ph589 Privacy Policy

1. Introduction

ph589 ("we," "us," "our") operates the online gaming platform accessible at ph589.org (the "Platform"). This Privacy Policy describes how ph589 collects, processes, stores, shares, and protects the personal data of players and visitors ("you," "your") in connection with your use of the Platform.

ph589 is committed to protecting the privacy of Filipino players in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and the implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines. This Policy is incorporated into and forms part of ph589's Terms and Conditions.

By accessing or using the ph589 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform immediately.

2. Personal Data We Collect

ph589 collects the following categories of personal data from players and visitors:

• Registration data: Full name, date of birth, Philippine mobile number, and chosen username collected when you create a ph589 account.
• Identity verification (KYC) data: Government-issued identification documents (e.g., PhilSys National ID, UMID, SSS ID, passport, driver's license), selfie photographs, and proof of address, collected when KYC verification is required in accordance with Philippine AMLA requirements.
• Financial transaction data: Deposit and withdrawal transaction records including amounts, timestamps, payment method references (e.g., GCash transaction IDs, BPI reference numbers), and wallet balance history.
• Gaming activity data: Game session records, bet amounts, game outcomes, and session durations.
• Device and technical data: IP address, device type and model, operating system, browser type, and session identifiers collected automatically when you access the Platform.
• Communications data: Records of your communications with ph589 customer support, including live chat transcripts and email correspondence.
• Responsible gaming data: Records of any deposit limits, self-exclusion requests, or responsible gaming preferences set on your account.

3. How We Collect Your Data

ph589 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or update your account settings.
• Automatically: Through cookies, server logs, and similar technologies when you access the ph589 Platform. This includes IP address logging, device fingerprinting for fraud prevention, and session analytics.
• From payment providers: ph589 receives transaction reference data from GCash, Maya, BPI, BDO, InstaPay, and other integrated Philippine payment providers when you initiate transactions. ph589 does not receive your full payment account credentials or PINs.
• From game providers: ph589 receives aggregated game session outcome data from our integrated game studios (e.g., PG Soft, Pragmatic Play, Evolution Gaming) for the purpose of account balance management and dispute resolution.
• From third-party verification services: Where ph589 uses third-party KYC and identity verification platforms to verify government ID documents, those platforms may provide verification outcome data (pass/fail) to ph589.

4. Legal Basis for Processing

ph589 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to create and manage your ph589 account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR regulatory requirements, Anti-Money Laundering Act (AMLA) obligations, and National Privacy Commission directives.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and service improvement, where such interests do not override your fundamental privacy rights.
• Consent: Where ph589 relies on your consent for optional data uses (such as sending promotional communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. How We Use Your Personal Data

ph589 uses your personal data for the following purposes:

• Creating, managing, and verifying your ph589 account, including age and identity verification (21+ requirement).
• Processing deposits, withdrawals, and all financial transactions in Philippine Peso (₱ PHP).
• Providing customer support and resolving account or transaction disputes.
• Detecting, investigating, and preventing fraud, money laundering, and prohibited conduct as defined in ph589's Terms and Conditions.
• Complying with PAGCOR regulatory requirements, AMLA reporting obligations, and other applicable Philippine legal requirements.
• Administering responsible gaming tools including deposit limits, session reminders, and self-exclusion requests.
• Sending transactional communications (account confirmations, deposit receipts, withdrawal notifications, security alerts).
• Improving Platform functionality, game performance, and user experience through aggregated analytics.
• Sending promotional communications about ph589 bonuses and new features, where you have consented to receive such communications and have not opted out.

6. Data Sharing and Disclosure

ph589 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Service providers: ph589 engages third-party service providers — including payment processors, KYC verification platforms, game studios, cloud hosting providers, and fraud prevention services — who process data on our behalf under strict contractual data processing agreements.
• Legal and regulatory disclosure: ph589 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts where required by law, regulation, or valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of ph589's business assets, your personal data may be transferred as part of that transaction. You will be notified of any such change in data controller.
• With your consent: ph589 may share your data with third parties in other circumstances where you have provided explicit consent.

All third parties with whom ph589 shares personal data are required to process that data in accordance with applicable Philippine data protection law and ph589's data security standards.

7. Payment Data and Financial Privacy

ph589 takes the privacy of your financial data seriously, particularly given the integration of Philippine e-wallets including GCash and Maya as primary payment methods for Filipino players.

