ph39 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how ph39 Gaming Corporation ("ph39", "we", "us", "our") collects, uses, discloses, stores, and protects personal information obtained from users ("you", "your", "User", "Player") of the ph39 online gaming platform, website, mobile applications, and related services (collectively, the "Services").

ph39 is the data controller responsible for your personal information. We are registered with the National Privacy Commission (NPC) of the Philippines and comply with the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and all applicable PAGCOR data handling requirements.

By creating an account, using our Services, or providing personal information to ph39, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with our data practices as described in this Policy, you should not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account or use our Services, we collect personal information that you provide directly to us, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (e.g., passport number, driver's license number, national ID number)
• Contact Information: Email address, mobile phone number, residential address, mailing address
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Financial Information: Bank account numbers, payment card details (processed through secure third-party payment processors), transaction history, deposit and withdrawal records
• Identity Verification Documents: Copies of government-issued IDs, proof of address documents (utility bills, bank statements), selfie photographs for verification purposes
• Communication Data: Messages sent to customer support, chat logs, email correspondence, survey responses, feedback submissions
• Marketing Preferences: Communication preferences, subscription choices, promotional opt-ins and opt-outs

2.2 Information Collected Automatically

When you access or use the ph39 Services, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID)
• Connection Data: IP address, internet service provider, connection speed, network type (Wi-Fi, mobile data)
• Usage Data: Pages visited, features used, games played, bet amounts and outcomes, session duration, click patterns, navigation paths
• Geolocation Data: Precise geographic location data (with your consent) to verify that you are physically located within the Philippines as required by PAGCOR regulations
• Cookies and Similar Technologies: Information collected through cookies, web beacons, local storage, and similar tracking technologies (see Section 8 for details)
• Performance Data: Application crashes, error reports, system diagnostics, loading times, and other technical performance metrics

2.3 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Payment Processors: Transaction details, payment verification information, fraud detection data from GCash, PayMaya, banks, and other payment service providers
• Identity Verification Services: Document authentication results, biometric verification data, sanctions screening results, politically exposed person (PEP) checks
• Marketing Partners: Referral information, affiliate tracking data, campaign performance metrics (only if you were referred through a marketing partner)
• Social Media Platforms: Profile information if you choose to link your ph39 account with social media accounts
• Regulatory Authorities: Self-exclusion lists, problem gambling databases, regulatory compliance information from PAGCOR or other gaming authorities

3. How We Use Your Information

ph39 processes your personal information for the following purposes, based on our legitimate business interests, contractual necessity, legal obligations, and your consent where required:

3.1 Service Provision and Account Management

• Create, maintain, and manage your ph39 account
• Process registrations, logins, and authentication
• Provide access to gaming content, sports betting, and other Services
• Process deposits, withdrawals, and financial transactions
• Track betting activity, calculate winnings, and settle bets
• Maintain accurate account balances and transaction histories
• Enable customer support services and respond to inquiries

3.2 Legal and Regulatory Compliance

• Verify your identity and age to ensure compliance with 21+ age requirements
• Conduct Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures
• Prevent money laundering, terrorist financing, and other financial crimes
• Detect and prevent fraud, cheating, and other prohibited activities
• Comply with PAGCOR reporting requirements and gaming regulations
• Maintain records as required by Philippine anti-money laundering laws
• Respond to legal process, court orders, and government requests
• Enforce our Terms and Conditions and other policies

3.3 Security and Fraud Prevention

• Monitor account activity for suspicious or unusual patterns
• Detect and prevent unauthorized access, hacking, and security breaches
• Identify and block multiple accounts and bonus abuse
• Verify the legitimacy of transactions and payment methods
• Protect against cheating, collusion, and other forms of gaming misconduct
• Conduct risk assessments and fraud investigations

3.4 Service Improvement and Personalization

• Analyze usage patterns to improve platform functionality and user experience
• Personalize game recommendations and content based on your preferences
• Test new features, conduct A/B testing, and optimize performance
• Troubleshoot technical issues and provide technical support
• Generate analytics and insights about platform usage and player behavior

3.5 Marketing and Communications

• Send promotional offers, bonuses, and special deals (with your consent)
• Deliver newsletters, updates, and platform announcements
• Communicate important account notifications and policy changes
• Conduct customer satisfaction surveys and request feedback
• Provide information about responsible gaming resources

3.6 Responsible Gaming

• Monitor betting patterns for signs of problem gambling behavior
• Implement deposit limits, session time limits, and cooling-off periods
• Process self-exclusion requests and maintain exclusion databases
• Provide access to responsible gaming tools and support resources

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph39 processes your personal information based on the following legal grounds:

Legal Basis	Processing Activities
Contractual Necessity	Account creation, service provision, transaction processing, bet settlement, customer support
Legal Obligation	KYC/AML compliance, age verification, regulatory reporting, record retention, fraud prevention, legal process response
Legitimate Interests	Security monitoring, fraud detection, service improvement, analytics, platform optimization, account security
Consent	Marketing communications, geolocation tracking, optional features, social media integration, personalized recommendations
Vital Interests	Responding to emergency situations, protecting player safety, preventing harm

5. How We Share Your Information

ph39 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information with the following categories of recipients for the purposes described in this Policy:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: GCash, PayMaya, banks, and other financial institutions to process deposits and withdrawals
• Identity Verification Services: KYC/AML service providers, document verification platforms, biometric authentication services
• Game Providers: Third-party software providers who supply games and gaming content
• Cloud Service Providers: Data hosting, storage, and backup services
• Customer Support Platforms: Live chat services, ticketing systems, customer relationship management (CRM) platforms
• Marketing and Analytics Services: Email service providers, SMS gateways, analytics platforms, advertising networks (with your consent)
• IT and Security Services: Cybersecurity firms, fraud detection services, technical infrastructure providers

All service providers are contractually bound to protect your information, use it only for the specific purposes authorized by ph39, and comply with applicable data protection laws.

