phph8 Privacy
Policy

This Privacy Policy applies to the phph8 platform, accessible at phph8.ws, and to all services, features, mobile web experiences, and communications that phph8 makes available to registered and guest users (collectively, the "Platform"). It describes how phph8 ("we", "us", "our") collects, uses, stores, shares, and protects personal data relating to you ("Player", "User", "you") in connection with your use of the Platform.

phph8 acts as the Data Controller for personal data collected through the Platform. As Data Controller, phph8 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations (IRR), and all other applicable Philippine laws and regulations governing data privacy.

By registering for a phph8 account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, please do not register for or use the phph8 Platform.

phph8 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party sources where permitted by law. The categories of personal data we collect include the following:

phph8 does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly required for identity verification, anti-money laundering (AML) compliance, and regulatory reporting obligations. Where sensitive personal information is collected (e.g., a copy of a government-issued ID), it is handled with a higher standard of protection and is not used for any purpose beyond the specific compliance purpose for which it was obtained.

phph8 processes your personal data for the following specific, legitimate, and declared purposes:

• Account Creation and Management: To register your phph8 account, verify your identity, and maintain your account in good standing throughout your relationship with phph8.
• KYC and AML Compliance: To fulfill our obligations under Philippine Anti-Money Laundering Act (AMLA, Republic Act No. 9160 as amended) and PAGCOR regulatory requirements, including identity verification and transaction monitoring.
• Transaction Processing: To process deposits and withdrawals in PHP (₱) and supported cryptocurrencies via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, USDT, BTC, and ETH.
• Platform Delivery: To provide you with access to phph8 games, sports betting markets, live casino services, bingo, crash games, and all other Platform features.
• Customer Support: To respond to your inquiries, resolve disputes, and improve our 24/7 English-language support services.
• Fraud Prevention and Security: To detect and prevent unauthorized access, fraudulent activity, collusion, bonus abuse, and other prohibited conduct as described in the phph8 Terms & Conditions.
• Responsible Gaming: To administer self-exclusion requests, deposit limits, cooling-off periods, and other responsible gaming tools you activate on the Platform.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws, court orders, regulatory directions from PAGCOR or the NPC, and to establish, exercise, or defend legal claims.
• Platform Improvement: To analyze aggregated usage patterns, improve game recommendations, and optimize the Platform's performance and user experience for Filipino players.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about phph8 — only where you have provided separate, specific consent to receive such communications, and only through channels you have opted into.

Under the Data Privacy Act of 2012 and its IRR, phph8 relies on the following lawful bases for processing your personal data:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and phph8 (i.e., the Terms & Conditions), including account management, transaction processing, and delivery of gaming services.
• Legal Obligation: Processing is required to comply with legal obligations applicable to phph8, including AML/KYC obligations under AMLA, PAGCOR licensing conditions, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for phph8's legitimate interests, including fraud prevention, platform security, and improving our services — provided those interests are not overridden by your rights and freedoms.
• Consent: For processing activities that go beyond what is strictly necessary for the above purposes (e.g., marketing communications, behavioral analytics for personalization), phph8 relies on your freely given, specific, and informed consent. You may withdraw this consent at any time.

phph8 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in this policy:

• Payment Processors and Financial Institutions: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and cryptocurrency processing partners, for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification services that assist phph8 in confirming the identity of new and existing players in compliance with AML and PAGCOR requirements.
• Game Content Providers: Licensed software and game content providers whose games are made available on the phph8 Platform. These providers may receive limited session and wagering data necessary for game delivery and jackpot processing.
• Customer Support Technology Partners: Providers of live chat and support ticket management tools used to power phph8's 24/7 customer support service.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or where phph8 is required to report suspicious transactions or respond to valid legal process.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, strictly on a need-to-know basis and subject to confidentiality obligations.

All third-party service providers who receive personal data from phph8 are contractually required to process that data only for the specified purpose, maintain appropriate security measures, and comply with applicable Philippine data privacy law. phph8 remains responsible for ensuring that third parties with whom it shares personal data provide adequate levels of protection.

phph8 uses cookies and similar tracking technologies (such as web beacons and local storage) on the Platform. These technologies help us deliver a functional, secure, and personalized experience for Filipino players visiting phph8.ws.

The types of cookies phph8 uses are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your phph8 account and security tokens that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, such as your preferred language, currency display, and notification settings.
• Analytics Cookies: Help phph8 understand how players navigate the Platform — which pages are visited most, where players drop off, and how game sessions are conducted. Analytics data is aggregated and not used to personally identify individual players in marketing contexts.
• Responsible Gaming Cookies: Store your session duration data locally to support reality-check notifications and session time limits you have configured through the Platform's responsible gaming tools.

