Privacy Policy

1. About This Privacy Policy

1.1  This Privacy Policy ("Policy") describes how ph787 ("ph787," "we," "us," "our") collects, uses, stores, shares, and protects personal information provided by users ("you," "Player") of the ph787 website and platform, accessible at ph787.cam.

1.2  ph787 is committed to protecting the privacy and security of all Players in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines.

1.3  This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of your agreement with ph787.

1.4  By accessing or using the ph787 Platform, you consent to the collection and use of your personal data as described in this Policy. If you do not agree with this Policy, you must stop using the Platform immediately and may request account closure via our support team.

2. Personal Data We Collect

2.1  ph787 collects personal data in the following categories:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (for mandatory 21+ age verification)
• Email address
• Mobile phone number
• Residential address (including city, province, and postal code in the Philippines)
• Government-issued identification document type and number (e.g., Philippine National ID, passport, UMID, driver's license)
• Scanned copies or photographs of identity documents submitted during KYC verification

2.2 Financial & Transaction Data

• GCash account number or registered mobile number
• Maya (PayMaya) account details
• Bank account number and bank name (BPI, BDO, Metrobank, or other Philippine banks)
• Debit/credit card details (card number is tokenised; ph787 does not store full card numbers)
• Deposit and withdrawal history, including transaction amounts in PHP (₱) and timestamps
• Bonus and promotional credit history

2.3 Gaming Activity Data

• Game play history (games accessed, wager amounts, win/loss outcomes, session duration)
• Betting patterns and account balance changes over time
• Responsible gaming settings and any self-imposed limits or self-exclusion periods

2.4 Technical & Device Data

• IP address and approximate geolocation at time of login
• Device type, operating system, and browser version
• Session cookies and persistent cookies (see Section 5)
• Log files including login timestamps and platform interactions

2.5 Communications Data

• Records of support conversations (live chat transcripts, email correspondence)
• Survey responses and feedback submissions
• Any documents or information you voluntarily provide to our support team

3. How We Use Your Personal Data

3.1  ph787 processes your personal data only for the specific, legitimate purposes described below:

4. Legal Bases for Processing

4.1  Under the Data Privacy Act of 2012 (RA 10173), ph787 processes personal data under one or more of the following lawful bases:

• Consent: Where you have given clear, explicit consent to a specific processing activity (e.g., receiving marketing emails or SMS promotions). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Contractual Necessity: Where processing is required to perform the contract between you and ph787 — i.e., to operate your account and provide gaming services.
• Legal Obligation: Where ph787 is required to process data to comply with Philippine law, including PAGCOR regulations, anti-money laundering (AMLA) requirements, and the Data Privacy Act itself.
• Legitimate Interests: Where processing is necessary for ph787's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.

5. Cookies & Tracking Technologies

5.1  ph787 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us remember your preferences and analyse how the Platform is used.

5.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function — these include session authentication cookies and security tokens. These cannot be disabled.
• Performance Cookies: Collect anonymised data on how Players use the Platform (pages visited, error messages encountered) to help us improve functionality.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Marketing Cookies: Used (with your consent) to deliver relevant promotional content. These are only set if you have opted in to marketing communications.

5.3  You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

6. Sharing Your Personal Data

6.1  ph787 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with the following categories of recipients only to the extent necessary and only for the purposes described in this Policy:

• PAGCOR and Philippine Government Authorities: ph787 is legally obligated to report certain transaction data and player information to PAGCOR and, where required, to law enforcement authorities under the Anti-Money Laundering Act (AMLA).
• Payment Service Providers: GCash (G-Xchange, Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, Visa, and Mastercard — solely to process transactions on your behalf.
• KYC and Identity Verification Partners: Third-party identity verification service providers who assist in verifying government-issued ID documents during the KYC process. These partners are bound by strict data processing agreements.
• Game Content Providers: Licensed game studios (such as JILI, Evolution, Pragmatic Play) receive anonymised player session identifiers necessary to operate game software. They do not receive your full identity data.
• IT Infrastructure and Cloud Service Providers: Hosting, database, and security service providers who process data on our behalf under strict contractual obligations and are prohibited from using your data for their own purposes.
• Legal and Regulatory Advisors: Law firms, auditors, or other professional advisors where required to protect ph787's legal rights or comply with regulatory requirements.

6.2  All third parties who handle your personal data on our behalf are required to implement appropriate technical and organisational security measures and to process your data only in accordance with our instructions.

