ph75 Casino – Privacy Policy

01 Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "ph75," "we," "us," or "the Company" refers to ph75 Casino, the operator of ph75.one, a platform licensed and regulated by PAGCOR under the laws of the Republic of the Philippines.
• "Personal Data" or "Personal Information" means any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual. This definition aligns with Republic Act No. 10173 (Data Privacy Act of 2012).
• "Sensitive Personal Information" means personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations or beliefs, health, education, genetic or sexual life, court proceedings, and government identification numbers, as defined under the DPA 2012.
• "Processing" refers to any operation or set of operations performed upon personal data, including collection, recording, organization, storage, updating, retrieval, consultation, use, consolidation, blocking, erasure, or destruction of data.
• "Data Subject" means any natural person whose personal data is collected, processed, or stored by ph75 — primarily, registered ph75 players.
• "DPA 2012" refers to Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations.
• "NPC" refers to the National Privacy Commission, the Philippine government authority responsible for administering and implementing the DPA 2012.
• "PAGCOR" refers to the Philippine Amusement and Gaming Corporation.

02 Identity of the Data Controller

The Data Controller for personal data processed through ph75.one is ph75 Casino, operating under a PAGCOR license and registered in the Philippines. ph75 Casino has designated a Data Protection Officer (DPO) in compliance with the DPA 2012 and its Implementing Rules and Regulations.

The DPO may be contacted through the customer support channel at [email protected]. All data privacy-related requests, inquiries, and complaints should be directed to the DPO in writing. ph75 commits to responding to data privacy requests within the statutory timeframe of fifteen (15) business days from receipt of a complete and valid request.

03 Categories of Personal Data We Collect

ph75 collects personal data that is necessary, adequate, and not excessive relative to the purposes for which it is processed. The following categories of personal data are collected from ph75 players:

3.1 Identity and Contact Information

• Full legal name (as it appears on government-issued identification)
• Date of birth (for age verification purposes)
• Philippine mobile number
• Email address
• Residential address (province/city, including Metro Manila, Cebu, Davao, and other Philippine locations)
• Nationality and country of residence

3.2 Identity Verification (KYC) Documents

• Government-issued photo identification (UMID, SSS ID, Driver's License, Philippine Passport, GSIS eCard, PhilSys National ID)
• Selfie or live photograph for liveness verification
• Proof of address documentation (utility bills, bank statements) where required
• Source of funds documentation for accounts meeting applicable transaction thresholds

3.3 Financial and Payment Data

• GCash account number linked to your registered mobile number
• Maya (PayMaya) account details where applicable
• Philippine bank account numbers (BDO, BPI, Metrobank, UnionBank, or other InstaPay-connected banks) submitted for withdrawal purposes
• Transaction history including deposits, withdrawals, and bet settlements
• Cryptocurrency wallet addresses for USDT TRC20 transactions where applicable

Note: ph75 does not store full credit card numbers or card verification values (CVV). Payment card data, where applicable, is processed exclusively by PCI-DSS compliant third-party payment processors.

3.4 Gaming Activity Data

• Game session logs including game titles, session start and end times, wagers placed, and outcomes
• Sports betting selections, stake amounts, and settlement results
• Bonus activation and wagering progression records
• VIP tier status and loyalty point balances
• Responsible gaming limit settings and self-exclusion records

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Device fingerprint data used for fraud prevention and session security
• Login timestamps and session duration records

3.6 Communications Data

• Records of customer support interactions, whether by live chat, email, or other channel
• Responses to player surveys or feedback requests
• Promotional communication preferences and consent records

04 How We Collect Personal Data

ph75 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC, making a deposit or withdrawal request, completing a responsible gaming form, or contacting customer support.
• Automated collection: Technical data collected automatically when you access ph75.one, including cookies, log files, and device identifiers. See Section 7 for details on cookies.
• Third-party sources: Identity verification data from licensed KYC providers; fraud and sanctions screening data from compliance service providers; payment verification data from GCash, Maya, and banking partners.
• Publicly available sources: Publicly available information used for enhanced due diligence where required by AMLA obligations.

05 Purposes of Processing and Legal Basis

ph75 processes personal data only for specified, explicit, and legitimate purposes. The table below sets out the primary processing purposes and the corresponding legal basis under the DPA 2012:

06 Disclosure and Sharing of Personal Data

6.1 Third-Party Service Providers

ph75 shares personal data with carefully selected third-party service providers who process data on our behalf under binding Data Processing Agreements. These providers include:

• Payment processors: GCash (GXI Inc.), Maya Philippines Inc., and Philippine banking institutions for deposit and withdrawal processing.
• Identity verification providers: Licensed KYC and AML screening platforms that verify player identity and perform sanctions screening.
• Cloud infrastructure and hosting providers: Data centre and cloud service providers that host ph75's platform infrastructure, subject to contractual data protection requirements.
• Game content providers: Where technically necessary, session authentication tokens may be shared with licensed game providers (e.g., JILI Games, PG Soft) to authenticate your game session. No financial or identity data is shared with game providers beyond what is required for session management.
• Customer support platforms: Support ticketing and live chat tools used to manage player communications, operating under strict access control and data handling policies.

6.2 Regulatory and Law Enforcement Disclosure

ph75 is required by Philippine law to disclose personal data to regulatory and law enforcement authorities in the following circumstances:

• Mandatory transaction reporting to the Anti-Money Laundering Council (AMLC) under Republic Act No. 9160 (Anti-Money Laundering Act), as amended by Republic Acts 9194, 10167, 10365, and 11521;
• Player data requested by PAGCOR in the exercise of its regulatory and audit functions under its licensing authority;
• Disclosure required by valid court order, subpoena, or other lawful legal process issued by Philippine courts or law enforcement agencies;
• Reporting to the National Bureau of Investigation (NBI) or Philippine National Police (PNP) where ph75 has reasonable grounds to believe that criminal activity has occurred on the platform.

6.3 Data ph75 Does Not Share

ph75 does not share, sell, rent, or otherwise disclose your personal data to third parties for their own marketing purposes. ph75 does not share player data with social media platforms for advertising targeting. Any sharing of aggregated, anonymized platform analytics data does not constitute disclosure of personal data under the DPA 2012.

07 Cookies and Tracking Technologies

ph75.one uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyse platform usage. The following categories of cookies are used:

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage functional and analytics cookies through your browser settings. Disabling functional cookies may affect your user experience on ph75.one. ph75 does not use third-party advertising or social media tracking cookies.

08 Data Retention

ph75 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal retention obligations. The following retention periods apply:

• Active account data: Retained for the duration of the active account relationship.
• Account data after closure: Retained for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing conditions and AMLA record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years after account closure or the last transaction, whichever is later, in compliance with AMLA requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of transaction, in compliance with AMLA and PAGCOR requirements.
• Customer support records: Retained for three (3) years after the support interaction is closed.
• Marketing consent records: Retained for the duration of the marketing relationship plus three (3) years.
• Session logs and technical data: Retained for twelve (12) months unless a longer period is required for an active investigation or dispute.

Upon expiry of the applicable retention period, ph75 will securely delete or anonymize personal data in a manner that prevents reconstruction of the individual's identity.

09 Data Security Measures

ph75 implements and maintains technical and organizational security measures appropriate to the nature of the personal data processed and the risks associated with processing. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between the player's device and ph75 servers;
• AES-256 encryption for personal data stored in ph75 databases;
• Multi-factor authentication requirements for administrative access to systems that hold personal data;
• Role-based access controls ensuring that ph75 staff can only access personal data to the extent required for their specific job function;
• Regular penetration testing and vulnerability assessments by independent third-party security firms;
• Intrusion detection and prevention systems monitoring ph75's network infrastructure;
• Physical security controls at data centre facilities hosting ph75 infrastructure;
• Annual staff training on data protection obligations and security awareness.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. ph75 cannot warrant the absolute security of personal data. In the event of a personal data breach, ph75 will follow the procedures set out in Section 13.

