ph902 Privacy Policy

This Privacy Policy (the "Policy") describes how ph902 ("ph902," "we," "us," "our"), the operator of the online casino and sports betting platform at ph902.net (the "Platform"), collects, uses, stores, and discloses personal information about you ("Player," "User," "you") when you access or use the Platform. This Policy forms part of the ph902 Terms & Conditions and should be read together with that document.

ph902 is committed to protecting the privacy and security of all Filipino players who use the Platform. We process personal data in accordance with the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

1 Introduction

ph902 takes its responsibilities as a data controller seriously. We understand that Filipino players entrust us with sensitive personal and financial information when they register and play on the Platform, and we do not take that trust lightly. This Policy is designed to be clear, specific, and free of unnecessary legal jargon — because you deserve to understand exactly what happens to your data.

This Policy applies to all personal data collected through the ph902 website at ph902.net, our mobile-optimized web application, customer support communications (including live chat and email), and any other interaction you have with ph902 as an organisation. It does not apply to third-party websites or services that may be linked from our Platform — those services operate their own separate privacy policies.

2 Personal Data We Collect

ph902 collects the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, government-issued ID number (e.g., Philippine national ID, passport, driver's license)	Account registration, age verification (21+), KYC compliance
Contact Data	Philippine mobile number, email address, home address (city/province)	Account communications, transaction notifications, support
Financial Data	GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank), transaction history	Processing deposits and withdrawals in PHP, fraud prevention
Gaming Data	Game history, bet amounts, win/loss records, session durations, responsible gaming settings	Platform operation, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser, operating system, login timestamps	Security, fraud detection, platform optimization
Usage Data	Pages visited, features used, referral source, click-through paths	Platform improvement, anonymous analytics
Communications Data	Support chat transcripts, emails sent to ph902, feedback submissions	Customer service, quality assurance, dispute resolution

ph902 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required for identity verification purposes and with your explicit consent.

3 How We Collect Your Data

ph902 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Data collected automatically when you use the Platform, including IP addresses, device identifiers, session cookies, and usage logs. This data is collected through server logs and analytics tools that ph902 controls internally.
• Payment Processors: Transaction confirmation data received from payment service providers such as GCash, PayMaya, BPI, BDO, and Metrobank when you initiate deposits or withdrawals. ph902 does not store full bank account credentials — these remain with the respective payment provider.
• Third-Party Identity Verification: Where required for KYC compliance, ph902 may use accredited identity verification services to cross-check the information you provide against official Philippine government databases.
• Regulatory Bodies: Information requested or provided in the context of regulatory compliance obligations with PAGCOR and other Philippine authorities.

4 How We Use Your Personal Data

ph902 uses your personal data only for purposes that are lawful, specific, and declared at the time of collection. The primary purposes are:

• Account Management: Creating, maintaining, and administering your ph902 account, including processing your ph902 Login credentials and maintaining account security.
• Age & Identity Verification: Confirming that you meet the 21+ age requirement and that your identity is genuine, in compliance with PAGCOR guidelines.
• Transaction Processing: Facilitating deposits and withdrawals in Philippine Peso (PHP) via your chosen payment method, and maintaining accurate transaction records.
• Platform Operation: Delivering the games, features, and services available on ph902, including slots, live casino, bingo, sports betting, and fishing games.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and applying responsible gaming tools such as deposit limits, cool-down periods, and self-exclusion where appropriate.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and unauthorized account access.
• Legal & Regulatory Compliance: Meeting our obligations under Philippine law, including the Data Privacy Act, Anti-Money Laundering Act, and PAGCOR regulatory requirements.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of our support services.
• Communications: Sending you transactional notifications, security alerts, and — where you have opted in — promotional communications about ph902 offers and new games.
• Platform Improvement: Analysing anonymised usage data to improve the design, performance, and content of the ph902 Platform.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ph902 processes your personal data on the following legal bases:

• Consent: Where you have provided explicit consent, such as when opting in to receive marketing communications from ph902.
• Contractual Necessity: Where processing is necessary to perform our obligations under the ph902 Terms & Conditions — for example, processing your deposits, verifying your identity, and operating your account.
• Legal Obligation: Where ph902 is required by Philippine law or regulatory directive to process your data — for example, Anti-Money Laundering Act (AMLA) reporting obligations or PAGCOR compliance requirements.
• Legitimate Interests: Where processing is necessary for ph902's legitimate business interests and those interests are not overridden by your privacy rights — for example, fraud detection, platform security, and anonymous analytics.

