ph885 Privacy Policy

Welcome to the ph885 Privacy Policy. ph885 ("ph885," "we," "us," or "our") operates the online gaming platform accessible at ph885.app (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you," "your," or "User") who access or use our Platform.

This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it with third parties, and the rights you have in relation to your personal data. It applies to all services offered through ph885.app, including account registration, gaming activity, financial transactions, customer support interactions, and marketing communications.

This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of ph885.

ph885 is the data controller responsible for your personal information collected through ph885.app. As data controller, ph885 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable Philippine data protection law.

For all data privacy inquiries, requests to exercise your rights, or complaints regarding the handling of your personal data, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

ph885 collects the following categories of personal data from users of the Platform:

Identity & Contact Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Philippine mobile number
• Email address
• Residential address (province, city, barangay)
• Government-issued ID details (e.g., PhilSys National ID, passport, SSS ID, driver's license) — collected during KYC verification

Financial Data

• GCash or PayMaya account details (mobile number associated with the e-wallet)
• Bank account details (account name, account number, bank name — e.g., BPI, BDO, Metrobank) for withdrawal processing
• Transaction history, including deposit amounts, withdrawal amounts, and dates
• Source-of-funds documentation where required by anti-money laundering regulations

Gaming & Behavioral Data

• Game history, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Customer support interaction records

Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Login timestamps and session activity logs
• Cookie identifiers and similar tracking technologies (see Section 10)

ph885 collects personal data through the following means:

• Direct Submission: Information you provide when registering for an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors.
• Publicly Available Sources: In limited circumstances, ph885 may verify information against publicly available records or databases as part of its compliance obligations.

ph885 uses your personal data for the following purposes:

ph885 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or the use of non-essential cookies.
• Contractual Necessity: Where processing is necessary to perform our contract with you — specifically, to provide the ph885 gaming services, process your transactions, and manage your account.
• Legal Obligation: Where processing is required to comply with applicable Philippine law, including anti-money laundering regulations, PAGCOR licensing requirements, and the Data Privacy Act of 2012.
• Legitimate Interests: Where processing is necessary for ph885's legitimate business interests, such as fraud prevention, platform security, and improving our services, provided that such interests are not overridden by your rights and freedoms.

You may withdraw your consent at any time where consent is the legal basis for processing. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. Note that withdrawing consent for processing that is necessary to provide our services may result in the suspension or closure of your account.

ph885 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to confirm your identity and age as part of our KYC process.
• Fraud Prevention & AML Compliance Partners: Screening services used to detect and prevent money laundering, fraud, and other financial crimes, as required by Philippine law.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or court order.
• Technology & Infrastructure Providers: Cloud hosting, data storage, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Customer Support Tools: Third-party customer support platforms used to manage and respond to your inquiries, subject to confidentiality obligations.

ph885 does not transfer your personal data outside the Philippines except where necessary to provide our services and where appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012.

ph885 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (as amended) and PAGCOR regulations.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory authority.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, ph885 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

ph885 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and ph885.app is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial information and KYC documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to ph885 personnel and authorized third parties who have a legitimate need to access it. All access is logged and audited.
• Two-Factor Authentication: ph885 offers SMS OTP-based two-factor authentication for account login to protect against unauthorized access.
• Regular Security Audits: ph885 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in our systems.
• Staff Training: All ph885 personnel who handle personal data receive regular training on data protection obligations and security best practices.

While ph885 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph885 will notify the National Privacy Commission and affected users in accordance with the requirements of the Data Privacy Act of 2012.

ph885 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support our security and fraud prevention measures. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalized experience.
• Analytics Cookies: Collect anonymized data about how users interact with the Platform, helping us identify areas for improvement. Used only with your consent.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. Used only with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph885 Platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by ph885:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed, as described in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph885 holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update certain account details directly through your ph885 account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph885's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

ph885 is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law governing casino-style gaming. ph885 does not knowingly collect personal data from individuals under the age of 21.

If ph885 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate action in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to ph885, please contact us immediately using the details in Section 14 so that we can take prompt action.

ph885 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, ph885 will update the "Last Updated" date at the top of this page and, where practicable, notify registered users via email or an in-platform notification.

Your continued use of the ph885 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically — at least once every 90 days — to stay informed of how ph885 handles your personal data.

If you do not agree to the updated Privacy Policy, you must stop using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by ph885, please contact our Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 directly on the ph885 Platform — the fastest way to reach our support and DPO team.
• Email: [email protected]

ph885 aims to acknowledge all data privacy inquiries within 3 business days and to resolve them within 15 business days. For complex requests, we will keep you informed of progress throughout the process.

If you are not satisfied with ph885's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.