ph598 Privacy Policy

1. Introduction

ph598 ("ph598", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with the ph598 platform, including registered players, visitors to ph598.org, and individuals who contact ph598 support. This Privacy Policy ("Policy") explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you as a data subject.

This Policy applies to all processing of personal data conducted by ph598 in connection with the operation of the ph598 online casino platform, including the website at ph598.org, all associated mobile-optimised interfaces, and all communication channels including live chat and email support.

By registering a ph598 account or otherwise using the ph598 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not accept the terms of this Policy, you should not use the ph598 platform.

2. Data Controller

The data controller responsible for personal data processed in connection with the ph598 platform is ph598, operating the online gaming platform accessible at ph598.org. For all data privacy inquiries, requests, and complaints, please refer to the contact details provided in Section 13 of this Policy.

ph598 has appointed a Data Protection Officer (DPO) in accordance with the requirements of RA 10173 and its Implementing Rules and Regulations. The DPO is responsible for ensuring ph598's compliance with applicable data protection laws and for handling data subject requests and complaints.

3. Personal Data We Collect

ph598 collects personal data through various means, including directly from you during account registration and use of the platform, and automatically through your interaction with ph598's systems. The categories of personal data collected by ph598 include the following:

ph598 does not collect or store full payment card numbers. ph598 does not collect sensitive personal information as defined under RA 10173 (such as health information, political affiliations, or religious beliefs) except to the limited extent required for responsible gaming compliance (e.g., self-exclusion requests).

4. Purposes of Processing

ph598 processes personal data for the following purposes:

• Account Registration and Management: To create and maintain your ph598 player account, verify your identity, and provide access to the ph598 gaming platform.
• KYC and Age Verification: To verify that you satisfy the 21+ age requirement and to fulfil anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Payment Processing: To process deposits via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, USDT TRC20, Coins.ph, and other accepted payment methods, and to process verified withdrawal requests.
• Platform Operation and Game Delivery: To operate all ph598 game categories including live casino, slots, fishing arcade, bingo, and sports betting, and to provide associated features including VIP rewards and promotional bonuses.
• Regulatory Compliance: To comply with PAGCOR online gaming requirements, anti-money laundering regulations, tax reporting obligations, and NPC data privacy requirements.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account abuse, multi-accounting, money laundering, and unauthorized access.
• Responsible Gaming: To implement and enforce responsible gaming tools including deposit limits, session reminders, and self-exclusion, and to identify patterns that may indicate problem gambling behavior.
• Customer Support: To respond to support inquiries, process complaints, and maintain records of player communications.
• Marketing and Promotions: To send you information about ph598 promotions, bonuses, and platform updates — but only where you have provided explicit consent to receive such communications.
• Analytics and Platform Improvement: To analyse aggregated, anonymised platform usage data for the purpose of improving the ph598 player experience.

5. Legal Bases for Processing

ph598 processes personal data on the following legal bases as provided under RA 10173 and its Implementing Rules:

• Contractual Necessity: Processing necessary for the performance of the ph598 Terms & Conditions and any related service agreements between ph598 and the User.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR requirements, AML obligations, and NPC issuances.
• Legitimate Interests: Processing conducted for the legitimate interests of ph598, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by the rights and interests of the data subject.
• Consent: Processing of personal data for direct marketing and non-essential analytics purposes, where ph598 relies on your prior explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Data Sharing and Third-Party Disclosure

ph598 does not sell, rent, or trade your personal data to third parties. ph598 may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements or legal obligations:

• Payment Processors: GCash (GXI), Maya (Paymaya Philippines Inc.), BPI, BDO, UnionBank, and other payment service providers as necessary to process transactions.
• Game Content Providers: Licensed game software providers (such as Ezugi and other certified suppliers) who supply game content to the ph598 platform, to the extent necessary for game delivery and RNG certification.
• KYC Verification Services: Third-party identity verification providers engaged by ph598 to conduct document and biometric verification in support of KYC requirements.
• IT Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers engaged by ph598 to operate and secure the platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and any other Philippine regulatory or law enforcement authority where disclosure is required by law.
• Legal and Professional Advisers: Lawyers, auditors, and compliance consultants engaged by ph598, subject to professional confidentiality obligations.

