ph97 Privacy Policy

1. Introduction and Scope

1.1 ph97 ("we," "us," or "our") operates the ph97 Casino platform available at ph97.club (the "Platform"). This Privacy Policy describes how ph97 collects, uses, stores, shares, and protects personal data relating to users of the Platform ("you" or "your").

1.2 This policy applies to all personal data collected through: registration and account management; deposits, withdrawals, and financial transactions; gameplay and betting activity; customer support interactions; and any other use of the ph97 Platform or its associated services.

1.3 ph97 acts as the personal information controller in respect of the personal data described in this policy. Where ph97 engages third-party service providers to process data on its behalf, those parties act as personal information processors and are bound by data processing agreements consistent with the requirements of the Data Privacy Act of 2012.

1.4 This policy should be read alongside the ph97 Terms & Conditions, which govern your use of the Platform generally.

2. Personal Data We Collect

2.1 ph97 collects personal data that you provide directly, data generated through your use of the Platform, and data received from third parties where permitted by law. The categories of personal data we collect include:

2.1 Identity and Contact Data

• Full legal name, date of birth, and gender;
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence);
• Residential address, city, province, and postal code;
• Email address and mobile phone number.

2.2 Financial Data

• GCash account number or PayMaya/Maya account details;
• Philippine bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or other eligible banks);
• Debit card details (card number, expiry date — stored in tokenised form only);
• Transaction history, including deposit amounts, withdrawal requests, and account balances.

2.3 Technical and Usage Data

• IP address, device type, operating system, and browser type;
• Login timestamps, session duration, and pages visited;
• Game history, betting patterns, and wagering activity;
• Cookies and similar tracking technologies (see Section 8).

2.4 Communications Data

• Records of customer support interactions via live chat or email;
• Feedback, complaints, and dispute correspondence;
• Responses to surveys or promotional communications (where you have opted in).

2.5 Verification Data

• Copies of government-issued identification documents submitted for KYC verification;
• Proof of address documents;
• Proof of payment method ownership where required.

3. How We Use Your Personal Data

3.1 ph97 processes personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use your data and the legal basis for each:

3.2 ph97 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have given explicit consent.

4. Sharing Your Personal Data

4.1 ph97 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

4.1 Service Providers

ph97 engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, and Philippine banking partners), KYC and identity verification providers, IT infrastructure and cloud hosting providers, and customer support platform operators. These providers are contractually bound to process data only on ph97's instructions and in accordance with applicable data protection law.

4.2 Regulatory and Legal Authorities

ph97 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts where required by Philippine law, court order, or regulatory directive. ph97 will notify you of such disclosures where legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ph97's business, personal data held by ph97 may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer in advance where practicable.

4.4 With Your Consent

ph97 may share your personal data with third parties in other circumstances where you have given your explicit, informed consent to such sharing.

5. Data Retention

5.1 ph97 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Technical and usage data: Retained for up to two (2) years, after which it is anonymised or deleted;
• Marketing consent records: Retained until consent is withdrawn, plus one (1 ) year for record-keeping purposes.

5.2 When personal data is no longer required, ph97 will securely delete or anonymise it in accordance with industry-standard data destruction practices.

6. Data Security

6.1 ph97 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the ph97 Platform;
• Encryption of sensitive data at rest, including financial credentials and identification documents;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability management;
• Multi-factor authentication for administrative access to systems holding personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

6.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph97 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

6.3 While ph97 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying ph97 immediately if you suspect any unauthorised access to your account.

7. Your Data Privacy Rights

7.1 Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by ph97:

• Right to be Informed: You have the right to be informed of how your personal data is collected, used, and processed, as set out in this policy;
• Right of Access: You may request a copy of the personal data ph97 holds about you, along with information about how it is processed;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure or Blocking: You may request deletion or blocking of personal data where it is no longer necessary for the purpose for which it was collected, or where processing is unlawful;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest;
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

7.2 To exercise any of the above rights, please contact ph97's Data Protection Officer at [email protected]. ph97 will respond to all verified requests within thirty (30) days of receipt, in accordance with applicable law.

7.3 ph97 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised person.

8. Cookies and Tracking Technologies

8.1 ph97 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help ph97 recognise you, remember your preferences, and analyse how the Platform is used.

8.2 The types of cookies ph97 uses include:

• Strictly Necessary Cookies: Required for the Platform to function, including session management and security. These cannot be disabled;
• Functional Cookies: Remember your preferences such as language settings and login status;
• Analytics Cookies: Collect anonymised data about how users interact with the Platform to help ph97 improve its services;
• Marketing Cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications.

8.3 You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph97 Platform. Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform.

9. Children and Minors

9.1 The ph97 Platform is strictly for persons aged 21 years and above. ph97 does not knowingly collect personal data from persons under the age of 21. If ph97 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and all associated personal data will be deleted, except where retention is required by law.

9.2 If you believe that a minor has registered an account on ph97, please contact our support team immediately at [email protected] so that we can take prompt action.

10. Cross-Border Data Transfers

10.1 ph97 primarily processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines, ph97 will ensure that such transfers are made only to countries or organisations that provide an adequate level of data protection, or that appropriate safeguards are in place, in accordance with the Data Privacy Act of 2012 and the regulations of the National Privacy Commission.

10.2 ph97 will not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent, except where required by law.

11. Marketing Communications

11.1 ph97 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and special offers, but only where you have given your explicit consent to receive such communications at the time of registration or subsequently through your account settings.

11.2 You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting ph97 support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11.3 ph97 will never send marketing communications to players who have self-excluded or who are subject to a cooling-off period under ph97's responsible gaming tools.

12. Data Protection Officer

12.1 ph97 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. The DPO can be contacted at:

Data Protection Officer, ph97
Email: [email protected]

12.2 If you have any concerns about how ph97 handles your personal data that cannot be resolved through our support team, you may escalate your complaint to the National Privacy Commission of the Philippines at www.privacy.gov.ph (please note: ph97 does not link to external sites; please type this address directly into your browser).

13. Amendments to This Policy

13.1 ph97 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When material changes are made, ph97 will update the "Last Updated" date at the top of this page and, where practicable, notify registered users via email or in-platform notification.

13.2 Your continued use of the ph97 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

This Privacy Policy was last reviewed and updated on January 1, 2026. Previous versions are available upon request by contacting the ph97 Data Protection Officer.