Privacy Policy — ph8.com

1 Introduction

ph8.com ("we", "us", or "our") operates an online gaming platform accessible at ph8com.net, including any associated mobile applications (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, visitors, and prospective users ("you" or "Data Subject").

This Privacy Policy ("Policy") describes how ph8.com collects, uses, stores, shares, and protects your personal data. It also explains the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("DPA").

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy. By registering on or using the ph8.com Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Data Controller

For the purposes of the Philippine Data Privacy Act, ph8.com is the Personal Information Controller responsible for your personal data collected through the Platform. As the controller, ph8.com determines the purposes and means of processing your personal information.

ph8.com has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact our DPO at any time using the contact details provided in Section 14 of this Policy.

Where ph8.com engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification services), those providers act as Personal Information Processors and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable law.

3 Personal Data We Collect

ph8.com collects the following categories of personal data:

3.1 Identity & Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (used to verify you are 21 years of age or older)
• Gender
• Nationality and country of residence
• Government-issued identification number (e.g., PhilSys ID, SSS, UMID, or passport number)

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including barangay, city, province, and postal code)

3.3 Financial Data

• GCash or PayMaya account details (mobile number registered to the account)
• Bank account details for BPI, BDO, or Metrobank withdrawals
• Transaction history, including deposits, withdrawals, wagers, and winnings
• Source of funds declarations where required by anti-money laundering regulations

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session logs, login timestamps, and activity records
• Game history, betting patterns, and session duration
• Cookies and similar tracking technologies (see Section 8)

3.5 Communications Data

• Records of your communications with ph8.com customer support
• Feedback, complaints, and dispute records
• Marketing preferences and consent records

3.6 Verification Documents

• Copies of government-issued photo identification
• Proof of address documents (e.g., utility bills, bank statements, barangay certificates)
• Selfie or liveness check images submitted during KYC verification

4 How We Collect Your Data

ph8.com collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically — through cookies, web beacons, and server logs when you access and interact with the Platform. This includes your IP address, device information, and browsing behavior on ph8.com.
• From third parties — from identity verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention services, and regulatory databases, where necessary to verify your identity or comply with legal obligations.

All data collection is conducted transparently and in accordance with the principles of the Philippine Data Privacy Act. You will always be informed of the purpose for which your data is being collected at the point of collection.

5 How We Use Your Personal Data

ph8.com uses your personal data for the following purposes:

ph8.com will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by law.

6 Legal Basis for Processing

ph8.com processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to operate your ph8.com account, process transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), data privacy regulations, and any directives from regulatory authorities.
• Legitimate interests: Processing is necessary for ph8.com's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, ph8.com relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing & Disclosure

ph8.com does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only where necessary and in accordance with this Policy:

7.1 Service Providers

ph8.com engages trusted third-party service providers to assist in operating the Platform. These include identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, customer support platforms, and fraud detection services. All service providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing services to ph8.com.

7.2 Regulatory & Law Enforcement Authorities

ph8.com may disclose personal data to Philippine government agencies, regulatory bodies, or law enforcement authorities where required by law or in response to a valid legal request. This includes disclosures required under the Anti-Money Laundering Act, the Data Privacy Act, and any applicable gaming regulations.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ph8.com's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect.

7.4 With Your Consent

ph8.com may share your data with other third parties where you have provided explicit consent for such sharing. You may withdraw this consent at any time by contacting our Data Protection Officer.

8 Cookies & Tracking Technologies

ph8.com uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and login details, to provide a more personalized experience.
• Analytics cookies: Help us understand how players use the Platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymized.
• Marketing cookies: Used to deliver relevant promotions and offers based on your activity on ph8.com. These are only placed with your consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no consent is required as they are essential to the operation of ph8.com.

9 Data Retention

ph8.com retains your personal data for as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by anti-money laundering regulations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLA requirements.
• KYC verification documents: Retained for a minimum of five (5) years after account closure or the completion of the relevant transaction.
• Customer support communications: Retained for three (3) years from the date of the communication.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance purposes.
• Technical and usage data: Retained for up to twelve (12) months, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, ph8.com will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

10 Data Security

ph8.com implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and our servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Access controls limiting data access to authorized personnel on a strict need-to-know basis.
• Multi-factor authentication for all internal systems that process personal data.
• Regular security audits and penetration testing conducted by independent security professionals.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph8.com will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay, as required by the Data Privacy Act.

11 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph8.com:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed, as described in this Policy.
• Right of Access: You have the right to request a copy of the personal data ph8.com holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please submit a written request to our Data Protection Officer at [email protected]. ph8.com will respond to all verified requests within thirty (30) days of receipt. We may require proof of identity before processing your request.

12 Children's Privacy

The ph8.com Platform is strictly intended for individuals who are 21 years of age or older. ph8.com does not knowingly collect personal data from persons under the age of 21. Age verification is conducted during the registration process and as part of our ongoing KYC procedures.

If ph8.com becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned in accordance with applicable law.

13 Updates to This Policy

ph8.com reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. The most current version of this Policy will always be published on this page, with the effective date clearly indicated at the top.

Where changes are material — meaning they significantly affect your rights or how we process your personal data — ph8.com will notify registered players via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect. For non-material changes, the updated Policy will take effect immediately upon publication.

Your continued use of the ph8.com Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must stop using the Platform and may request account closure in accordance with our Terms & Conditions.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ph8.com, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Data Privacy Request — [Your Full Name]
• Response Time: Within 30 days of receipt of a verified request
• Live Support: Available 24/7 via the ph8.com Platform chat

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act.