Scope: This Privacy Policy applies to all personal data collected by ph959 through the ph959.app website, mobile applications, customer support channels, and any other services operated under the ph959 brand. By using the ph959 platform, you acknowledge that you have read and understood this policy.
1 Introduction
ph959 ("ph959," "we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you," "your," or "User") who access and use the ph959 online gaming platform available at ph959.app. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).
This policy describes in plain, straightforward terms: what categories of personal data ph959 collects from you; the purposes for which that data is processed; the legal bases that justify our processing activities; how long we retain your data; who we share it with and under what conditions; and the rights you hold as a data subject under Philippine law.
ph959 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the platform. Where ph959 engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to handle your data in accordance with this policy and applicable law.
If you have questions about this Privacy Policy or wish to exercise any of your data subject rights, please refer to Section 14 for contact details.
2 Personal Data We Collect
ph959 collects personal data across several categories depending on how you interact with the platform. The table below summarizes the main categories of data we collect and specific examples within each category.
| Category |
Examples |
Required? |
| Identity Data |
Full legal name, date of birth, nationality, government-issued ID number (passport, UMID, PhilSys ID, driver's license) |
Yes — for KYC |
| Contact Data |
Email address, mobile number, residential address (city, province, postal code) |
Yes — for account |
| Financial Data |
GCash number, PayMaya account, bank account name and number (BPI, BDO, Metrobank), transaction history |
Yes — for payments |
| Gaming Data |
Game history, wager amounts, win/loss records, session duration, bonus usage |
Yes — operational |
| Technical Data |
IP address, device type, browser type and version, operating system, screen resolution, time zone |
Automatic |
| Usage Data |
Pages visited, features used, click paths, session timestamps, referral source |
Automatic |
| Communications Data |
Live chat transcripts, support ticket content, email correspondence with ph959 |
When you contact us |
| Verification Documents |
Scanned or photographed copies of government-issued IDs, selfies for liveness checks, proof of address documents |
Yes — for KYC |
ph959 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes under applicable KYC regulations.
3 How We Collect Your Data
ph959 collects personal data through the following channels and methods:
3.1 Directly From You
The majority of personal data ph959 holds about you is provided directly by you during the following interactions:
- Account Registration: When you create a ph959 account, you provide your name, date of birth, email address, mobile number, and residential address;
- KYC Verification: When you submit identity documents to verify your account or unlock withdrawal functionality;
- Payment Transactions: When you make a deposit or request a withdrawal, your payment method details are collected and processed;
- Customer Support: When you contact ph959 via live chat or email, the content of your communications is recorded;
- Promotions and Surveys: When you participate in ph959 promotions, competitions, or feedback surveys.
3.2 Automatically
When you access the ph959 platform, certain technical and usage data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser information, and behavioral data such as pages visited and features used. Please refer to Section 7 for a full explanation of our cookie practices.
3.3 From Third Parties
ph959 may receive personal data about you from the following third-party sources:
- Identity Verification Providers: Third-party KYC and AML screening services that cross-reference your submitted identity documents against government databases and sanctions lists;
- Payment Processors: E-wallet providers (GCash, PayMaya) and banking partners (BPI, BDO, Metrobank) may share transaction confirmation data with ph959;
- Fraud Prevention Services: Risk intelligence providers that flag suspicious account activity or known fraudulent identities.
4 How We Use Your Personal Data
ph959 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or establishing a separate legal basis.
- Account Management: To create, maintain, and administer your ph959 account, including processing your registration, verifying your identity, and managing your account settings;
- Service Delivery: To provide you with access to ph959's gaming products, process your bets and wagers, calculate and credit winnings, and deliver the core functionality of the platform;
- Payment Processing: To process deposits and withdrawals via your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank) and to maintain accurate financial records;
- KYC and AML Compliance: To verify your identity, assess your source of funds, and screen your details against sanctions and politically exposed persons (PEP) lists as required by Philippine AML regulations;
- Responsible Gaming: To monitor your gaming behavior for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide responsible gaming interventions where appropriate;
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the platform;
- Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
- Legal Compliance: To comply with applicable Philippine laws and regulations, respond to lawful requests from regulatory authorities, and enforce our Terms & Conditions;
- Platform Improvement: To analyze usage patterns, conduct A/B testing, and improve the functionality, performance, and user experience of the ph959 platform;
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
5 Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, ph959 must have a lawful basis for each processing activity involving your personal data. The legal bases ph959 relies upon are as follows:
- Contractual Necessity: Processing that is necessary to perform the contract between you and ph959 — i.e., to provide you with the gaming services you have registered for, process your transactions, and manage your account;
- Legal Obligation: Processing that is required to comply with ph959's obligations under Philippine law, including AML/CTF regulations, KYC requirements, and data retention mandates;
- Legitimate Interests: Processing that is necessary for ph959's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your privacy rights;
- Consent: Processing for marketing communications and non-essential cookies, where ph959 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6 Data Sharing and Disclosure
ph959 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:
6.1 Service Providers (Personal Information Processors)
ph959 engages carefully selected third-party service providers to assist in operating the platform. These providers process your data strictly on ph959's instructions and are bound by data processing agreements. Categories of service providers include: identity verification and KYC providers; payment processing partners; cloud hosting and infrastructure providers; customer support platform operators; fraud detection and risk management services; and email and SMS communication providers.
