ph50 Privacy Policy – How We Protect Your Personal Data

1. Data Controller

ph50, the operator of the online gaming platform at ph50.one ("ph50," "we," "us," or "our"), is the data controller responsible for the personal data of players ("you," "your") collected through the ph50 Platform. ph50 is registered and operates in compliance with Philippine law and the PAGCOR regulatory framework.

For all data privacy matters, including the exercise of data subject rights, ph50 has designated a Data Protection Officer (DPO). Contact details for the ph50 DPO are provided in Section 14 of this Policy.

2. Data We Collect

ph50 collects the following categories of personal data from players:

ph50 does not intentionally collect special categories of sensitive personal data (e.g., health information, political opinions, religious beliefs) unless specifically required by PAGCOR compliance obligations.

3. How We Use Your Data

ph50 uses collected personal data for the following purposes:

• Account creation and management: Registering your ph50 account, verifying your identity, and maintaining your player profile.
• Service delivery: Processing deposits and withdrawals, delivering gameplay, crediting bonuses and promotions, and providing customer support.
• Regulatory compliance: Fulfilling obligations under PAGCOR regulations, the Philippine Anti-Money Laundering Act (AMLA), and the Data Privacy Act, including identity verification and suspicious transaction reporting.
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeovers, and prohibited conduct as described in the ph50 Terms & Conditions.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling patterns and enforcing player-set deposit and session limits.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. See Section 10 for opt-out details.
• Platform improvement: Analysing anonymised usage data to improve game performance, user experience, and platform features.

4. Legal Bases for Processing

ph50 processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil ph50's obligations under the player account agreement, including service delivery, payments, and support.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, AMLA obligations, and NPC requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where ph50's interests do not override the player's data privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where ph50 has obtained your freely given, specific, and informed consent. You may withdraw consent at any time.

5. Data Sharing & Disclosure

ph50 does not sell personal data. ph50 may share personal data with the following categories of recipients, solely for the purposes described in this Policy:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, for the purpose of processing transactions. These providers are bound by their own privacy obligations under Philippine law.
• Game software providers: JILI, Pragmatic Play, and other game studios, to the extent necessary to deliver gameplay and manage game-related accounts.
• KYC and compliance providers: Third-party identity verification and AML screening services engaged by ph50 to fulfil PAGCOR and AMLA obligations.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement authorities, where required by Philippine law or a valid legal order.
• Service providers: IT infrastructure, cloud hosting, customer support software, and analytics providers engaged under data processing agreements that bind them to protect player data in accordance with the Data Privacy Act.

6. Cookies & Tracking Technologies

ph50 uses cookies and similar tracking technologies on the ph50 Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication, and security. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game display options, and responsible gaming limits.
• Analytics cookies: Collect anonymised information about how players use ph50 to improve Platform performance and user experience. These are only set with your consent.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair the functionality of the ph50 Platform.

7. Data Retention

ph50 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, and compliance obligations. Specific retention periods include:

• Account data and KYC records: Retained for a minimum of 5 years from the date of account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming history: Retained for 2 years from the date of the relevant gaming session.
• Customer support records: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, ph50 will securely delete or anonymise personal data in accordance with industry-standard data disposal practices.

8. Data Security

ph50 implements technical and organisational security measures to protect player personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit.
• Encryption of sensitive data at rest, including financial account information and identity documents.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Two-factor authentication (2FA) for player account access and internal system access.
• Regular security audits, penetration testing, and vulnerability assessments.
• Incident response procedures aligned with NPC breach notification requirements.

While ph50 takes every reasonable precaution, no data transmission or storage system is 100% secure. Players are encouraged to use strong, unique passwords for their ph50 account and to enable 2FA.

9. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph50:

• Right to be Informed: The right to know how your personal data is collected, used, and processed — fulfilled by this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph50 holds about you.
• Right to Correction: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data where there is no longer a lawful basis for processing, subject to ph50's legal retention obligations.
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph50 has violated your data privacy rights.

To exercise any of these rights, contact ph50's Data Protection Officer at the details in Section 14. ph50 will respond within 15 business days of receiving a verifiable request, as required by Philippine law.

10. Marketing Communications

ph50 may send promotional emails, SMS notifications, and in-platform messages regarding bonuses, new games, and platform updates to players who have opted in to receive marketing communications. Consent to marketing is separate from consent to the processing of data necessary to provide ph50's services.

You may opt out of marketing communications at any time by: (a) clicking the "unsubscribe" link in any marketing email; (b) adjusting your communication preferences in your ph50 account settings; or (c) contacting ph50 support. Opt-out requests will be processed within 5 business days. Opting out of marketing does not affect transactional communications (e.g., deposit confirmations, withdrawal notices, security alerts).

11. Children's Privacy

ph50 does not knowingly collect personal data from individuals under the age of 21. If ph50 discovers that personal data from an individual under 21 has been collected without verified parental consent, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on ph50, please contact ph50 support immediately.

12. International Data Transfers

Where ph50 transfers personal data to service providers or game studios located outside the Philippines, ph50 ensures that such transfers are carried out in compliance with the Data Privacy Act, including the implementation of appropriate safeguards such as contractual data processing agreements. ph50 does not transfer personal data to countries or organisations that do not provide an adequate level of data protection.

13. Changes to This Privacy Policy

ph50 reserves the right to update or amend this Privacy Policy at any time. The most current version will always be available at ph50.one/privacy-policy. When material changes are made, ph50 will notify registered players via their registered email address or through a prominent notice on the Platform. The date of the most recent update is displayed at the top of this page. Continued use of ph50 following notification of material changes constitutes acceptance of the revised Privacy Policy.

14. Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights, please contact ph50's Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with ph50's response to your data privacy concern.