Privacy Policy

1. Data Controller Information

ph902, operating through ph902.cam, is the data controller responsible for the collection, processing, and protection of your personal information. For all privacy-related inquiries, data subject access requests, or complaints, you may contact our Data Protection Officer at:

• Email: [email protected]
• Subject Line: "Data Privacy Inquiry" or "Data Subject Request"
• Expected Response Time: Within fifteen (15) calendar days of receipt

ph902 is registered with the National Privacy Commission of the Philippines and complies with all applicable Philippine data protection regulations.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you register for a ph902 account, make deposits, place wagers, or contact customer support, we collect the following categories of personal information:

• Identity Data: Full legal name, date of birth, gender, nationality, government-issued identification number (from passport, driver's license, UMID, or national ID)
• Contact Data: Residential address, billing address, email address, mobile phone number
• Financial Data: Payment method details (GCash mobile number, Maya account, bank account name and partial account numbers, cryptocurrency wallet addresses), transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued photo ID, proof of address documents (utility bills, bank statements), proof of payment method ownership (screenshots, statements)
• Account Credentials: Username, hashed password (we never store passwords in plain text), security questions and answers
• Communications Data: Content of live chat messages, emails, and customer support tickets exchanged between you and ph902 staff

2.2 Information We Collect Automatically

When you access ph902 services through our website or mobile application, we automatically collect technical and usage data:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers (IP address, device ID)
• Usage Data: Pages visited, games played, time spent on platform, click patterns, navigation paths, session duration, referral sources
• Gaming Data: Betting history, game preferences, win/loss records, bonus claims and wagering progress, tournament participation, leaderboard positions
• Location Data: IP-based geolocation to verify Philippine jurisdiction, GPS coordinates if you grant location permissions on mobile devices
• Cookies and Tracking Technologies: Session cookies, persistent cookies, analytics cookies, marketing cookies (see Section 9 for detailed cookie policy)

2.3 Information from Third Parties

ph902 may receive personal data about you from third-party sources including:

• Payment Processors: GCash, Maya, bank partners, and cryptocurrency payment gateways provide transaction confirmation and fraud detection data
• Identity Verification Services: Third-party KYC/AML service providers verify your identity documents against government databases
• Game Providers: Slot game developers, live dealer studios, and sports betting data providers share gameplay and wagering data
• Affiliate Partners: Referral and affiliate networks provide information about how you were referred to ph902
• Social Media: If you link your ph902 account to social media profiles (optional feature), we may receive profile information you've made publicly available

3. How We Use Your Personal Data

3.1 Service Provision and Account Management

ph902 processes your personal data to provide gaming services and manage your account:

• Create and maintain your ph902 account
• Process deposits, withdrawals, and payment transactions
• Enable gameplay across casino games, live dealer tables, sports betting, and other gaming products
• Track account balances, betting history, and bonus progress
• Provide customer support and respond to inquiries
• Manage VIP programs, loyalty rewards, and promotional offers
• Send account-related notifications (deposit confirmations, withdrawal approvals, bonus credits)

3.2 Legal and Regulatory Compliance

ph902 is legally required to process personal data for compliance purposes:

• Verify player identity and age (21+ requirement) to prevent underage gambling
• Comply with Anti-Money Laundering Act (AMLA) and Know Your Customer (KYC) regulations
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC) as required by law
• Maintain transaction records for audit and regulatory inspection by PAGCOR
• Respond to lawful requests from law enforcement, courts, and government agencies
• Enforce responsible gaming policies including deposit limits and self-exclusion programs
• Detect and prevent tax evasion related to gaming winnings

3.3 Security and Fraud Prevention

ph902 processes personal data to maintain platform security and prevent fraud:

• Detect and prevent multi-accounting, bonus abuse, collusion, and cheating
• Monitor for suspicious betting patterns indicating match-fixing or insider trading
• Identify stolen payment methods, chargeback fraud, and identity theft
• Prevent unauthorized account access and credential sharing
• Protect against distributed denial-of-service (DDoS) attacks and malicious bots
• Investigate player complaints and disputes