6.2 Regulatory and Law Enforcement Authorities
ph959 may disclose your personal data to Philippine government agencies, regulatory bodies, law enforcement authorities, or courts where required to do so by law, court order, or regulatory directive. This includes disclosures to the Anti-Money Laundering Council (AMLC) and other competent authorities as required under Philippine AML legislation.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of ph959's business, your personal data may be transferred to the acquiring entity as part of that transaction. ph959 will notify you of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.
6.4 With Your Consent
ph959 may share your personal data with third parties in circumstances not described above where you have provided your explicit prior consent to such sharing.
Important: ph959 will never share your personal data with third-party advertisers, data brokers, or marketing companies without your explicit consent.
7 Cookies & Tracking Technologies
ph959 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and support security functions. The following categories of cookies are used on ph959.app:
| Cookie Type |
Purpose |
Can Be Disabled? |
| Strictly Necessary |
Session management, authentication, security tokens, load balancing. Required for the platform to function. |
No |
| Functional |
Remembering your language preference, display settings, and responsible gaming tool configurations. |
Yes |
| Analytics |
Aggregated, anonymized data on how users navigate the platform, used to improve performance and UX. |
Yes |
| Security |
Fraud detection signals, device fingerprinting for account protection, bot detection. |
No |
You can manage your cookie preferences through your browser settings. Note that disabling functional or analytics cookies will not affect your ability to use the core gaming features of ph959, but may limit certain personalization features. Disabling strictly necessary or security cookies may impair platform functionality and is not recommended.
8 Data Retention
ph959 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following general retention periods apply:
- Account Data: Retained for the duration of your active account relationship with ph959, plus a minimum of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements;
- Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act;
- KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory investigation or legal hold;
- Customer Support Records: Retained for three (3) years from the date of the last interaction, unless the matter is subject to ongoing dispute or legal proceedings;
- Marketing Consent Records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent, to demonstrate compliance;
- Technical and Usage Logs: Retained for up to twelve (12) months in identifiable form, after which they are anonymized or deleted.
Upon expiry of the applicable retention period, ph959 will securely delete or anonymize your personal data in a manner that prevents reconstruction or re-identification.
9 Data Security
ph959 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
- Encryption in Transit: All data transmitted between your device and ph959 servers is encrypted using TLS 1.2 or higher;
- Encryption at Rest: Sensitive personal data stored on ph959 servers, including identity documents and financial records, is encrypted using AES-256 encryption;
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. ph959 employees and contractors are granted access only to the data necessary to perform their specific job functions;
- Two-Factor Authentication: ph959 supports and encourages the use of two-factor authentication (2FA) for all user accounts to reduce the risk of unauthorized access;
- Regular Security Audits: ph959 conducts periodic security assessments, penetration testing, and vulnerability scans of its platform infrastructure;
- Staff Training: All ph959 personnel who handle personal data receive regular training on data protection obligations and security best practices.
While ph959 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying ph959 immediately if you suspect unauthorized access to your account.
10 Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph959. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.
Right to Access
You have the right to request a copy of the personal data ph959 holds about you, along with information about how it is being processed. ph959 will respond to verified access requests within 30 days.
Right to Rectification
If any personal data ph959 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your ph959 account settings.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that ph959 may be required to retain certain data for legal compliance purposes even following an erasure request.
Right to Object
You have the right to object to ph959's processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes. ph959 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
Right to Lodge a Complaint
If you believe ph959 has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. We encourage you to contact ph959 first so we can attempt to resolve your concern directly.
ph959 will not charge a fee for handling data subject requests unless the request is manifestly unfounded or excessive. ph959 reserves the right to verify your identity before processing any data subject request to protect against unauthorized disclosure.
11 Children's Privacy
Age Restriction: ph959 is strictly for individuals aged 21 years or older. ph959 does not knowingly collect personal data from persons under the age of 21.
ph959 implements age verification measures at the point of registration and during KYC verification to prevent underage individuals from accessing the platform. If ph959 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that your child has registered on ph959 without your knowledge, please contact our support team immediately using the details in Section 14. We will investigate and take appropriate action promptly.
12 Cross-Border Data Transfers
ph959 primarily stores and processes personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, KYC verification platforms, and fraud detection services — may process data in jurisdictions outside the Philippines.
Where personal data is transferred outside the Philippines, ph959 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:
- Contractual clauses in data processing agreements that impose data protection obligations on the recipient;
- Transfers to jurisdictions that the National Privacy Commission has recognized as providing an adequate level of data protection;
- Binding corporate rules where the recipient is part of a corporate group with group-wide data protection standards.
You may request further information about the specific safeguards in place for any cross-border transfer of your personal data by contacting our Data Protection Officer.
13 Updates to This Privacy Policy
ph959 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, ph959 will notify registered users by email to their registered address and by displaying a prominent notice on the ph959 platform for a period of not less than seven (7) days prior to the changes taking effect.
The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the ph959 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated policy. If you do not agree to the revised policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.
ph959 maintains an archive of previous versions of this Privacy Policy, which is available upon written request to our Data Protection Officer.
14 Contact & Data Protection Officer
ph959 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us through the following channels:
Data Protection Officer:
ph959 Data Privacy Office
Email:
[email protected]
Live Chat:
Available 24/7 via the ph959 platform. Average response time under 3 minutes.
Response Time:
ph959 aims to acknowledge all privacy-related requests within 48 hours and resolve them within 30 calendar days.
For complaints that cannot be resolved directly with ph959, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.