ph787 Privacy Policy

This Privacy Policy ("Policy") describes how ph787 ("ph787," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of players and visitors who access or use the ph787 online gaming platform at https://ph787.org ("Platform"). ph787 is committed to protecting the privacy and personal data of its users in accordance with applicable Philippine law and internationally recognised data protection principles.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Philippines. ph787 is registered with the NPC as required under the DPA. By accessing the ph787 Platform or registering an account, you acknowledge that you have read, understood, and agree to the data practices described in this Policy.

This Policy applies to all personal data collected through the ph787 Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and your general browsing of the ph787 website. It does not apply to third-party websites, applications, or services that may be linked to or from the Platform; ph787 is not responsible for the privacy practices of such third parties.

The data controller responsible for your personal information is ph787, the operator of https://ph787.org, licensed and regulated by the Philippine Amusement and Gaming Corporation ("PAGCOR"). ph787 is incorporated and operates in the Republic of the Philippines. All data processing activities conducted by ph787 are subject to PAGCOR licensing requirements, the Data Privacy Act of 2012, and relevant NPC guidelines.

ph787 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data privacy law. The DPO can be contacted at the details set out in Section 14 of this Policy.

ph787 collects the following categories of personal data. The specific data collected depends on the nature of your interaction with the Platform:

ph787 does not collect data beyond what is necessary for the purposes described in this Policy. You are not required to provide personal data to browse the ph787 website generally, but registration and full platform access require the collection of the data categories above.

ph787 collects personal data through the following means:

• Direct Collection: Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or updating your account profile.
• Automated Collection: Data collected automatically when you access the Platform, including technical data via server logs, browser cookies, device identifiers, and session tracking technologies.
• Third-Party Sources: Identity and financial verification data from licensed KYC service providers and payment processors (including GCash and PayMaya operator data shared for transaction verification purposes). ph787 does not purchase personal data from marketing data brokers.
• Regulatory Sources: Data received from PAGCOR or other competent Philippine authorities in connection with licensing compliance, player exclusion registers, or fraud prevention programmes.

ph787 processes your personal data only where a lawful basis under the Data Privacy Act of 2012 exists. The primary purposes and their respective legal bases are:

• Account Creation & Management — Contract performance; necessary to provide the ph787 gaming service to you.
• KYC & Age Verification — Legal obligation under PAGCOR licensing requirements and Republic Act 9160 (Anti-Money Laundering Act).
• Payment Processing — Contract performance; necessary to process deposits, withdrawals, and resolve financial disputes.
• Fraud Prevention & Security — Legitimate interests of ph787 and its players; regulatory obligation to prevent financial crime and protect platform integrity.
• Responsible Gaming Monitoring — Legal obligation under PAGCOR's responsible gaming standards; compliance with the 21+ age restriction.
• Customer Support — Contract performance; necessary to provide assistance and resolve issues.
• Marketing Communications — Consent; ph787 will only send promotional communications where you have expressly opted in. You may withdraw consent at any time via your account settings or by contacting support.
• Platform Analytics & Improvement — Legitimate interests; to understand how the Platform is used and to improve its performance and features for Filipino players.
• Legal Compliance & Regulatory Reporting — Legal obligation; ph787 reports to PAGCOR, the AMLC (Anti-Money Laundering Council), and other competent Philippine authorities as required.

ph787 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared only in the following circumstances and with the following categories of recipients:

• PAGCOR: As required under ph787's operating license, including player data for exclusion registers and compliance reporting.
• Payment Processors: GCash (G-Xchange, Inc.), PayMaya (Voyager Innovations, Inc.), BPI, BDO, Metrobank — strictly for the purpose of processing your financial transactions.
• KYC & Identity Verification Providers: Licensed third-party providers that assist with verifying identity documents and confirming your eligibility to play. These providers are bound by data processing agreements consistent with the DPA.
• Game Providers: Third-party game developers (e.g., JILI, Pragmatic Play, Evolution) receive limited gameplay session data necessary to operate their games on the ph787 Platform. These providers do not receive your identity or financial data.
• Law Enforcement & Regulatory Authorities: ph787 discloses personal data to the AMLC, NBI, Philippine National Police, NPC, or other competent authorities where required by a valid legal order, warrant, or regulatory requirement.
• Professional Advisers: Legal counsel, auditors, and accountants engaged by ph787, all of whom are bound by professional confidentiality obligations.

