ph962 Casino – Privacy Policy

1. Introduction and Controller Identity

This Privacy Policy is issued by ph962, the operator of the online gambling platform accessible at ph962.org ("the Platform"). ph962 is a duly licensed online gaming operator regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). In its capacity as the entity that determines the purposes and means of processing your personal data, ph962 acts as the Personal Information Controller as defined under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA") and its Implementing Rules and Regulations.

ph962 is committed to handling your personal data responsibly, lawfully, and in a manner consistent with the principles of transparency, legitimate purpose, and proportionality mandated by the DPA and overseen by the National Privacy Commission (NPC) of the Philippines.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected from individuals who:

• Register for or hold a ph962 player account;
• Access or browse the ph962 platform at ph962.org;
• Contact ph962 support via live chat, email, or any other channel;
• Participate in ph962 promotions, tournaments, or surveys; or
• Interact with ph962 through any other medium.

This policy does not apply to third-party websites, payment processors, game providers, or other services linked to or embedded within the ph962 platform. We encourage you to review the privacy policies of any third-party services you access through ph962.

3. Personal Data We Collect

ph962 collects the following categories of personal data from players, to the extent necessary for the purposes described in Section 5 of this policy:

4. How We Collect Your Data

ph962 collects personal data through the following means:

• Directly from you — during registration, account verification, KYC submission, deposit/withdrawal transactions, support interactions, and promotional participation.
• Automatically — via cookies, session tracking, server logs, and platform analytics tools when you browse or use the ph962 platform.
• From third parties — including payment processors (GCash, Maya, BPI, BDO, etc.) for transaction confirmation, identity verification providers for KYC processing, and PAGCOR for compliance-related data sharing as required by law.

5. Purposes and Legal Bases for Processing

ph962 processes your personal data only for specific, legitimate purposes. The table below outlines our primary processing activities and the corresponding legal basis under the DPA:

6. Disclosure of Personal Data to Third Parties

ph962 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances:

• Payment processors (GCash, Maya, GrabPay, BPI, BDO, Metrobank, and others) — for deposit and withdrawal processing. Data shared is limited to what is technically required to complete the transaction.
• Game providers (JILI, PG Soft, Pragmatic Play, and others) — technical session data necessary to serve games and validate RNG outcomes. Game providers do not receive your identity or financial data.
• KYC and identity verification providers — for processing government ID verification in compliance with PAGCOR KYC requirements.
• PAGCOR and regulatory authorities — as required by PAGCOR licensing conditions, Philippine AML law (Republic Act No. 9160 as amended), and any order from a competent Philippine court or law enforcement agency.
• IT and security service providers — cloud infrastructure and cybersecurity vendors engaged by ph962 under binding data processing agreements that require them to process data only on ph962's documented instructions.

All third-party processors engaged by ph962 are required to maintain adequate data protection standards consistent with the DPA and, where applicable, international best practices.

7. International Data Transfers

Some of ph962's third-party service providers — including cloud infrastructure and game providers — may process personal data outside the Republic of the Philippines. Where such transfers occur, ph962 ensures that appropriate safeguards are in place, including contractual data processing clauses that replicate the protections of the DPA and NPC guidelines on cross-border data flows. ph962 does not transfer your data to jurisdictions that the NPC has identified as providing inadequate data protection without additional contractual or technical safeguards.

8. Data Retention

ph962 retains your personal data for as long as your account remains active and for such additional periods as are required by applicable law. Key retention periods are as follows:

• Account and identity data — retained for the duration of your account plus a minimum of five (5) years after account closure, as required by PAGCOR and AMLA record-keeping obligations.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and PAGCOR audit requirements.
• KYC documentation — retained for the duration of the account relationship plus five (5) years, or longer if required by an active regulatory or legal proceeding.
• Support communications — retained for three (3) years from the date of the interaction, or longer if related to an unresolved dispute.
• Marketing consent records — retained for three (3) years from the date of consent or withdrawal, whichever is later.

After the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines.

