ph70 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how ph70 ("ph70", "we", "us", "our") collects, processes, stores, and protects the personal information of users ("you", "Player", "User") who access or use the ph70 online gaming platform available at ph70.pro ("Platform").

ph70 is a PAGCOR-regulated online casino platform serving Filipino players across the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We take our responsibility as a data controller seriously and are fully committed to complying with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations issued by the National Privacy Commission (NPC).

By registering for an account on ph70, or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood how your personal data is handled as described herein.

2 Data Controller

ph70 acts as the Personal Information Controller (as defined under RA 10173) in respect of the personal data it collects and processes through the Platform. As the data controller, ph70 determines the purposes and means by which your personal information is processed.

ph70 operates as a PAGCOR-licensed online gaming platform for the Philippine market. Our designated Data Protection Officer (DPO) can be contacted for all privacy-related concerns at the email address provided in Section 13 of this Policy.

3 Personal Data We Collect

ph70 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party verification and payment service providers. The categories of data we collect are described below.

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Philippine residential address
• Email address
• Philippine mobile number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Scanned copies or photographs of government-issued identification (e.g., Philippine passport, SSS ID, UMID, voter's ID, PhilHealth card, driver's license)
• Proof of address documents (e.g., utility bills, bank statements issued to your registered address)
• Selfie or biometric photograph submitted for liveness verification where required

3.3 Financial & Transaction Data

• GCash or Maya wallet account details (account name and number, not full credentials)
• Bank account details for BPI, BDO, Metrobank, or other linked banks
• Deposit and withdrawal transaction history
• Transaction amounts, timestamps, and reference numbers
• Cryptocurrency wallet addresses where USDT TRC20 is used

3.4 Gaming Activity Data

• Game session logs, bet history, and game outcomes
• Account balance history and bonus transaction records
• Session duration and frequency of play
• Responsible gaming settings and self-exclusion history (if applicable)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Cookies and session identifiers (see Section 9 for full cookie details)
• Platform access timestamps and navigation logs

3.6 Communications Data

• Content of support chat transcripts and email correspondence with ph70
• Feedback, survey responses, or complaints submitted to ph70
• Marketing communication preferences and opt-in/opt-out records

3.7 Data We Do Not Collect

ph70 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related data is voluntarily disclosed by a player in the context of a responsible gaming support request. In those cases, data is handled with the highest level of sensitivity and used solely to provide appropriate support.

4 How We Use Your Personal Data

ph70 processes your personal data for the following specific, legitimate, and clearly defined purposes:

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ph70 processes your personal information under the following lawful bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and ph70, including account creation, payment processing, game delivery, and withdrawal fulfillment.
• Legal Obligation: Processing is required for ph70 to comply with its obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and other applicable Philippine laws.
• Legitimate Interests: Processing is carried out in furtherance of ph70's legitimate business interests in preventing fraud, ensuring platform security, and improving service quality, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

ph70 does not sell, rent, or otherwise commercially exploit your personal data. We share your data only in the following limited circumstances:

6.1 Regulatory and Law Enforcement Authorities

ph70 is legally required to share personal and financial data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies where mandated by law. This includes reporting suspicious transactions and complying with lawful data requests, court orders, or subpoenas.

6.2 KYC and Identity Verification Providers

ph70 works with licensed third-party KYC service providers to verify your identity documents and conduct liveness checks. These providers act as personal information processors under ph70's instruction and are contractually prohibited from using your data for any other purpose.

6.3 Payment Processors

To process deposits and withdrawals via GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, Coins.ph, and other payment channels, ph70 necessarily shares relevant payment and identity data with those payment service providers. Each provider operates under its own privacy framework and applicable Philippine financial regulations.

6.4 Game Software Providers

ph70's games are powered by licensed third-party game studios. These providers may receive session and gameplay data in order to operate their games correctly. Game providers do not receive your full personal profile or financial account details.

6.5 Professional Advisors

ph70 may share data with its legal counsel, auditors, and compliance consultants strictly on a need-to-know basis and subject to professional confidentiality obligations.

