ph578 Privacy Policy

ph578 is the data controller responsible for the personal data processed through the ph578 Platform. ph578 operates as an online gaming service targeting Filipino players within the Philippines, offering bingo, slot machines, live casino games, sports events wagering, and related services.

ph578 operates within a PAGCOR-compliant framework. As a gaming operator subject to Philippine regulatory oversight, ph578 is also required to comply with applicable provisions of the Anti-Money Laundering Act (AMLA), its implementing rules, and the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission of the Philippines ("NPC").

For all data privacy matters, you may contact ph578's designated Data Protection Officer (DPO) at [email protected], with the subject line "Data Privacy — [Your Full Name]."

This Policy applies to all personal data that ph578 collects and processes in connection with:

• Registration and management of ph578 player accounts;
• Deposits, withdrawals, and all financial transactions conducted through the Platform;
• Participation in any game, promotion, or loyalty program offered by ph578;
• Interactions with ph578's customer support channels, including live chat and email;
• Visits to and browsing of the ph578 website, including data collected automatically through cookies and tracking technologies;
• Any other communication between you and ph578, whether initiated by you or by ph578 for service, compliance, or marketing purposes.

This Policy does not apply to third-party websites, payment providers (such as GCash, Maya, BPI, or BDO), or game providers whose services are accessible through or linked from the ph578 Platform. Those parties operate under their own separate privacy policies, which ph578 encourages you to review independently.

ph578 collects personal data through three primary channels: data you provide directly, data collected automatically during your use of the Platform, and data received from third parties. The categories of data collected include:

3.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, gender, and copies of government-issued identification documents submitted during Know Your Customer (KYC) verification;
• Contact Data: Philippine mobile number, email address (where provided), and residential address;
• Account Credentials: Username and encrypted password (ph578 does not store passwords in plaintext);
• Financial Data: GCash account number, Maya account number, bank account details, and transaction records associated with deposits and withdrawals;
• Communications Data: Content of messages sent to ph578 support, including live chat transcripts and email correspondence;
• Responsible Gaming Data: Deposit limits, self-exclusion elections, session preferences, and any other responsible gaming settings you configure in your account.

3.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, device type, operating system, screen resolution, and device identifiers;
• Usage Data: Pages visited, features used, games played, session duration, click-through patterns, and login timestamps;
• Transaction Data: Records of all bets placed, game outcomes, bonus usage, and account balance movements;
• Cookie Data: As described in Section 7 of this Policy.

3.3 Data from Third Parties

• Identity verification results from KYC service providers;
• Transaction confirmation data from payment processors (GCash, Maya, banks);
• Fraud screening flags from anti-fraud and anti-money laundering service providers;
• Publicly available information from regulatory or government databases, where required for compliance purposes.

ph578 uses the personal data it collects for the purposes described below. ph578 will not use your data for purposes incompatible with those stated without first obtaining your consent or establishing an alternative lawful basis.

Under the Data Privacy Act of 2012 and its IRR, ph578 processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary for the performance of ph578's contract with you — including account management, game access, and payment processing — or to take steps at your request prior to entering into that contract;
• Legal Obligation: Processing is required for ph578 to comply with applicable Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, tax reporting obligations, and court orders;
• Legitimate Interests: Processing is necessary for ph578's legitimate interests — such as fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided those interests are not overridden by your rights and interests;
• Consent: For direct marketing communications and non-essential cookies, ph578 processes your data on the basis of your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

ph578 does not sell, rent, or trade your personal data to unaffiliated third parties for commercial marketing purposes. ph578 may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and 7-Eleven payment systems, to the extent required to process your deposits and withdrawals;
• KYC and Identity Verification Providers: Third-party services engaged to verify your identity and age in compliance with PAGCOR and AMLA requirements;
• Game Software Providers: Game studios and providers whose games appear on the ph578 Platform, to the extent that technical integration requires the transmission of session data for game initialization and result recording;
• Fraud and AML Screening Services: Specialist providers used to screen transactions and account activity for indicators of fraud or money laundering;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law;
• Legal and Professional Advisors: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations;
• Business Successors: In the event of a merger, acquisition, or business transfer, your data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

ph578 uses cookies and similar tracking technologies on the ph578 Platform. Cookies are small text files placed on your device by your browser when you visit ph578.org. They serve the following functions:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymized or pseudonymized data about how players interact with the Platform — which pages are visited most, how long sessions last, and where technical errors occur. This data helps ph578 improve the Platform experience.
• Functional Cookies: Used to remember your preferences, such as language settings and display configurations, so you don't have to re-enter them on each visit.
• Marketing Cookies (Consent Required): Used to tailor promotional content and game recommendations to your usage patterns. These cookies are only placed with your prior consent and may be withdrawn at any time through your browser settings or the ph578 cookie preference panel.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from using the Platform. Disabling other cookie categories will not prevent Platform access but may affect personalization features.