3.4 Marketing and Personalization

With your consent, ph902 uses personal data for marketing purposes:

• Send promotional emails about bonuses, tournaments, and new game releases
• Deliver SMS notifications about time-sensitive promotions
• Display personalized game recommendations based on your preferences
• Show targeted advertising on third-party websites (via retargeting pixels)
• Analyze gameplay data to improve user experience and develop new features

You may withdraw marketing consent at any time through account settings or by clicking "Unsubscribe" in promotional emails. Withdrawal of consent does not affect account-related communications, which are necessary for service provision.

3.5 Analytics and Service Improvement

ph902 analyzes aggregated and anonymized data to improve services:

• Understand which games are most popular and optimize game selection
• Identify technical issues, bugs, and performance bottlenecks
• Measure marketing campaign effectiveness and player acquisition costs
• Develop new features based on player behavior and feedback
• Optimize mobile app performance and website loading times

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph902 processes personal data based on the following legal grounds:

• Consent: You provide explicit consent by registering an account and agreeing to this Privacy Policy. Consent can be withdrawn at any time, resulting in account closure.
• Contractual Necessity: Processing is necessary to fulfill our contractual obligations under the Terms & Conditions, including providing gaming services and processing payments.
• Legal Obligation: Processing is required to comply with Philippine laws including AMLA, KYC regulations, tax laws, PAGCOR regulations, and responsible gaming requirements.
• Legitimate Interests: Processing is necessary for ph902's legitimate business interests in fraud prevention, security, service improvement, and analytics, provided these interests do not override your privacy rights.

5. How We Share Your Personal Data

5.1 Third-Party Service Providers

ph902 shares personal data with trusted service providers who process data on our behalf under strict contractual obligations:

• Payment Processors: GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, GrabPay, cryptocurrency payment gateways process financial transactions
• Identity Verification Services: KYC/AML service providers verify identity documents and screen against sanctions lists
• Game Providers: Slot game developers (JILI, Pragmatic Play, PG Soft), live dealer studios, sports betting data providers deliver gaming content
• Cloud Hosting: Amazon Web Services (AWS) or similar providers host ph902 infrastructure and databases
• Email Services: Email delivery platforms send account notifications and marketing communications
• Analytics Providers: Google Analytics and similar tools analyze website traffic and user behavior (anonymized data only)
• Customer Support Tools: Live chat platforms and ticketing systems manage customer inquiries

All third-party service providers are contractually required to protect your data in accordance with Philippine data protection standards and use data only for specified purposes.

5.2 Regulatory and Law Enforcement Authorities

ph902 may disclose personal data to government agencies and authorities when legally required:

• Philippine Amusement and Gaming Corporation (PAGCOR): Regulatory audits and compliance inspections
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports as required by AMLA
• Bureau of Internal Revenue (BIR): Tax reporting for large gaming winnings
• National Privacy Commission (NPC): Data breach notifications and privacy investigations
• Philippine National Police (PNP) and National Bureau of Investigation (NBI): Lawful requests in criminal investigations
• Courts: Compliance with subpoenas, court orders, and legal proceedings

5.3 Business Transfers

In the event ph902 undergoes a merger, acquisition, asset sale, or bankruptcy, your personal data may be transferred to the successor entity. You will be notified via email of any ownership change affecting your data.

5.4 Data We Do Not Share

ph902 never sells, rents, or trades your personal data to third parties for their marketing purposes. We do not share your data with data brokers or allow third parties to use your information outside the purposes described in this Privacy Policy.

6. Data Security Measures

ph902 implements industry-standard security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmissions use 256-bit SSL/TLS encryption. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized ph902 employees and contractors who need it for their job functions, subject to non-disclosure agreements.
• Password Security: Passwords are hashed using bcrypt or similar one-way cryptographic algorithms. ph902 staff cannot view your password.
• Firewalls and Intrusion Detection: Network-level security prevents unauthorized access to ph902 servers and databases.
• Regular Security Audits: Third-party security firms conduct penetration testing and vulnerability assessments.
• Data Minimization: We retain only the personal data necessary for stated purposes and delete data when no longer needed.
• Employee Training: All ph902 staff receive data privacy and security training.

