ph975 Privacy Policy

1. Introduction

1.1   This Privacy Policy describes how ph975 ("ph975," "we," "us," or "the Company"), the operator of the online gaming platform at ph975.org, collects, uses, stores, discloses, and protects personal information in connection with the ph975 platform and all related services.

1.2   ph975 is committed to compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. In addition, ph975 operates under PAGCOR regulatory guidelines, which impose supplementary obligations regarding player data and responsible gaming records.

1.3   By registering an account on ph975 or by continuing to use the ph975 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein. If you do not agree, you should not create an account or use ph975 services.

1.4   This Privacy Policy applies to all personal information collected through ph975.org, whether accessed via desktop browser, mobile browser, or any future ph975 application. It applies equally to all registered Players and to any individuals who interact with ph975 without completing registration (e.g., visitors to the public-facing pages of ph975.org).

2. Who We Are — Data Controller

2.1   For the purposes of the Data Privacy Act of 2012, ph975 is the Personal Information Controller in respect of the personal data collected through ph975.org. ph975 determines the purposes and means of processing your personal information.

2.2   ph975 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with RA 10173, handling data subject rights requests, and serving as the primary point of contact with the National Privacy Commission. The ph975 DPO can be contacted via [email protected] with the subject line "DATA PRIVACY REQUEST."

2.3   ph975's primary operations are conducted within the jurisdiction of the Republic of the Philippines. Players interacting with ph975 from within the Philippines are protected by RA 10173 in full. Players accessing ph975 from outside the Philippines are advised to review the applicable privacy laws in their own jurisdiction.

3. Personal Data We Collect

ph975 collects the following categories of personal information:

3.1 Registration and Identity Data

• Full legal name (as it appears on your government-issued Philippine ID);
• Date of birth;
• Residential address (province, city, barangay);
• Valid email address;
• Philippine mobile number;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

• Copy of a valid, unexpired Philippine government-issued ID (PhilSys, driver's licence, passport, UMID, SSS ID, voter's ID, or senior citizen ID);
• Selfie photograph where required for liveness verification;
• Proof of payment method ownership (e.g., screenshot of GCash account, bank statement header);
• Source of funds documentation for high-value accounts as required by AMLC regulations.

3.3 Financial Transaction Data

• Deposit amounts, transaction references, timestamps, and payment method identifiers;
• Withdrawal requests, amounts, destination payment method, and processing status;
• Bonus credits received, wagering activity, and bonus completion status;
• Account balance history.

3.4 Gaming Activity Data

• Games played, bet amounts, game results, and session durations;
• Sports betting selections, odds accepted, and outcomes;
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status).

3.5 Technical and Device Data

• IP address and geolocation data (country and region level);
• Device type, operating system, and browser type and version;
• Device fingerprint identifiers for fraud prevention and duplicate account detection;
• Session logs, login timestamps, and access records.

3.6 Communications Data

• Live chat transcripts and support ticket content;
• Email correspondence with ph975 support;
• Responses to surveys or promotional participation records where applicable.

4. How We Collect Your Data

ph975 collects personal information through the following means:

• Directly from you — during registration, KYC submission, deposits, withdrawal requests, support interactions, and promotional participation;
• Automatically — through cookies, web beacons, server logs, and device detection technologies when you access or use ph975.org;
• From payment providers — transaction confirmation data from GCash, Maya, BPI, BDO, UnionBank, and other approved payment processors;
• From identity verification services — confirmation of ID document authenticity from licensed KYC verification partners where applicable;
• From fraud prevention services — risk scores and device reputation data from third-party fraud detection services engaged by ph975.

