ph1234 Privacy Policy

1 Introduction

ph1234 ("ph1234," "we," "us," "our") operates the online gaming platform accessible at ph1234.club and its associated mobile applications. In the course of providing our gaming services to Filipino players, ph1234 collects and processes personal information as defined under Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations.

This Privacy Policy ("Policy") applies to all personal information collected from players, visitors, and prospective registrants through the ph1234 website, mobile applications, customer support channels, and any other ph1234-operated touchpoints. It applies equally to residents of Metro Manila, Cebu, Davao, and all other areas of the Philippines.

By creating a ph1234 account or using the ph1234 platform, you consent to the collection and processing of your personal information as described in this Policy. If you do not agree with any provision of this Policy, you should not use the ph1234 platform.

2 Data Controller

ph1234 is the personal information controller ("PIC") responsible for your personal data processed in connection with your use of the ph1234 platform. ph1234 operates under a valid PAGCOR licence and is registered with the National Privacy Commission (NPC) of the Philippines as required by the DPA.

ph1234 has appointed a Data Protection Officer (DPO) who is responsible for overseeing ph1234's compliance with the DPA and this Policy. Contact details for the ph1234 DPO are provided in Section 13 of this Policy.

3 Personal Data We Collect

ph1234 collects personal information across several categories depending on your interaction with the platform. The table below summarises the primary categories of personal data collected:

3.1 Data from Third Parties

ph1234 may receive personal data about you from third parties in certain circumstances, including: payment processors (GCash, Maya) confirming transaction details; identity verification service providers performing KYC checks; fraud prevention service providers providing risk signals; and PAGCOR or other regulatory bodies as required by applicable law.

3.2 Data You Choose Not to Provide

Where ph1234 requests personal data on a mandatory basis (marked as required during registration or KYC), failure to provide the requested data may prevent ph1234 from opening your account, processing withdrawals, or providing specific services. ph1234 will inform you at the point of collection whether provision is mandatory or voluntary.

4 Purpose & Legal Basis for Processing

ph1234 processes your personal data only for specific, declared purposes with a valid legal basis under the DPA. The primary purposes and corresponding legal bases are as follows:

• Account Registration & Management — necessary for the performance of the contract between you and ph1234 (i.e., your ph1234 account agreement).
• Identity Verification (KYC) — compliance with ph1234's legal obligations under its PAGCOR licence and the Philippines' Anti-Money Laundering Act (AMLA, RA 9160 as amended).
• Payment Processing — performance of contract; processing deposits and withdrawals via GCash, Maya, and bank channels.
• Fraud Prevention & AML Monitoring — compliance with legal obligations and ph1234's legitimate interest in protecting the platform from financial crime.
• Responsible Gaming — compliance with PAGCOR responsible gaming requirements and ph1234's legitimate interest in player welfare, including 21+ age enforcement and self-exclusion management.
• Customer Support — performance of contract; resolving player queries, account issues, and disputes.
• Marketing Communications — your consent, given at registration or updated through your account communication preferences. You may withdraw consent at any time.
• Platform Improvement & Analytics — ph1234's legitimate interest in improving the quality and performance of the ph1234 platform for Filipino players, using aggregated and anonymised data wherever possible.
• Regulatory Reporting — compliance with ph1234's reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC).

5 Data Sharing & Disclosure

ph1234 does not sell your personal data to third parties. ph1234 shares personal data only in the following circumstances:

5.1 Service Providers (Personal Information Processors)

ph1234 engages third-party service providers who process personal data on ph1234's behalf under written data processing agreements that require the processor to maintain confidentiality and comply with the DPA. These include: payment processors (GCash/Maya/banks), KYC identity verification providers, cloud infrastructure providers, customer support platform providers, fraud detection service providers, and game software providers.

5.2 Regulatory & Legal Disclosures

ph1234 may disclose your personal data to PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), or other competent Philippine authorities where disclosure is required by law, regulation, court order, or lawful regulatory instruction. ph1234 will, where legally permitted, notify you of such disclosure.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ph1234's business, personal data held by ph1234 may be transferred to the successor entity, subject to equivalent data protection commitments and notification to affected players as required by the DPA.

6 Data Retention

ph1234 retains personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal retention obligations. The following retention periods apply as a general guide:

• Active account data — retained for the duration of your ph1234 account and for a period of five (5) years following account closure, as required by PAGCOR and AMLA record-keeping obligations.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction in compliance with AMLA and BIR requirements.
• KYC identity documents — retained for the same period as account data. Copies of government IDs are deleted or destroyed securely after the applicable retention period.
• Customer support records — retained for three (3) years from the date of the last interaction, or longer where the interaction relates to an unresolved dispute.
• Marketing consent records — retained for as long as you hold a ph1234 account plus three (3) years, as evidence of consent.
• Technical logs (IP, device data) — retained for twelve (12) months on a rolling basis for security and fraud monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (which can no longer identify any individual) may be retained indefinitely for statistical and analytical purposes.

