ph50 Privacy Policy

1. Introduction

ph50 ("ph50," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the ph50 online gaming platform at ph50.org (the "Platform"). This Privacy Policy describes how ph50 collects, uses, stores, shares, and protects your personal information when you register an account, access the Platform, or interact with any ph50 service.

This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and the implementing rules and regulations issued by the National Privacy Commission ("NPC"). By creating a ph50 account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, ph50 is the personal information controller in respect of the personal data it collects from players and visitors to the Platform. ph50 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

ph50 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. Contact details for the ph50 DPO are set out in Section 13 of this Policy.

3. Personal Data We Collect

ph50 collects personal data from you in the following categories:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number).
• Contact Data: Philippine mobile number, email address, and residential address (including city — whether you're in 🇵🇭 Manila, Cebu, Davao, Quezon City, Makati, or elsewhere in the Philippines).
• Account Data: ph50 username, account ID, account creation date, login history, and account preferences.
• Financial Data: Payment method details (GCash number, Maya account, bank account details for BPI, BDO, Metrobank, UnionBank, or other accepted Philippine banks), deposit and withdrawal history, and transaction records.
• Gaming Data: Betting history, game session data, wagering patterns, bonus usage, and responsible gaming tool settings.
• Technical Data: IP address, device type, browser type and version, operating system, and session duration data collected automatically when you access the Platform.
• Communications Data: Records of your communications with ph50 customer support, including live chat transcripts and email correspondence.

ph50 does not collect sensitive personal information (as defined under the DPA) unless strictly required for identity verification or legal compliance purposes, in which case your explicit consent will be sought.

4. How ph50 Uses Your Personal Data

ph50 processes your personal data for the following purposes:

• Account Management: To register and maintain your ph50 account, verify your identity and age (21+ requirement), and manage your account settings and preferences.
• Service Delivery: To provide access to ph50's gaming services, process deposits and withdrawals, and deliver customer support.
• Legal and Regulatory Compliance: To comply with ph50's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws. This includes Know Your Customer (KYC) and Anti-Money Laundering (AML) checks.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the ph50 Platform.
• Responsible Gaming: To monitor gaming behaviour and provide responsible gaming interventions, including deposit limit reminders, cooling-off periods, and self-exclusion tools, in accordance with PAGCOR guidelines.
• Platform Improvement: To analyse usage patterns and technical data to improve the performance, security, and user experience of the ph50 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your explicit consent to receive such communications. You may withdraw this consent at any time.

5. Legal Basis for Processing

ph50 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and ph50 (i.e., the Terms & Conditions) — including account registration, service delivery, and payment processing.
• Legal Obligation: Processing is required to comply with ph50's legal and regulatory obligations under Philippine law, including PAGCOR licensing conditions, AMLA requirements, and NPC data protection obligations.
• Legitimate Interests: Processing is necessary for ph50's legitimate interests in operating a secure, fair, and compliant gaming platform — including fraud prevention, security monitoring, and platform analytics — provided such interests are not overridden by your rights and interests.
• Consent: For marketing communications and any processing of sensitive personal information, ph50 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

ph50 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. ph50 may share your personal data with the following categories of recipients only where necessary and on a strictly limited basis:

• Payment Processors: GCash, Maya, and partner Philippine banks require certain transaction data to process your deposits and withdrawals. These providers are bound by their own data protection obligations under Philippine law.
• Identity Verification Providers: Third-party KYC service providers who assist ph50 in verifying player identity and age in compliance with PAGCOR and AMLA requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities, where ph50 is legally required to disclose information.
• IT and Platform Service Providers: Cloud hosting, data storage, and cybersecurity providers who process data on ph50's behalf under strict data processing agreements that prohibit independent use of your data.
• Legal and Professional Advisers: Lawyers, auditors, and compliance consultants engaged by ph50, subject to professional confidentiality obligations.

All third parties with whom ph50 shares personal data are required to handle that data in accordance with applicable Philippine data protection law and ph50's data protection standards.

7. Cookies and Tracking Technologies

ph50 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, analyse usage, and — where you have consented — deliver relevant content. The categories of cookies ph50 uses are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the ph50 Platform, enabling ph50 to identify areas for improvement. These are only set with your consent.
• Preference Cookies: Used to remember your language, display, and notification preferences across sessions.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may impair the functionality of the ph50 Platform.

8. Data Retention

ph50 retains your personal data for as long as your ph50 account remains active and for a period thereafter as required by applicable Philippine law. Specifically:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing conditions and AMLA record-keeping requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, as required under the AMLA and its implementing rules.
• Gaming and Responsible Gaming Data: Retained for the duration of your account and for three (3) years following account closure.
• Communications Data: Customer support records are retained for two (2) years from the date of the last communication.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, ph50 will securely delete or irreversibly anonymise your personal data in accordance with NPC guidelines.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012 and NPC regulations, you have the following rights in respect of your personal data held by ph50:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data ph50 holds about you, together with information about how it is processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data ph50 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph50's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on ph50's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where processing is based on your consent or contractual necessity.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph50 has processed your personal data in breach of the Data Privacy Act.

10. Data Security

ph50 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• AES-256 encryption for data stored on ph50 servers.
• TLS 1.3 encryption for all data transmitted between your device and the ph50 Platform.
• Multi-factor authentication options for ph50 player accounts.
• Regular penetration testing and vulnerability assessments of the ph50 Platform.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph50 will notify the NPC and, where required, affected players within the timeframes prescribed by applicable law.

11. Children's Privacy and Age Restriction

The ph50 Platform is strictly intended for persons aged 21 years and above, in compliance with Philippine gaming regulations. ph50 does not knowingly collect personal data from persons under 21 years of age.

If ph50 becomes aware that personal data has been collected from a person under 21 years of age, ph50 will promptly delete that data and close the associated account. If you believe that a minor has registered a ph50 account, please contact ph50 support immediately.

12. Changes to This Privacy Policy

ph50 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or ph50's data processing practices. The date of the most recent revision is displayed at the top of this page.

Where changes are material, ph50 will provide reasonable advance notice to registered players via email or a prominent notice on the Platform. Your continued use of the ph50 Platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy.

13. Contact and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or ph50's data processing practices, please contact the ph50 Data Protection Officer. The DPO is responsible for ensuring ph50's compliance with the Data Privacy Act of 2012 and NPC regulations.

You may reach the ph50 Data Protection Officer at the following email address (displayed as plain text — not a clickable link):

[email protected]

For general support enquiries, you may also contact the ph50 support team at:

[email protected]

ph50 aims to acknowledge all privacy-related enquiries within five (5) business days and to resolve data subject requests within fifteen (15) business days of receipt of a verified request.