ph797 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, used, stored, and disclosed by ph797 ("ph797," "we," "us," or "our") in connection with the online gaming and sports betting platform operated at ph797.vip and any associated mobile applications, customer support channels, and marketing communications directed at registered account holders.

ph797 is the personal information controller ("PIC") as defined under the Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its Implementing Rules and Regulations. ph797 operates under the PAGCOR regulatory framework and is subject to applicable gaming regulations in the Republic of the Philippines.

This Policy should be read alongside the ph797 Terms and Conditions. By registering an account with ph797, you confirm that you have read and understood both documents. In the event of any conflict between this Policy and the Terms and Conditions with respect to data privacy matters, this Policy shall prevail.

ph797 collects the following categories of personal data in connection with account registration, identity verification, transaction processing, gaming activity, and player support:

2.1 Identity & Contact Data

• Full legal name as it appears on a Philippine government-issued identification document.
• Date of birth (used to verify compliance with the 21+ age requirement).
• Philippine residential address.
• Mobile number (Philippine +63 format).
• Email address.

2.2 Verification & KYC Documents

• Scanned or photographed copies of valid Philippine government-issued ID (PhilSys, SSS, UMID, driver's license, or passport).
• Selfie photographs used for biometric identity matching during KYC verification.
• Source-of-funds documentation where required by ph797's AML compliance team.

2.3 Financial & Transaction Data

• GCash mobile number or PayMaya account identifier.
• Bank account name and number (BDO, BPI, Metrobank) where bank transfers are used.
• Deposit and withdrawal history, including amounts in Philippine Peso (PHP), dates, and payment method identifiers.
• Bonus claims, rollover records, and VIP point balances.

2.4 Gaming Activity Data

• Game history across all ph797 verticals: slots, live dealer, sports betting, e-sabong, bingo, and specialty games.
• Wager amounts, outcomes, session durations, and win/loss records.
• Responsible gaming settings — deposit limits, session alerts, cooling-off periods, and self-exclusion status.

2.5 Technical & Device Data

• IP address and approximate geolocation.
• Device type, operating system, and browser version.
• Session timestamps, login records, and authentication logs.
• Cookies and similar tracking technologies as described in Section 7.

2.6 Communications Data

• Records of customer support interactions via live chat, email, and SMS.
• Survey responses, feedback submissions, and complaints.

ph797 collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide during account registration, the KYC verification process, deposit and withdrawal requests, customer support interactions, and participation in promotions or surveys.
• Automatically through the platform: Technical and device data collected via server logs, cookies, and tracking technologies when you access and use ph797.vip.
• From payment providers: Transaction confirmation and status data from GCash, PayMaya, BDO, BPI, Metrobank, and 7-Eleven payment processing systems.
• From identity verification partners: Verification status and risk signals from KYC processing partners operating under data processing agreements with ph797.
• From regulatory authorities: Where ph797 receives instructions or queries from PAGCOR, the NPC, or Philippine law enforcement agencies, associated data may be collected and recorded as part of compliance obligations.

ph797 processes personal data for the following specific and documented purposes:

ph797 relies on the following legal bases for processing personal data under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contract performance: Processing necessary to fulfill the ph797 Terms and Conditions, including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine law, including Anti-Money Laundering Act (AMLA) obligations, PAGCOR regulatory requirements, tax reporting, and NPC data management standards.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of the ph797 platform where such interests are not overridden by your data privacy rights.
• Consent: Marketing communications and optional cookies are processed only where you have provided explicit consent. You may withdraw consent for marketing communications at any time by contacting [email protected].

ph797 does not sell, rent, or trade your personal data to third parties for commercial purposes. ph797 may share personal data with the following categories of recipients, strictly for the purposes described:

6.1 Regulated Disclosures

• PAGCOR: Transaction data, player activity reports, and AML-related information as required under ph797's operating license conditions.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and covered transaction reports as mandated by the AMLA and its amendments.
• National Privacy Commission (NPC): Data breach notifications and compliance reports as required under RA 10173.
• Philippine law enforcement: Information disclosed pursuant to a valid court order, subpoena, or legally binding government request.