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from logging into your phph8 account or accessing certain Platform features. phph8 does not currently support a cookie preference center widget, but you may contact support to request information about specific cookies in use.

phph8 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your phph8 account and for a period of at least five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under AMLA and PAGCOR regulations.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years following the end of your relationship with phph8, or longer where required by a specific regulatory direction.
• Customer Support Communications: Retained for up to three (3) years from the date of the interaction, unless a longer period is required to resolve an ongoing dispute or regulatory inquiry.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter, to demonstrate compliance with consent obligations.
• Technical and Log Data: Server logs and technical data are typically retained for up to twelve (12) months, unless required for a specific security investigation.

When personal data is no longer required for a lawful purpose and no legal obligation mandates its continued retention, phph8 will securely delete, anonymize, or pseudonymize it in a manner that prevents identification of the individual.

phph8 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the phph8 Platform is protected using TLS (Transport Layer Security) encryption. phph8 enforces HTTPS across the entire Platform, including the phph8 Login page and all account management areas.
• Encryption at Rest: Sensitive personal data stored in phph8's databases, including identity verification documents and financial account references, is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to systems containing personal data is restricted to phph8 personnel and contractors who require that access to perform their specific job function. Access rights are reviewed regularly and revoked promptly upon role change or departure.
• Penetration Testing and Vulnerability Management: phph8 conducts regular security testing of the Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): phph8 strongly encourages all players to enable 2FA on their accounts for an additional layer of protection beyond the phph8 login password.
• Incident Response: phph8 maintains a formal data breach response procedure. In the event of a breach that poses a real risk to your rights, phph8 will notify the NPC within seventy-two (72) hours of becoming aware and will notify affected players without undue delay.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phph8. You may exercise any of these rights by contacting our Data Protection Officer at [email protected]:

phph8 enforces a strict 21+ age policy in compliance with Philippine gaming regulations. The phph8 Platform is not intended for, directed at, or designed for use by individuals under the age of twenty-one (21) years.

phph8 does not knowingly collect, process, or store personal data from individuals under 21. During the registration process, phph8 requires all applicants to confirm their date of birth and submit to identity verification. Where phph8 discovers or has reasonable grounds to suspect that a registered account belongs to a person under 21 years of age:

• The account will be immediately suspended pending investigation.
• All associated personal data will be reviewed and, where it is confirmed that the account holder is under 21, that data will be deleted in accordance with this Privacy Policy and our legal retention obligations.
• Any real-money balances will be handled in accordance with the phph8 Terms & Conditions and applicable regulatory guidelines.

phph8's primary operations and data processing activities are conducted within the Philippines. However, some of phph8's third-party service providers — including certain game content providers, KYC verification platforms, and cloud infrastructure partners — may process personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, phph8 takes the following steps to ensure that your data receives an equivalent level of protection as it would under Philippine law:

• phph8 only transfers personal data to countries or organizations that provide an adequate level of data protection, as determined by the National Privacy Commission of the Philippines.
• Where an adequacy determination is not available, phph8 implements appropriate safeguards, including contractual data processing agreements that incorporate standard data protection clauses consistent with NPC guidance.
• phph8 conducts due diligence on all international data recipients to confirm their ability to meet the security and privacy standards required by phph8 and applicable Philippine law.

By using the phph8 Platform and providing your personal data, you acknowledge and consent to the possibility of international data transfers as described in this section, subject to the protections outlined above.

phph8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law or NPC guidance, changes in our Platform features, or other operational developments. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the phph8 Platform informing players of the update.
• Where the changes are significant and affect how we process your personal data in a way that requires fresh consent, we will send a direct notification to your registered email address and request your renewed consent before the updated policy takes effect for your account.

Your continued use of the phph8 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how phph8 protects your personal data. If you disagree with any changes to this Privacy Policy, you should stop using the Platform and may request account closure by contacting our support team.

phph8 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and its IRR. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by phph8, you may contact us through the following channels:

• Email (Data Privacy Inquiries): [email protected] — please include "Data Privacy Request" in the subject line of your message.
• General Support: Contact the phph8 customer support team via the live chat function available on the Platform, available 24/7 in English to serve players across Metro Manila, Cebu, Davao, Quezon City, Makati, and all of the Philippines.

phph8 is committed to resolving all privacy-related inquiries promptly and fairly. If after contacting phph8 you remain dissatisfied with the outcome of your request or complaint, you retain the right to escalate your concern directly to the National Privacy Commission of the Philippines (NPC), which is the independent regulatory authority responsible for overseeing compliance with the Data Privacy Act of 2012.