ph949 Privacy Policy

This Privacy Policy ("Policy") describes how ph949 ("ph949", "we", "us", "our") collects, processes, stores, shares, and protects personal data belonging to players, visitors, and registered users of the ph949 online gaming platform accessible at ph949.net ("Platform"). It also explains the rights available to you under Philippine law and how to exercise them.

ph949 is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). ph949 also processes data in accordance with the applicable data requirements of the Philippine Amusement and Gaming Corporation (PAGCOR), the regulatory authority under which ph949 operates its online gaming license.

This Policy applies to all personal data processed in connection with your use of ph949 — whether you are browsing the Platform without an account, have registered as a player in Manila, Cebu, Davao, Quezon City, Makati, or anywhere else across the Philippine archipelago, or have contacted our support team. By using the ph949 Platform, you acknowledge that you have read and understood this Policy.

1. Who We Are

ph949 is an online gaming platform operating under authorization from PAGCOR, the Philippine government body mandated to regulate all gaming activities in the country. ph949 serves Filipino players and is accessible at ph949.net. The ph949 entity is the Personal Information Controller ("PIC") as defined under the DPA — meaning ph949 determines the purposes and means of processing your personal data.

ph949 has appointed a Data Protection Officer ("DPO") in accordance with the DPA. You may contact the ph949 DPO at any time regarding data privacy matters using the contact details provided in Section 14 of this Policy.

2. Personal Data We Collect

ph949 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

2.1 Identity & Registration Data

When you register a ph949 account, we collect your full legal name as it appears on a Philippine government-issued ID, date of birth, gender, nationality, and username.

2.2 Contact Data

We collect your email address, mobile number, and residential address, including barangay, city (e.g., Manila, Cebu City, Davao City, Makati), province, and postal code.

2.3 Identity Verification (KYC) Data

To comply with PAGCOR regulations and the Philippine Anti-Money Laundering Act (AMLA), we collect copies of government-issued Philippine identification documents such as passports, driver's licenses, PhilHealth ID, SSS/GSIS ID, Voter's ID, or other PAGCOR-approved IDs. We may also collect proof of address documents and selfie photographs for biometric verification purposes.

2.4 Financial & Transaction Data

We collect data relating to deposits and withdrawals, including GCash account reference numbers, PayMaya account references, bank account names and last four digits (BPI, BDO, Metrobank), transaction IDs, amounts in Philippine Peso (PHP / ₱), timestamps, and payment method types. ph949 does not store full credit or debit card numbers — card payments are processed via PCI-DSS-certified payment gateways.

2.5 Gaming Activity Data

We collect records of all wagers placed on the ph949 Platform, including game type (slots, crash, bingo, dragon gate, live casino), bet amounts, game outcomes, bonus usage, session duration, and wagering history.

2.6 Technical & Device Data

We collect IP addresses, device type and model, operating system, browser type and version, screen resolution, referring URLs, pages visited, session timestamps, and geolocation data (where permitted and available) to ensure Platform security and regional compliance.

2.7 Communications Data

We collect records of communications between you and ph949 support, including live chat transcripts, email correspondence, and any information you voluntarily provide when submitting a complaint or inquiry.

3. How We Collect Your Data

ph949 collects personal data through the following means:

• Directly from you — when you register a ph949 account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — when you access the ph949 Platform, our servers and analytics systems automatically collect technical and device data as described in Section 2.6.
• Via cookies and similar tracking technologies — as described in Section 7 of this Policy.
• From third-party payment processors — GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, PESONet, and card payment gateways transmit transaction confirmation data to ph949 upon successful payment processing.
• From identity verification providers — ph949 may use third-party KYC verification services to authenticate the identity documents you submit. These providers process your data on ph949's behalf as Personal Information Processors.
• From fraud prevention and AML screening services — ph949 uses third-party services to screen accounts and transactions against sanctions lists and fraud databases as required by AMLA compliance obligations.

4. Why We Use Your Personal Data

ph949 uses your personal data for the following purposes:

5. Legal Bases for Processing

Under the Philippine Data Privacy Act, ph949 relies on the following legal bases to process your personal data:

• Contract performance — processing is necessary to fulfill ph949's obligations under the Terms & Conditions you agreed to when registering your account, including delivering gaming services and processing payments.
• Legal obligation — ph949 is required to process certain personal data to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act, and other applicable Philippine legislation.
• Legitimate interest — ph949 processes certain data for fraud prevention, platform security, responsible gaming enforcement, and business analytics, where those interests are not overridden by your rights and freedoms.
• Consent — for optional marketing communications and non-essential cookies, ph949 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

ph949 does not sell your personal data to third parties. ph949 shares personal data only in the following circumstances:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, Visa/Mastercard gateways, InstaPay, and PESONet receive the transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers — third-party identity verification services process your KYC documents on ph949's behalf under strict data processing agreements.
• Game content providers — ph949's licensed game suppliers may receive player session identifiers and bet data necessary to deliver their game content. These providers are bound by contractual data security obligations.
• Fraud prevention and AML screening services — ph949 shares data with anti-fraud and sanctions screening providers as required by AMLA compliance obligations.
• Regulatory authorities — ph949 discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities when legally required to do so, including in response to valid legal process.
• Professional advisors — ph949 may share data with lawyers, auditors, or insurance providers under strict confidentiality obligations where necessary for business operations.
• Business transfers — in the event of a merger, acquisition, or sale of ph949's business, player data may be transferred to a successor entity, subject to the same privacy protections described in this Policy.

