Privacy Policy

Who We Are – Data Controller

1.1  ph897 ("ph897," "we," "us," or "our") is the operator of the online gaming platform accessible at ph897.win. ph897 acts as the Personal Information Controller ("PIC") in respect of the personal data it collects from players, registered users, and visitors to the ph897 platform, as defined under Section 3(h) of the Philippine Data Privacy Act of 2012 ("DPA").

1.2  ph897 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Privacy Policy. The DPO may be contacted at [email protected] with the subject line "DPO Enquiry."

1.3  This Privacy Policy applies to all personal data processed by ph897 in connection with the ph897 platform — including account registration, KYC verification, deposits, withdrawals, game participation, customer support interactions, and any promotional communications.

Personal Data We Collect

2.1  ph897 collects personal data from you directly and automatically in the course of providing its services. The categories of personal data ph897 collects include:

Identity & Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth;
• Current residential address in the Philippines;
• Philippine mobile number;
• Email address.

Identity Verification (KYC) Data

• Copy of a valid government-issued Philippine photo identification (National ID, passport, driver's license, SSS/GSIS card, UMID, PRC ID, or Voter's ID);
• Selfie photograph with ID for liveness verification;
• Source of funds documentation where required for enhanced due diligence;
• Proof of address documentation where applicable.

Financial Data

• GCash or PayMaya registered mobile number and account name;
• Bank account details for BPI, BDO, Metrobank, or UnionBank transfers (account name and number only; ph897 does not store online banking credentials);
• Transaction history — deposits, withdrawals, and bonus credits;
• Wallet balance history.

Gaming Activity Data

• Game round history, including game type, bet amounts, outcomes, and timestamps;
• Session duration records;
• Bonus and promotional participation records.

Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session logs, login timestamps, and session duration;
• Cookie and tracking data as described in Section 8 below.

Communications Data

• Records of customer support interactions via live chat and email;
• Complaints, dispute records, and related correspondence;
• Marketing preference records.

2.2  Where you provide personal data about a third party (for example, a payment account holder), you represent and warrant that you have the legal authority to do so and that the third party has been informed of and has consented to ph897's processing of their data as described in this Policy.

How ph897 Uses Your Personal Data

3.1  ph897 uses personal data collected from you for the following purposes:

3.2  ph897 will not use your personal data for any purpose other than those listed above without first obtaining your separate, specific consent, or as required by applicable law.

Legal Basis for Processing

4.1  ph897 processes your personal data on the following legal bases under the DPA:

• Contractual Necessity: Processing required to fulfil ph897's obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the DPA itself, and other applicable Philippine laws;
• Legitimate Interests: Processing for fraud detection, security monitoring, platform analytics, and responsible gaming monitoring — where those interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies — where you have given specific, informed, and freely given consent that may be withdrawn at any time.

Data Sharing & Third-Party Disclosure

5.1  ph897 does not sell your personal data to third parties. ph897 shares personal data only in the following circumstances and only to the extent necessary for the relevant purpose:

Service Providers (Personal Information Processors)

ph897 engages third-party service providers to assist in delivering platform services, including: payment processors (GCash / PayMaya operators, banking partners), KYC verification technology providers, live casino studio operators, IT infrastructure and cloud hosting providers, and fraud detection service providers. These providers process personal data solely on ph897's instructions and are contractually bound to maintain confidentiality and comply with the DPA.

Regulatory & Law Enforcement Authorities

ph897 will disclose personal data to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission ("NPC"), or other competent Philippine authorities where required by law, court order, or regulatory direction. ph897 will not notify you of such disclosures where doing so would be prohibited by law or would compromise an investigation.

Corporate Transactions

In the event of a merger, acquisition, asset sale, or restructuring involving ph897, personal data held by ph897 may be transferred to the relevant acquirer or successor entity, subject to equivalent privacy protections and notification to affected players.

5.2  ph897 does not transfer personal data outside the Philippines except where required by service providers operating internationally, in which case ph897 ensures that adequate safeguards — including standard contractual clauses and equivalent data protection standards — are in place prior to transfer.