5. Legal Basis for Processing

ph975 processes personal information only where a valid legal basis exists under RA 10173. The applicable legal bases for each processing purpose are as follows:

6. How We Use Your Personal Information

ph975 uses the personal information it collects for the following specific purposes:

• To create, verify, and manage your ph975 account;
• To process deposits and withdrawals through your selected payment method, including GCash, Maya, and Philippine bank transfers;
• To verify your identity and age (minimum 21 years) in accordance with PAGCOR requirements;
• To comply with Anti-Money Laundering obligations under RA 9160 and AMLC reporting requirements;
• To detect and prevent fraud, duplicate accounts, bonus abuse, and prohibited conduct as defined in the ph975 Terms & Conditions;
• To monitor your gaming activity for responsible gaming purposes and to facilitate self-imposed limits or exclusions;
• To respond to your customer support inquiries and resolve disputes;
• To send you promotional communications and bonus offers where you have provided consent or where permitted by applicable law;
• To maintain the technical security, integrity, and performance of the ph975 platform;
• To comply with orders, requests, or reporting obligations issued by PAGCOR, the NPC, AMLC, or any other competent Philippine authority.

ph975 does not use personal information for profiling, automated decision-making, or any purpose beyond those listed above without first obtaining specific consent or establishing a valid legal basis.

7. Sharing Your Personal Information

7.1   ph975 does not sell, rent, or trade your personal information to third parties for their independent commercial purposes.

7.2   ph975 may share your personal information with third parties in the following circumstances:

• Payment processors — GCash, Maya, BPI, BDO, UnionBank, and other approved payment service providers receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and are engaged under data processing agreements;
• KYC and identity verification partners — licensed identity verification service providers may receive copies of your ID documents for automated or manual verification;
• Fraud prevention services — aggregated or pseudonymised device and behavioural data may be shared with fraud detection partners;
• Game providers — game software providers (such as PG Soft, JILI, and Pragmatic Play) receive a unique Player identifier and game session data necessary to operate their games and resolve disputes. Personal identification details are not shared with game providers;
• Regulatory authorities — ph975 is obligated to disclose player data to PAGCOR, AMLC, the NPC, and other competent Philippine government authorities in response to lawful orders, regulatory inspections, or mandatory reporting obligations;
• Legal and professional advisors — ph975's legal counsel, auditors, and compliance advisors may access relevant data to the extent necessary to provide their services, under binding confidentiality obligations.

8. Cookies and Tracking Technologies

8.1   ph975 uses cookies and similar tracking technologies on ph975.org to enable core platform functionality, enhance user experience, and support fraud prevention. Cookies are small data files stored on your device by your browser when you visit ph975.org.

8.2   ph975 uses the following categories of cookies:

• Strictly necessary cookies — required for the platform to function (e.g., maintaining your login session, remembering your game in progress, processing your deposit). These cannot be disabled without impairing platform functionality;
• Functional cookies — remember your preferences such as language settings, lobby layout, and responsible gaming tool configurations;
• Analytics cookies — collect anonymised data about how Players use the platform (page views, session duration, feature usage) to help ph975 improve the product. This data does not identify individual players;
• Security cookies — support fraud detection, device fingerprinting for duplicate account prevention, and session integrity verification.

8.3   ph975 does not use third-party advertising cookies. ph975.org does not carry third-party ad networks or social media tracking pixels.

8.4   You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies may impair your ability to use the ph975 platform. For detailed cookie management instructions specific to your browser, refer to your browser's help documentation.

9. Data Retention

9.1   ph975 retains personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

9.2   The following specific retention periods apply:

• Account data and KYC records — retained for a minimum of five (5) years following account closure, as required by AMLC regulations under RA 9160;
• Financial transaction records — retained for a minimum of five (5) years per AMLC reporting obligations and PAGCOR record-keeping requirements;
• Gaming activity logs — retained for three (3) years for responsible gaming monitoring and dispute resolution purposes;
• Support communications — retained for two (2) years after the resolution of the relevant query;
• Self-exclusion records — retained permanently to prevent re-registration during an active exclusion period and for PAGCOR compliance.

9.3   Upon expiry of the applicable retention period, ph975 will securely delete or anonymise your personal information so that it can no longer be linked to your identity.

10. Data Security

10.1   ph975 implements technical and organisational security measures designed to protect your personal information against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and ph975 servers;
• AES-256 encryption for stored sensitive personal data and KYC documents;
• Bcrypt hashing for all stored passwords;
• Multi-factor authentication options for Player accounts;
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the ph975 platform infrastructure;
• Intrusion detection and real-time anomaly monitoring on all production systems.