7. Cookies & Tracking Technologies

ph949 uses cookies and similar technologies (pixel tags, local storage, session storage) to operate the Platform, remember your preferences, detect fraud, and analyze usage patterns. The types of cookies ph949 uses are as follows:

• Strictly necessary cookies — required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without breaking the Platform.
• Functional cookies — remember your language preferences, game lobby settings, and responsible gaming limit configurations.
• Analytics cookies — help ph949 understand how players navigate the Platform, which games are most popular, and where technical errors occur. ph949 uses aggregated, pseudonymous analytics data for Platform improvement.
• Marketing cookies — used only with your consent to deliver relevant promotional communications. You may withdraw consent at any time by updating your cookie preferences in your ph949 account settings.

You may control non-essential cookies through your ph949 account settings or your browser's cookie management tools. Note that disabling certain functional cookies may affect your experience on the ph949 Platform.

8. Data Retention

ph949 retains your personal data for only as long as necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law. The following retention periods apply:

• Account and KYC data — retained for a minimum of five (5) years after account closure, as required by PAGCOR regulations and AMLA record-keeping obligations.
• Financial transaction records — retained for a minimum of five (5) years after the transaction date, in compliance with AMLA requirements.
• Gaming activity records — retained for a minimum of three (3) years after account closure.
• Customer support communications — retained for two (2) years after the last interaction, unless required for longer as part of a dispute or legal proceeding.
• Marketing consent records — retained until you withdraw consent, plus an additional one (1) year to demonstrate prior consent.
• Technical and device logs — retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, ph949 will securely delete or anonymize your personal data in accordance with NPC-approved disposal methods.

9. Data Security

ph949 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph949 Platform.
• AES-256 encryption at rest for sensitive personal data stored on ph949 servers, including KYC documents and financial records.
• Role-based access controls limiting employee access to personal data strictly to those who need it to perform their job functions.
• Multi-factor authentication for all ph949 staff accounts with access to production systems and player data.
• Regular penetration testing and vulnerability assessments conducted by qualified cybersecurity professionals.
• 24/7 security monitoring and intrusion detection systems on all ph949 infrastructure.
• PCI-DSS compliance for all card payment processing systems.
• Regular staff data privacy training in accordance with NPC requirements.

In the event of a personal data breach that is likely to result in serious harm, ph949 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with Section 20(f) of the DPA.

10. Your Data Privacy Rights

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by ph949. These rights may be exercised by contacting the ph949 DPO using the details in Section 14.

ph949 will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. In complex cases requiring additional verification or assessment, ph949 may extend this period by a further fifteen (15) business days and will notify you accordingly. There is no fee for exercising your rights, unless your request is manifestly unfounded or excessive.

11. Minors & Age Restrictions

The ph949 Platform is strictly restricted to individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. ph949 does not knowingly collect, process, or retain personal data belonging to persons under 21 years of age.

During registration, ph949 requires all applicants to confirm they meet the 21+ age requirement. This declaration is further verified through the mandatory KYC identity verification process, during which ph949 checks government-issued ID documents to confirm date of birth.

12. Cross-Border Data Transfers

ph949's primary data infrastructure is located within the Philippines. However, certain third-party service providers engaged by ph949 — including game content suppliers, technical hosting providers, and fraud prevention services — may process your data in jurisdictions outside the Philippines.

Where ph949 transfers personal data outside the Philippines, ph949 ensures that appropriate safeguards are in place in accordance with Section 21 of the DPA and applicable NPC circulars. These safeguards include:

• Execution of NPC-compliant data sharing agreements or standard contractual clauses with the receiving entity;
• Transfer only to jurisdictions or entities that provide an adequate level of data protection as assessed by ph949 or recognized by the NPC;
• Imposition of binding contractual obligations on the recipient to maintain data security standards at least equivalent to those required under the Philippine DPA.

You may request information about the specific safeguards applicable to any cross-border transfer of your data by contacting the ph949 DPO.

13. Changes to This Privacy Policy

ph949 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements from PAGCOR or the NPC, or improvements to our Platform. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

For material changes — meaning changes that significantly affect how ph949 processes your personal data or that reduce your rights — ph949 will notify registered players by email to their registered address and/or via a prominent notice on the ph949 Platform at least fourteen (14) days before the changes take effect.

Your continued use of the ph949 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not agree with a material change, you may close your ph949 account by contacting our support team before the effective date.

14. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph949, you may contact our Data Protection Officer through the following channels:

• Email (plain text — not a link): [email protected]
• Live Chat: Available 24/7 inside your ph949 account dashboard
• Subject Line: Please use "Data Privacy Request — [Your Username]" for faster routing to our DPO team

If you are unsatisfied with ph949's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.