ph599 Privacy Policy

1 Who We Are

1.1 ph599 is an online casino and sports betting platform operated under license from the Philippine Amusement and Gaming Corporation (PAGCOR). For the purposes of the Data Privacy Act of 2012, ph599 is the data controller responsible for the personal information you provide when using the Platform.

1.2 ph599 is committed to protecting the privacy of all Filipino players and complies with all applicable Philippine data protection laws, including the Data Privacy Act of 2012 (RA 10173) and its implementing rules and regulations issued by the National Privacy Commission (NPC).

1.3 This Privacy Policy should be read in conjunction with the ph599 Terms and Conditions, which govern your use of the Platform. Where there is any conflict between this Privacy Policy and the Terms and Conditions, the Terms and Conditions shall prevail.

2 Information We Collect

2.1 ph599 collects several categories of personal information from Filipino players during registration, account operation, and gameplay. The information collected is necessary to operate a licensed gaming platform in compliance with PAGCOR regulations and Philippine anti-money laundering laws.

2.2 Information You Provide Directly

When you register a ph599 account, you provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued Philippine identification documents (passport, SSS ID, UMID, driver's license, PhilSys national ID, or other valid ID).
• Contact Information: Philippine residential address, email address, and Philippine mobile phone number.
• Account Credentials: Username and password (passwords are hashed and not stored in plain text).
• Financial Information: GCash account details, PayMaya account details, bank account information, or credit/debit card details used for deposits and withdrawals.
• Verification Documents: Copies of government-issued identification, proof of address, and where applicable, source-of-funds documentation required under anti-money laundering regulations.

2.3 Information Collected Automatically

When you access and use the ph599 Platform, we automatically collect:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bet amounts, win/loss records, session duration, and clickstream data.
• Location Data: General geographic location derived from your IP address to verify you are accessing the Platform from within the Philippines as required by PAGCOR licensing conditions.
• Transaction Data: Deposit and withdrawal amounts, timestamps, payment methods used, and transaction identifiers.

2.4 Information from Third Parties

ph599 may receive information about you from third-party sources including:

• Payment Processors: GCash, PayMaya, banks, and card payment processors provide transaction confirmation and fraud detection data.
• Identity Verification Services: Third-party KYC providers may be used to verify the authenticity of submitted identification documents.
• Responsible Gaming Databases: PAGCOR-maintained self-exclusion lists and responsible gaming registries that ph599 is required to check.

3 How We Use Your Information

3.1 ph599 uses your personal information for the following purposes:

4 Legal Basis for Processing

4.1 Under the Data Privacy Act of 2012, ph599 processes your personal information on the following legal bases:

• Contractual Necessity: Processing required to deliver the gaming and payment services you have contracted for by agreeing to the ph599 Terms and Conditions — including account creation, bet processing, and payment handling.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform integrity, and responsible gaming oversight, where ph599's legitimate interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing based on other grounds.

5 Information Sharing and Disclosure

5.1 ph599 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data is shared only in the circumstances described in this section.

5.2 Service Providers

ph599 shares personal information with carefully selected third-party service providers who process data on ph599's behalf under strict contractual data processing agreements. These include:

• Payment processors — GCash, PayMaya, and bank and card payment networks — for transaction processing.
• Identity verification and KYC service providers for document authentication and age verification.
• Game software providers who supply the casino games and sportsbook technology powering the Platform.
• Cloud hosting and data storage providers that host the ph599 Platform infrastructure.
• Customer support platform providers that operate the 24/7 live chat service.
• Fraud detection and cybersecurity providers that protect the Platform and its players.

All service providers are contractually required to protect your personal information to a standard consistent with the Data Privacy Act of 2012 and are prohibited from using your data for any purpose other than delivering their contracted services to ph599.

5.3 Regulatory and Legal Disclosure

ph599 is required to disclose personal information to regulatory and law enforcement authorities in the following circumstances:

• Compliance with PAGCOR reporting requirements for licensed online gaming operators.
• Compliance with the Anti-Money Laundering Council (AMLC) reporting obligations under RA 9160.
• Response to a valid court order, subpoena, or lawful request from a Philippine government authority.
• Investigation of suspected criminal activity, fraud, or money laundering where disclosure is required or permitted by Philippine law.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ph599's business assets, personal information held about players may be transferred to the acquiring entity as part of that transaction. ph599 will provide advance notice to affected players and ensure the receiving entity is bound by data protection obligations consistent with this Privacy Policy.

6 Data Security Measures

6.1 ph599 implements industry-standard technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and ph599 servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by Philippine commercial banks.
• Encryption at Rest: Personal data and financial information stored on ph599 servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised ph599 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Regular Security Audits: ph599 conducts periodic security assessments, penetration tests, and vulnerability scans to identify and remediate potential security weaknesses.
• Two-Factor Authentication: Players may enable two-factor authentication on their ph599 accounts for an additional layer of account security.
• Secure Data Centres: ph599 server infrastructure is hosted in data centres that maintain physical security controls, environmental protections, and redundancy systems.

