Privacy Policy

This Privacy Policy ("Policy") describes how ph50 ("ph50," "we," "us," or "our") collects, processes, stores, uses, and protects personal information in connection with your use of the online gaming platform at ph50.club ("the Platform") and any related services, communications, and support channels operated by ph50.

ph50 is committed to protecting the privacy and personal data of all individuals who interact with our Platform. This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission of the Philippines ("NPC"). It is also issued in compliance with applicable requirements of the Philippine Amusement and Gaming Corporation ("PAGCOR"), which regulates ph50's gaming operations.

This Policy should be read alongside ph50's Terms & Conditions and any game-specific or promotion-specific terms that apply to your use of particular Platform features. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.

For the purposes of the Data Privacy Act of 2012, ph50 acts as the Personal Information Controller ("PIC") in respect of personal data collected through and in connection with the ph50 Platform. This means ph50 determines the purposes and means by which your personal data is processed.

ph50 operates as a PAGCOR-regulated online gaming platform. All data processing activities described in this Policy are carried out under ph50's registered Philippine corporate entity and in accordance with applicable PAGCOR licensing conditions.

Where ph50 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification services, and cloud infrastructure providers — those parties operate as Personal Information Processors ("PIP") acting under ph50's instructions and subject to appropriate data processing agreements.

ph50 collects personal data that is necessary for the lawful operation of its gaming platform, the fulfilment of its regulatory obligations under PAGCOR licensing conditions and Philippine law, and the delivery of its services to you. The categories of personal data ph50 collects include:

ph50 does not intentionally collect sensitive personal information as defined under RA 10173 — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — except where explicitly required by PAGCOR KYC standards or applicable AML regulations (e.g., government ID facial verification for age and identity confirmation).

ph50 collects your personal data through the following means:

4.1 Directly From You

• Account Registration: When you create a ph50 account, you provide identity and contact information including your mobile number, full name, date of birth, and address.
• KYC Verification: When you complete identity verification, you upload a government-issued ID and a selfie for facial matching and age confirmation.
• Deposits and Withdrawals: When you fund your ph50 wallet via GCash, Maya, or bank transfer, payment account details are collected.
• Support Interactions: When you contact ph50's live chat or submit support tickets, information you provide in those communications is collected.
• Responsible Gaming Requests: When you set deposit limits, request self-exclusion, or contact ph50 for responsible gaming assistance.

4.2 Automatically Through Platform Use

• When you browse and use the ph50 Platform, technical and usage data is automatically collected through our systems, including your IP address, device characteristics, and session activity.
• Cookies and similar tracking technologies record Platform usage patterns as described in Section 10 of this Policy.
• All game activity — bets placed, results, session durations — is automatically logged as part of ph50's standard gaming platform records required for PAGCOR compliance.

4.3 From Third Parties

• Payment processors (e.g., GCash, Maya) may provide transaction confirmation data when you make deposits or withdrawal requests.
• KYC service providers may return identity verification results including document authenticity checks and facial match scores.
• Where required by PAGCOR or AML regulations, ph50 may receive information from government databases for identity and eligibility verification.

Under the Data Privacy Act of 2012, ph50 processes your personal data on the following lawful grounds:

• Consent: For marketing communications, personalised promotional offers, and optional platform features. You may withdraw consent for these purposes at any time through your account settings or by contacting ph50 support, without affecting the lawfulness of processing prior to withdrawal.
• Contractual Necessity: Processing necessary to fulfil ph50's contractual obligations to you under the Terms & Conditions — including operating your account, processing deposits and withdrawals, delivering gaming services, and providing customer support.
• Legal Obligation: Processing required to comply with ph50's legal obligations under Philippine law, including PAGCOR licensing conditions, RA 9160 (Anti-Money Laundering Act), RA 9775 (as applicable), and applicable tax regulations.
• Legitimate Interests: Processing necessary for ph50's legitimate interests in operating a secure and fair gaming platform, preventing fraud, detecting and preventing technical abuse, and improving Platform performance — where such interests do not override your fundamental rights and freedoms under the DPA.
• Vital Interests: In limited circumstances where processing is necessary to protect the vital interests of a data subject or another person, particularly in connection with responsible gaming interventions.

