uses cookies and similar tracking technologies to operate and improve the Platform. The following cookie categories are used:

• Strictly Necessary Cookies — Required for basic Platform functionality including login session management, security tokens, and fraud prevention. These cannot be disabled without impacting Platform operation.
• Functional Cookies — Store your Platform preferences such as language settings, lobby view preferences, and responsible gaming display settings.
• Analytics Cookies — Collect aggregated, anonymised data about Platform usage patterns to help ph24 improve game navigation, page performance, and user experience.
• Marketing Cookies — Used where you have provided consent to receive personalised promotional content. You may withdraw consent at any time via account settings.

You may control non-essential cookies through the cookie preference manager accessible on the ph24 Platform. Note that disabling certain cookies may affect Platform functionality.

9. Data Security

ph24 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and ph24 servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at Rest: Sensitive data including financial records and KYC documents are stored in encrypted form on access-controlled servers;
• Password Security: Account passwords are stored as salted cryptographic hashes. ph24 employees cannot view your plaintext password;
• Access Controls: Internal access to personal data is restricted on a least-privilege basis. Staff access to player data is logged, monitored, and subject to periodic audit;
• Two-Factor Authentication: ph24 offers SMS-based 2FA for all accounts and strongly recommends its activation;
• Intrusion Detection: ph24 employs real-time security monitoring, anomaly detection, and a dedicated incident response process for potential data security events.

10. Data Retention

ph24 retains personal data for the following periods, after which it is securely deleted or anonymised:

• Account and KYC Data: Retained for the duration of the account relationship, plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLC regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with the Anti-Money Laundering Act;
• Gaming Activity Logs: Retained for three (3) years from the date of the session, or longer if required for ongoing dispute resolution or regulatory inquiry;
• Communications (Support Records): Retained for two (2) years from the date of the last communication;
• Marketing Preferences and Consent Records: Retained for the duration of the marketing relationship plus one (1) year following opt-out.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph24:

To exercise any of the above rights, submit a written request to ph24's Data Protection Officer at [email protected]. ph24 will respond to all valid data subject requests within fifteen (15) business days. Identity verification may be required before processing certain requests.

If you believe ph24 has not handled your personal data in accordance with the Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

12. Children's and Minors' Privacy

If you are a parent or guardian and believe that a minor has provided personal data to ph24 without your knowledge, please contact us immediately at [email protected].

13. International Data Transfers

ph24 primarily stores and processes personal data on servers located within or approved for use under Philippine data governance standards. Where the use of service providers requires the transfer of personal data outside the Philippines (for example, to cloud infrastructure providers with data centres in Asia-Pacific), ph24 ensures that appropriate contractual safeguards are in place consistent with the requirements of the Data Privacy Act of 2012, including data processing agreements that impose equivalent data protection obligations on the recipient.

ph24 will not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first implementing appropriate transfer mechanisms.

14. Changes to This Privacy Policy

ph24 may update this Privacy Policy from time to time to reflect changes in our data processing practices, operational requirements, or applicable Philippine law. Material changes will be communicated to registered Players via email and/or in-Platform notification not less than fourteen (14) days before the amended Policy takes effect.

The current version of this Privacy Policy is always accessible at ph24.club/privacy-policy. The date of last update is displayed at the top of this document. Your continued use of the ph24 Platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

15. Contact Us & Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or ph24's data processing practices, please contact our Data Protection Officer: