ph49 Privacy Policy

This Privacy Policy governs the collection and processing of personal information by ph49 in connection with the operation of the ph49 online gaming platform at ph49.vip. ph49 recognizes the importance of data privacy to Filipino players and is committed to collecting only the minimum personal information necessary for the delivery of its gaming services, the fulfilment of legal obligations, and the protection of user security.

By registering an account on ph49 or by continuing to use ph49 Services after the effective date of this policy, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal information as described herein. If you do not agree with this Privacy Policy, you should not create a ph49 account or use ph49 Services.

This Privacy Policy is to be read together with ph49's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, ph49 acts as the Personal Information Controller (PIC) with respect to personal data collected from users of the ph49.vip platform. As PIC, ph49 determines the purposes and means of processing the personal data described in this policy.

ph49 collects personal information across several categories, depending on the nature of your interaction with the platform. The table below provides a structured overview of the categories of data collected, representative examples, and the primary purpose of collection.

ph49 collects personal data through the following means:

• Direct collection at registration: When you create a ph49 account, you provide identity and contact information directly through the registration form.
• Identity verification (KYC): When you submit government-issued identification documents and selfie photographs for KYC verification before processing withdrawals above specified thresholds.
• Payment transactions: When you initiate a deposit or withdrawal via GCash, Maya, BPI, BDO, Metrobank, or 7-Eleven CLiQQ, financial reference data is transmitted to ph49 by the payment provider to confirm transaction completion.
• Platform interaction: Automatically, as you interact with ph49 games, navigate the platform, or contact support. This includes technical and usage data collected through server logs, session management systems, and analytics tools.
• Cookies and similar technologies: Through browser cookies, local storage, and session tokens as described in Section 9.
• Support communications: When you contact ph49 via live chat or email, the content of those communications is retained as Communications Data.
• Third-party sources: ph49 may receive identity verification confirmation results from accredited third-party KYC service providers and fraud-screening tools, consistent with their applicable privacy policies.

ph49 uses the personal data collected for the following specific and lawful purposes:

To create, manage, and maintain your ph49 account; to process deposits and withdrawals; to provide access to games and betting services; and to administer bonuses and loyalty program rewards.

To verify that you meet the minimum age requirement of 21 years; to conduct Know Your Customer (KYC) due diligence as required under applicable Philippine gaming and anti-money laundering (AML) regulations; and to comply with reporting obligations to relevant Philippine regulatory authorities, including but not limited to PAGCOR and the Anti-Money Laundering Council (AMLC).

To protect the ph49 platform and its users from fraudulent activity, unauthorized account access, bonus abuse, and identity fraud. This includes the use of technical data and IP addresses to detect anomalous login patterns and multi-accounting behavior.

To monitor player activity for signs of problem gambling in accordance with ph49's responsible gaming obligations; to enforce player-set deposit limits and self-exclusion requests; and to administer session time monitoring features.

To send account-related notifications including transaction confirmations, security alerts, bonus notifications, and policy update notices. ph49 does not send unsolicited commercial marketing messages without your explicit opt-in consent. You may manage your communication preferences through your Account settings at any time.

To analyze aggregate and anonymized usage data to improve the ph49 platform's performance, game selection, user interface, and responsiveness on Philippine mobile networks.

Under the Data Privacy Act of 2012 (RA 10173), ph49 processes personal information on the following lawful bases:

• Consent: For non-essential data processing activities, including optional marketing communications, where you have provided explicit consent. You may withdraw consent at any time without prejudicing the lawfulness of prior processing.
• Contractual Necessity: For processing required to fulfil ph49's obligations under the Terms & Conditions you agreed to at registration, including account management, payment processing, and game provision.
• Legal Obligation: For processing required to comply with applicable Philippine law, including PAGCOR gaming regulations, AML obligations under RA 9160 as amended, and tax reporting requirements.
• Legitimate Interest: For security monitoring, fraud detection, and responsible gaming activity analysis, where ph49's legitimate interest in protecting users and the platform does not override your fundamental privacy rights.

ph49 does not share your personal data with third parties except in the following limited and specific circumstances:

• Payment Processors: GCash (GXI), Maya Philippines, BancNet, and other payment intermediaries receive the minimum payment-reference data necessary to process your deposit or withdrawal transactions. These entities operate under their own privacy policies and applicable Philippine regulations.
• KYC & Identity Verification Providers: Accredited third-party service providers who perform identity document verification and biometric matching on ph49's behalf, operating under data processing agreements and bound by RA 10173.
• Fraud & AML Screening Tools: Third-party risk management and AML screening platforms that process transaction data on ph49's behalf to detect suspicious activity and ensure compliance with RA 9160 (AMLA) as amended.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or any other Philippine government authority lawfully requiring disclosure of player data in the exercise of their regulatory functions.
• Platform Service Providers: Cloud hosting, server infrastructure, analytics, and customer support technology providers operating under data processing agreements that bind them to confidentiality and the standards of RA 10173.
• Legal Proceedings: Where disclosure is required by a valid Philippine court order, subpoena, or other legally binding instrument.