ph50 uses your personal data for the following purposes:

• To create, verify, operate, and manage your ph50 player account;
• To verify your identity, age (21+), and eligibility to use the Platform in accordance with PAGCOR requirements and RA 9160;
• To process deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, Coins.ph, USDT TRC20, and 7-Eleven Cliqq;
• To deliver gaming services, including real-time game delivery, live casino streaming, bingo, slots, fishing games, and sports betting;
• To operate ph50's responsible gaming programme, including monitoring for problem gambling indicators, processing self-exclusion requests, and enforcing deposit limits;
• To comply with PAGCOR's reporting and record-keeping obligations, including mandatory player activity reports;
• To comply with AML/CFT obligations under RA 9160, including Suspicious Transaction Reports (STRs) where required;
• To communicate with you about your account, transactions, promotions, and Platform updates;
• To provide customer support and resolve disputes or complaints;
• To detect, prevent, and investigate fraud, unauthorised access, and other forms of abuse or prohibited conduct;
• To analyse and improve Platform performance, user experience, and game offering;
• To send personalised promotional communications where you have consented to receive them.

ph50 does not sell or rent your personal data to any third party. ph50 may share personal data with the following categories of recipient where there is a lawful basis to do so:

7.1 Regulatory Authorities

ph50 is required by law and PAGCOR licensing conditions to share certain player data with regulatory and government authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent Philippine government bodies — where required by valid legal process, court order, or regulatory mandate.

7.2 Service Providers

ph50 engages trusted third-party service providers to support the operation of the Platform, including: payment processors (GCash/Maya/banks), KYC and identity verification providers, cloud hosting and data storage providers, fraud detection and cybersecurity services, customer support platform providers, and marketing analytics providers (for consented communications only). All service providers acting as Personal Information Processors are bound by data processing agreements requiring them to process personal data only under ph50's instructions and to maintain appropriate security standards.

7.3 Game Software Providers

Game providers integrated into the ph50 Platform (such as Pragmatic Play, PG Soft, JILI, and others) may receive session-level technical data necessary for game delivery. These providers are not granted access to personally identifiable player information beyond what is technically required for game operation and are bound by ph50's data sharing terms.

7.4 Law Enforcement

Where required by Philippine law, court order, or valid law enforcement request, ph50 may be required to disclose personal data to law enforcement authorities. ph50 will not proactively share personal data with law enforcement beyond what is legally required.

ph50 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

Upon expiry of the applicable retention period, personal data will be securely destroyed or anonymised in accordance with ph50's data disposal procedures, such that the data can no longer be attributed to an identifiable individual.

ph50 implements organisational and technical security measures appropriate to the nature and volume of personal data processed, and proportionate to the risks associated with the processing activities described in this Policy. These measures include, but are not limited to:

• Transport Encryption: All data transmitted between your device and ph50's servers is protected using TLS 1.2 or higher (HTTPS). Credentials and sensitive data are never transmitted in plain text.
• Data Encryption at Rest: Personal data stored in ph50's databases — including KYC documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Password Security: Player passwords are stored using one-way cryptographic hashing algorithms. ph50 staff cannot retrieve your actual password from stored data.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. ph50 employees and contractors are granted minimum access rights necessary for their role and are subject to confidentiality obligations.
• OTP Authentication: Sensitive account actions — including password resets, large withdrawal requests, and account detail changes — require one-time password (OTP) verification to your registered Philippine mobile number.
• Fraud Detection Systems: Automated systems monitor for unusual account activity, login anomalies, and potentially fraudulent transactions in real time.
• Regular Security Reviews: ph50's security posture, platform infrastructure, and data protection measures are subject to periodic internal review and, where applicable, third-party security assessment.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, ph50 will notify the National Privacy Commission and, where required, affected data subjects in accordance with the timeframes specified under the DPA and NPC regulations.