Where ph598 shares personal data with third-party processors, such sharing is governed by data processing agreements that require processors to handle personal data in accordance with applicable law and ph598's instructions.

7. Data Retention

ph598 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention considerations:

• Active Account Data: Retained for the duration of the active account relationship.
• KYC and Identity Documents: Retained for a minimum of five (5) years from account closure, in compliance with applicable AML and PAGCOR record-keeping requirements.
• Transaction and Gaming Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable tax, AML, and gaming regulatory requirements.
• Support Communications: Retained for a minimum of two (2) years from the date of the relevant interaction.
• Marketing Data: Retained until consent is withdrawn or for a maximum of three (3) years from the date of last active consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ph598's data disposal procedures.

8. Security Measures

ph598 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting staff access to personal data to what is necessary for their specific role.
• Multi-factor authentication required for internal administrative system access.
• Regular vulnerability assessments and penetration testing of the ph598 platform.
• Incident response procedures including mandatory notification to the NPC within 72 hours of discovery of a personal data breach that triggers reporting obligations under RA 10173.

Notwithstanding ph598's security measures, no internet transmission or electronic storage system is completely secure. ph598 cannot guarantee the absolute security of personal data and encourages Users to take reasonable precautions to protect their own account credentials.

9. Cookies and Tracking Technologies

ph598 uses cookies and similar tracking technologies on the ph598.org website and platform to support core platform functionality, security, and analytics. The categories of cookies used by ph598 include:

• Essential Cookies: Strictly necessary for the operation of the ph598 platform, including session management, authentication, and security functions. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as language and display preferences.
• Analytics Cookies: Used to collect anonymised data about platform usage patterns to help ph598 improve the user experience. These are activated only with your consent.

You may control cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the ph598 platform. Disabling analytics cookies will not affect your access to any ph598 service.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ph598:

• Right to be Informed: The right to be informed of how ph598 processes your personal data — fulfilled by this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph598 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure or Blocking: The right to request deletion or blocking of personal data where processing is no longer necessary, subject to applicable legal retention obligations.
• Right to Object: The right to object to processing of your personal data on grounds relating to your particular situation, including objection to direct marketing.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph598 has processed your personal data in violation of RA 10173.

To exercise any of the above rights, please submit your request in writing to the ph598 Data Protection Officer using the contact details in Section 13. ph598 targets a response within fifteen (15) business days of receiving a valid and complete request.

11. Minors

The ph598 platform is strictly intended for adults aged 21 and above. ph598 does not knowingly collect personal data from individuals under the age of 21. If ph598 discovers or has reasonable grounds to believe that personal data has been collected from an individual who does not meet the 21+ age requirement, ph598 will promptly delete such data, close the associated account, and return any deposited funds via the original payment method.

If you believe that a minor has registered an account on ph598 or that ph598 holds personal data of an individual under 21 years of age, please notify ph598 immediately via the contact information in Section 13.

12. Changes to This Privacy Policy

ph598 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ph598 will publish the revised Policy on this page with an updated effective date and, where appropriate, notify registered Users via email or in-platform notification. Your continued use of the ph598 platform following publication of a revised Policy constitutes acceptance of the updated terms.

ph598 encourages you to review this Privacy Policy periodically to remain informed of how your personal data is being processed.

13. Contact & Data Protection Officer

For any questions, concerns, requests to exercise your data subject rights, or formal data privacy complaints, please contact the ph598 Data Protection Officer through the following channel:

ph598 targets acknowledgement of all data privacy requests within 48 hours and full resolution within fifteen (15) business days. For complex requests, ph598 may require additional time and will notify you accordingly.

If you are not satisfied with ph598's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).