Privacy Policy

1. Introduction

Welcome to ph29. Your privacy is important to us. This Privacy Policy explains how ph29 ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you access our website, register an account, deposit funds, play games, or otherwise interact with our services.

We are committed to complying with the Philippine Data Privacy Act of 2012 (R.A. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). We also comply with PAGCOR regulatory requirements governing online casino operations in the Philippines.

By using ph29's services, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform immediately.

1.1 Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through:

• Our website and mobile-optimized platform at ph29.cam
• Account registration and KYC verification processes
• Deposit, withdrawal, and payment transactions
• Gameplay activity and wagering history
• Customer support interactions via live chat, email, or other channels
• Marketing communications and promotional activities
• Cookies and similar tracking technologies on our website

2. Information We Collect

2.1 Personal Information You Provide

When you register an account or use our services, we collect information you provide directly, including:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued ID numbers
• Contact Information: Mobile phone number, email address, residential address, and postal code
• Account Credentials: Username, password (encrypted), and security question answers
• Payment Information: GCash/Maya account numbers, bank account details, and transaction records
• KYC Documentation: Scanned copies or photos of government-issued IDs, proof of address documents, and selfies for verification
• Communication Records: Live chat transcripts, email correspondence, and customer support tickets
• Survey and Feedback Data: Responses to player satisfaction surveys, promotion preferences, and feature requests

2.2 Information Automatically Collected

When you access ph29, our systems automatically collect certain information about your device and usage patterns:

• Device Information: Device type, operating system, browser type, unique device identifiers, and screen resolution
• Network Information: IP address, internet service provider, and approximate geographic location (country/region level)
• Usage Data: Pages visited, games played, betting patterns, session durations, and click-stream data
• Cookies and Similar Technologies: Session identifiers, preferences, and analytics tracking (see Section 8)
• Gameplay Data: Bet amounts, game outcomes, win/loss records, and bonus usage

2.3 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Payment providers (GCash, Maya, banks) confirming transaction details
• Identity verification services used for KYC compliance
• Fraud prevention and anti-money laundering databases
• Marketing partners referring new players to ph29

3. How We Use Your Information

ph29 uses your personal information for legitimate business purposes related to operating our online casino platform. Specifically, we use your data to:

3.1 Service Delivery and Account Management

• Create and maintain your ph29 account with accurate identity information
• Process deposits, withdrawals, and other financial transactions
• Provide access to games, bonuses, and promotional offers
• Track gameplay activity, wagering totals, and bonus completion
• Facilitate customer support and resolve account-related issues

3.2 Regulatory Compliance and Security

• Verify your identity and age (21+ minimum) as required by PAGCOR regulations
• Comply with anti-money laundering (AML) and counter-terrorism financing (CTF) laws
• Detect and prevent fraud, cheating, collusion, and other prohibited activities
• Respond to lawful requests from government agencies, courts, and regulators
• Maintain accurate records for tax reporting and audit purposes

3.3 Communication and Personalization

• Send transactional notifications (deposit confirmations, withdrawal updates, bonus activations)
• Deliver promotional communications, with your consent, about new games, bonuses, and events
• Personalize your gaming experience based on preferences and play history
• Respond to your inquiries, feedback, and complaints

3.4 Platform Improvement and Analytics

• Analyze usage patterns to improve user experience, game variety, and platform performance
• Conduct research on player preferences and market trends
• Test new features, games, and promotions
• Generate anonymized statistics and reports for internal use

4. Information Sharing and Disclosure

ph29 does not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information only in the following circumstances:

4.1 Service Providers and Business Partners

We share data with trusted service providers who assist in operating our platform, including:

• Payment Processors: GCash, Maya, BPI, BDO, UnionBank, and other financial institutions processing deposits and withdrawals
• KYC and Identity Verification Services: Third-party providers confirming identity documents and age verification
• Game Software Providers: Game studios (Pragmatic Play, PG Soft, JILI, Evolution) receiving anonymized gameplay data for game integrity
• Customer Support Platforms: Third-party customer relationship management (CRM) tools and live chat software providers
• Marketing and Analytics Providers: Email marketing platforms, SMS gateways, and website analytics services (used only with your consent)
• Fraud Prevention Services: Third-party fraud detection tools and security monitoring services

All service providers are contractually obligated to maintain the confidentiality and security of your personal information, process it only for specified purposes, and comply with applicable data protection laws including the Philippine Data Privacy Act.