7 Data Retention

ph70 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with ph70 and for a minimum of 5 years following account closure, in accordance with PAGCOR record-keeping requirements and AMLA obligations.
• KYC documents: Retained for a minimum of 5 years from the date of verification, or longer where required by AMLC regulations applicable to casino operators.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in compliance with RA 9160 (AMLA) as amended by RA 10365.
• Game logs and betting history: Retained for a minimum of 2 years from the date of each session, and longer where a dispute is pending resolution.
• Support communications: Retained for 2 years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained for the duration of the consent period plus 1 year following withdrawal.

Upon expiry of the applicable retention period, ph70 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

8 Security Measures

ph70 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and ph70's servers is encrypted using current TLS protocols.
• At-rest encryption: Sensitive personal and financial data stored in ph70's databases is encrypted using AES-256 encryption.
• Access controls: Access to personal data is strictly limited to ph70 personnel and authorized processors who require it for their specific role. All access is logged and audited.
• Two-factor authentication: ph70 supports and encourages the use of two-factor authentication for player accounts to prevent unauthorized access.
• Penetration testing: ph70's systems undergo periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: ph70 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to give rise to a real risk of serious harm, ph70 will notify the National Privacy Commission and affected individuals within the timeframe prescribed by RA 10173.

9 Cookies & Tracking Technologies

ph70 uses cookies and similar technologies (such as web beacons, pixel tags, and local storage) to operate the Platform, maintain your session, and improve your experience. The types of cookies ph70 uses are described below:

You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the Platform. Analytics and marketing cookies may be disabled without impact to core Platform functionality.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules, you have the following rights with respect to your personal data held by ph70:

• Right to be Informed: You have the right to be informed whether ph70 holds personal data about you, and to receive clear information about how that data is processed. This Privacy Policy fulfills ph70's obligation to provide that information.
• Right to Access: You have the right to request a copy of the personal data ph70 holds about you, including information on its source, the purposes of processing, and the recipients to whom it has been disclosed.
• Right to Correct: You have the right to request the correction of any inaccurate, incomplete, or outdated personal data ph70 holds about you.
• Right to Erasure or Blocking: You have the right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, or where processing is unlawful — subject to ph70's legal retention obligations under PAGCOR and AMLA regulations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes, or where processing is based on legitimate interests and your rights override those interests.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph70 has processed your personal data in violation of RA 10173. The NPC can be reached at privacy.gov.ph.
• Right to Damages: You have the right to be indemnified for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data by ph70, in accordance with RA 10173.

To exercise any of the rights listed above, please submit a written request to ph70's Data Protection Officer at support@ph70.pro with the subject line "Data Subject Rights Request". ph70 will respond to your request within 15 working days of receipt, in accordance with NPC guidelines. ph70 reserves the right to request proof of identity before processing any data subject rights request to protect against unauthorized access to your data.

11 Minors

The ph70 Platform is strictly for adults aged 21 years and older, in accordance with Philippine law and PAGCOR age restrictions applicable to casino-style online gaming. ph70 does not knowingly collect or process personal data from individuals under the age of 21.

If ph70 discovers that personal data has been collected from a person under 21, that account will be immediately suspended, all associated personal data will be deleted, and any funds held in the account will be handled in accordance with PAGCOR guidelines.

If you are a parent or guardian and believe that a minor has registered on ph70, please contact us immediately at support@ph70.pro so we can take prompt action.

12 Changes to This Privacy Policy

ph70 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or operational requirements. Where changes are material — meaning they affect how we use your data in ways that were not previously disclosed — ph70 will provide advance notice by posting a prominent notice on the Platform and, where appropriate, sending an email notification to your registered email address.

The updated Privacy Policy will display a revised "Last Updated" date at the top of this page. Your continued use of the Platform following the effective date of any update constitutes your acknowledgment of the revised Policy. If you do not agree with any update, you should cease using the Platform and may request account closure in accordance with ph70's Terms and Conditions.

ph70 recommends that you review this Privacy Policy periodically. Previous versions of this Policy are available on request from our Data Protection Officer.

13 Contact Us

For any questions, concerns, or requests related to this Privacy Policy or ph70's data processing practices, please contact our Data Protection Officer through the following channels:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated. ph70 operates in full cooperation with the NPC and PAGCOR on all data protection and regulatory matters.