ph50 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate the Platform, maintain your session, and collect usage data to improve the Platform experience.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that maintain your logged-in state. These cannot be disabled without rendering the Platform unusable.
• Functional Cookies: Remember your preferences (such as language settings and display preferences) to personalise your Platform experience.
• Analytics Cookies: Collect anonymised or aggregated data about how players navigate and use the Platform, to help ph50 identify areas for improvement. This data does not identify you personally.
• Security Cookies: Support fraud detection and abuse prevention, including identifying unusual login patterns and device fingerprinting for account security purposes.

10.2 Cookie Management

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling certain categories of cookies — particularly strictly necessary cookies — may impair the functionality of the ph50 Platform, including your ability to remain logged in or access game features.

ph50 does not use third-party advertising cookies or retargeting pixels for display advertising on external websites without your consent.

Under Republic Act 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by ph50. ph50 is committed to facilitating the exercise of these rights in a timely and transparent manner.

To exercise any of the above rights, please contact ph50's Data Protection Officer using the contact details in Section 15. ph50 will respond to requests within 15 business days from receipt. ph50 will not charge a fee for exercising any of these rights under normal circumstances, but may charge a reasonable fee where requests are manifestly unfounded or excessive.

If you are not satisfied with ph50's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at [email protected] or through the NPC's official complaint portal.

The ph50 Platform is strictly restricted to persons aged 21 years and above, consistent with PAGCOR's mandate for casino-style online gaming in the Philippines. ph50 does not knowingly collect personal data from individuals under 21 years of age.

All account registrations on ph50 are subject to mandatory KYC identity and age verification using government-issued identification documents. Any account determined to belong to an individual under 21 years of age will be immediately closed and any associated personal data will be handled in accordance with ph50's data retention and disposal procedures, subject to any overriding regulatory obligations to retain records of the incident.

If you have reason to believe that an individual under 21 years of age has registered an account or provided personal data to ph50, please contact ph50's Data Protection Officer immediately at the contact details provided in Section 15.

ph50 primarily processes and stores personal data within the Republic of the Philippines. However, some of ph50's third-party service providers — including cloud infrastructure providers, game software companies, and KYC verification services — may store or process data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, ph50 ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers. These safeguards include:

• Binding contractual obligations on receiving parties requiring data protection standards equivalent to those applicable in the Philippines;
• Selection of service providers in jurisdictions with adequate data protection frameworks, as assessed by the NPC;
• Data transfer impact assessments where required by NPC regulations.

ph50 does not transfer personal data to jurisdictions that do not provide adequate levels of protection without implementing the safeguards described above.

ph50 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in Philippine law, NPC guidelines, PAGCOR regulatory requirements, ph50's data processing practices, or other relevant developments. The effective date at the top of this Policy indicates when the current version took effect.

Material amendments to this Policy will be communicated to registered players via a notice displayed on the Platform and, where practicable, via a notification to your registered mobile number or contact details. Your continued use of the ph50 Platform following the effective date of an amended Policy constitutes your acknowledgment of the changes.

ph50 recommends that you review this Policy periodically to remain informed about how your personal data is being processed. Previous versions of this Policy are available upon request from ph50's Data Protection Officer.

ph50 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding this Policy or ph50's data processing activities, you may contact us through the following channels:

• Data Protection Officer: [email protected] (plain text — not a clickable link)
• General Support & Data Rights Requests: [email protected]
• Live Chat: Available 24/7 directly on the ph50 Platform — this is the fastest channel for urgent requests.

When submitting a data rights request, please include your full registered name, registered Philippine mobile number, and a description of your request. ph50 may request identity verification before processing certain types of data rights requests to protect your account security.

If you are not satisfied with ph50's handling of your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC accepts complaints through its official website and email at [email protected].