21+ Only  ph989 Casino is strictly for adults 21 years and above, in compliance with PAGCOR guidelines for Philippine gaming platforms.
Data Privacy · RA 10173 · Your Rights

ph989 Privacy Policy

This Privacy Policy explains how ph989 collects, uses, stores, shares, and protects your personal information when you use our online casino and sportsbook platform at ph989.vip. Your privacy matters to us — please read this document carefully before registering or using any ph989 service.

Effective Date: January 2026 Language: English RA 10173 Aligned Philippines
Section 1

1. Introduction

This Privacy Policy (hereinafter "Policy") sets out the basis on which ph989 (hereinafter "ph989," "we," "us," or "the Platform") collects, processes, stores, uses, and discloses personal information obtained from individuals who register for, access, or use any service provided through ph989.vip and all associated subdomains, mobile interfaces, and digital touchpoints (collectively, "the Platform").

ph989 is committed to protecting the privacy and personal data of all its players and visitors, including those based in Metro Manila, Cebu, Davao, and every region of the Philippines. We recognize that trust is foundational to any relationship between a financial services or gaming platform and its users, and we take our obligations as a personal information controller seriously.

This Policy is issued in compliance with the Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (hereinafter "DPA"), its Implementing Rules and Regulations (IRR), and the applicable issuances of the National Privacy Commission (NPC) of the Philippines. This Policy forms part of the ph989 Terms and Conditions, which are available at Terms & Conditions.

By registering for and using ph989, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must discontinue use of the Platform and request account closure through our support team.

Section 2

2. Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller responsible for your personal data processed in connection with your use of ph989 is the operator of the ph989 platform.

All data protection inquiries, requests to exercise data subject rights, and communications regarding this Privacy Policy should be directed to the ph989 Data Protection Officer (DPO) through the contact details specified in Section 15 of this Policy. ph989 maintains a designated DPO responsible for overseeing the platform's compliance with the DPA and ensuring that personal data is handled in accordance with applicable privacy regulations.

Section 3

3. Categories of Personal Data We Collect

ph989 collects the following categories of personal data, subject to the principle of proportionality — we collect only what is necessary for the stated purpose:

3.1 Registration and Identity Data

  • Full legal name (as required for KYC verification)
  • Date of birth (to verify the 21-year age requirement)
  • Philippine mobile number (primary account identifier and OTP delivery channel)
  • Username and encrypted password
  • Government-issued identification document details (for KYC verification): including ID type, ID number, and ID image
  • Residential address or proof of address documentation
  • Nationality and country of residence

3.2 Financial and Transaction Data

  • GCash account number or registered mobile number associated with GCash
  • Maya (PayMaya) account details
  • Philippine bank account details (BDO, BPI, Metrobank, or other supported institutions) where bank transfer is selected
  • Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references
  • Source of funds documentation where required by anti-money laundering regulations

3.3 Gaming Activity Data

  • Game session history: games played, session duration, bet amounts, and outcomes
  • Wagering history across all ph989 game categories
  • Bonus and promotion participation records
  • VIP loyalty program tier status and point accumulation records
  • Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

3.4 Technical and Device Data

  • IP address at login and during session
  • Device type, operating system, and browser type
  • Session timestamps and duration
  • Mobile network operator (Globe, Smart, DITO, etc.) where determinable
  • Geolocation data at account registration (approximate, derived from IP)
  • Cookie and tracking technology data (see Section 10)

3.5 Communication Data

  • Records of all support interactions via live chat, including chat transcripts
  • SMS communications (OTP delivery, account notification records)
  • Feedback, complaint, and dispute records

Sensitive Personal Information: Under the DPA, certain data qualifies as sensitive personal information (SPI), including government ID numbers and financial account details. ph989 treats all such data with heightened protection and does not process SPI beyond what is strictly necessary for account verification, payment processing, and regulatory compliance.