Despite these measures, no internet transmission or electronic storage system is 100% secure. ph902 cannot guarantee absolute security, and you transmit data at your own risk. You are responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

ph902 retains personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, and resolve disputes:

• Active Accounts: Personal data is retained for the duration of your active account.
• Closed Accounts: After voluntary account closure, most personal data is deleted within ninety (90) days, except data required for legal compliance.
• Transaction Records: Financial transaction records are retained for seven (7) years as required by AMLA and BIR regulations.
• Identity Verification Documents: Retained for five (5) years after account closure for regulatory compliance.
• Self-Excluded Accounts: Personal data for self-excluded players is retained for the duration of the exclusion period plus five (5) years to prevent re-registration.
• Fraud and Dispute Records: Data related to fraud investigations or legal disputes is retained until resolution and applicable statute of limitations expires.

8. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data ph902 holds about you. Access requests are fulfilled within fifteen (15) days.
• Right to Rectification: You may update or correct inaccurate personal data through your account settings or by contacting customer support.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements. Account closure is required for erasure.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format (CSV or JSON).
• Right to Object: You may object to processing based on legitimate interests or for marketing purposes. Objection to essential processing may require account closure.
• Right to Withdraw Consent: You may withdraw consent for marketing communications or optional data processing at any time.
• Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission if you believe ph902 has violated your privacy rights.

To exercise these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Subject Request." We may require identity verification before processing your request.

9. Cookies and Tracking Technologies

ph902 uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device by your browser.

9.1 Types of Cookies We Use

• Essen tial Cookies: Required for basic functionality including login, session management, account security, and shopping cart (account balance). These cookies cannot be disabled without losing core functionality.
• Performance Cookies: Collect anonymous data about how you use ph902, including pages visited, errors encountered, and loading times. Used to improve platform performance.
• Functional Cookies: Remember your preferences including language selection, display settings, and game filters to personalize your experience.
• Marketing Cookies: Track your browsing behavior to deliver targeted advertising on ph902 and third-party websites. Also measure marketing campaign effectiveness.

9.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or receive notification before cookies are stored. Note that disabling essential cookies will prevent you from using ph902 services. Marketing and analytics cookies can be disabled without affecting core functionality. Cookie preferences can also be managed through the cookie consent banner displayed on your first visit to ph902.cam.

10. Children's Privacy

ph902 does not knowingly collect personal data from individuals under twenty-one (21) years of age. Our services are strictly for adults aged 21 and above. If we discover that we have inadvertently collected data from a minor, we will immediately delete such data and close the associated account. Parents or guardians who believe their child has provided personal data to ph902 should contact [email protected] immediately.

11. International Data Transfers

ph902 primarily stores and processes personal data within the Philippines. However, some third-party service providers (cloud hosting, payment processors, game providers) may process data on servers located outside the Philippines. When data is transferred internationally, ph902 ensures adequate protection through: (a) standard contractual clauses approved by the National Privacy Commission; (b) service provider certifications under internationally recognized data protection frameworks; (c) contractual obligations requiring equivalent data protection standards. All international data transfers comply with Philippine data protection law.

12. Changes to This Privacy Policy

ph902 reserves the right to update this Privacy Policy at any time to reflect changes in data practices, legal requirements, or business operations. Material changes will be communicated via email to your registered email address at least thirty (30) days before the changes take effect. The "Last Updated" date at the bottom of this Privacy Policy indicates when the most recent changes were made. Continued use of ph902 services after changes become effective constitutes acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

13. Contact Information and Complaints

For questions, concerns, or complaints regarding this Privacy Policy or ph902's data practices, please contact:

• Data Protection Officer Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Complaint"
• Response Time: Within fifteen (15) calendar days

If you are not satisfied with ph902's response to your privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission
• Website: privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228