All third parties who receive personal data from ph787 are required to maintain the confidentiality and security of that data, to use it only for the specified purpose, and to comply with applicable Philippine data protection law.

ph787 uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that enable certain Platform functionality and help us understand how the Platform is used.

ph787 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without rendering the Platform unusable.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and last-played games. Disabling these will reduce Platform personalisation.
• Analytics Cookies: Help ph787 understand aggregate usage patterns — pages visited, features used, session duration — to improve the Platform. No individually identifiable data is processed for analytics purposes.
• Security Cookies: Used to detect fraud, unusual login patterns, and suspicious activity consistent with ph787's security and AML obligations.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging into or using the ph787 Platform. ph787 does not use third-party advertising cookies or share behavioural data with advertising networks.

ph787 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required under AML obligations (RA 9160 as amended by RA 10365).
• Financial Transaction Records: Retained for a minimum of five (5) years per AMLC requirements.
• KYC Documents: Retained for the period required by PAGCOR licensing conditions, typically five (5) years from the end of the business relationship.
• Gameplay & Betting Records: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for two (2) years from the date of the communication, or longer where related to an unresolved dispute.
• Marketing Consent Records: Retained for as long as you hold an active account, plus one (1) year after closure, to demonstrate consent compliance.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

ph787 implements technical and organisational security measures appropriate to the sensitivity of the data held and the risks of processing, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph787 servers
• Encryption of sensitive data at rest, including KYC documents and financial records
• Role-based access controls limiting staff access to personal data to those with a legitimate need
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Regular security audits, vulnerability assessments, and penetration testing
• Incident response procedures with defined notification timelines to the NPC as required by the DPA

Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data processed by ph787:

• Right to Be Informed: To be notified of the collection and processing of your personal data — fulfilled by this Policy and during account registration.
• Right to Access: To request a copy of the personal data ph787 holds about you, along with information about how it is being processed.
• Right to Rectification: To have inaccurate or incomplete personal data corrected. Most identity and contact data can be updated directly in your account settings; corrections to KYC data require document resubmission.
• Right to Erasure / Right to be Forgotten: To request the deletion of your personal data where it is no longer necessary for the purpose it was collected and no overriding legal obligation requires its retention. Mandatory AML and regulatory retention obligations take precedence over erasure requests for the periods specified in Section 8.
• Right to Object: To object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to ph787's ability to demonstrate compelling grounds for continued processing.
• Right to Data Portability: To request your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Damages: To be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of personal data, in accordance with the DPA.

To exercise any of these rights, submit a written request to ph787's Data Protection Officer using the contact details in Section 14. ph787 will respond within fifteen (15) business days. Identity verification will be required before any request is actioned to prevent unauthorised access to another person's data.

The ph787 Platform is strictly intended for persons who are at least 21 years of age, as required under PAGCOR's licensing conditions for online casino-style gaming in the Philippines. ph787 does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted during the account registration and KYC process. If ph787 discovers that personal data has been collected from a person under 21, the account will be immediately suspended, all such data will be deleted except where retention is required by law, and deposited funds will be returned net of any bonuses received.

If you have reason to believe that a person under 21 has registered an account on ph787, please contact our support team immediately so that the account can be reviewed and closed appropriately.

Where ph787 engages third-party game providers, technology partners, or cloud service providers who may process personal data outside the Philippines, ph787 ensures that adequate safeguards are in place for such transfers in compliance with the DPA and NPC guidelines. These safeguards include contractual clauses requiring recipient parties to maintain data protection standards consistent with Philippine law, and confirmation that recipient jurisdictions provide an adequate level of data protection.

ph787 will not transfer your personal data to jurisdictions or recipients that cannot provide adequate protection without your express consent, except where required by a valid Philippine legal order.

ph787 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or PAGCOR regulatory requirements. When material changes are made, ph787 will notify registered players via email to the address on file and/or via a prominent notice on the Platform. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the ph787 Platform after the effective date of an updated Policy constitutes your acceptance of the revised data practices. If you do not accept the updated Policy, you must cease using the Platform and may close your account in accordance with the Terms and Conditions.

For privacy-related inquiries, to exercise your data subject rights, or to contact ph787's Data Protection Officer, please use the following:

If your privacy concern is not resolved by ph787 to your satisfaction, you may file a complaint with the National Privacy Commission of the Philippines. The NPC's contact details and complaint procedures are publicly available on the NPC's official government website.