Section 4

4. How We Collect Your Data

ph989 collects personal data through the following means:

  • Directly from you: Information you provide during account registration, KYC verification, payment method linking, support contacts, or feedback submissions.
  • Automatically during platform use: Technical data collected through your device and browser as you interact with ph989, including session data, IP addresses, and behavioral data generated through your gaming activity.
  • From payment processors: Transaction confirmation data from GCash, Maya, and banking partners that process your deposits and withdrawals. These third parties have their own privacy policies governing their data handling.
  • From identity verification services: Results of identity verification checks conducted through ph989's KYC verification partners, where applicable.
  • From cookies and tracking technologies: As described in Section 10 of this Policy, ph989 uses cookies and similar tracking technologies to collect data about how the platform is accessed and used.
Section 6

6. How ph989 Uses Your Personal Data

ph989 uses the personal data it collects for the following purposes:

6.1 Account Administration and Service Delivery

Processing your registration, verifying your identity and eligibility, maintaining your account, delivering game sessions and sporting event markets, processing deposits and withdrawals, and providing customer support — all of which are necessary for the performance of the gaming services contract between you and ph989.

6.2 Regulatory Compliance and Legal Obligations

Conducting age verification to enforce the 21+ requirement; performing KYC identity verification; monitoring transactions for anti-money laundering (AML) compliance under RA 9160 (Anti-Money Laundering Act) and its amendments; responding to lawful requests from Philippine regulatory authorities, law enforcement agencies, and courts; and maintaining legally required records of gaming activity and financial transactions.

6.3 Fraud Prevention and Security

Detecting, investigating, and preventing fraudulent activity, bonus abuse, multiple account violations, unauthorized account access, and any other conduct that constitutes a breach of the ph989 Terms and Conditions or applicable Philippine law. IP data, device fingerprinting, and login pattern analysis are used for these purposes.

6.4 Responsible Gaming Monitoring

Monitoring gaming activity patterns to support the delivery of responsible gaming tools and to identify players who may be exhibiting signs of problematic gambling behavior. ph989 uses this data proactively to trigger responsible gaming interventions where appropriate, consistent with its obligations under applicable gaming regulations.

6.5 Platform Improvement and Analytics

Aggregate and anonymized analysis of platform usage patterns to inform product decisions, identify technical issues, optimize game library curation, and improve the overall player experience. This processing does not involve making decisions about individual players.

6.6 Communications

Sending transactional communications (OTP codes, deposit confirmations, withdrawal notifications, security alerts) to your registered mobile number; and, where you have provided consent, sending account-related notifications about promotions, new game releases, and VIP program updates. You may opt out of non-essential communications through your account settings at any time.

Section 7

7. Data Sharing and Disclosure

ph989 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Personal data is shared only in the following circumstances:

7.1 Payment Processing Partners

Transaction data is shared with GCash (Mynt – Globe Fintech Innovations, Inc.), Maya (PayMaya Philippines, Inc.), BDO Unibank, Inc., Bank of the Philippine Islands (BPI), Metrobank, and other payment partners as necessary to process your deposits and withdrawals. These entities process your data as independent data controllers under their own privacy policies for payment processing purposes only.

7.2 KYC and Identity Verification Providers

Identity verification data submitted during KYC may be processed by ph989's contracted identity verification service provider(s) solely for the purpose of verifying your identity documents against authoritative sources. These providers operate under data processing agreements with ph989 and are bound by confidentiality obligations.

7.3 Game Software Providers

Technical session data necessary to deliver game content may be transmitted to ph989's licensed game software providers (including but not limited to JILI, PG Soft, and Pragmatic Play) for the purpose of delivering the game session. Game providers do not receive your identity documents, financial data, or contact details.

7.4 Legal and Regulatory Disclosure

ph989 may disclose your personal data to Philippine regulatory authorities (including PAGCOR and the Anti-Money Laundering Council (AMLC)), law enforcement agencies, and courts where required by applicable law, regulatory direction, valid legal process, or where ph989 reasonably believes disclosure is necessary to protect the rights, property, or safety of ph989, its players, or the public.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of ph989's business operations, personal data held by ph989 may be transferred to the relevant successor entity, subject to applicable privacy law requirements and with appropriate notice to affected data subjects.

No Sale of Data: ph989 does not and will not sell your personal data to data brokers, advertising networks, or any third party for marketing or profiling purposes unrelated to your use of the ph989 platform.

Section 8

8. Data Retention

ph989 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:

  • Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under Philippine law.
  • Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLC and applicable tax regulations.
  • Gaming activity logs: Retained for a minimum of three (3) years from the date of each game session.
  • Support and communication records: Retained for a minimum of two (2) years from the date of the relevant interaction.
  • Technical and device logs: Retained for a maximum of twelve (12) months, unless extended for specific fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph989's data disposal procedures. The deletion of data subject to active legal proceedings or regulatory investigations may be deferred pending resolution of those proceedings.

Section 9

9. Data Security Measures

ph989 implements technical and organizational security measures appropriate to the sensitivity of the personal data processed and the risks posed by our processing activities. These measures include:

  • 256-bit SSL/TLS encryption for all data transmitted between your browser or device and ph989 servers, ensuring that your credentials, financial data, and personal information cannot be intercepted in transit.
  • Password hashing and salting: Account passwords are stored in hashed and salted form using industry-standard cryptographic methods. ph989 staff cannot see or access your plaintext password.
  • OTP (One-Time Password) verification via SMS for account login from unrecognized devices and for high-sensitivity account actions, using your registered Philippine mobile number as a second factor.
  • Access controls and least-privilege principles: Access to personal data within ph989's internal systems is restricted to staff who require it for their specific job function, under role-based access controls and audit logging.
  • Data breach detection and response: ph989 maintains procedures for detecting, assessing, and responding to personal data breaches, including notification to the NPC and to affected data subjects in accordance with DPA requirements where a breach poses a real risk of serious harm.
  • Regular security reviews: ph989's platform infrastructure undergoes periodic security assessments to identify and address vulnerabilities.

Notwithstanding these measures, no internet-based platform or electronic transmission is entirely secure. ph989 cannot guarantee absolute security of data transmitted to or stored on the platform. You are responsible for maintaining the security of your own account credentials. Never share your ph989 password with anyone, including persons claiming to represent ph989 — our staff will never ask for your password.

Section 10

10. Cookies and Tracking Technologies

ph989 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the platform, maintain your login session, and analyze platform usage. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the operation of the ph989 platform. They maintain your authenticated session across pages, store temporary game state data, and enable core platform functions. These cookies cannot be disabled without preventing you from using the platform.

10.2 Functional Cookies

These cookies remember your preferences (such as display settings and previously selected payment methods) to provide a more convenient experience on return visits. These are set only for authenticated account holders.

10.3 Analytics Cookies

ph989 uses analytics tools to collect aggregated, anonymized data about how the platform is used — including which game categories are most accessed, typical session durations, and common navigation patterns. This data is used solely to improve the platform. Analytics data does not identify individual players.

You may configure your browser to refuse or delete cookies; however, disabling strictly necessary cookies will prevent you from logging into and using ph989. ph989 does not use cookies to track your browsing activity on third-party websites or for cross-site advertising purposes.

Section 11

11. Minors and Age Verification

ph989 is strictly a platform for adults. The minimum age requirement for all ph989 services is 21 years of age, as mandated by PAGCOR guidelines for online gambling platforms in the Philippines. ph989 does not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step in the ph989 KYC process. If ph989 becomes aware that personal data has been collected from a person under the age of 21, it will take steps to delete that data and close the associated account promptly, subject to any applicable legal hold requirements. Any balance associated with an underage account may be forfeited in accordance with the ph989 Terms and Conditions.

If you are a parent or legal guardian who believes that a minor in your household has registered for ph989, please contact our support team immediately through the live chat on the platform so we can take appropriate action.

Section 12

12. Your Data Subject Rights Under the DPA

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph989. To exercise any of these rights, contact the ph989 DPO using the details in Section 15:

Verification of Identity: ph989 may require you to verify your identity before processing any data subject rights request to ensure that personal data is not disclosed or modified based on a request from an unauthorized third party.

Right to Be Informed

The right to be told how your data is collected, used, and processed — which this Policy fulfils.

Right of Access

The right to request a copy of the personal data ph989 holds about you and information about how it is used.

Right to Rectification

The right to have inaccurate or incomplete personal data corrected. Basic profile data can be updated in your account settings.

Right to Erasure

The right to request deletion of your personal data where there is no overriding legal or regulatory reason to retain it.