• When you deposit via GCash, the payment authorization occurs within the GCash application or GCash's secure payment gateway. ph589 receives only the transaction reference number, amount, and a success/failure status. Your GCash MPIN, GCash account password, and linked bank account details are never transmitted to or stored by ph589.
• The same privacy architecture applies to Maya, BPI Online, BDO Online, GrabPay, and all other integrated Philippine payment providers.
• ph589 retains financial transaction records as required by Philippine AMLA regulations, which mandate retention of transaction records for a minimum of five (5) years.
• Transaction records are used exclusively for account management, dispute resolution, regulatory reporting, and fraud prevention. They are not used for marketing profiling.

8. Cookies and Tracking Technologies

ph589 uses cookies and similar technologies on the Platform. The following types of cookies are used:

• Strictly necessary cookies: Required for core Platform functionality — session management, login authentication, and security. These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your preferences (e.g., language settings, responsible gaming limits) to improve your experience. Persistent across sessions.
• Analytics cookies: Used by ph589's internal analytics systems to understand aggregate usage patterns (page views, session duration, game popularity). This data is aggregated and not linked to individual player identities for marketing purposes.

ph589 does not deploy third-party advertising cookies or cross-site tracking technologies on the Platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair Platform functionality.

9. Data Retention

ph589 retains your personal data for the following periods:

• Active account data: Retained for the duration of your account and for seven (7) years following account closure, consistent with Philippine regulatory and tax record-keeping requirements.
• KYC and identity documents: Retained for five (5) years following account closure or the last transaction, as required by AMLA.
• Financial transaction records: Retained for five (5) years following the transaction date, as required by AMLA.
• Customer support communications: Retained for three (3) years following the communication, for dispute resolution purposes.
• Device and technical logs: Retained for ninety (90) days for security and fraud investigation purposes, then automatically deleted unless required for an ongoing investigation.

Upon expiry of the applicable retention period, ph589 will securely delete or anonymize your personal data.

10. Data Security

ph589 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph589 servers.
• Encryption at rest for sensitive stored data including passwords (hashed using industry-standard algorithms — never stored in plain text) and KYC documents.
• Role-based access controls limiting ph589 staff access to personal data on a need-to-know basis.
• Continuous security monitoring, intrusion detection, and automated anomaly alerting.
• Regular security assessments and penetration testing of platform infrastructure.
• Two-factor authentication (2FA) available for player accounts to add an additional layer of login security.

Despite these measures, no method of electronic data transmission or storage is completely immune to risk. In the event of a personal data breach that is likely to result in risk to affected players, ph589 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the DPA.

11. Your Rights as a Data Subject

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by ph589:

• Right to be informed: The right to be notified about how your personal data is collected and processed — which this Privacy Policy fulfills.
• Right of access: The right to request a copy of the personal data ph589 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): The right to request deletion of your personal data where retention is no longer necessary, subject to ph589's legal retention obligations under AMLA and PAGCOR regulations.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: The right to object to processing of your personal data for marketing purposes at any time. Objection to processing based on legitimate interests is also available where your fundamental rights override those interests.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe ph589 has not handled your personal data in accordance with Philippine law.

To exercise any of these rights, contact ph589's Data Privacy Officer at the contact details in Section 15. ph589 will respond to verified requests within thirty (30) days.

12. Children's Privacy

The ph589 Platform is strictly intended for persons aged 21 years and above. ph589 does not knowingly collect personal data from individuals under 21 years of age. If ph589 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be deleted, and any balances forfeited, in accordance with ph589's Terms and Conditions and applicable PAGCOR age restriction requirements.

If you are a parent or guardian and believe that a minor has registered on ph589, please contact us immediately at [email protected] so that we can take appropriate action.

13. Cross-Border Data Transfers

ph589 primarily processes data within the Philippines. However, certain service providers — including game studio operators and cloud infrastructure providers — may process data in other jurisdictions. Where personal data is transferred outside the Philippines, ph589 ensures that adequate safeguards are in place, including contractual data protection clauses consistent with NPC requirements, to provide a level of protection equivalent to that provided under Philippine law.

14. Updates to This Privacy Policy

ph589 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform operations. When we make material changes, we will update the "Last Updated" date at the top of this Policy and, where the changes are significant, we will provide notice to registered players via their registered Philippine mobile number or account notification.

Your continued use of the ph589 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

15. Contact and Data Privacy Officer

For privacy-related inquiries, data subject rights requests, or to report a privacy concern, please contact ph589's designated Data Privacy Officer:

• Email: [email protected] — subject line: "Privacy / DPO Request"
• Live Chat: Available 24/7 on the ph589 Platform — request to speak with the Data Privacy team
• Response time: ph589 acknowledges all privacy requests within 3 business days and resolves requests within 30 calendar days, or notifies you if additional time is required.

You also have the right to file a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. Information on filing complaints with the NPC is available through NPC's official government channels.