ph49 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ph49 ("ph49," "we," "us," or "our") collects, processes, stores, and protects the personal information of individuals ("you," "your," or "Data Subject") who access or use the ph49 online casino and sports betting platform at https://ph49.org and any related services (collectively, the "Platform").

ph49 is committed to protecting your privacy and handling your personal data with transparency and integrity. This Policy is drafted in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines ("NPC").

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Where any inconsistency arises between this Policy and the Terms & Conditions, this Policy shall govern with respect to personal data matters.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, ph49 acts as the Personal Information Controller ("PIC") with respect to the personal data processed through the Platform. ph49 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing complies with applicable data protection laws.

ph49 has designated a Data Protection Officer ("DPO") responsible for overseeing data protection compliance. Queries and requests relating to personal data may be directed to the DPO via the contact details set out in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Identity and Contact Information

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 21+ age requirement);
• Philippine mobile number and/or email address;
• Residential address in the Philippines;
• Government-issued ID numbers (e.g., SSS, UMID, passport, driver's licence) collected as part of Know Your Customer ("KYC") verification.

3.2 Financial Information

• GCash mobile wallet number or PayMaya account details;
• Bank account details (BPI, BDO, Metrobank) or card details (Visa/Mastercard) used for deposits and withdrawals;
• Transaction history, deposit amounts, withdrawal requests, and account balance records.

3.3 Technical and Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Login timestamps and session duration;
• Game play history, bet records, and wagering patterns;
• Platform navigation behaviour and feature usage logs.

3.4 Communications Data

• Records of your communications with ph49 customer support, including live chat transcripts and email correspondence;
• Preferences and feedback you provide to ph49.

4. How We Collect Your Personal Data

ph49 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact support, or interact with platform features;
• Automatically — through cookies, server logs, and similar technologies when you access and use the Platform (see Section 10);
• From third parties — including payment processors (GCash, PayMaya, banks), identity verification service providers, and fraud prevention partners, where necessary to operate the Platform and comply with legal obligations.

5. How We Use Your Personal Data

ph49 processes your personal data for the following purposes:

• Account management — to create, verify, maintain, and administer your ph49 account;
• Identity and age verification — to comply with the 21+ age requirement and PAGCOR KYC obligations;
• Payment processing — to process deposits, withdrawals, and refunds in Philippine Peso via your chosen payment method;
• Anti-money laundering (AML) compliance — to monitor transactions, detect suspicious activity, and report to the Anti-Money Laundering Council ("AMLC") where legally required;
• Platform operations — to deliver games and services, personalise your experience, and maintain technical functionality;
• Customer support — to respond to your inquiries and resolve disputes;
• Responsible gaming — to monitor betting patterns and facilitate the use of deposit limits, session alerts, and self-exclusion tools;
• Marketing communications — to send you promotional offers and updates, where you have consented to receive such communications. You may opt out at any time;
• Security and fraud prevention — to detect, investigate, and prevent unauthorised access, fraud, and other prohibited conduct;
• Legal and regulatory compliance — to comply with applicable Philippine laws, PAGCOR requirements, and court orders.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ph49 processes your personal data on the following lawful bases:

• Contract performance — processing necessary to perform our obligations under the ph49 Terms & Conditions, including account administration and payment processing;
• Legal obligation — processing required to comply with applicable laws, including PAGCOR regulations, AML obligations under RA 9160 (as amended), and tax reporting requirements;
• Legitimate interests — processing for fraud prevention, platform security, and improvement of ph49 services, where such interests are not overridden by your rights;
• Consent — processing for marketing communications, where your prior consent has been obtained. You may withdraw consent at any time by contacting ph49 support.

7. Disclosure and Sharing of Personal Data

ph49 does not sell, rent, or trade your personal information to third parties. ph49 may share your personal data with the following categories of recipients where necessary:

• Payment service providers — GCash, PayMaya, BPI, BDO, Metrobank, and card networks, to process transactions;
• Identity verification providers — third-party KYC and AML screening services engaged by ph49;
• Technology and hosting providers — cloud infrastructure, data centre, and software providers operating under binding data processing agreements;
• Regulatory and law enforcement authorities — PAGCOR, AMLC, the NPC, and other competent Philippine government agencies, where disclosure is required by law or court order;
• Professional advisers — legal, audit, and compliance advisers, under obligations of confidentiality.

8. Data Retention

ph49 retains your personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by applicable law. Specific retention periods are as follows:

• Account and KYC records — retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR and AML regulatory requirements;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction, as required by RA 9160 (Anti-Money Laundering Act);
• Customer support communications — retained for three (3) years from the date of the communication;
• Marketing preferences — retained until you withdraw your consent or request deletion, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

ph49 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph49 servers;
• Encryption of sensitive data at rest, including financial information and government ID details;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Multi-factor authentication for internal administrative systems;
• Incident response procedures aligned with NPC breach notification requirements.

While ph49 takes all reasonable precautions, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your ph49 account credentials.

10. Cookies and Tracking Technologies

ph49 uses cookies and similar technologies (including web beacons and session tokens) on the Platform for the following purposes:

• Essential cookies — required for platform functionality, including maintaining your login session and remembering your preferences. These cannot be disabled without affecting platform usability;
• Analytics cookies — used to understand how players navigate and use the Platform, enabling ph49 to improve performance and user experience;
• Security cookies — used to detect and prevent fraudulent activity, including suspicious login attempts.

You may manage cookie preferences through your browser settings. Disabling essential cookies may impair your ability to use certain features of the ph49 Platform.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph49:

• Right to be informed — to know how your personal data is being collected and processed;
• Right of access — to request a copy of the personal data ph49 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking — to request deletion or blocking of personal data where processing is unlawful or no longer necessary, subject to legal retention obligations;
• Right to object — to object to processing for direct marketing purposes or processing based on legitimate interests;
• Right to data portability — to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint — to file a complaint with the National Privacy Commission if you believe your rights have been violated.

To exercise any of the above rights, please contact ph49's Data Protection Officer using the contact details in Section 15. ph49 will respond to verified requests within fifteen (15) working days, as required by the DPA.

12. Children's Privacy and Age Restriction

The ph49 Platform is strictly for individuals aged 21 years or older, in accordance with PAGCOR regulations and applicable Philippine law. ph49 does not knowingly collect personal data from persons under the age of 21. If ph49 becomes aware that personal data has been collected from a person under 21, such data will be deleted and the associated account will be closed immediately. If you believe a person under 21 has registered on ph49, please contact support immediately so that appropriate action can be taken.

13. Cross-Border Data Transfers

ph49 may transfer personal data to service providers located outside the Philippines where necessary to operate the Platform (for example, cloud hosting infrastructure). Any such cross-border transfers are conducted in accordance with Section 21 of the Philippine Data Privacy Act and the NPC's implementing issuances, including the requirement that the recipient country or organisation provides an adequate level of protection for personal data, or that appropriate contractual safeguards are in place.

14. Changes to This Privacy Policy

ph49 reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect, except where immediate changes are required by law or regulatory directive. The date of the most recent revision will be displayed at the top of this Policy. Your continued use of the ph49 Platform after the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you should cease using the Platform and close your account.

15. Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact ph49's Data Protection Officer:

• Live Chat: Available 24/7 via the ph49 website — the fastest way to reach the support team
• Email: [email protected] (subject line: "Data Privacy Request")

You may also lodge a complaint with the National Privacy Commission of the Philippines if you believe ph49 has not adequately addressed your data privacy concern. The NPC can be reached at its offices in Pasay City, Metro Manila.