This Privacy Policy explains how ph978 collects, uses, stores, and protects the personal information of Filipino players and website visitors in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and applicable PAGCOR regulations.
Six principles that govern how ph978 handles every Filipino player's personal information.
ph978 collects personal data only for specific, legitimate purposes — account registration, KYC verification, payment processing, responsible gaming compliance, and improving platform services. Your data is never used beyond what is described in this policy.
We collect only the minimum personal information necessary for each purpose. ph978 does not ask for information it does not need. Registration requires only the fields necessary to create and verify your account under PAGCOR and AML requirements.
ph978 uses TLS 1.3 encryption for all data in transit, bcrypt hashing for passwords, and AES-256 encryption for stored sensitive data. Access to personal data within ph978 is restricted to personnel who need it to perform their role.
ph978 does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Full stop. Information is shared with third parties only as described in this policy and only where legally permitted or required.
Under RA 10173, Filipino players have the right to access, correct, object to, erase, and port their personal data. ph978 has processes in place to honour these rights within the timeframes mandated by the National Privacy Commission.
In the event of a personal data breach that poses a real risk to Filipino players, ph978 will notify affected players and the National Privacy Commission within 72 hours of discovery, per RA 10173 breach notification obligations.
This Privacy Policy ("Policy") describes how ph978 ("ph978," "we," "us," or "our") collects, processes, stores, and protects personal information obtained from users ("Players," "you") of the ph978 online gaming platform accessible at ph978.one ("Platform"). ph978 is committed to protecting the privacy and personal data of all Filipino players and website visitors in a manner consistent with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the regulations issued by the National Privacy Commission ("NPC").
By registering an account on ph978, using the Platform, or providing personal information to ph978 in any manner, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy is incorporated by reference into the ph978 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on data privacy matters, this Policy shall govern.
ph978 encourages all Players to read this Policy carefully and to contact us with any questions before submitting personal information.
ph978 is the personal information controller ("PIC") in respect of personal data collected through the Platform. As PIC, ph978 determines the purposes and means of processing personal data submitted by Players and website visitors.
For data privacy enquiries, requests to exercise data subject rights, or to contact ph978's designated Data Protection Officer ("DPO"), please use the contact information set out in Section 15 of this Policy.
ph978 collects personal data through the following means: direct submission by you during registration and use of the Platform; automatic collection during Platform use; and where permitted by law, from third-party sources for verification purposes. Categories of personal data ph978 may collect include:
3.1 Registration Data: Full legal name; date of birth (to verify 21+ age eligibility); residential address (Philippines); email address; mobile phone number (Philippines-registered); chosen username.
3.2 Identity Verification (KYC) Data: Copies of government-issued Philippine identification documents (PhilSys national ID, passport, driver's license, or equivalent); proof of address documents; photographs where required for identity verification. KYC documents are processed in accordance with PAGCOR compliance and AML obligations.
3.3 Financial Data: GCash account details; PayMaya account details; bank account details (BPI, BDO, Metrobank, or equivalent); cryptocurrency wallet addresses; deposit and withdrawal transaction records. ph978 does not store full payment card numbers.
3.4 Gaming Activity Data: Game session records; bet history; win/loss records; bonus usage; login timestamps and session durations; responsible gaming preferences and self-imposed limits.
3.5 Technical Data: IP address; device type and operating system; browser type and version; referring URL; Platform page interaction data; cookie and session identifiers.
3.6 Communications Data: Support chat transcripts; email correspondence with ph978 support; feedback and survey responses.
ph978 processes personal data collected from Filipino players for the following purposes:
ph978 does not use personal data for automated decision-making that produces significant legal effects without human review, except where required by AML or PAGCOR compliance systems.
Under the Philippine Data Privacy Act, ph978 processes personal data on the following legal bases:
ph978 does not sell, rent, or trade your personal information. We may share personal data with third parties only in the following circumstances:
6.1 Service Providers. ph978 engages carefully selected third-party service providers who process personal data on our behalf for specific operational purposes, including: payment processors (GCash, PayMaya, BancNet partners); KYC and identity verification providers; cloud infrastructure providers; game software providers (JILI, PG Soft, Pragmatic Play); customer support platform providers. All service providers are bound by data processing agreements requiring them to protect personal data in accordance with applicable Philippine law.