10.2   In the event of a personal data breach that is likely to result in harm to affected Players, ph975 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under RA 10173. Affected Players will be informed directly without undue delay where the breach poses a high risk to their rights.

11. Exercising Your Rights Under RA 10173

11.1   Under the Data Privacy Act of 2012, you have the right to access, correct, erase, object to, or restrict processing of your personal information, as well as the right to data portability and the right to lodge a complaint with the NPC. These rights are summarised in the section above and described in detail below.

11.2   To exercise any of your data rights, submit a written request to ph975 via email to [email protected] with the subject line "DATA PRIVACY REQUEST." Your request must include:

• Your full name and the email address registered to your ph975 account;
• A description of the right you wish to exercise and the specific data concerned;
• A copy of a valid Philippine government-issued ID to verify your identity as the data subject.

11.3   ph975 will acknowledge receipt of your request within three (3) business days and will respond substantively within fifteen (15) business days. In cases requiring additional investigation or where the request involves complex data subject rights, ph975 may extend the response period by a further fifteen (15) business days, in which case you will be notified of the extension and reason.

11.4   Certain rights — particularly the right to erasure — may be limited where ph975 has a legal obligation to retain data (for example, AML transaction records required by AMLC). In such cases, ph975 will explain the specific legal basis for retention.

11.5   If you believe ph975 has not adequately addressed your data privacy concern, you may escalate your complaint to the National Privacy Commission (NPC) of the Philippines.

12. Marketing Communications

12.1   ph975 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, sporting events, and platform updates where you have provided consent during registration or through your Account Settings.

12.2   You may withdraw consent for marketing communications at any time by:

• Clicking the "Unsubscribe" link in any ph975 marketing email;
• Updating your notification preferences in Account Settings;
• Contacting ph975 support and requesting removal from all marketing lists.

12.3   Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to the withdrawal. Opting out of marketing will not prevent ph975 from sending you transactional or service-related communications (such as withdrawal confirmations, security alerts, or account status notifications) that are necessary for the operation of your account.

12.4   ph975 does not share player contact information with third-party marketers. Marketing communications are sent by ph975 directly, using ph975-owned communication channels only.

13. Children's Privacy and Age Restriction

13.1   ph975 implements age verification checks during registration and KYC processes to prevent underage access. If ph975 becomes aware that a registered account belongs to an individual under 21 years of age, the account will be immediately suspended, all balances forfeited, and the matter referred to PAGCOR in accordance with regulatory requirements.

13.2   If you are a parent or guardian and believe a minor has accessed or registered on ph975, please contact [email protected] immediately. ph975 will investigate and take appropriate action without delay.

14. Cross-Border Data Transfers

14.1   ph975's primary data processing infrastructure is located within the Philippines. In certain operational contexts — including interactions with international game providers, KYC verification partners, and fraud detection services — personal data may be processed or stored on servers located outside the Philippines.

14.2   Where personal data is transferred outside the Philippines, ph975 ensures that such transfers comply with RA 10173 by implementing appropriate safeguards, including:

• Standard contractual clauses in data processing agreements with international service providers;
• Transfer only to jurisdictions or entities that maintain data protection standards equivalent to those required under RA 10173;
• Your consent, where required by applicable law and where no other lawful transfer mechanism applies.

15. Amendments to This Privacy Policy

15.1   ph975 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. All amendments will be published on ph975.org with an updated "Effective Date."

15.2   For material changes that significantly affect how ph975 processes your personal information, ph975 will provide advance notice to registered Players via the email address on file or through a prominent notice on the Platform, giving you the opportunity to review the changes before they take effect.

15.3   Your continued use of the ph975 Platform after the effective date of any Privacy Policy amendment constitutes acknowledgement of the revised policy. If you do not accept the amended policy, you should cease using ph975 and contact support to request account closure.

16. Contact Information — Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or data breach notifications, contact the ph975 Data Protection Officer:

ph975 is committed to resolving all privacy concerns raised directly with us before a complaint is escalated to the NPC. Our DPO will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days.