ph959 Privacy Policy

ph959 operates the online gaming platform accessible at ph959.vip and is the data controller responsible for the personal information collected through this website and associated services. As data controller, ph959 determines the purposes and means by which your personal data is processed.

ph959 processes personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. This Policy applies to all registered players, website visitors, and individuals who interact with ph959 through any channel.

By registering an account or using ph959.vip, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, you should not register an account or use the Platform.

ph959 collects personal data through multiple channels: directly from you during registration, through your use of the Platform, through KYC verification processes, and automatically through technical systems. The categories of data we collect are detailed below.

ph959 does not collect sensitive personal information as defined under RA 10173 (such as health records, religious beliefs, or political affiliations) except where specifically required by applicable regulations — for example, where responsible gaming assessments require disclosure of certain health-related information on a voluntary basis.

ph959 uses your personal data only for the purposes listed below. We do not process your data in a manner incompatible with these stated purposes:

ph959 processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered ph959 Player — including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable Philippine law, including AML/KYC regulations, PAGCOR requirements, and responses to regulatory and law enforcement requests.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where ph959's legitimate interests do not override your rights and interests as a data subject.
• Consent: Processing for direct marketing communications, where your prior explicit consent has been obtained. You may withdraw this consent at any time.

ph959 shares personal data only with the following categories of third parties, and only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: GCash (GXI), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment processors require transaction data to process your deposits and withdrawals. These providers process your data under their own privacy policies and are bound by applicable banking and payment regulations in the Philippines.
• Game Content Providers: JILI Games, PG Soft, Pragmatic Play, Spadegaming, and other licensed game studios may receive anonymised session and gameplay data for game performance monitoring and certification purposes. These providers do not receive your identity or financial data.
• KYC & Identity Verification Providers: Third-party identity verification service providers may process your KYC documents on ph959's behalf. These providers are bound by strict data processing agreements and RA 10173 compliance requirements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies, where disclosure is required by law or lawful order.
• Law Enforcement: Philippine law enforcement agencies, where ph959 is required or authorised by law to disclose data in connection with the investigation of criminal activity.
• Technology Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on ph959's behalf under strict data processing agreements and are required to maintain confidentiality and security standards equivalent to those applied by ph959.

All third parties with whom ph959 shares data are required to maintain appropriate technical and organisational security measures and to process your data only for the specified purpose in accordance with ph959's instructions.

ph959.vip uses cookies and similar tracking technologies to operate the Platform, maintain your login session, prevent fraud, and understand how the platform is used. The cookies used by ph959 fall into the following categories:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent access to ph959. ph959 does not use third-party advertising or behavioural targeting cookies.

ph959 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. The following retention periods apply:

• Account and identity data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AML and PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine AML regulations.
• KYC documentation: Retained for a minimum of five (5) years following Account closure.
• Gaming activity data: Retained for the duration of your Account and for two (2) years following Account closure for responsible gaming monitoring purposes.
• Customer support communications: Retained for three (3) years from the date of each interaction.
• Technical and device data: Retained for twelve (12) months from collection unless required for ongoing fraud or security investigations.
• Marketing consent records: Retained for the duration of the consent and for two (2) years following withdrawal of consent as evidence of the original opt-in.

Upon expiry of the applicable retention period, ph959 will securely delete or anonymise your personal data in accordance with applicable data security standards.

ph959 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and ph959.vip is encrypted using TLS 1.2 or higher (256-bit encryption), preventing interception in transit.
• At-Rest Encryption: All databases containing personal data, KYC documents, and financial records are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within ph959's systems is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls, multi-factor authentication for administrative systems, and comprehensive audit logging.
• Secure Data Centres: ph959's infrastructure is hosted in ISO 27001-certified data centres with physical access controls, surveillance, and environmental monitoring.
• Penetration Testing: ph959 conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities.
• Data Breach Response: ph959 maintains an incident response plan for data security events. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph959 will notify the National Privacy Commission and affected players within 72 hours of becoming aware of the breach, in accordance with RA 10173.