9. Security Measures

ph962 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph962 platform.
• AES-256 encryption for sensitive data at rest, including identity documents and financial data.
• Role-based access controls restricting staff access to personal data to those with a documented need.
• Regular penetration testing and vulnerability assessments of the ph962 platform and infrastructure.
• Multi-factor authentication requirements for administrative system access.
• Data breach incident response procedures aligned with NPC notification requirements.

10. Cookies and Tracking Technologies

ph962 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies used include:

• Essential cookies — required for core platform functionality including session authentication and cashier operations. These cannot be disabled without impairing your ability to use ph962.
• Analytics cookies — used to understand how players navigate the ph962 platform, which pages are most visited, and how performance can be improved. Data collected is aggregated and not used to identify individual players.
• Functional cookies — used to remember your ph962 platform preferences, such as language settings and game lobby configuration.

ph962 does not use advertising cookies or share cookie data with third-party advertising networks. You can manage non-essential cookies through your browser settings; however, disabling essential cookies may prevent ph962 from functioning correctly.

11. Your Rights Under the Data Privacy Act of 2012

As a data subject under the DPA, you have the following rights with respect to your personal data held by ph962:

• Right to be Informed — the right to know what personal data ph962 collects, how it is used, and with whom it is shared. This Privacy Policy fulfils ph962's obligation to inform you.
• Right to Access — the right to request a copy of the personal data ph962 holds about you, subject to identity verification.
• Right to Correction — the right to request correction of inaccurate or incomplete personal data in your ph962 account.
• Right to Erasure or Blocking — the right to request deletion or blocking of your personal data where it is no longer necessary for the purpose it was collected, subject to ph962's legal retention obligations under PAGCOR and AMLA.
• Right to Object — the right to object to the processing of your data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability — the right to receive your personal data in a structured, commonly used format where processing is based on consent or contract.
• Right to Damages — the right to claim compensation for any damage suffered as a result of a violation of your rights under the DPA by ph962.
• Right to File a Complaint — the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph962 has processed your data unlawfully.

To exercise any of the above rights, please contact ph962's Data Privacy Officer using the details in Section 15. ph962 will respond to all verified data subject requests within fifteen (15) business days.

12. Children and Minors

ph962 strictly prohibits access to and use of the platform by individuals under 21 years of age. ph962 does not knowingly collect personal data from individuals under 21. Age verification is conducted at account registration for all ph962 players. If ph962 discovers that an account belongs to an individual under 21, the account will be immediately closed, all data will be processed solely for the purpose of the closure and regulatory reporting, and any remaining balance will be handled in accordance with PAGCOR requirements. Parents and guardians who believe a minor has accessed ph962 using their device or credentials should contact our support team immediately.

13. Marketing Communications

With your consent, ph962 may send you promotional communications about bonuses, new games, tournaments, and platform updates via SMS to your registered Philippine mobile number or via email. You may withdraw your marketing consent at any time by:

• Updating your notification preferences in ph962 Account Settings; or
• Contacting ph962 support via live chat or email and requesting removal from marketing communications.

Withdrawal of marketing consent will be processed within five (5) business days. You may continue to receive transactional communications — such as deposit confirmations, withdrawal notices, and security alerts — regardless of your marketing preferences, as these are essential to the operation of your ph962 account.

14. Amendments to This Policy

ph962 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR and NPC guidance. Material changes will be notified to registered ph962 players via a prominent notice on the platform and, where feasible, via SMS to your registered mobile number. The "Last Updated" date at the top of this page will be revised upon each amendment. Your continued use of the ph962 platform following any amendment constitutes acceptance of the revised policy.

15. Contact and Data Privacy Officer

ph962 has designated a Data Privacy Officer (DPO) as required under the DPA. For all privacy-related inquiries, data subject rights requests, or concerns regarding ph962's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 on the ph962 platform — for general privacy inquiries and urgent data concerns.
• Email: [email protected] — for formal data subject rights requests, breach notifications, and DPO correspondence. Please mark your email with the subject line "Privacy – Data Subject Request" for prioritized handling.

ph962's DPO is registered with the National Privacy Commission as required under NPC Circular 17-01. If you are unsatisfied with ph962's response to a privacy concern, you may file a complaint directly with the NPC at privacy.gov.ph.