6 Sharing Your Personal Data

ph902 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data only in the following limited circumstances:

• Service Providers: Trusted third-party service providers who assist ph902 in operating the Platform — including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification services, cloud hosting providers, and analytics tools. These providers are contractually bound to process data only on ph902's instructions and in accordance with the Data Privacy Act.
• Game Software Providers: Game software providers whose titles are hosted on the ph902 Platform may receive anonymised game session data for technical and licensing purposes. These providers do not receive your identity or financial data.
• Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies where disclosure is required by law, court order, or regulatory directive. ph902 will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of ph902's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
• With Your Consent: For any other purpose where you have given explicit prior consent to the specific sharing arrangement.

7 Cookies & Tracking Technologies

ph902 uses cookies — small text files stored on your device — and similar technologies (such as local storage and session tokens) to operate and improve the Platform. Specifically, ph902 uses the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged in during your ph902 session, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming configurations across sessions. These improve your experience but are not strictly required for the Platform to operate.
• Analytics Cookies: Collect anonymised data about how players use the Platform — such as which games are most visited and where users drop off during registration. ph902 uses this data internally to improve the Platform. No personally identifiable information is included in analytics data.

ph902 does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies. You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to use the Platform, including the ph902 Login process.

8 Data Retention

ph902 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your account's active status and for a period of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Transaction Records: Financial transaction records — including deposits, withdrawals, and gaming history — are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of the Philippines.
• KYC Documents: Identity verification documents are retained for a period of five (5) years following account closure or the completion of the relevant verification process.
• Customer Support Communications: Support chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, or longer where a dispute or investigation is ongoing.
• Marketing Consent Records: Records of your marketing consent or opt-out status are retained for the duration of the relevant marketing relationship, plus one (1) year thereafter.
• Technical & Usage Data: Anonymised analytics data is retained indefinitely in aggregated form. Identifiable technical data (e.g., IP address logs) is retained for ninety (90) days.

When personal data is no longer required, ph902 will securely delete or anonymise it in accordance with industry-standard data destruction procedures.

9 Data Security

ph902 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph902 servers;
• Encryption of sensitive data fields (such as financial details and identity document references) at rest in our databases;
• Role-based access controls ensuring that ph902 staff can only access the personal data necessary for their specific job function;
• Multi-factor authentication requirements for ph902 staff accessing systems that contain player personal data;
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure;
• Automated fraud detection systems that monitor transactions and account activity in real time.

In the event of a personal data breach that poses a risk to your rights and freedoms, ph902 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players as soon as reasonably practicable, in accordance with the Data Privacy Act of 2012.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph902:

To exercise any of the above rights, contact the ph902 data privacy team by email at [email protected] with the subject line "Data Privacy Request." ph902 will respond to all verified requests within thirty (30) days of receipt. We may need to verify your identity before processing your request to ensure the security of your personal data.

11 Children's Privacy and the 21+ Rule

The ph902 Platform is strictly intended for individuals aged 21 years and above, in accordance with PAGCOR guidelines applicable to online gaming in the Philippines. ph902 does not knowingly collect personal data from any person under the age of 21.

If ph902 discovers or has reasonable grounds to believe that a user is under 21 years of age, we will immediately suspend the account, cease processing the personal data of that user for gaming purposes, and take steps to delete or anonymise their data to the extent permitted by applicable law. Any deposits made by an underage user will be returned to the original payment method; any gaming winnings associated with the account will be forfeited.

If you are a parent or guardian and believe that a minor has registered on ph902 using your details or their own, please contact our customer support team immediately so that we can investigate and take prompt corrective action.

12 Changes to This Privacy Policy

ph902 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made to this Policy, ph902 will notify registered players via the email address or mobile number associated with their account at least seven (7) days before the changes take effect.

The most current version of this Privacy Policy will always be accessible at ph902.net/privacy-policy, with the "Last Updated" date displayed prominently at the top. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with the changes, you may close your account before the amended Policy takes effect.

13 Contact & Data Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or ph902's handling of your personal data, please contact us through the following channel: