ph797 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how ph797 ("ph797," "we," "us," "our") collects, processes, stores, and protects personal data relating to individuals ("Players," "Users," "you") who access or use the ph797 online casino and sports betting platform available at ph797.club.

ph797 is committed to protecting the privacy and personal data of all Filipino players in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines ("NPC").

This Policy should be read alongside ph797's Terms & Conditions. In the event of any conflict between this Policy and any other document, this Policy shall govern matters relating to personal data protection.

2. Data Controller Information

ph797 acts as the data controller in respect of personal data collected from players using the ph797 platform. As data controller, ph797 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in compliance with the DPA.

For all data privacy-related inquiries, requests, and complaints, players may contact the ph797 Data Protection Officer (DPO) through the following channel:

• Email: support@ph797.club (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 on the ph797 website, Philippine Standard Time

ph797 will respond to all verified data privacy requests within fifteen (15) working days of receipt, in accordance with NPC guidelines.

3. Personal Data We Collect

ph797 collects personal data from players at various stages of the player journey. The categories of personal data collected include:

• Registration Data: Full legal name, date of birth, mobile number, email address, and username chosen during account creation.
• Identity Verification (KYC) Data: Government-issued photo identification (e.g., Philippine Passport, UMID, SSS card, PhilHealth card, Driver's License), proof of address, and where required, a selfie or liveness verification for biometric matching.
• Financial Data: GCash or Maya account number, bank account details (BDO, BPI, Metrobank), deposit and withdrawal transaction records, and payment method verification documents.
• Gaming Activity Data: Game session history, bet amounts, game outcomes, wagering patterns, sports bets placed, and bonus utilization records.
• Technical Data: IP address, device type and identifier, operating system, browser type and version, session timestamps, geolocation data (at the country/region level), and crash or error logs.
• Communications Data: Records of live chat conversations, support ticket exchanges, email correspondence, and any feedback submitted to ph797.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, cooling-off period elections, and responsible gaming assessment responses.

ph797 does not knowingly collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive personal information is collected (e.g., government ID numbers), it is processed under the lawful bases described in Section 5 of this Policy.

4. How We Use Your Personal Data

ph797 uses the personal data collected for the following purposes:

• Account Management: To create, maintain, and manage your ph797 player account, including processing deposits, withdrawals, and bonus allocations.
• Identity Verification: To verify your identity and age (21+) during registration and KYC review, and to detect and prevent the creation of duplicate accounts.
• Regulatory Compliance: To fulfil ph797's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the DPA — including reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) where legally required.
• Platform Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other malicious activity on the ph797 platform.
• Customer Support: To respond to support inquiries, resolve disputes, and maintain records of player-ph797 communications for quality assurance purposes.
• Responsible Gaming: To enforce player-elected responsible gaming tools (deposit limits, self-exclusion), to identify players who may be at risk of gambling-related harm, and to contact such players with welfare check communications.
• Service Improvement: To analyze aggregate, anonymized gaming patterns and platform usage data for the purpose of improving the ph797 product, fixing bugs, and optimizing performance.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have consented to receive marketing communications. Players may opt out at any time.

5. Legal Basis for Processing

ph797 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The legal bases applicable to ph797's processing activities are:

• Contractual Necessity: Processing required to perform ph797's obligations under the Terms & Conditions agreed by the player at registration — including account management, payment processing, and game operation.
• Legal Obligation: Processing required for compliance with PAGCOR regulations, AMLA reporting obligations, NPC data breach notification requirements, and applicable Philippine tax laws.
• Legitimate Interests: Processing necessary for ph797's legitimate interests in preventing fraud, securing the platform, improving services, and enforcing responsible gaming standards — where such interests are not overridden by the player's privacy rights.
• Consent: Processing for marketing communications and optional analytics features — where ph797 has obtained the player's express, freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

ph797 does not sell or rent player personal data to any third party. ph797 may share personal data with third parties only in the following circumstances and only to the extent necessary:

• Payment Processors: GCash, Maya, BDO, BPI, Metrobank, Coins.ph, and other payment partners receive transaction data necessary to process deposits and withdrawals. These partners are bound by their own data protection obligations.
• Game Providers: JILI, Pragmatic Play, and other certified game providers receive pseudonymized session data necessary to deliver game functionality and verify RNG integrity.
• Regulatory Authorities: PAGCOR, the AMLC, and the NPC may receive player data where ph797 is legally required to disclose it — for example, in the context of AML investigations or data breach reporting.
• Identity Verification Providers: Third-party KYC and biometric verification services process identity documents and liveness data on behalf of ph797 under strict data processing agreements.
• Legal Advisors and Auditors: Professional advisors engaged by ph797 may access personal data as necessary and are bound by professional confidentiality obligations.

All third parties with whom ph797 shares personal data are required to implement appropriate technical and organizational security measures and are prohibited from processing shared data for any purpose other than the specific purpose for which it was shared.

7. Data Retention

ph797 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and thereafter for as long as required by applicable Philippine law. Specific retention periods include:

• Account Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with AMLC record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, consistent with PAGCOR and AMLC requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Support Communications: Retained for two (2) years from the date of the last communication, unless associated with an ongoing dispute or regulatory investigation.
• Marketing Consent Records: Retained for the duration of the consent and for one (1) year following withdrawal of consent, to evidence compliance.

Upon expiry of the applicable retention period, ph797 will securely delete or anonymize personal data in accordance with NPC-recommended data disposal standards.

8. Cookies & Tracking Technologies

ph797 uses cookies, web beacons, pixel tags, and similar tracking technologies on the ph797 website and mobile platform. The categories of cookies used by ph797 are:

• Strictly Necessary Cookies: Essential for the operation of the ph797 platform — including maintaining your login session, managing your account balance display, and processing transactions. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to collect aggregated, anonymized data about how players interact with the ph797 platform — including pages visited, session duration, and error events — for the purpose of improving platform performance.
• Functional Cookies: Used to remember player preferences such as language settings, game display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Used by ph797's internal analytics tools to understand player behavior patterns in aggregate. ph797 does not use third-party advertising cookies or behavioral targeting cookies.

You may manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain ph797 features.

9. Security Measures

ph797 implements a comprehensive set of technical and organizational security measures to protect player personal data from unauthorized access, disclosure, alteration, or destruction:

• Transport Layer Security (TLS 1.2 or higher) for all data transmitted between player devices and ph797 servers.
• AES-256 encryption for sensitive personal data stored at rest, including KYC documents and financial account details.
• Role-based access controls restricting access to personal data to ph797 personnel with a documented need-to-know.
• Multi-factor authentication (MFA) for all ph797 administrative and operational system access.
• Regular security penetration testing and vulnerability assessments conducted by independent third parties.
• A documented data breach response plan aligned with NPC Circular 16-03 breach notification requirements.

While ph797 takes all reasonable precautions to protect player data, no internet transmission or electronic storage system is completely secure. Players are encouraged to use strong, unique passwords for their ph797 accounts and to enable two-factor authentication where available.

10. Your Rights Under the DPA

Under the Philippine Data Privacy Act of 2012, ph797 players have the following rights with respect to their personal data:

• Right to Be Informed: The right to be informed about how your personal data is collected and processed — fulfilled through this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph797 holds about you and information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by ph797.
• Right to Erasure: The right to request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to ph797's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph797 has processed your personal data in violation of the DPA.

To exercise any of the above rights, contact the ph797 Data Protection Officer via live chat or by email at support@ph797.club with the subject line "Data Privacy Request." ph797 will respond within fifteen (15) working days and may request identity verification before processing your request.

11. Children's Privacy

The ph797 platform is strictly intended for persons aged 21 years and above in accordance with PAGCOR regulations. ph797 does not knowingly collect personal data from any person under the age of 21.

ph797 employs age verification mechanisms during the registration process to prevent underage access. If ph797 becomes aware that personal data has been collected from a person under the age of 21, ph797 will immediately close the associated account, void any transactions, and securely delete the personal data in question.

If you have reason to believe that a person under 21 has registered on ph797, please contact ph797 support immediately at support@ph797.club.

12. Changes to This Policy & Contact

ph797 reserves the right to update this Privacy Policy at any time to reflect changes in applicable Philippine data privacy law, NPC issuances, PAGCOR regulatory requirements, or ph797's data processing practices. The revised Policy will be posted on this page with an updated effective date.

Where changes to this Policy are material — particularly changes that expand the purposes for which personal data is processed or reduce player privacy protections — ph797 will provide prior notice via the registered email address on your account or via a prominent on-site notification. Your continued use of the ph797 platform following the posting of an updated Policy constitutes your acknowledgment of the changes.

For any questions, concerns, or requests relating to this Privacy Policy or ph797's data processing practices, please contact the ph797 Data Protection Officer:

• Email: support@ph797.club (subject: "Data Privacy Request")
• Live Chat: Available 24/7 on ph797.club, Philippine Standard Time