Data Retention

6.1  ph897 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods required by applicable Philippine law:

• Account and KYC records: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR and AMLA regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity records: Retained for a minimum of three (3) years from the date of each gaming session;
• Customer support records: Retained for three (3) years from the date of the relevant interaction;
• Marketing preference records: Retained until consent is withdrawn, after which preference data will be retained for a further twelve (12) months to ensure suppression lists remain effective.

6.2  Upon expiry of the applicable retention period, ph897 will securely delete or anonymise personal data in accordance with its internal data disposal procedures, unless further retention is required by law.

Data Security

7.1  ph897's security measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and ph897.win;
• At-rest encryption for sensitive personal and financial data stored on ph897 servers;
• Two-factor authentication ("2FA") available to all account holders and mandatory for platform staff accounts;
• Role-based access controls ensuring that personal data is accessible only to ph897 personnel with a legitimate business need;
• Regular penetration testing and security audits by qualified independent security professionals;
• Automated monitoring for suspicious login activity, unusual transaction patterns, and potential data breaches.

7.2  In the event of a personal data breach affecting your rights and freedoms, ph897 will notify the National Privacy Commission ("NPC") within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with NPC Circular No. 16-03 on Security of Personal Data.

7.3  While ph897 implements comprehensive security measures, no system is entirely immune to all threats. You are responsible for maintaining the security of your own account credentials and for notifying ph897 immediately of any suspected unauthorized access.

Cookies & Tracking Technologies

8.1  ph897 uses cookies and similar tracking technologies on ph897.win to provide core platform functionality, improve user experience, and — where you have consented — deliver personalised content and analyse platform usage.

8.2  The types of cookies used by ph897 are:

• Strictly Necessary Cookies: Essential for the platform to function — including session management, authentication tokens, security tokens, and load balancing. These cannot be disabled without impairing basic platform functionality;
• Functional Cookies: Remember your preferences — such as language settings, game lobby filters, and display preferences — to improve your experience across sessions;
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate and use the platform, used to identify and fix usability issues and improve features. Used only with your consent;
• Marketing Cookies: Used to deliver personalised promotional content relevant to your gaming interests. Used only with your specific consent.

8.3  You may manage or withdraw consent for non-essential cookies at any time through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to log in to or use certain functions of ph897.

Your Rights Under the Philippine Data Privacy Act

9.1  As a data subject under the Philippine DPA, you have the following rights in respect of your personal data held by ph897:

9.2  To exercise any of the above rights, please contact ph897's Data Protection Officer at [email protected] with the subject line "Data Rights Request." ph897 will respond within fifteen (15) business days. ph897 may ask you to verify your identity before processing a request.

9.3  If you are not satisfied with ph897's response to a data rights request, or if you believe ph897 has violated your rights under the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).

Children & Minors

10.1  If you have reason to believe that a minor has registered on ph897 using false information, please contact ph897 immediately at [email protected].

Changes to This Privacy Policy

11.1  ph897 may update this Privacy Policy from time to time to reflect changes in how we process personal data, changes in applicable law, or changes to our platform and services. The "Last Updated" date at the top of this Policy will be revised accordingly.

11.2  Material changes to this Policy — particularly those that affect how ph897 uses personal data or that reduce your rights — will be communicated to registered players via email or in-platform notification at least seven (7) days before the changes take effect.

11.3  Your continued use of ph897 after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, please stop using ph897 and contact support to request account closure.

Contact & Complaints

12.1  For any questions, concerns, or requests relating to this Privacy Policy or ph897's handling of your personal data, please contact ph897's Data Protection Officer through the following channels:

• Email: [email protected] — Subject: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via ph897.win

12.2  If you wish to lodge a complaint with the Philippine data protection authority, you may contact the National Privacy Commission of the Philippines (NPC). ph897 will cooperate fully with any NPC investigation.

12.3  ph897 commits to acknowledging all privacy-related enquiries within two (2) business days and providing a substantive response within fifteen (15) business days. Complex requests may require additional time, in which case ph897 will notify you of the extended timeline.