6.2 Regulatory and Legal Disclosures. ph978 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue, Philippine law enforcement authorities, or other government bodies where required by law, court order, or valid regulatory demand.
6.3 Corporate Transactions. In the event of a merger, acquisition, or sale of ph978 or its assets, personal data held by ph978 may be transferred to a successor entity, subject to equivalent data protection commitments to those set out in this Policy.
6.4 Consent-Based Sharing. Where ph978 wishes to share personal data for purposes not described in this Policy, we will seek your explicit consent before doing so.
ph978 uses cookies and similar tracking technologies to operate the Platform and improve your experience. Cookie categories used include:
You may manage non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair Platform functionality including login. ph978 does not use third-party advertising cookies or cross-site tracking.
ph978 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by applicable law. Key retention periods include:
Following the applicable retention period, personal data is securely deleted or anonymised in accordance with ph978's data disposal procedures.
ph978 implements technical and organisational security measures appropriate to the risk of processing Filipino players' personal data. Measures include: TLS 1.3 encryption for all data in transit between your device and ph978 servers; AES-256 encryption for sensitive data at rest; bcrypt hashing with salting for account passwords; role-based access controls restricting internal access to personal data to authorised personnel only; multi-factor authentication for administrative systems; regular security assessments and penetration testing; and a documented incident response plan for potential data breaches.
Notwithstanding these measures, no internet-based system can be guaranteed absolutely secure. Players are encouraged to maintain strong, unique passwords for their ph978 accounts and to enable two-factor authentication (2FA) as an additional layer of account security.
ph978 primarily processes and stores personal data of Filipino players on servers located within or operated in compliance with Philippine data protection standards. Where personal data is transferred to third-party service providers located outside the Philippines (for example, international cloud infrastructure providers), ph978 ensures such transfers are subject to appropriate safeguards — including contractual data transfer agreements requiring the recipient to maintain data protection standards equivalent to those required under RA 10173 — or are otherwise permitted by applicable NPC rules.
Under the Philippine Data Privacy Act of 2012, Filipino players and website visitors have the following rights in relation to their personal data held by ph978:
To exercise any of these rights, contact ph978's Data Protection Officer using the information in Section 15. ph978 will respond to data subject rights requests within 15 business days, consistent with NPC guidelines. Requests may be subject to identity verification before processing.
You may also lodge a complaint with the National Privacy Commission (privacy.gov.ph) if you believe ph978 has handled your personal data in violation of RA 10173.
The ph978 Platform is strictly restricted to persons aged 21 years or older. ph978 does not knowingly collect personal data from individuals under 21. Age is verified as part of the account registration and KYC process. If ph978 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the account suspended immediately. Parents or guardians who become aware of unauthorised account creation by a person under 21 should contact ph978 support immediately.
The ph978 Platform may contain links to third-party websites or services (for example, links to payment provider information pages). ph978 is not responsible for the privacy practices of third-party websites. This Policy applies only to data collected through the ph978 Platform. Players should review the privacy policies of any third-party sites they visit via links from the Platform.
ph978 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, or changes in ph978's data processing practices. Material changes to this Policy will be notified to registered Players via email to their registered address and/or via a prominent notice on the Platform at least 14 days before the effective date of the change. The date of the most recent revision is displayed at the top of this Policy. Continued use of the ph978 Platform after the effective date of any revision constitutes acceptance of the updated Policy.
For privacy-related enquiries, requests to exercise data subject rights, or to reach ph978's designated Data Protection Officer, please use the following contact information:
ph978 commits to acknowledging data subject rights requests within 3 business days and resolving them within 15 business days, consistent with NPC guidelines.
This Privacy Policy was last reviewed and updated in June 2026. Effective date: June 2026.
ph978 protects every Filipino player's personal data with TLS encryption, strict RA 10173 compliance, and a zero data-sales policy. Join 500,000+ players who trust ph978 with their GCash accounts and gaming experience. 21+ only. Play responsibly.