5.2 Regulatory Authorities

We may disclose your personal information to PAGCOR, the National Privacy Commission, law enforcement agencies, and other governmental or regulatory bodies when required by law or in response to valid legal process, including:

• Compliance with PAGCOR reporting and audit requirements
• Responding to subpoenas, court orders, or government requests
• Assisting in criminal investigations or legal proceedings
• Reporting suspicious transactions under anti-money laundering laws
• Complying with tax reporting obligations

5.3 Business Transfers

If ph39 is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website of any such change in ownership or control of your personal information.

5.4 With Your Consent

We may share your information with third parties for purposes not described in this Policy if we obtain your explicit consent to do so.

6. Data Security Measures

ph39 implements comprehensive technical, organizational, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, loss, or destruction. Our security measures include:

• Encryption: All sensitive data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256 encryption
• Access Controls: Role-based access restrictions, multi-factor authentication for administrative access, and the principle of least privilege
• Secure Infrastructure: Firewalls, intrusion detection and prevention systems, regular security patching, and infrastructure monitoring
• Data Segregation: Personal data is stored separately from operational data with restricted access
• Regular Audits: Periodic security assessments, penetration testing, and vulnerability scans by independent security firms
• Employee Training: Mandatory data protection and security training for all employees with access to personal information
• Incident Response: Documented procedures for detecting, responding to, and reporting data breaches
• Secure Development: Security-by-design principles in all software development and system architecture

Despite our security measures, no method of transmission or storage is completely secure. If you believe your account security has been compromised, contact us immediately at [email protected].

7. Data Retention

ph39 retains your personal information only for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your account's active status and for six (6) years after account closure as required by PAGCOR regulations and Philippine anti-money laundering laws
• Transaction Records: Financial transaction records, betting history, and account statements are retained for seven (7) years from the date of the transaction for regulatory compliance and audit purposes
• Identity Verification Documents: KYC documents are retained for seven (7) years after account closure to comply with PAGCOR and AML record-keeping requirements
• Marketing Communications: Communication preferences and opt-out requests are retained indefinitely to ensure we honor your choices
• Self-Exclusion Records: Self-exclusion and responsible gaming records are retained permanently to prevent circumvention of exclusion measures
• Legal and Compliance Records: Records required for ongoing legal proceedings, regulatory investigations, or compliance obligations are retained until the matter is resolved plus the applicable statute of limitations period

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data retention and disposal procedures.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit the ph39 website or use our mobile applications. We also use similar technologies such as web beacons, pixels, local storage, and SDKs (software development kits) to collect information about your use of our Services.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the operation of our Services, including session management, authentication, security, and load balancing. These cannot be disabled.
• Functional Cookies: Enable enhanced functionality and personalization, such as language preferences, account settings, and remembering your choices.
• Analytics Cookies: Help us understand how visitors interact with our Services by collecting anonymous information about page visits, traffic sources, and user behavior.
• Marketing Cookies: Used to deliver targeted advertising and track the effectiveness of marketing campaigns. These require your consent.

8.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, blocking essential cookies may prevent you from using certain features of our Services. Mobile users can manage tracking through their device settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).

9. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your data in a commonly used electronic format.

9.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal information. You can update most account information directly through your account settings.

9.3 Right to Erasure

You have the right to request deletion of your personal information, subject to our legal and regulatory obligations to retain certain records. Note that we cannot delete information required for compliance with PAGCOR regulations, anti-money laundering laws, or ongoing legal proceedings.

9.4 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails or contacting customer support.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.

9.6 Right to Withdraw Consent

Where we process your information based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9.7 Right to Lodge a Complaint

You have the right to lodge a complaint with the National Privacy Commission if you believe we have violated your data protection rights. Contact the NPC at: National Privacy Commission, 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City 1307, Philippines. Email: [email protected].

9.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your account details and a description of your request. We will respond to your request within fifteen (15) business days. We may require verification of your identity before processing your request.

10. International Data Transfers

Your personal information is primarily stored on servers located within the Philippines. However, some of our service providers may process data outside the Philippines. When we transfer personal information internationally, we ensure that appropriate safeguards are in place, including:

• Transferring data only to countries recognized by the National Privacy Commission as providing adequate data protection
• Implementing Standard Contractual Clauses approved by the NPC
• Ensuring service providers are certified under recognized data protection frameworks
• Obtaining your explicit consent where required by law

11. Children's Privacy

The ph39 Services are intended exclusively for individuals aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected personal information from someone under 21, we will promptly delete that information and close the account. If you believe we have collected information from a minor, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

ph39 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes by posting the updated Policy on our website and updating the "Last Updated" date at the top of this document. Significant changes may also be communicated via email or account notification.

Your continued use of the Services after any changes to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us:

• Email: [email protected]
• Data Protection Officer: [email protected]
• Live Chat: Available 24/7 on our website
• Mail: ph39 Gaming Corporation, Data Protection Department, [Business Address], Philippines

We will respond to all privacy inquiries within fifteen (15) business days.