// Data Protection & Privacy
ph758 Privacy Policy
ph758 is committed to protecting the personal data of every Filipino player on the platform. This Privacy Policy explains what information we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold over your own data under Philippine law.
Introduction
ph758 ("we," "us," "our," or the "Platform") operates the online casino and sports betting platform accessible at ph758.cam and its associated subdomains. This Privacy Policy is addressed to all users of the ph758 platform, including registered account holders, visitors who browse without registering, and any individual whose personal data is processed in connection with the platform's operations.
ph758 takes data privacy seriously. We comply with the Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") of the Philippines and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC). Where applicable, we also observe internationally recognized data protection principles consistent with the NPC's guidance on cross-border data flows.
Data Controller
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, ph758 acts as the personal information controller (PIC) in respect of all personal data collected through the platform. As PIC, ph758 determines the purposes and means of processing personal data related to account registration, identity verification, payment transactions, gameplay activity, and customer support interactions.
ph758 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with applicable data protection law. The DPO can be contacted using the details provided in Section 14 of this Policy. Inquiries relating to data privacy, subject access requests, and complaints are coordinated through the DPO's office.
Personal Data We Collect
ph758 collects personal data through a number of channels, including account registration forms, KYC verification submissions, payment transactions, live chat and email support interactions, and automated technical collection (e.g., cookies, device identifiers, and server logs). The categories of data collected are as follows:
| Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Registration, KYC verification |
| Contact Data | Mobile number, email address, residential address | Registration, account settings |
| Identity Documents | PhilSys ID, Passport, Driver's License, UMID, SSS ID (images) | KYC verification |
| Financial Data | GCash/Maya account reference, BPI/BDO account name, transaction history | Deposits, withdrawals |
| Gameplay Data | Bet history, game session logs, wins, losses, bonus usage | Platform activity |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Automated collection |
| Communication Data | Live chat transcripts, support emails, complaint records | Support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, cooling-off periods | Account settings, RG tools |
ph758 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data beyond the photographs contained in government-issued ID documents submitted during KYC. We do not collect health data, political opinions, or religious affiliation.
How We Use Your Personal Data
ph758 processes personal data only for specific, legitimate purposes that are consistent with the reason the data was originally collected. The primary purposes for which ph758 uses personal data are as follows:
- Account Creation and Management: To establish, maintain, and administer your ph758 account, including authentication, password recovery, account security monitoring, and login history.
- Identity Verification (KYC): To verify your identity and confirm that you meet the 21+ age requirement mandated under the Philippine gaming regulatory framework, and to comply with anti-money laundering (AML) obligations under the AMLA of the Philippines.
- Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other accepted payment channels; to investigate disputed transactions; and to comply with financial reporting requirements.
- Platform Services: To provide access to games, betting markets, bonus programs, and support services; to personalize your experience; and to maintain the technical integrity of the platform.
- Responsible Gaming: To operate deposit limits, self-exclusion programs, cooling-off periods, and session time controls; to identify players who may be showing signs of problematic gambling behavior; and to comply with responsible gaming obligations.
- Regulatory Compliance: To meet our obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, collusion, bonus abuse, and other conduct that violates our Terms and Conditions.
- Communications: To send transactional notifications (deposit confirmations, withdrawal approvals, security alerts) and, where you have opted in, promotional communications about ph758 offers and new game releases.
ph758 does not use personal data for automated decision-making processes that produce legal or similarly significant effects on players, except where explicitly disclosed and consented to, or where required by law.
Legal Basis for Processing
Under the Data Privacy Act of 2012, ph758 relies on one or more of the following criteria as the lawful basis for processing your personal data:
- Consent: For processing not otherwise covered by the criteria below — such as sending promotional communications — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Performance of a Contract: The majority of data processing on ph758 is necessary to deliver the services you have contracted for by agreeing to our Terms and Conditions — including operating your account, processing wagers, and paying out winnings.
- Legal Obligation: ph758 is required by Philippine law — including the AMLA, the DPA, and the gaming regulatory framework — to collect, retain, and in certain cases disclose specific categories of personal data.
- Legitimate Interests: For fraud prevention, platform security, and responsible gaming monitoring, ph758 processes certain data on the basis of its legitimate interests in maintaining a safe and compliant platform, provided those interests are not overridden by your rights and interests.
Data Sharing & Third Parties
ph758 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the following specific and controlled circumstances:
- Payment Service Providers: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment processors receive transaction data necessary to execute deposits and withdrawals. These providers operate under their own privacy policies and applicable Philippine financial regulations.
- Identity Verification Services: Third-party KYC and document verification partners may receive copies of identity documents and biographic data to perform automated or manual identity checks. All such partners are contractually bound to process data solely for verification purposes.