6.2 Service Providers (Data Processors)

ph797 engages third-party service providers who process personal data on ph797's behalf under data processing agreements that impose data protection obligations equivalent to those under RA 10173. These include:

• KYC and identity verification technology providers.
• Payment gateway and e-money operators (GCash/GXI, PayMaya/Voyager Innovations, and banking partners).
• Cloud hosting and infrastructure providers operating the ph797 platform.
• Fraud detection and AML screening service providers.
• Customer support platform providers.

ph797 uses cookies and similar tracking technologies to operate and improve the platform, maintain your session after login, and understand how players use the site. The following categories of cookies are used:

• Strictly necessary cookies: Required for platform operation — session management, authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences — language settings, game lobby layout, and responsible gaming configurations.
• Analytics cookies: Collect aggregated, anonymized data about how visitors navigate the ph797 platform to help us improve user experience. These are set only with your consent.
• Security cookies: Detect unusual login patterns, bot activity, and potential fraud attempts to protect your ph797 account.

You may manage non-essential cookies through your browser settings or the ph797 cookie preferences panel. Disabling strictly necessary cookies will impair your ability to use the ph797 login and gaming functions. ph797 does not deploy third-party advertising or cross-site tracking cookies.

ph797 implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and ph797's servers is encrypted using TLS 1.3 with 256-bit AES encryption.
• Encryption at rest: Sensitive personal data stored in ph797's databases — including identification documents, financial records, and KYC data — is encrypted at rest.
• Access controls: Personal data is accessible only to ph797 personnel with a legitimate business need. Role-based access controls and multi-factor authentication are enforced for all systems containing personal data.
• Penetration testing: ph797's infrastructure is subject to regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: ph797 maintains a documented data breach response plan that specifies notification timelines to the NPC and affected data subjects as required under RA 10173.

ph797 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following retention schedule applies:

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymized. Data subject to an ongoing legal dispute, regulatory investigation, or law enforcement hold will be retained until the conclusion of such proceedings, regardless of the standard retention schedule.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph797. These rights may be exercised by submitting a written request to ph797's Data Protection Officer at [email protected].

ph797 is strictly prohibited from collecting personal data from or about individuals under 21 years of age for the purposes of account registration, gaming activity, or any transaction on the ph797 platform. This restriction is consistent with PAGCOR's minimum age requirement for casino-style gambling in the Philippines.

ph797 employs KYC verification procedures specifically designed to detect and prevent underage registration. Where ph797 discovers that personal data has been collected from an individual under 21 years of age — whether by circumvention of age verification controls or otherwise — ph797 will:

• Immediately close the associated account.
• Delete all personal data associated with that account from active systems, subject to legal retention obligations for AML reporting.
• Withhold and forfeit any balance in the account pursuant to applicable Philippine gaming regulations.
• Report the incident to PAGCOR and, where applicable, to the NPC.

In the event of a personal data breach that poses a real risk of serious harm to affected ph797 account holders, ph797 will comply with the mandatory notification obligations under the Data Privacy Act of 2012 and NPC Circular 16-03:

• NPC notification: ph797 will notify the National Privacy Commission within 72 hours of becoming aware of a reportable personal data breach, providing details of the nature of the breach, categories and approximate number of data subjects affected, and the measures taken or proposed to address the breach.
• Affected account holder notification: Where a breach poses a real risk of serious harm to affected individuals, ph797 will notify impacted account holders as soon as practicable, via their registered email address or Philippine mobile number, with details of the breach and recommended protective actions.

ph797 maintains a dedicated incident response team and documented breach response playbook. All personnel with access to personal data receive regular training on data breach recognition and reporting obligations.

ph797 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or ph797's data processing practices. Material changes — particularly those that affect how we use your personal data or your data subject rights — will be communicated through:

• A prominent notice on the ph797 platform upon your next login.
• An email or SMS notification to your registered contact details where the change is significant.

The "Last Updated" date at the top of this document identifies when the Policy was most recently revised. Your continued use of the ph797 platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not accept the revised terms, you must cease using ph797 and may close your account by contacting [email protected].

ph797 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO is the primary point of contact for all data subject rights requests, privacy complaints, and data processing inquiries.

All data subject requests and privacy-related communications should be directed to:

If you believe your data privacy rights have been violated and ph797 has not satisfactorily resolved your concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).