ph87 Privacy Policy

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, ph87, operating the platform accessible at https://ph87.vip, is the personal information controller responsible for the personal data collected from players and visitors through the ph87 website and services.

As data controller, ph87 determines the purposes and means of processing personal data collected through the ph87 platform. Where ph87 engages third-party service providers to process personal data on its behalf, those parties act as personal information processors under written agreements that impose data protection obligations consistent with applicable Philippine law.

All data-related enquiries, access requests, and complaints may be directed to ph87's designated Data Privacy Officer at the contact details provided in Section 15 of this Policy.

ph87 collects the following categories of personal data, depending on how you interact with the platform:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 21+ age requirement);
• Philippine mobile number;
• Email address;
• Username chosen during registration;
• Encrypted password (ph87 does not store passwords in plain text).

2.2 Identity Verification (KYC) Data

• Copy of a valid Philippine government-issued identification document (e.g., PhilSys National ID, passport, driver's licence, SSS/GSIS card, PRC card, voter's ID);
• Proof of address document where required;
• Selfie or facial biometric image submitted during identity verification;
• Any supplementary documents requested to comply with anti-money laundering obligations.

2.3 Financial and Transaction Data

• GCash or PayMaya mobile number associated with transactions;
• Bank account details provided for BPI, BDO, or Metrobank transfers;
• Visa/Mastercard details (card number, expiry; CVV is never stored);
• Deposit and withdrawal history, amounts, timestamps, and payment method used;
• Transaction reference numbers issued by payment processors.

2.4 Gameplay and Platform Activity Data

• Game session records including games played, stakes placed, outcomes, and session durations;
• Wallet balance history and bonus account activity;
• Login timestamps, session durations, and logout events;
• Customer support interactions including chat transcripts and email correspondence;
• Responses to surveys or feedback forms, where voluntarily completed.

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Device identifiers and fingerprint data used for fraud prevention;
• Cookies and similar tracking technologies as described in Section 6.

ph87 collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact support, or participate in a promotion;
• Automatically — through cookies, server logs, and device fingerprinting technologies as you navigate and interact with the ph87 platform;
• From third-party payment providers — GCash, PayMaya, BPI, BDO, Metrobank, and Visa/Mastercard may share transaction data with ph87 for payment verification and fraud prevention purposes;
• From identity verification service providers — where ph87 engages third-party KYC platforms to assist in verifying the identity documents and facial biometrics you submit;
• From fraud prevention and anti-money laundering partners — where third-party screening tools are used to meet ph87's regulatory compliance obligations.

ph87 processes your personal data for the following purposes. The table below maps each purpose to the category of data involved:

Under the Data Privacy Act of 2012, ph87 relies on the following lawful bases when processing your personal data:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a ph87 account holder — including account management, game delivery, and payment processing;
• Legal obligation: Processing required to comply with applicable Philippine law, including KYC, anti-money laundering reporting, age verification, and data retention mandates;
• Legitimate interests: Processing necessary for ph87's legitimate operational interests where those interests are not overridden by your privacy rights — such as fraud detection, security monitoring, and platform analytics;
• Consent: Where ph87 relies on your consent as the lawful basis — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, update your communication preferences in your ph87 Account settings.

ph87 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies ph87 uses are as follows:

• Strictly Necessary Cookies: Essential for platform functionality, including session authentication, load balancing, and security. These cannot be disabled as the platform cannot function without them;
• Performance Cookies: Used to collect anonymous data about how players interact with ph87 — page load times, error rates, and session flow — to help us identify and fix performance issues;
• Functional Cookies: Retain your preferences, such as language settings, lobby configuration, and "Remember Me" login state, to reduce repetitive inputs;
• Analytics Cookies: Enable ph87 to analyse aggregated usage patterns to inform product decisions. Where possible, analytics data is anonymised before processing;
• Security and Fraud Prevention Cookies: Support ph87's ability to detect suspicious activity, multi-accounting attempts, and unauthorised access patterns.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies may affect some platform features but will not prevent you from accessing core ph87 services.

ph87 does not sell your personal data to any third party. ph87 shares personal data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard receive the financial data necessary to process your deposits and withdrawals. These parties operate under their own privacy policies and applicable payment industry regulations;
• KYC and identity verification providers: Third-party verification platforms receive identity documents and biometric data you submit to process your KYC application on ph87's behalf. These processors are contractually bound to handle your data in compliance with RA 10173;
• Fraud detection and AML screening services: Transaction data and account activity may be processed by third-party compliance tools to meet ph87's obligations under the Anti-Money Laundering Act of the Philippines (RA 9160, as amended);
• Game providers: Game providers (such as JILI, PG Soft, Pragmatic Play) may receive session data necessary to deliver their games. This data is limited to what is technically required and does not include full KYC or payment data;
• Legal and regulatory authorities: ph87 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts where required by applicable Philippine law or a valid legal order;
• Professional advisers: Lawyers, auditors, and accountants who provide professional services to ph87, under obligations of confidentiality.

