pph96 Privacy Policy

This Privacy Policy ("Policy") describes how pph96 — operating as a PAGCOR-licensed online gaming platform at pph96.net — collects, processes, stores, and protects personal data belonging to players and website visitors across the Philippines. It has been drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).

pph96 acts as the Personal Information Controller (PIC) for all personal data collected through this platform. As PIC, we determine the purposes and means by which your personal information is processed and bear full accountability for ensuring that processing is lawful, fair, and transparent at all times.

This Policy covers all data collected through: the pph96 website at pph96.net; any associated mobile web interface; customer support channels including live chat and email; payment processing interactions; and identity verification (KYC) procedures conducted as part of your account registration and ongoing account maintenance.

pph96 collects personal data through several channels during your interaction with the platform. The categories of data we collect and their sources are described in the table below:

pph96 does not knowingly collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data, health information, religious beliefs, political affiliation, or sexual orientation.

pph96 processes your personal data only for specific, legitimate purposes directly related to operating a PAGCOR-licensed gaming platform and serving our players in the Philippines. The following describes each purpose and the data categories involved:

• Account Creation and Management: We use your identity, contact, and account data to create and maintain your player account, authenticate your logins, and manage your preferences and settings.
• Payment Processing: Financial data and identity data are used to process your deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven, USDT, and Coins.ph. Minimum deposit is ₱20.
• Identity Verification (KYC): We process identity data and KYC documents to verify that you meet age (21+) and identity requirements, in compliance with PAGCOR directives and Anti-Money Laundering (AML) regulations under Republic Act 9160 as amended.
• Game Provision and Fair Play: Gaming activity data is used to operate games, calculate results and payouts, detect cheating or collusion, and maintain the integrity of the platform.
• Responsible Gaming: We monitor gaming activity data to identify patterns associated with problem gambling and to apply responsible gaming controls such as deposit limits and self-exclusion in accordance with PAGCOR requirements.
• Fraud Prevention and Security: Technical data and financial data are used to detect and prevent unauthorized account access, payment fraud, money laundering, and other prohibited conduct.
• Customer Support: Communications data and account data are used to respond to your inquiries, resolve disputes, and improve our support services.
• Legal and Regulatory Compliance: We process and retain personal data as required by PAGCOR regulations, the Anti-Money Laundering Act, the National Internal Revenue Code, and other applicable Philippine law.
• Platform Improvement: Anonymized or aggregated technical and gaming activity data is used to analyze platform performance, identify bugs, and develop new features — in a form that cannot identify individual players.

Under the Philippine Data Privacy Act of 2012, pph96 must have a lawful basis for every instance of personal data processing. The legal bases we rely on are:

• Contractual Necessity: Processing that is necessary to fulfill the contract between you and pph96 — including operating your account, processing payments, and delivering gaming services — is lawful under Section 12(b) of the Data Privacy Act.
• Legal Obligation: Processing required to comply with Philippine law — including PAGCOR licensing conditions, AML reporting obligations, and tax requirements — is lawful under Section 12(c) of the Data Privacy Act.
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregate analytics is conducted on the basis of pph96's legitimate interests under Section 12(f), provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent — for example, for non-essential cookies or optional marketing communications — we will obtain your clear, informed, and freely given consent before processing and will give you an easy means to withdraw it at any time.

pph96 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only with trusted parties in the following strictly limited circumstances:

• Payment Processors: Financial data is shared with payment service providers (including GCash, Maya, BPI, BDO, UnionBank, and others) solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• KYC and Identity Verification Providers: We may use accredited third-party identity verification services to assist with KYC checks. These providers process your data only on our instructions and under strict confidentiality obligations.
• Game Content Providers: When you play a third-party game hosted on the pph96 platform, limited session and account data may be shared with the relevant game provider to operate the game correctly. These providers are contractually bound to process this data only for game operation purposes.
• Regulatory Authorities: pph96 is legally required to share information with PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent Philippine government authorities upon lawful request or as mandated by applicable regulations.
• Legal and Law Enforcement: We may disclose personal data where required by a valid court order, subpoena, or similar legal process, or where disclosure is necessary to protect the rights, safety, or property of pph96, its players, or the public.
• Service Providers: We engage third-party service providers for IT infrastructure, cloud hosting, customer support tools, and analytics. All such providers are contractually bound as Personal Information Processors (PIPs) under the Data Privacy Act and are prohibited from using your data for any purpose other than delivering the contracted service.

pph96 uses cookies — small text files stored on your device — along with similar tracking technologies such as local storage and session tokens to operate the platform, keep your session secure, and understand how players use our services. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the pph96 platform to function. They maintain your login session, remember your authentication state, and enable core security features. These cookies cannot be disabled without breaking the platform's basic functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming configurations — so you do not need to re-enter them on every visit.
• Analytics Cookies: We use anonymized analytics data to understand how players navigate the pph96 platform, which pages are most popular, and where technical issues occur. This data is used solely to improve platform performance and player experience.
• Security Cookies: These cookies assist in detecting suspicious login attempts, bot activity, and other security threats by establishing baseline behavioral patterns for your account.

pph96 does not use third-party advertising or behavioral profiling cookies. You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your pph96 account.

pph96 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. Our general retention periods are as follows:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years after account closure, as required by PAGCOR and AML regulations.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with the Anti-Money Laundering Act and BIR recordkeeping requirements.
• KYC Documents: Retained for five (5) years after account closure or the last transaction, whichever is later, as mandated by AMLC regulations.
• Customer Support Communications: Retained for two (2) years from the date of the communication, to support dispute resolution and quality assurance.
• Technical and Log Data: Retained for up to ninety (90) days for security and performance monitoring purposes, unless a longer period is required for an ongoing investigation.
• Self-Exclusion Records: Retained indefinitely (or for the minimum period required by PAGCOR) to prevent re-registration by excluded players.

When the applicable retention period expires, pph96 will securely delete or anonymize your personal data in a manner that makes re-identification impossible. Anonymized, aggregated data may be retained indefinitely for statistical and business analysis purposes.

pph96 takes the security of your personal data seriously. We implement a comprehensive, multi-layered security framework to protect your information against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in Transit: All data exchanged between your device and pph96 servers is encrypted using TLS 1.2 or higher, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at Rest: Sensitive personal and financial data stored in our databases is encrypted using AES-256, one of the strongest symmetric encryption standards available.
• Password Security: Player passwords are hashed using industry-standard cryptographic algorithms (bcrypt or equivalent) before storage. pph96 staff cannot view your plain-text password at any time.
• Access Controls: Access to personal data within pph96 is governed by strict role-based access controls (RBAC). Only authorized personnel with a documented business need may access personal data, and all access is logged and auditable.
• Two-Factor Authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their pph96 accounts for an additional layer of login security.
• Regular Security Audits: pph96 engages independent third-party security firms to conduct penetration testing and vulnerability assessments on a regular basis. Critical findings are remediated on an expedited basis.
• Incident Response Plan: pph96 maintains a documented data breach response plan. In the event of a personal data breach, we will notify affected players and the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, where required by law.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pph96:

• Right to Be Informed: You have the right to know what personal data pph96 collects about you, for what purposes, and how it is processed. This Privacy Policy fulfills pph96's transparency obligation.
• Right of Access: You may request a copy of the personal data that pph96 holds about you. We will provide this within thirty (30) days of a valid request, subject to identity verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update basic account information directly within your account settings, or contact support for assistance with other data.
• Right to Erasure: You may request that pph96 delete your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation requires us to retain it. Note that retention obligations under PAGCOR and AML regulations may override erasure requests for certain data categories.
• Right to Object: You have the right to object to the processing of your personal data on the grounds of legitimate interests, direct marketing, or profiling. pph96 will assess the objection and cease processing unless we have compelling legitimate grounds that override your interests.
• Right to Data Portability: You may request that pph96 provide your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider, where technically feasible.
• Right to Lodge a Complaint: If you believe that pph96 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer (DPO) at [email protected] with the subject line "Data Rights Request." We may require you to verify your identity before processing your request to protect against unauthorized access to another person's data.

The pph96 platform is strictly intended for individuals who are at least 21 years of age, in compliance with Philippine law and PAGCOR regulations governing online gaming. pph96 does not knowingly collect personal data from individuals below the age of 21.

Age verification is conducted as part of our KYC process, which every player must complete before making their first withdrawal. pph96 takes its responsibility to prevent underage gambling seriously and cooperates fully with PAGCOR in enforcement and compliance matters.

The pph96 platform may contain links to third-party websites — for example, payment provider information pages or game provider landing pages. These links are provided for your convenience only. pph96 does not control these third-party websites and is not responsible for their privacy practices, content, or data handling.

We strongly recommend that you review the privacy policy of any third-party website you visit. pph96's Privacy Policy applies solely to data collected through the pph96 platform at pph96.net and does not extend to any external site.

pph96 reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, PAGCOR regulatory requirements, platform functionality, or our internal data processing practices. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

For material changes that significantly affect your privacy rights or the way we process your personal data, pph96 will provide advance notice via a prominent in-platform notification or an email to the address associated with your account, at least fourteen (14) days before the changes take effect. Your continued use of the pph96 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

pph96 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests related to your personal data, or if you wish to exercise any of your data rights, please contact the pph96 DPO through the following channels:

• Email: [email protected] — please use the subject line "Privacy / Data Rights Request" for faster routing. We aim to respond within 72 hours for routine inquiries and within 30 days for formal data rights requests.
• Live Chat: Available 24/7 directly within the pph96 platform. For urgent matters such as suspected unauthorized account access, live chat is the fastest way to reach our team.
• Location: Philippines (nationwide service coverage).

If you are not satisfied with pph96's handling of your personal data or your data rights request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the regulatory authority responsible for enforcing the Data Privacy Act of 2012.