php987 Privacy Policy

php987 ("we," "us," "our," or the "Company") operates the online casino and sports betting platform accessible at php987.org (the "Platform"). php987 is the data controller responsible for the personal information collected and processed through the Platform.

For any privacy-related inquiries or to exercise your data rights, please contact us at [email protected]. We aim to respond to all privacy requests within five (5) business days.

php987 takes its obligations under the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, seriously. This Policy is designed to be consistent with those obligations.

php987 collects personal information that is necessary to provide you with a safe, compliant, and functional gaming experience. The categories of personal data we collect include:

php987 does not collect special categories of sensitive personal data (such as racial or ethnic origin, health data, or political opinions) except where strictly required for responsible gaming or legal compliance purposes, and only with your explicit consent where required by law.

php987 collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access or use the Platform
• Third-party sources: Identity verification data received from KYC service providers; payment and transaction data received from payment processors (GCash, PayMaya, BPI, BDO, Metrobank); fraud and AML screening data from compliance service providers

php987 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your php987 player account, including processing your registration, login authentication, and account settings changes
• Identity and age verification (KYC): Verifying your identity and confirming that you are at least 21 years of age as required by Philippine gambling regulations and PAGCOR-related compliance obligations
• Payment processing: Processing deposits and withdrawals via your chosen Philippine payment method, reconciling transactions, and managing your account balance in Philippine Peso
• Anti-money laundering (AML) compliance: Monitoring account and transaction activity to detect and prevent money laundering, fraud, and other financial crimes, as required under Philippine law
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, applying deposit limits and self-exclusion settings you configure, and enforcing the 21+ age restriction
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance
• Security and fraud prevention: Protecting the Platform and our players from unauthorized access, fraud, collusion, and abuse
• Platform improvement: Analysing usage patterns to improve game selection, navigation, payment processes, and overall user experience for Filipino players
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. You may opt out at any time
• Legal and regulatory compliance: Meeting php987's obligations under applicable Philippine laws, including the Data Privacy Act of 2012, and responding to lawful requests from government authorities

php987 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable data protection principles:

• Contractual necessity: Processing required to perform the contract between you and php987 — account registration, payment processing, providing gaming services
• Legal obligation: Processing required to comply with applicable Philippine laws — KYC/AML verification, age verification, regulatory reporting
• Legitimate interests: Processing carried out for php987's legitimate business interests — security monitoring, fraud detection, platform analytics — where those interests are not overridden by your rights
• Consent: Processing based on your explicit consent — marketing communications, certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing

php987 does not sell your personal data to third parties. We share your data only in the circumstances described below:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard — to process your deposits and withdrawals. These processors handle your financial data subject to their own privacy policies and applicable Philippine financial regulations
• KYC and identity verification providers: Third-party identity verification service providers that assist php987 in confirming your identity and age as required by law
• Game providers: Game software providers (such as Ezugi for live dealer games) may receive limited gameplay data necessary to operate games within the php987 Platform
• IT and security service providers: Cloud hosting, cybersecurity, and technical infrastructure providers engaged to operate and secure the Platform
• Regulatory and law enforcement authorities: Government agencies, PAGCOR, financial intelligence units, and law enforcement bodies where disclosure is required by law or court order
• Professional advisers: Legal, compliance, accounting, and audit professionals bound by professional confidentiality obligations

All third parties with whom php987 shares personal data are contractually required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection laws.

php987 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are:

• Strictly necessary cookies: Essential for the Platform to function — maintaining your login session, security tokens, and account preferences. These cannot be disabled without impeding Platform functionality
• Performance and analytics cookies: Collect anonymised usage data to help php987 understand how Players navigate the Platform and identify areas for improvement. These are enabled by default but can be disabled
• Functional cookies: Remember your preferences, such as language settings and game filters, to improve your experience on the php987 Platform

php987 does not use third-party advertising or tracking cookies that share your data with external advertising networks. You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from logging in to or using the Platform.

php987 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by Philippine AML and gaming regulations
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations
• Support communications: Retained for three (3) years unless required for longer in connection with an ongoing dispute or regulatory inquiry
• Marketing preferences: Retained until you withdraw your consent or request deletion

Upon expiry of the applicable retention period, php987 will securely delete or anonymise your personal data in accordance with applicable law.

php987 implements appropriate technical and organisational security measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the php987 Platform
• Bcrypt hashing for stored passwords — passwords are never stored in plain text
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Automated intrusion detection and security event monitoring
• Regular third-party security audits and penetration testing
• Multi-factor authentication requirements for administrative access to Platform systems

While php987 uses industry-standard security practices, no data transmission or storage system can be guaranteed to be 100% secure. If you suspect a security incident involving your php987 account, please contact us immediately at [email protected].

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by php987:

• Right to be informed: The right to know that php987 is collecting and processing your personal data, and to receive clear information about how it is used — as provided in this Privacy Policy
• Right of access: The right to request a copy of the personal data php987 holds about you and information about how it is processed
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. For most account details, you can update your information directly from your account settings
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations
• Right to object: The right to object to processing based on legitimate interests or for direct marketing purposes
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please submit a written request to [email protected]. php987 will respond within fifteen (15) business days. We may request identity verification before processing your request.

The php987 Platform is strictly restricted to persons aged 21 years or older, consistent with Philippine gambling regulations. php987 does not knowingly collect personal data from any person under the age of 21.

If php987 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, forfeit any associated balance, and delete the personal data in question as promptly as possible in accordance with applicable law.

If you believe a person under 21 has registered an account on the php987 Platform, please notify us immediately at [email protected].

php987's Platform is operated primarily within the Philippines and targets Filipino players. However, some of our technology service providers and game software partners may be located outside the Philippines. Where personal data is transferred to a country that does not have an equivalent level of data protection to the Philippines, php987 will ensure that appropriate safeguards are in place — including contractual data protection clauses — to protect your information.

php987 does not transfer your personal data to international third parties for marketing or advertising purposes.

php987 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or Platform features. The updated "Last Updated" date at the top of this page will reflect when the most recent revision was made.

For material changes that significantly affect how we process your personal data, php987 will provide advance notice via email or in-platform notification before the changes take effect. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

For any questions, concerns, or requests regarding this Privacy Policy or php987's data practices, please contact our Data Privacy Officer through the following channels:

• Email: [email protected] — for privacy inquiries, data access requests, and consent withdrawals
• Live Chat: Available 24/7 on the php987 Platform for general inquiries

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated. Details of the NPC complaints process are available on the NPC's official website.