10 Your Data Privacy Rights

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by ph75. You may exercise any of these rights by submitting a written request to ph75's Data Protection Officer at [email protected].

11 Children's Privacy

The ph75 Platform is strictly restricted to individuals aged 21 years and above. ph75 does not knowingly collect personal data from individuals under the age of 21. The collection of personal data from minors — defined under Philippine law as persons below 18 years of age, and under ph75's platform terms as persons below 21 years of age — is not permitted under any circumstances.

Where ph75 discovers that personal data has been collected from an individual who is below the age of 21, ph75 will immediately suspend the associated account, void all betting activity, initiate a refund of any deposits to the original payment source, and permanently delete the personal data concerned, except to the extent that retention is required to evidence the breach for regulatory reporting purposes.

Parents or guardians who believe a minor may have registered an account at ph75 should contact ph75 support immediately at [email protected]. ph75 will investigate and act on all credible reports of underage account registration promptly.

12 Cross-Border Data Transfers

ph75's primary data processing infrastructure is located within the Philippines. Where personal data is transferred to, or processed in, a jurisdiction outside the Philippines — for example, by cloud infrastructure providers or international game content providers — ph75 ensures that adequate safeguards are in place in accordance with NPC guidelines on cross-border data transfers.

These safeguards include, as applicable:

• Binding contractual clauses requiring the receiving party to provide a level of data protection comparable to that required under the DPA 2012;
• Data processing agreements that specify the permitted purposes of processing, data security requirements, and the receiving party's obligations regarding data subject rights;
• Transfers to countries that the NPC has determined to provide an adequate level of personal data protection.

By registering a ph75 account, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside the Philippines, subject to the safeguards described above.

13 Personal Data Breach Response

In the event of a personal data breach — an incident resulting in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data held by ph75 — ph75 will take the following steps:

• Containment: Immediately upon discovery, ph75 will take steps to contain the breach, including isolating affected systems and revoking compromised credentials.
• Assessment: ph75 will assess the scope, nature, and likely consequences of the breach for affected data subjects.
• NPC Notification: Where the breach is likely to give rise to a real risk of serious harm to affected data subjects, ph75 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under NPC Circular No. 16-03.
• Data Subject Notification: Affected players will be notified directly where the breach is likely to result in a high risk to their rights and freedoms — for example, where the breach involves financial data or government identification numbers.
• Remediation: ph75 will implement remediation measures to prevent recurrence and will document the breach, its effects, and the remedial actions taken.

14 Updates to This Privacy Policy

ph75 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The version number and effective date displayed at the top of this document indicate the current version.

Where changes are material — meaning they significantly affect the way in which ph75 processes your personal data — ph75 will notify registered players by email to their registered address and by a prominent notice on ph75.one at least seven (7) days before the changes take effect. Non-material changes (such as clarifications of existing practices or typographical corrections) may be made without advance notice.

Your continued use of the ph75 Platform after the effective date of any update constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with the changes, you may close your ph75 account in accordance with the account closure process described in ph75's Terms and Conditions.

Earlier versions of this Privacy Policy are available on request by contacting ph75's Data Protection Officer.

15 Contact Us & Data Protection Officer

For all data privacy inquiries, requests to exercise your rights under the DPA 2012, complaints regarding ph75's data handling practices, or to request a copy of this Privacy Policy in an accessible format, please contact ph75's Data Protection Officer through the following channel:

ph75 Casino — Data Protection Officer
Email: [email protected]
Subject Line: [DATA PRIVACY] [Nature of Request]
Response Time: Within 5 business days (acknowledgment); 15 business days (substantive response)

If you are not satisfied with ph75's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through the NPC's official complaint mechanism. Information on how to file a complaint with the NPC is available through the NPC's official government channels.

For general customer support inquiries not related to data privacy — including account access, transactions, and gaming assistance — ph75's support team is available 24/7 through the live chat feature on ph75.one.