Some of ph87's third-party service providers — particularly game providers, fraud prevention platforms, and cloud infrastructure providers — may be located outside the Republic of the Philippines. Where personal data is transferred to processors in other jurisdictions, ph87 ensures that adequate safeguards are in place, including:

• Contractual clauses requiring the recipient to protect personal data to a standard at least equivalent to that required under RA 10173;
• Technical security measures including encryption and access controls applied consistently regardless of where data is processed;
• Limiting cross-border transfers to jurisdictions and processors that ph87 has assessed as providing an adequate level of data protection.

By registering an Account and using ph87, you acknowledge that your personal data may be processed by service providers located outside the Philippines subject to the safeguards described above.

ph87 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable Philippine law. The following general retention guidelines apply:

• Account and KYC data: Retained for the duration of your Account relationship with ph87, plus a minimum of five (5) years following Account closure, as required for anti-money laundering compliance under RA 9160 (as amended) and related regulations;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of transaction, consistent with AMLA requirements and relevant tax regulations;
• Gameplay session data: Retained for up to two (2) years from the date of the session, unless a longer period is needed for dispute resolution or regulatory purposes;
• Marketing preferences and consent records: Retained until you withdraw consent, plus a reasonable period thereafter to evidence the withdrawal;
• Support interaction records: Retained for up to three (3) years from the date of last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

ph87 implements a layered approach to data security, combining technical, administrative, and physical safeguards appropriate to the nature and sensitivity of the data we hold:

• Encryption in transit: All data transmitted between your device and ph87 servers is protected by 256-bit Transport Layer Security (TLS/SSL) encryption;
• Encryption at rest: Sensitive personal data, including identity documents and payment information, is encrypted at rest using industry-standard algorithms;
• Access controls: Internal access to player personal data is strictly role-based. ph87 staff access only the data necessary for their specific function, and all access is logged and subject to regular audit;
• Password security: Passwords are hashed and salted using a secure cryptographic algorithm. ph87 never stores passwords in plain text, and customer support staff cannot retrieve your password — only reset it;
• Intrusion detection and monitoring: ph87's infrastructure is monitored 24/7 for anomalous activity, intrusion attempts, and security incidents;
• Penetration testing: ph87 conducts periodic security testing by qualified third-party security professionals to identify and remediate vulnerabilities.

Despite these measures, no system of security is completely infallible. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, ph87 will notify the National Privacy Commission and affected players in accordance with the requirements of RA 10173 and its implementing rules.

Under the Data Privacy Act of 2012, you have the following rights in respect of the personal data ph87 holds about you. ph87 will respond to all valid requests within thirty (30) calendar days of receipt, unless an extension is justified and communicated to you.

To exercise any of the above rights, contact ph87's Data Privacy Officer at the details provided in Section 15. ph87 may require you to verify your identity before processing a data subject rights request.

ph87 does not knowingly collect personal data from individuals under 21 years of age. Registration is strictly limited to persons aged 21 and above in compliance with applicable Philippine gaming regulations. ph87's KYC process is specifically designed to verify age at the point of registration.

If ph87 discovers or has reasonable grounds to believe that an Account belongs to a person under 21, the Account will be immediately suspended, access to the platform will be terminated, and any personal data associated with that Account will be handled in accordance with applicable law regarding data collected without valid consent. Any funds held in the Account at the time of suspension will be processed in accordance with ph87's Terms & Conditions.

If you are a parent or guardian and believe your child has provided personal data to ph87 without your knowledge, please contact ph87's support team immediately at the details in Section 15.

The ph87 platform may contain links to third-party websites or services — for example, links to game provider support pages or payment processor help centres. This Privacy Policy applies solely to ph87 and does not extend to any third-party websites or services that may be accessible through links on the ph87 platform.

ph87 has no control over, and accepts no responsibility for, the privacy practices or content of any third-party websites. You should review the privacy policies of any third-party platforms before providing them with personal data.

ph87 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Where amendments are material — meaning they significantly affect how your personal data is used or your rights in relation to it — ph87 will notify you by in-platform notification or by email to your registered address prior to the change taking effect.

The "Last Updated" date at the top of this page indicates the date on which this Privacy Policy was most recently revised. Continued use of ph87 after any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the changes, you should close your Account and cease using ph87 before the revised Policy takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or ph87's handling of your personal data — including data subject rights requests — please contact ph87's Data Privacy Officer through the following channels:

• Live Chat: Available 24/7 through the ph87 platform at ph87.vip
• Email: [email protected] (please include "Privacy Request" in your subject line)

ph87 aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within thirty (30) calendar days, or to communicate where additional time is required due to the complexity of the request.

If you are not satisfied with ph87's response to a privacy complaint, or if you believe ph87 is processing your personal data in breach of the Data Privacy Act of 2012, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available on the NPC's official website.