6.2 While ph599 implements robust security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ph599 will notify the National Privacy Commission (NPC) and affected players in accordance with the Data Privacy Act's breach notification requirements.

7 International Data Transfers

7.1 ph599 primarily processes personal data within the Philippines. Where data is processed outside the Philippines — for example, by game software providers or cloud infrastructure partners located in other countries — ph599 ensures that appropriate safeguards are in place to protect your personal information to a standard equivalent to the Data Privacy Act of 2012.

7.2 Such safeguards include contractual data processing agreements with standard contractual clauses that require overseas processors to maintain data protection standards consistent with Philippine law.

7.3 ph599 does not transfer personal data of Filipino players to countries that do not provide an adequate level of data protection without implementing appropriate contractual or technical safeguards.

8 Data Retention

8.1 ph599 retains personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ph599's data destruction procedures.

9 Your Privacy Rights

9.1 Under the Data Privacy Act of 2012, Filipino players have the following rights regarding their personal information held by ph599:

• Right to Be Informed: The right to know what personal information ph599 holds about you and how it is being used — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal information ph599 holds about you, including your account data, transaction history, and game records.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal information ph599 holds about you. You can update many details directly through your account dashboard.
• Right to Erasure: The right to request deletion of your personal information, subject to ph599's legal obligations to retain certain data under PAGCOR and AMLA requirements, which take precedence over erasure requests for the applicable retention periods.
• Right to Object: The right to object to the processing of your personal information for direct marketing purposes at any time. You may also object to processing based on legitimate interests grounds.
• Right to Data Portability: The right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph599 has processed your personal information in violation of the Data Privacy Act.

9.2 To exercise any of the rights listed above, please contact ph599's Data Protection Officer at the contact details provided in Section 14. ph599 will respond to all privacy rights requests within thirty (30) days as required by the Data Privacy Act.

9.3 ph599 may need to verify your identity before processing a privacy rights request to ensure the request is made by or on behalf of the registered account holder.

10 Cookies and Tracking Technologies

10.1 ph599 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and deliver a consistent player experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function — including session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Collect anonymised data about how players use the Platform — pages visited, session length, error reports — to help ph599 improve performance. This data does not identify individual players.
• Functionality Cookies: Remember your preferences such as language settings, stake preferences, and game lobby filters to personalise your ph599 experience.
• Responsible Gaming Cookies: Track session duration and display time-reminder notifications consistent with your responsible gaming settings.

10.2 Non-essential cookies require your consent, which is requested when you first access the Platform. You may withdraw consent for non-essential cookies at any time through your browser settings or the cookie preferences panel on the Platform. Withdrawing consent for non-essential cookies will not affect your ability to access or use the ph599 Platform.

11 Marketing Communications

11.1 With your consent, ph599 may send you promotional communications about bonuses, new games, tournaments, and special offers via email, SMS, or push notification. ph599 may personalise these communications based on your gaming activity and preferences.

11.2 You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email.
• Updating your communication preferences in your ph599 account dashboard under Settings.
• Contacting the ph599 support team via 24/7 live chat.

11.3 Opting out of marketing communications does not affect transactional communications — ph599 will continue to send you account notifications, security alerts, KYC requests, and service updates that are necessary for the operation of your account.

12 Children's Privacy and Age Restriction

12.1 The ph599 Platform is strictly for adults aged 21 years and above in accordance with PAGCOR regulations governing casino-style gaming in the Philippines. ph599 does not knowingly collect or process personal information from individuals under 21 years of age.

12.2 Age verification is performed as part of the registration and KYC process. Any account found to be held by an individual under 21 will be immediately suspended, the account balance will be returned to source, and all associated personal data will be securely deleted.

12.3 If you believe that ph599 has inadvertently collected personal information from an individual under 21 years of age, please contact the Data Protection Officer immediately using the contact details in Section 14, and ph599 will take prompt action to delete the relevant information.

13 Changes to This Privacy Policy

13.1 ph599 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The most current version will always be accessible on this page, with the effective date updated accordingly.

13.2 For material changes — particularly changes that affect your rights or how ph599 uses your personal information — ph599 will provide at least thirty (30) days' advance notice via the email address registered to your account before the revised Policy takes effect.

13.3 Your continued use of the ph599 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the ph599 Terms and Conditions.

14 Contact and Complaints

14.1 ph599 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. To exercise your privacy rights, raise a data protection concern, or submit a formal privacy complaint, please contact:

14.2 If you are not satisfied with ph599's response to your privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC), the Philippine government body responsible for enforcing the Data Privacy Act of 2012. The NPC accepts complaints from Filipino data subjects via its official channels.

14.3 ph599 takes all privacy complaints seriously and will investigate every complaint received in good faith, providing a written response within the statutory timeframe required by Philippine law.