ph797 Privacy Policy

1. Who We Are

ph797 ("ph797", "we", "us", "our") operates the online casino, sports betting, and gaming platform accessible at ph797.org. ph797 is the data controller responsible for the personal information collected from users of the ph797 platform in the Philippines. For all data privacy matters, you may contact ph797 at the email address listed in Section 13 of this Policy.

ph797 operates in alignment with Philippine Amusement and Gaming Corporation (PAGCOR) gaming regulations and processes personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations as overseen by the National Privacy Commission.

2. Data We Collect

2.1 Registration and Identity Data

When you create a ph797 account, we collect your legal name, date of birth, nationality, Philippine mobile number or email address, and your chosen username and password. This information is required to establish and secure your account and to verify that you meet the minimum age requirement of 21 years as required by PAGCOR regulations.

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, ph797 may collect copies of your Philippine government-issued identification document (e.g., PhilSys National ID, UMID, Driver's License, or Passport), a selfie photograph for biometric verification, proof of residential address (e.g., utility bill or bank statement), and proof of payment method ownership.

2.3 Financial Transaction Data

ph797 records all deposit and withdrawal transactions, including the payment method used (GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven Cliqq, USDT TRC20, or Coins.ph), transaction amounts in PHP, timestamps, and transaction reference numbers. ph797 does not store full payment account credentials — only masked identifiers sufficient to match transactions to your account.

2.4 Gaming Activity Data

ph797 logs your game history, bet amounts, game outcomes, session durations, and bonus activity. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

2.5 Technical and Device Data

When you access ph797, we automatically collect your IP address, device type (mobile or desktop), operating system, browser type and version, session timestamps, and approximate geographic location derived from IP geolocation. This data is used for security monitoring, fraud detection, and platform performance optimization.

2.6 Communications Data

If you contact ph797 support, we retain records of the communication, including the content of support tickets, chat transcripts, and any documents you provide during the interaction.

3. How We Use Your Data

ph797 uses the personal data we collect for the following purposes:

• Account management: Creating, operating, securing, and closing your ph797 account.
• Identity and age verification: Ensuring compliance with the 21+ age requirement and KYC obligations.
• Transaction processing: Processing PHP deposits, wagers, withdrawals, and bonus credits through your chosen payment method.
• Regulatory compliance: Meeting AML, counter-terrorism financing, and PAGCOR reporting obligations.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and to enforce account limits, self-exclusions, and responsible gaming tools.
• Security and fraud prevention: Detecting and preventing unauthorized account access, payment fraud, collusion, and prohibited conduct.
• Customer support: Responding to your inquiries, processing complaints, and resolving disputes.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve ph797's features, performance, and game offering.

4. Legal Bases for Processing

ph797 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to provide you with ph797's gaming services under the Terms and Conditions you have accepted.
• Legal obligation: Processing required to comply with KYC, AML, PAGCOR, and NPC obligations applicable to ph797 as a gaming operator.
• Legitimate interests: Processing for fraud prevention, account security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent that you may withdraw at any time.

5. Sharing Your Data

ph797 does not sell your personal information to third parties. ph797 may share your data in the following limited circumstances:

• Payment processors: Your transaction data is shared with GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other payment partners solely to process your deposits and withdrawals.
• Game providers: Your username and session token are shared with third-party game providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) to operate the game you are playing. These providers do not receive your full personal profile.
• KYC and identity verification services: Your identity documents may be processed by licensed third-party KYC providers for automated verification purposes under strict data processing agreements.
• Regulatory authorities: ph797 is required to disclose account and transaction information to PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine authorities upon lawful request.
• Professional advisers: Legal counsel, auditors, and insurers may access personal data on a confidential basis where necessary for professional services.

6. Cookies & Tracking Technologies

6.1 Types of Cookies Used

ph797 uses the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to ph797 and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking the platform.
• Performance cookies: Used to measure page load times, error rates, and game performance metrics. Data is aggregated and anonymized. ph797 uses these to optimize the platform experience for Filipino users on mobile networks.
• Preference cookies: Store your language, display, and notification settings so you do not need to reconfigure them on each visit.

6.2 Third-Party Advertising Cookies

ph797 does not use third-party advertising or behavioral targeting cookies. No data is shared with ad networks, data brokers, or social media advertising platforms for retargeting purposes.

6.3 Managing Cookies

You may configure your browser to refuse or delete non-essential cookies. Note that disabling essential cookies will prevent you from logging in to ph797. Preference and performance cookies may be disabled without affecting your ability to use the platform's core functionality.

7. Data Retention

ph797 retains your personal data for as long as your account remains active and for a minimum of five (5) years following account closure, in compliance with PAGCOR regulatory requirements and AML record-keeping obligations under Philippine law. Specific retention periods are as follows:

• Account registration data and KYC documents: 5 years from account closure.
• Financial transaction records: 5 years from the date of each transaction, as required by the AMLC.
• Gaming activity logs: 2 years from the date of activity, unless required longer for dispute resolution.
• Customer support communications: 2 years from the date of the interaction.
• Marketing consent records: Until consent is withdrawn and for 1 year thereafter for compliance evidence.

Upon expiry of the applicable retention period, ph797 will securely delete or anonymize your personal data.

8. Security Measures

ph797 implements technical and organizational security measures proportionate to the sensitivity of the personal data we hold, including:

• TLS 1.3 encryption for all data in transit between your browser and ph797 servers.
• AES-256 encryption for personal data stored in ph797 databases.
• Salted password hashing — passwords are never stored in plain text.
• Multi-factor authentication requirements for ph797 internal staff accessing user data.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and penetration testing by qualified independent security professionals.
• Intrusion detection and automated anomaly alerting systems monitoring the ph797 infrastructure 24/7.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, ph797 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected users without undue delay in accordance with the Data Privacy Act.

9. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to the personal data ph797 holds about you:

• Right to be informed: The right to know how your personal data is collected and used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data ph797 holds about you.
• Right to rectification: The right to correct inaccurate or incomplete personal data in your ph797 account.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to data portability: The right to receive a copy of certain data in a structured, machine-readable format.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission if you believe ph797 has processed your data unlawfully.

To exercise any of these rights, contact ph797 at the support email address listed in the footer of this page. ph797 will respond to data subject requests within 30 days of receipt.

10. Children and Minors

ph797 strictly prohibits the use of its platform by persons under the age of 21 years. ph797 does not knowingly collect or process personal data from individuals under 21. If ph797 becomes aware that personal data has been collected from a person under the minimum age, we will promptly delete that data and close the associated account. Parents or guardians who believe their child has registered with ph797 should contact support immediately.

11. International Data Transfers

ph797 primarily stores and processes personal data within the Philippines. Where personal data is transferred to a third-party service provider located outside the Philippines — for example, a game provider operating servers in another jurisdiction — ph797 ensures that such transfers are protected by contractual data processing agreements that provide a level of protection equivalent to that required by the Data Privacy Act. ph797 does not transfer your personal data to countries without adequate data protection frameworks without implementing appropriate safeguards.

12. Changes to This Privacy Policy

ph797 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered users via email and/or a notification displayed upon login to ph797. The "Last updated" date at the top of this Policy will be revised with each update. Continued use of ph797 after the effective date of a revised Policy constitutes your acceptance of the updated terms.

13. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by ph797, please contact the ph797 Data Privacy team at the email address listed in the footer of this page. Please include "Privacy Request" and your registered ph797 username in the subject line to ensure prompt routing to the correct team.

If you are not satisfied with ph797's response to your privacy concern, you have the right to submit a complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the Philippine government authority responsible for overseeing compliance with the Data Privacy Act of 2012.