4.2 Regulatory and Government Authorities

ph29 may disclose personal information to Philippine government agencies, regulatory bodies, and law enforcement entities when required by law or when necessary to:

• Comply with PAGCOR licensing obligations, reporting requirements, and regulatory audits
• Respond to subpoenas, court orders, search warrants, or other lawful requests from Philippine courts
• Cooperate with investigations by the Anti-Money Laundering Council (AMLC), National Bureau of Investigation (NBI), Philippine National Police (PNP), or other law enforcement agencies
• Report suspicious transactions or potential violations of anti-money laundering regulations
• Comply with tax reporting obligations required by the Bureau of Internal Revenue (BIR)
• Respond to requests from the National Privacy Commission (NPC) regarding privacy compliance investigations
• Protect the rights, property, or safety of ph29, our players, or the general public

4.3 Business Transfers

In the event of a merger, acquisition, corporate reorganization, sale of assets, or similar business transaction involving ph29, personal information may be transferred to the acquiring or succeeding entity. We will provide advance notice of any such transfer via email or prominent platform notification, and you will have the opportunity to review the new privacy policy before your data is transferred. The acquiring entity will be bound by the commitments made in this Privacy Policy unless you consent to new terms.

4.4 With Your Consent

Beyond the circumstances described above, ph29 will not disclose your personal information to third parties without your explicit prior consent. You have the right to withdraw consent at any time, though this may affect your ability to use certain platform features that depend on data sharing.

5. Data Security Measures

ph29 implements comprehensive technical, organizational, and physical security measures to protect personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security Measures

• Encryption in Transit: 256-bit SSL/TLS encryption protects all data transmitted between your device and ph29 servers, preventing interception by unauthorized parties
• Encryption at Rest: Sensitive data stored on our servers is encrypted using AES-256 encryption standards, ensuring protection even if physical storage media is compromised
• Password Hashing: User passwords are stored using bcrypt or Argon2 one-way cryptographic hashing algorithms, making it computationally infeasible to reverse-engineer original passwords
• Firewall Protection: Multi-layer firewalls and intrusion detection systems (IDS) monitor network traffic and block unauthorized access attempts
• DDoS Mitigation: Distributed denial-of-service protection ensures platform availability during attack attempts
• Security Monitoring: 24/7 security operations center (SOC) monitoring for suspicious activities, anomalies, and potential breaches
• Regular Security Audits: Periodic penetration testing, vulnerability assessments, and security audits conducted by independent cybersecurity firms
• Secure Development: Security-by-design principles applied throughout software development lifecycle, including code reviews and security testing

5.2 Organizational Security Measures

• Access Controls: Role-based access controls (RBAC) ensure employees access personal data only on a strict need-to-know basis
• Employee Training: Mandatory data protection training for all staff, with regular refresher courses on privacy best practices and security awareness
• Confidentiality Agreements: All employees, contractors, and service providers sign strict confidentiality and non-disclosure agreements
• Background Checks: Thorough background screening for personnel with access to sensitive personal information
• Segregation of Duties: Critical functions separated to prevent single individuals from having excessive access to personal data
• Incident Response Team: Dedicated team trained to respond to data breaches and security incidents in accordance with regulatory requirements

5.3 Physical Security Measures

• Data Center Security: Servers located in ISO 27001-certified data centers with 24/7 physical security, biometric access controls, and surveillance systems
• Environmental Controls: Fire suppression systems, redundant power supplies, and climate control to ensure continuous operation and data integrity
• Geographic Redundancy: Data backed up across multiple secure locations to prevent data loss from natural disasters or physical incidents

6. Your Rights Under the Philippine Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

6.1 Right to Be Informed

You have the right to know how ph29 collects, uses, processes, stores, and shares your personal information. This Privacy Policy and related communications serve to fulfill that right. You may request additional clarification about our data practices at any time by contacting our Data Protection Officer.

6.2 Right to Access

You have the right to request a copy of the personal information ph29 holds about you. We will provide this information in a commonly used electronic format within 15 business days of receiving a verified request. To exercise this right, submit a written request to [email protected] with subject line "Data Access Request" and include verification of your identity.

6.3 Right to Rectification

You have the right to correct any inaccurate or outdated personal information we hold. You can update most information directly through your account settings. For corrections requiring additional verification (such as name or date of birth changes), contact customer support with supporting documentation. We will process corrections within 15 business days.

6.4 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal information when it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements. Note that PAGCOR regulations and anti-money laundering laws require ph29 to retain certain data for specific periods (typically 5-7 years after account closure). We will delete all eligible data and provide written confirmation of what data was retained and why.

6.5 Right to Object

You have the right to object to processing of your personal information for certain purposes, including direct marketing and profiling activities. Upon receiving your objection, we will cease processing your data for those purposes unless we can demonstrate compelling legitimate grounds that override your interests.

6.6 Right to Block or Restrict Processing

You may request that ph29 suspend or restrict processing of your personal information while other privacy requests are being resolved, or when the accuracy of data is contested. We will maintain the data in a state where it can still be stored but not processed, until the issue is resolved.

6.7 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format (such as JSON or CSV), and to transmit that data to another service provider where technically feasible. We will facilitate such transfers upon verified request.

6.8 Right to Withdraw Consent

Where we process personal information based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. To withdraw consent for marketing communications, adjust your account preferences or click unsubscribe in emails. For other consent-based processing, contact [email protected].