- Game Content Providers: Slot studios, live casino operators, and esports data providers may receive anonymized or pseudonymized gameplay data necessary to operate their games on the ph758 platform. Full identity data is not passed to game studios.
- Regulatory Authorities: ph758 will disclose personal data to PAGCOR, the AMLC, the NPC, the Philippine National Police (PNP), or other government bodies where required by law, court order, or lawful direction — without prior notice to the affected player where legally prohibited.
- Professional Advisers: Legal counsel, auditors, and compliance consultants may access limited personal data in connection with their professional advisory engagements, subject to professional confidentiality obligations.
All third-party processors engaged by ph758 are subject to written data processing agreements that require them to implement appropriate security measures, process data only on ph758's documented instructions, and not transfer data beyond their authorized purpose. ph758 remains responsible for ensuring that third-party processors meet the standards required under the DPA.
Data Retention
ph758 retains personal data only for as long as is necessary for the purposes for which it was collected, taking into account legal, regulatory, and operational retention requirements. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation (AMLA, DPA) |
| KYC / identity documents | Duration of account + 5 years after closure | AMLA compliance |
| Financial transaction records | 10 years from transaction date | AMLA, BIR, gaming regulation |
| Gameplay session logs | 3 years from session date | Dispute resolution, RG monitoring |
| Support communications | 3 years from last interaction | Legitimate interest, dispute resolution |
| Marketing preferences | Until consent withdrawn or account closed | Consent |
| Technical / server logs | 12 months from creation | Security, fraud prevention |
Upon expiry of the applicable retention period, ph758 will securely delete or anonymize personal data so that it can no longer be associated with an identifiable individual. Data subject to an ongoing legal hold, regulatory investigation, or dispute may be retained beyond standard periods until the matter is resolved.
Cookies & Tracking Technologies
ph758 uses cookies and similar tracking technologies (such as web beacons and local storage objects) on its platform to support core functionality, analyze usage patterns, and where consented, deliver personalized content.
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. They cannot be disabled without preventing core platform functions.
- Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations between sessions.
- Analytics Cookies: Collect anonymized data about how players navigate the platform — pages visited, time on page, features used — to help ph758 improve the user experience. These are only deployed where you have given consent.
- Security Cookies: Support fraud detection, bot identification, and brute-force login prevention systems. These are strictly necessary for platform integrity and cannot be disabled.
You may manage non-essential cookie preferences through the cookie settings panel available on the platform. Disabling analytics cookies does not affect your ability to play games, make deposits, or access any core ph758 feature.
Data Security
ph758 implements a layered approach to data security, combining technical, organizational, and procedural controls designed to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Key security measures include:
- 256-bit SSL/TLS encryption on all data in transit between your browser or device and ph758 servers
- AES-256 encryption for sensitive personal data stored at rest, including identity documents and financial identifiers
- Multi-factor authentication (MFA) requirements for platform staff accessing production systems containing personal data
- Role-based access controls that restrict employee access to personal data on a strict need-to-know basis
- Regular internal and external security audits, penetration testing, and vulnerability assessments
- Incident response procedures aligned with NPC Circular No. 16-03 (Personal Data Breach Management) for timely breach notification
Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph758 will notify the NPC within 72 hours of discovery and will communicate to affected individuals without undue delay where required by law.
Children's Privacy & Age Restriction
ph758 is strictly an adult platform. Under the applicable Philippine gaming regulatory framework, access to real-money casino and betting services requires the account holder to be at least twenty-one (21) years of age. ph758 does not knowingly collect or process personal data from individuals under the age of 21.
Age verification is conducted during account registration through submission of a valid government-issued Philippine ID. Any account where a date of birth is found to indicate that the account holder is under 21 years of age will be immediately suspended, the account balance will be frozen, and the matter will be referred for investigation.
If you believe a person under the age of 21 has registered or is using a ph758 account, please contact our support team immediately via live chat (available daily 8:00 AM – 2:00 AM PHT) or email at [email protected]. We take age compliance extremely seriously and will act on credible reports without delay.
Your Data Subject Rights
Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data held by ph758. These rights are subject to applicable legal limitations and may be exercised by contacting the ph758 DPO as described in Section 14.
Cross-Border Data Transfers
In connection with providing the ph758 platform, certain personal data may be transferred to, stored in, or processed by third-party service providers located outside the Philippines — including game studios, cloud infrastructure providers, and KYC service providers operating in other jurisdictions.
ph758 ensures that any such cross-border transfer of personal data is conducted in accordance with Section 21 of the Data Privacy Act of 2012 and applicable NPC regulations, which require that the receiving jurisdiction provides adequate data protection standards or that appropriate contractual safeguards (such as standard contractual clauses approved by the NPC) are in place before the transfer occurs.