While ph959 implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your Account credentials and for notifying ph959 immediately if you suspect unauthorised access to your Account.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph959. These rights may be exercised by contacting ph959's Data Protection Officer using the contact information in Section 15.

• Right to be Informed: The right to know what personal data ph959 holds about you, how it is used, and with whom it is shared — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph959 holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. Some data fields (such as your registered legal name) may require documentary evidence before correction can be processed.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, provided that ph959 has no overriding legal obligation to retain the data (e.g., AML retention requirements).
• Right to Object: The right to object to processing of your personal data where ph959 relies on legitimate interests as its legal basis, and where your objection is based on your particular situation.
• Right to Data Portability: The right to receive a copy of personal data you have provided to ph959 in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

ph959 employs mandatory age verification controls at registration and during the KYC process to prevent persons under 21 years of age from accessing the Platform. Any Account found to be held by or registered on behalf of a minor will be immediately closed and all balances forfeited.

If ph959 becomes aware that it has inadvertently collected personal data from a person under 21 years of age, that data will be deleted as soon as reasonably practicable. Parents or guardians who believe their child may have registered on ph959 should contact ph959's support team immediately at [email protected].

ph959's primary data processing infrastructure is located within or operates under standards compatible with the Philippine Data Privacy Act. Where personal data is transferred to service providers located outside the Philippines — for example, cloud infrastructure providers or game studios — ph959 ensures such transfers are conducted under contractual frameworks that require the receiving party to provide a level of data protection equivalent to the standards required by RA 10173.

ph959 does not transfer personal data to jurisdictions that the NPC has determined to lack adequate data protection safeguards unless ph959 has implemented appropriate contractual safeguards. You may contact ph959's Data Protection Officer for information about the specific transfer mechanisms applicable to any international transfers of your data.

ph959 sends promotional communications — including bonus offers, new game announcements, and platform updates — only to players who have explicitly opted in to receive such communications during registration or through their Account notification settings.

You may opt out of ph959 marketing communications at any time by:

• Updating your notification preferences in your ph959 Account settings;
• Replying "STOP" to any ph959 SMS marketing message;
• Contacting ph959 support via live chat or at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications does not affect transactional or account-related communications such as deposit confirmations, withdrawal notifications, security alerts, or Account status updates. These transactional communications are necessary for the operation of your ph959 Account and cannot be disabled while your Account remains active.

ph959.vip may contain references to third-party services — including payment providers such as GCash and Maya — whose privacy practices are governed by their own privacy policies, independent of this ph959 Privacy Policy. ph959 is not responsible for the privacy practices, content, or data handling of any third-party websites or services.

ph959 strongly encourages you to review the privacy policy of any third-party service you access through or in connection with your use of ph959, particularly GCash and Maya when processing deposits and withdrawals.

ph959 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material changes to this Policy will be communicated to registered players via:

• Email notification to the registered address;
• SMS notification to the registered mobile number; and/or
• A prominent notice on ph959.vip,

with a minimum of fourteen (14) calendar days' advance notice before the amended Policy takes effect for material changes. Non-material changes (such as corrections of typographical errors or minor clarifications) may be made without prior notice.

Your continued use of ph959 following the effective date of any amendments constitutes your acknowledgment of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed of how ph959 manages your personal data.

ph959 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. You may contact the ph959 DPO for any privacy-related inquiry, data subject rights request, or concern about how your personal data is handled:

• Email: [email protected] (subject line: "Privacy / DPO Request")
• Live Chat: Available 24/7 on ph959.vip — request to speak with the Data Protection Officer

ph959 will acknowledge all DPO inquiries within three (3) business days and endeavour to resolve all legitimate data subject requests within thirty (30) calendar days of receipt.

If you are not satisfied with ph959's response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012 in the Philippines.

For responsible gaming support, please also review ph959's dedicated Responsible Gaming page, which outlines tools and resources available to Filipino players who may be experiencing gambling-related difficulties.