In all cases where ph49 shares personal data with third-party processors, ph49 contractually requires those parties to process the data only for the specified purpose, maintain appropriate security measures, and comply with RA 10173 and its implementing regulations.

Some of ph49's service providers — including cloud infrastructure and game software providers — may process or store data on servers located outside the Republic of the Philippines. When ph49 transfers personal data to parties in countries that do not provide an equivalent level of data protection to the Philippines, ph49 implements appropriate safeguards including contractual data processing agreements, standard contractual clauses, or equivalent protective mechanisms consistent with National Privacy Commission guidelines.

By using ph49 Services, you consent to the transfer of your personal data to other countries as described in this section, subject to the safeguards outlined above and the protections afforded by RA 10173.

ph49 uses cookies and similar client-side technologies to operate the platform, maintain secure sessions, and understand how users interact with the site. The following categories of cookies are used:

These cookies are essential to the operation of ph49 and cannot be disabled without disrupting core platform functionality. They include session authentication tokens, security cookies that prevent cross-site request forgery (CSRF), and load-balancing cookies. No consent is required for strictly necessary cookies under applicable law.

These cookies remember your preferences — such as preferred game categories, language settings, and responsible gaming notification settings — to provide a more personalized experience when you return to ph49.

ph49 uses anonymized analytics data to understand platform usage patterns, identify technical issues, and improve game and feature performance for Philippine mobile users. Analytics processing uses aggregated, non-personally-identifiable data wherever possible.

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or settings menus. Note that disabling cookies may affect the functionality of certain ph49 platform features. Strictly necessary cookies cannot be disabled without affecting platform operation.

ph49 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to satisfy applicable legal retention obligations, or to resolve disputes and enforce agreements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active ph49 account relationship and for a period of five (5) years following account closure, consistent with applicable Philippine gaming and AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under RA 9160 (AMLA) and applicable PAGCOR regulations.
• KYC Documents: Retained for five (5) years from the date of last account activity or account closure, whichever is later, to satisfy AML compliance requirements.
• Support Communications: Retained for two (2) years from the date of the communication, or longer if the communication relates to an unresolved dispute or regulatory inquiry.
• Technical Logs: IP address and session logs are retained for up to twelve (12) months for security and fraud investigation purposes, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, ph49 will securely delete or anonymize personal data such that it can no longer be attributed to a specific individual. Anonymized and aggregated data may be retained indefinitely for statistical and platform improvement purposes.

As a data subject under the Philippine Data Privacy Act of 2012 (RA 10173), you are entitled to the following rights with respect to the personal information ph49 holds about you:

To exercise any of these rights, submit a written request to ph49 support. ph49 will respond within ten (10) Philippine business days of receiving a verified request. Requests may require identity verification before ph49 can disclose or modify personal data. You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph49 has violated your data privacy rights.

If you believe that ph49 has inadvertently collected personal data from a minor, please contact ph49 support immediately. ph49 will investigate and take appropriate remedial action, including data deletion, within a reasonable time.

ph49 implements a range of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit TLS/SSL encryption for all data transmitted between your device and ph49 servers.
• Encrypted storage of sensitive identity and financial data at rest using industry-standard encryption protocols.
• Access controls limiting ph49 employee access to personal data on a strict need-to-know basis, with role-based permissions and access logging.
• Two-factor authentication (2FA) available to all registered players and required for ph49 internal administrative access.
• Regular security assessments, penetration testing, and vulnerability management processes applied to ph49 platform infrastructure.
• Incident response procedures ensuring that ph49 can identify, contain, and report personal data breaches in accordance with NPC notification requirements under RA 10173.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. ph49 encourages all players to use strong, unique passwords for their ph49 accounts, enable 2FA, and contact ph49 support immediately if they suspect unauthorized access to their account.

The ph49 platform may display informational references to third-party services such as GCash and Maya in the context of payment instructions. ph49 does not embed links to external websites within platform content and is not responsible for the privacy practices or data handling of any third-party service provider, payment platform, or financial institution. This Privacy Policy applies solely to the ph49 platform at ph49.vip and the data ph49 directly controls.

For information about how GCash, Maya, BPI, BDO, or other payment processors handle your financial data, please refer to the respective privacy policies of those entities directly.

ph49 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, ph49's operational practices, or the introduction of new platform features involving data processing. When material changes are made to this Privacy Policy, ph49 will provide advance notice to registered players by email, Account dashboard notification, or a prominent announcement on ph49.vip, with a minimum of seven (7) calendar days' notice before the revised policy takes effect.

The effective date shown at the top of this page reflects the most recent revision. Continued use of ph49 Services following the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you object to any change, you may contact ph49 support to exercise your right to account closure and data deletion as described in Section 11.

ph49 has designated a Data Protection Officer (DPO) as required under RA 10173 and NPC Advisory Opinion. The DPO is responsible for overseeing ph49's compliance with the Data Privacy Act of 2012 and for handling data subject requests and privacy complaints.

If your privacy concern is not resolved to your satisfaction after engaging ph49's DPO, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC's complaint procedures and contact details are available on the NPC's official website.