ph578 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your active relationship with ph578, plus a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of collection or from the date of the last transaction, whichever is later;
• Transaction Records: Retained for a minimum of five (5) years from the transaction date, for regulatory and audit purposes;
• Customer Support Communications: Retained for three (3) years from the date of the last communication, unless required longer for ongoing dispute resolution or legal proceedings;
• Marketing Consent Records: Retained for the duration of the consent, plus three (3) years following withdrawal, to evidence compliance;
• Anonymized Analytics Data: May be retained indefinitely, as it no longer constitutes personal data once anonymized.

After the applicable retention period expires, ph578 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

ph578 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the ph578 Platform;
• Encryption of sensitive data fields — including passwords and financial account details — at rest using industry-standard algorithms;
• Access controls limiting personal data access to authorized personnel on a strict need-to-know basis, with role-based permission management;
• Multi-factor authentication for internal administrative systems;
• Regular security vulnerability assessments and penetration testing;
• Logging and monitoring of access to sensitive data systems;
• Employee data privacy training and confidentiality obligations.

While ph578 takes all reasonable security precautions, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for logging out of your account on shared devices.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ph578:

To exercise any of the above rights, submit a written request to ph578's Data Protection Officer at [email protected] with the subject line "Data Subject Request — [Your Full Name] — [Right Being Exercised]." ph578 will respond to verified requests within thirty (30) days of receipt. Identity verification may be required before processing your request.

If you believe ph578 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. ph578 encourages data subjects to first contact ph578 directly to resolve concerns before escalating to the NPC.

Some of ph578's service providers — including game studios, cloud infrastructure providers, and KYC vendors — may be located outside the Philippines. When ph578 transfers personal data to recipients in other countries, it does so only:

• To countries deemed to provide an adequate level of data protection under NPC guidance;
• Subject to contractual data processing agreements that impose data protection obligations on the recipient equivalent to those required under Philippine law;
• Where the transfer is necessary for the performance of the contract between ph578 and the data subject.

ph578 does not transfer your personal data to jurisdictions where adequate protections cannot be ensured. For further information about cross-border transfers applicable to your account, contact ph578's DPO at the address in Section 15.

If you are a parent or guardian and believe that a person under the age of 21 has provided personal data to ph578 without your knowledge, please contact ph578 immediately at [email protected]. ph578 will take prompt action to investigate and, where confirmed, to delete the relevant data and close any associated account.

ph578 may send you promotional communications about new games, bonuses, tournaments, and platform updates. Such communications are sent only where you have provided consent or where ph578 has a legitimate interest in informing existing players about relevant offers.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your ph578 account settings;
• Following the unsubscribe link included in any ph578 marketing email;
• Contacting ph578 support at [email protected] with a request to stop marketing communications.

Opting out of marketing communications will not affect transactional or service-related messages, which ph578 must send to maintain your account and comply with regulatory obligations — such as notifications of account activity, KYC requests, policy updates, and responsible gaming alerts.

ph578 may update this Privacy Policy from time to time to reflect changes in its data processing practices, operational requirements, or applicable law. The Effective Date at the top of this document will be updated whenever material changes are made.

For material changes — meaning changes that significantly affect your rights or the way ph578 handles your personal data — ph578 will notify registered players at least fourteen (14) days before the changes take effect, via the mobile number or contact details associated with your account, or through a prominent notice on the ph578 website.

Your continued use of the ph578 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with the revised Policy, you should stop using the Platform and may request account closure by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or ph578's data processing practices, please contact ph578's designated Data Protection Officer using the details below:

ph578 will acknowledge privacy-related requests within three (3) business days and provide a substantive response within thirty (30) days, which may be extended by a further thirty (30) days where the request is complex, subject to notification of the extension.

If you remain dissatisfied with ph578's handling of your privacy concern after exhausting ph578's internal process, you have the right to file a complaint with the National Privacy Commission of the Philippines.