7. Data Retention

7.1  ph787 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law.

7.2  The following general retention periods apply:

• Account and KYC data: Retained for a minimum of 5 years from the date of account closure, as required by AMLA regulations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for 3 years from the date of account closure for regulatory audit purposes.
• Marketing consent records: Retained for as long as your account is active and for 2 years after account closure.
• Support communications: Retained for 2 years from the date of the last interaction.
• Technical logs: Retained for 12 months on a rolling basis.

7.3  After the applicable retention period expires, personal data is securely deleted or anonymised so it can no longer be associated with any individual.

8. Data Security

8.1  ph787 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph787 Platform;
• At-rest encryption for sensitive stored data including financial records and KYC documents;
• Tokenisation of payment card data — full card numbers are never stored on ph787 systems;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing by qualified third-party security professionals;
• Two-factor authentication (2FA) available for all Player accounts and mandatory for all administrative access.

8.2  In the event of a data breach that is likely to result in a risk to your rights and freedoms, ph787 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will inform affected players without undue delay where required by law.

9. Exercising Your Data Rights

9.1  Under the Data Privacy Act of 2012, you have the right to access, correct, erase, object to, and port your personal data as described in the feature cards above. To exercise any of these rights, contact our Data Protection Officer (DPO) at the details provided in Section 15.

9.2  We will verify your identity before processing any data rights request to protect against fraudulent requests. We aim to respond to all rights requests within 15 business days. Where a request is complex or involves a large volume of data, we may extend this period by up to 30 additional days with prior written notice.

9.3  There is no fee for exercising your data rights. If a request is manifestly unfounded or excessive (for example, repetitive requests), ph787 may charge a reasonable administrative fee or decline to act on the request, with written reasons provided.

9.4  If you are not satisfied with our response to your request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10. Children and Minors

10.1  The ph787 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under 21 years of age.

10.2  If ph787 discovers or has reason to believe that an account is held by a person under the age of 21, that account will be immediately suspended, any winnings will be voided, and the deposited funds will be returned to the original payment source after completion of applicable verification procedures.

10.3  If you believe that a minor may have registered on ph787, please contact our support team immediately so that we can investigate and take appropriate action.

11. International Data Transfers

11.1  Some of ph787's service providers and game content partners are located outside the Philippines. Where personal data is transferred to countries that may not offer the same level of data protection as the Philippines, ph787 ensures that appropriate safeguards are in place, including contractual data processing agreements that meet or exceed the standards required by the Data Privacy Act of 2012 and NPC regulations.

11.2  ph787 will not transfer your personal data to any third country or international organisation unless adequate protections are confirmed in advance.

12. Third-Party Links & Integrations

12.1  The ph787 Platform may contain references to or integrations with third-party services (for example, payment gateways and game providers). These third parties operate under their own independent privacy policies, which ph787 does not control.

12.2  ph787 is not responsible for the privacy practices of any third-party services you may interact with in the course of using our Platform. We recommend reviewing the privacy policies of any third-party services you use.

13. Marketing Communications & Preferences

13.1  ph787 may send you promotional emails, SMS, or in-platform notifications about bonuses, new games, and special offers — but only if you have given us your consent to do so at the time of registration or through your account settings.

13.2  You can withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link in any promotional email;
• Updating your communication preferences in your ph787 account settings;
• Contacting our support team directly and requesting to opt out.

13.3  Please note that withdrawing marketing consent does not affect transactional communications — you will still receive essential emails related to your account, security alerts, and withdrawal confirmations regardless of your marketing preferences.

14. Changes to This Privacy Policy

14.1  ph787 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements.

14.2  Material changes to this Policy will be communicated via email to your registered address and/or via a prominent notice on the ph787 Platform at least 7 days before the changes take effect.

14.3  The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the Platform after any update constitutes your acceptance of the revised Policy.

15. Contact Us & Data Protection Officer

15.1  ph787 has appointed a Data Protection Officer (DPO) in accordance with the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our DPO:

• Data Protection Officer — ph787
• Email: [email protected] (subject line: "Privacy / Data Request")
• Live Chat: Available 24/7 through the ph787 Platform — reference "Privacy Request" when initiating the chat
• Response Time: DPO requests are acknowledged within 3 business days and resolved within 15 business days

15.2  If you are not satisfied with our response, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph (please note: this is for reference; we are not linking to external sites per our policy).