6.9 Right to Lodge a Complaint

If you believe ph29 has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines. We request that you first attempt to resolve the issue directly with our Data Protection Officer, but you have the right to escalate to the NPC at any time. Contact information for the NPC is available at privacy.gov.ph.

7. Data Retention

ph29 retains personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Our retention periods are guided by PAGCOR regulations, anti-money laundering laws, and Philippine tax requirements:

Data Category	Retention Period	Reason
Account Information (name, contact, credentials)	Active account + 5 years after closure	PAGCOR licensing requirements, AML compliance
Transaction Records (deposits, withdrawals, bets)	7 years from transaction date	Financial regulations, AML, tax reporting
KYC Documents (ID, proof of address)	5 years after account closure	Anti-money laundering regulations
Gaming Activity Logs	5 years from activity date	Dispute resolution, regulatory audits
Customer Support Communications	3 years from last contact	Quality assurance, dispute resolution
Marketing Consent Records	Until consent withdrawn + 1 year	Consent verification, legal compliance
Website Analytics (anonymized)	26 months	Platform improvement (standard analytics retention)

When retention periods expire, ph29 securely deletes or anonymizes personal information using industry-standard data destruction methods. Anonymized data that cannot be linked back to individuals may be retained indefinitely for statistical and research purposes.

8. Cookies and Tracking Technologies

ph29 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance user experience, analyze platform performance, and deliver relevant content. Cookies are small text files stored on your device when you visit our website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform functionality, including authentication, session management, security features, and load balancing. These cannot be disabled without breaking core functionality.
• Performance Cookies: Collect anonymous usage statistics to help us understand how players interact with the platform, identify popular games, and improve site performance.
• Functionality Cookies: Remember your preferences (language, currency, display settings) and provide enhanced features like personalized game recommendations.
• Advertising Cookies: Used (with your consent) to deliver relevant promotional content and measure marketing campaign effectiveness. These may be set by third-party advertising partners.
• Analytics Cookies: Help us analyze traffic patterns, user demographics, and game popularity using tools like Google Analytics (with IP anonymization enabled).

8.2 Managing Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to view, delete, and block cookies from specific websites. However, disabling certain cookies may affect platform functionality, including login persistence, personalized features, and seamless navigation. ph29 respects Do Not Track (DNT) signals where technically feasible. For more granular control, you can adjust cookie preferences in your account settings.

9. International Data Transfers

ph29 primarily stores and processes personal information on servers located in secure data centers within the Philippines and other jurisdictions where our service providers operate. When we transfer personal information outside the Philippines, we ensure appropriate safeguards are in place:

• Standard contractual clauses approved by the National Privacy Commission requiring equivalent data protection standards
• Verification that recipient jurisdictions provide adequate data protection under NPC guidelines
• Additional technical and organizational measures to protect transferred data
• Compliance with the ASEAN Framework on Personal Data Protection for cross-border transfers

By using ph29 services, you acknowledge that your personal information may be transferred to and processed in jurisdictions outside the Philippines as described in this Privacy Policy.

10. Children's Privacy

ph29 services are strictly intended for individuals aged 21 years and older, in accordance with PAGCOR regulations and Philippine gambling laws. We do not knowingly collect, use, or retain personal information from anyone under 21 years of age. Our registration process includes age verification, and we employ technology to detect and prevent underage access.

If we become aware that we have inadvertently collected personal information from someone under 21, we will immediately:

• Close the associated account and cancel any active bonuses or pending withdrawals
• Delete all personal information collected from the minor
• Refund any deposits (at our sole discretion, subject to verification)
• Notify parents or guardians if contact information is available

Parents and guardians who believe their child has accessed ph29 services should contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

ph29 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or regulatory obligations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this document
• Notify registered users via email at least 30 days before changes take effect
• Display a prominent notice on our website and mobile app
• Where required by law, obtain renewed consent for affected processing activities

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of ph29 services after any changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account before the effective date.

12. Data Protection Officer

ph29 has designated a Data Protection Officer (DPO) responsible for ensuring compliance with the Philippine Data Privacy Act and overseeing our privacy program. The DPO serves as the primary contact for privacy-related inquiries, data subject requests, and regulatory communications with the National Privacy Commission.

Contact the Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Inquiry")
• Live Chat: Available 24/7 through the ph29 platform
• Postal Mail: Data Protection Officer, ph29, Metro Manila, Philippines
• Response Time: We aim to respond to all privacy inquiries within 15 business days

13. Contact Information

For general questions about this Privacy Policy, data protection practices, or your privacy rights, please contact us through the following channels:

• Customer Support: Available 24/7 via live chat and email
• Email: [email protected]
• Data Privacy Inquiries: [email protected] with subject "Data Privacy"
• Website: https://ph29.cam
• Regulatory Complaints: National Privacy Commission of the Philippines at privacy.gov.ph

Thank you for trusting ph29 with your gaming entertainment. We are committed to protecting your privacy and delivering a safe, secure, and enjoyable experience for every Filipino player.