Players may request information about specific cross-border transfers affecting their data by submitting a written inquiry to the ph758 DPO. Requests will be acknowledged within five (5) business days and substantively responded to within thirty (30) calendar days.
Changes to This Privacy Policy
ph758 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material changes — those that significantly affect how we collect, use, or share your personal data — will be communicated to registered players via the email address on file and/or through a prominent on-site notification, with a minimum of fourteen (14) calendar days' notice before the changes take effect.
The "Last Reviewed" date at the top of this Policy will be updated each time a substantive revision is made. We encourage players to review this Policy periodically. Continued use of the ph758 platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.
Contact & Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph758, please contact our Data Protection Officer through the following channels:
- DPO Email: [email protected] (Subject line: "Privacy / DPO Request")
- Live Chat: Available daily on the ph758 platform from 8:00 AM to 2:00 AM PHT
- Response Time: Acknowledgement within 24 hours; substantive response within 30 calendar days of receipt
If you believe that ph758 has not adequately addressed your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through the NPC's official complaint channels. ph758 will cooperate fully with any NPC investigation.
Your Rights Under the Philippine Data Privacy Act
As a ph758 player and data subject under RA 10173, you have eight enforceable rights over your personal data.
Right to Be Informed
You have the right to know whether ph758 holds personal data about you, what data is held, why it is being processed, and with whom it may be shared. This Privacy Policy fulfills ph758's primary transparency obligation under this right.
Right of Access
You may request a copy of the personal data ph758 holds about you, including your account information, transaction history, KYC records, and gameplay logs, subject to identity verification and the applicable processing period of up to 30 days.
Right to Rectification
If personal data ph758 holds about you is inaccurate, incomplete, or outdated, you have the right to request correction. Identity data corrections may require updated documentary evidence. Minor contact details (email, mobile) can be updated through your account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that ph758 may be legally required to retain certain categories of data (such as financial records and KYC documents) for statutory periods even after account closure.
Right to Object
You have the right to object to the processing of your personal data where ph758 relies on legitimate interests as its legal basis. You may also withdraw consent for marketing communications at any time via your account settings or by contacting the DPO.
Right to Data Portability
You may request that ph758 provide your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another controller. This right applies to data you have directly provided to ph758 under a consent or contract basis.
Right to Restrict Processing
In certain circumstances — such as when the accuracy of data is contested or processing is unlawful — you may request that ph758 restrict further processing of your personal data while the matter is investigated, without requesting full erasure.
Right Against Automated Decision-Making
You have the right not to be subject to decisions that produce significant effects on you based solely on automated processing without human review, except where necessary for contract performance, legal obligations, or where you have explicitly consented.
How ph758 Protects Your Data
Six technical and organizational commitments ph758 makes to every player on the platform.
256-Bit SSL Encryption
All data transmitted between your device and ph758 servers is encrypted using industry-standard 256-bit SSL/TLS. This includes login credentials, payment information, and game session data. Look for the padlock icon in your browser's address bar on every ph758 page.
Encrypted Data at Rest
Sensitive stored data — including KYC documents and financial identifiers — is encrypted at rest using AES-256. Physical server access is controlled, logged, and restricted to authorized infrastructure personnel only. Your documents are never stored as unencrypted files.
Role-Based Access Controls
ph758 staff access to personal data is strictly limited by role. Support agents can see account contact details but not full KYC documents. Finance staff access transaction records but not gameplay history. No single employee has unrestricted access to all personal data categories.
Breach Notification Readiness
ph758 maintains a documented incident response plan aligned with NPC Circular No. 16-03. In the event of a notifiable personal data breach, ph758 is prepared to notify the NPC within 72 hours and affected players without undue delay, as required by law.
Regular Security Audits
ph758 conducts periodic internal security reviews and engages independent security firms to perform penetration testing and vulnerability assessments. Findings are prioritized and remediated on a structured schedule. Critical vulnerabilities are patched on an emergency basis.
Dedicated Data Protection Officer
ph758 has appointed a Data Protection Officer (DPO) responsible for ensuring ongoing compliance with the Data Privacy Act of 2012, overseeing data subject request handling, managing breach response, and acting as the primary liaison with the National Privacy Commission.
Play on ph758 — Your Data, Protected
You have read how ph758 handles your personal data. The platform is built for Filipino players who value both great gaming and genuine privacy protection. GCash deposits, live casino, slots, and esports — all in PHP, all with your data rights intact.
21+ only. Gambling involves financial risk. Play within your means. See our Responsible Gaming page for tools and support.