Right to Object

The right to object to certain types of processing of your personal data, including processing based on legitimate interests.

Right to Data Portability

The right to receive a copy of personal data you provided to ph989 in a structured, machine-readable format.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting prior lawful processing.

Right to Complain

The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph989 has violated your data privacy rights.

ph989 will acknowledge all data subject rights requests within five (5) business days and aims to respond substantively within thirty (30) calendar days, in line with DPA timelines. Complex requests may require additional time, in which case ph989 will notify you of the expected resolution timeframe.

Section 13

13. Cross-Border Data Transfers

Certain personal data processed by ph989 may be transferred to, stored at, or processed by systems or personnel located outside of the Philippines — for example, in connection with cloud infrastructure services, game software provider technical operations, or group-level security monitoring functions.

Where such transfers occur, ph989 takes steps to ensure that adequate data protection safeguards are in place in accordance with the requirements of Section 21 of the DPA and the implementing rules of the NPC governing cross-border data transfers. These safeguards may include contractual provisions, binding corporate rules, or transfers to jurisdictions that the NPC has determined provide an adequate level of data protection.

For information about the specific safeguards applicable to any cross-border transfer of your personal data, you may submit a request to the ph989 DPO using the contact details in Section 15.

Section 14

14. Changes to This Privacy Policy

ph989 may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, updates to applicable Philippine privacy law, or changes to the ph989 platform's features and services. The effective date of the current version of this Policy is displayed at the top of this page.

Material changes to this Policy — that is, changes that affect how we use your personal data in a way that may impact your rights or reasonable expectations — will be communicated to registered players through the platform interface, and/or by SMS notification to your registered Philippine mobile number, at a minimum of seven (7) calendar days before the change takes effect. Minor clarifications or non-material updates may take effect immediately upon publication.

Your continued use of ph989 after the effective date of any Policy update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using ph989 and request account closure before the revision's effective date.

ph989 recommends that you review this Privacy Policy periodically. All historical versions of this Policy are available upon request from the ph989 DPO.

Section 15

15. Contact Information and Data Protection Officer

ph989 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. For all data privacy inquiries, data subject rights requests, privacy complaints, or questions about this Policy, please contact:

ph989 Data Protection Officer
Email: [email protected] (plain text — not a link)
Platform: Live chat at ph989.vip (available 24/7)
Response Time: Within 5 business days for all DPA-related inquiries
Language: English and Filipino

If you are not satisfied with ph989's handling of your data privacy inquiry or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC), the independent government body responsible for administering and enforcing the Data Privacy Act. The NPC accepts complaints and inquiries through its official government channels.

This Privacy Policy was last reviewed and updated in January 2026. ph989 reserves all rights not expressly granted herein. This Policy is written in English; in the event of a conflict with any translated version, the English version shall prevail.

How ph989 Protects Your Data

Six commitments ph989 makes to every Filipino player regarding the handling of your personal information on our platform.

256-bit SSL Encryption

All data transmitted between your device and ph989 — including login credentials, personal details, and payment information — travels over an encrypted SSL connection. The same standard Philippine banks use for online banking.

We Never Sell Your Data

ph989 does not and will not sell your personal data to data brokers, advertising networks, or third parties for marketing purposes. Your data is used only to deliver the services you signed up for and meet our legal obligations.

RA 10173 Compliance

ph989 processes all personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and the issuances of the National Privacy Commission. Filipino players' data is protected under Philippine law.

Full Data Subject Rights

You have the right to access, correct, delete, and receive a copy of your personal data held by ph989. Submit a request to our DPO at any time via live support — response within 5 business days.

Hashed Password Storage

Your ph989 password is never stored in readable form. It is hashed and salted using cryptographic methods — ph989 staff cannot see your password, and neither can anyone who might access our database without authorization.

Dedicated DPO

ph989 maintains a designated Data Protection Officer responsible for overseeing RA 10173 compliance, handling data subject rights requests, and managing any data breach response in accordance with NPC requirements.

Play with Confidence at ph989

Your data is protected, your privacy is respected, and your rights are upheld. Create your ph989 account and experience the Philippines' most trusted online casino platform.