7 Data Security

ph1234 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks involved. These measures include, but are not limited to:

• Encryption — all personal data transmitted between your browser or app and ph1234 servers is encrypted using TLS 1.2 or higher. Stored sensitive data (financial data, government ID images) is encrypted at rest using AES-256 encryption.
• Access Controls — access to personal data is restricted to ph1234 personnel with a business need to access that data, governed by role-based access controls and multi-factor authentication requirements.
• Network Security — ph1234's infrastructure is protected by firewalls, intrusion detection systems, and regular penetration testing by independent security firms.
• Data Breach Response — ph1234 maintains a documented data breach response procedure and will notify the NPC and affected players of a personal data breach within 72 hours of discovery, as required under the DPA.
• Staff Training — all ph1234 personnel with access to personal data receive regular training on data protection obligations and ph1234's internal data handling policies.

8 Cookies & Tracking Technologies

ph1234 uses cookies and similar tracking technologies on the ph1234 website and mobile applications. The categories of cookies used are as follows:

• Strictly Necessary Cookies — essential for the ph1234 platform to function. These include session authentication cookies that keep you logged in to your ph1234 account and security cookies that support fraud detection. These cookies cannot be disabled without preventing core platform functionality.
• Functional Cookies — remember your preferences (e.g., language settings, last game played) to provide a personalised ph1234 experience. These are set on the basis of your use of the platform.
• Analytical Cookies — collect aggregated information about how players use the ph1234 platform to help ph1234 improve its products. ph1234 uses first-party analytics; data is not shared with third-party analytics providers for their own purposes.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to ph1234 account functionality, including the ph1234 login process. ph1234 does not use third-party advertising cookies on the ph1234 platform.

9 Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph1234:

• Right to be Informed — you have the right to be informed of the personal data ph1234 holds about you and the purposes for which it is processed. This Policy serves as the primary information notice.
• Right of Access — you have the right to request a copy of the personal data ph1234 holds about you, including your account data, transaction history, and any KYC documents on file.
• Right to Correction (Rectification) — you have the right to request correction of any inaccurate or incomplete personal data. Certain corrections (e.g., name changes) may require supporting documentation.
• Right to Erasure (Right to be Forgotten) — you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph1234's legal retention obligations. Note that ph1234 cannot delete data it is legally required to retain under PAGCOR, AMLA, or BIR regulations.
• Right to Object — you have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.
• Right to Data Portability — where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint — if you believe ph1234 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact the ph1234 Data Protection Officer using the contact details in Section 13. ph1234 will respond to verified rights requests within fifteen (15) business days, and will inform you if the applicable period needs to be extended.

10 Minors & Age Restriction

ph1234 does not knowingly collect personal information from persons under the age of 21 years. The ph1234 platform is intended exclusively for adult players who have completed identity verification confirming they meet the minimum age requirement mandated by PAGCOR.

If ph1234 becomes aware that personal data has been collected from a person under 21, ph1234 will immediately close the associated account, delete the personal data collected, and report the matter to PAGCOR as required under applicable Philippine gaming regulations.

Parents and guardians who believe a minor has registered a ph1234 account should contact the ph1234 DPO immediately using the contact details in Section 13.

11 Cross-Border Data Transfers

Some of ph1234's service providers may process personal data outside of the Philippines, including in countries where ph1234's cloud infrastructure, KYC verification, or fraud prevention services operate. Where personal data is transferred outside the Philippines, ph1234 ensures that:

• The recipient country provides an adequate level of data protection comparable to the DPA's requirements; or
• The transfer is subject to binding contractual obligations (standard contractual clauses) that require the recipient to maintain DPA-equivalent data protection standards; or
• The transfer is required by or authorised under Philippine law.

A list of countries to which ph1234 may transfer personal data is available upon request to the ph1234 DPO.

12 Changes to This Privacy Policy

ph1234 may update this Privacy Policy from time to time to reflect changes in ph1234's data practices, regulatory requirements, or the services offered on the ph1234 platform. Material changes to this Policy will be notified to active account holders via the email address or mobile number registered to their ph1234 account, with a minimum notice period of seven (7) days before the revised Policy takes effect.

The date at the top of this page reflects the date of the most recent revision. The most current version of this Policy is always available at ph1234.club/privacy-policy. Continued use of the ph1234 platform after the effective date of a revised Policy constitutes acceptance of the updated terms.

13 Contact & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your DPA rights, or have a concern about ph1234's handling of your personal data, please contact the ph1234 Data Protection Officer:

If you are not satisfied with ph1234's response to your data privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority under the Data Privacy Act of 2012.