98php Casino Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how 98php Casino ("98php," "we," "us," or "the Company"), operator of the online gaming platform at https://98php.vip, collects, processes, uses, stores, and protects personal data relating to our members, visitors, and prospective players ("you" or "Data Subject").

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Republic of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). It is also informed by applicable PAGCOR data governance requirements applicable to licensed online gaming operators.

By registering an account or using any service on 98php.vip, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. If you do not agree, please discontinue your use of the platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which are incorporated herein by reference.

2. Data Controller

The data controller responsible for the personal information of 98php members is:

98php Casino
Online gaming platform operated under PAGCOR license
Website: https://98php.vip
Data Protection Officer contact: [email protected]

As data controller, 98php determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with the DPA and applicable PAGCOR requirements.

3. Personal Data We Collect

98php collects personal data through multiple channels: account registration forms, KYC verification submissions, payment transactions, gameplay activity, customer support interactions, and automatic technical data collection. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, nationality, gender, government-issued ID number (e.g., PhilSys, UMID, driver's license, passport), and a photograph or scan of your ID document.
• Contact Data: Mobile number (with Philippine country code +63), email address, and residential address (including barangay, city or municipality, and province).
• Financial Data: GCash mobile number, Maya account details, bank account name and number (for BDO, BPI, Metrobank, and other local banks), transaction history, deposit and withdrawal records, and wallet balance.
• Gameplay Data: Game sessions, bet history, win/loss records, bonus usage, wagering activity, and game preferences.
• Technical Data: IP address, device type and model, operating system, browser type and version, session timestamps, login history, and geolocation data (at the country/region level).
• Communications Data: Records of your correspondence with our customer support team, including live chat transcripts, email messages, and any complaints or feedback submitted.
• Responsible Gaming Data: Self-imposed deposit limits, session time settings, self-exclusion requests, and any problem gambling disclosures made to our support team.

We collect only the minimum personal data necessary for the specific purposes described in this Policy. We do not collect sensitive personal information (as defined by the DPA) unless strictly required by PAGCOR KYC or AMLA compliance obligations.

4. How We Use Your Personal Data

98php uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, verify, and administer your 98php account, including processing your registration, authenticating your identity at login, and enabling account recovery.
• KYC & Age Verification: To verify that you are at least 21 years of age as required by PAGCOR, and to confirm your identity in compliance with Anti-Money Laundering Act (AMLA) obligations.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, InstaPay, PesoNet, Visa, Mastercard, and other accepted payment channels. Your financial data is used solely to execute transactions and detect fraudulent activity.
• Game Provision: To provide access to the games on our platform, record game outcomes and bet history, calculate winnings, and ensure fair play in accordance with published RTP figures.
• Legal & Regulatory Compliance: To fulfill our obligations under PAGCOR licensing conditions, the AMLA, the DPA, and any lawful orders from Philippine courts or regulatory authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities on the 98php platform.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behavior, enforce self-exclusion requests, and provide personalized responsible gaming interventions where appropriate.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and improve our support services.
• Service Improvement: To analyze aggregated and anonymized usage data for the purpose of improving platform features, game selection, and user experience.
• Promotional Communications: To send you information about 98php bonuses, promotions, and platform updates, subject to your communication preferences. You may opt out at any time by contacting [email protected].

5. Legal Basis for Processing

All processing of your personal data by 98php is grounded in one or more of the following lawful bases under the Data Privacy Act of 2012:

• Consent: You have given your free, informed, specific, and unambiguous consent to the processing of your personal data for one or more specific purposes, as indicated during account registration.
• Contractual Necessity: Processing is necessary for the performance of the contract between you and 98php (i.e., the Terms and Conditions you agreed to upon registration), including providing gaming services and processing payments.
• Legal Obligation: Processing is required to comply with a legal obligation applicable to 98php, including PAGCOR licensing conditions, AMLA reporting obligations, and NPC registration requirements.
• Legitimate Interests: Processing is necessary for the legitimate interests of 98php, including fraud prevention, platform security, and responsible gaming oversight, provided such interests are not overridden by your fundamental rights.

6. Data Sharing & Third-Party Disclosure

98php does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (Voyager Innovations), BancNet, local banks, and international card networks (Visa, Mastercard) — solely to process deposits and withdrawals.
• Game Providers: Licensed game software providers (e.g., JILI, Pragmatic Play, Evolution Gaming) who host the games accessible through the 98php platform. These providers receive only the technical session data necessary to run the games.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and Philippine law enforcement agencies, where required by law or lawful order.
• Technology Service Providers: Cloud hosting providers, cybersecurity firms, and fraud detection services who process data solely as data processors on behalf of 98php and are contractually bound by data processing agreements.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties with whom 98php shares personal data are required to handle such data in accordance with the DPA and our data protection standards. We do not transfer personal data outside of the Philippines without ensuring equivalent data protection safeguards are in place.

7. Cookies & Tracking Technologies

98php uses cookies and similar tracking technologies on the 98php.vip platform to enhance your user experience, maintain your login session, and collect analytical data. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the platform to function correctly, including session authentication cookies that keep you logged in to your 98php account and security tokens that protect against cross-site request forgery.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and whether you have previously accepted our cookie notice.
• Analytical Cookies: Collect aggregated, anonymized data about how visitors interact with the platform (page views, session duration, error rates) to help us improve 98php's performance and usability.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your 98php account. Analytical cookies may be disabled without affecting core platform functionality.

8. Data Security

98php implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 98php servers.
• Encryption at rest for sensitive personal and financial data stored in our databases.
• Multi-factor authentication for administrative access to systems containing personal data.
• Regular penetration testing and third-party security audits.
• Strict role-based access controls limiting employee access to personal data to those with a demonstrated operational need.
• Incident response procedures compliant with NPC breach notification requirements under the DPA.

In the event of a personal data breach that poses a real risk to your rights and freedoms, 98php will notify the NPC within 72 hours of discovery and will inform affected members without undue delay, in accordance with NPC Circular No. 16-03.

9. Data Retention

98php retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

• Active Accounts: Personal data is retained for the duration of your membership with 98php.
• Closed Accounts: Following account closure, 98php retains identity, financial, and transaction records for a minimum of five (5) years to comply with AMLA record-keeping obligations, PAGCOR audit requirements, and the BIR's statutory records retention period.
• Responsible Gaming Records: Self-exclusion records are retained for a minimum of five (5) years to prevent re-registration in breach of an exclusion period.
• Communication Records: Customer support correspondence is retained for three (3) years for dispute resolution and service improvement purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents re-identification.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 98php:

• Right to be Informed: The right to know that your personal data is being collected and processed, and the purposes of such processing.
• Right of Access: The right to obtain a copy of your personal data held by 98php and to receive information about how it is being used.
• Right to Rectification: The right to correct inaccurate or incomplete personal data in your 98php account.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: The right to object to the processing of your personal data, including for direct marketing purposes.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to all valid requests within thirty (30) days. We may require you to verify your identity before processing your request.

11. Children's Privacy

The 98php platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person below this age threshold, we will promptly delete such data and terminate the associated account.

If you are a parent or guardian and believe that your child has created an account on 98php, please contact us immediately at [email protected] so that we can take appropriate action.

12. Changes to This Privacy Policy

98php reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this page will be revised to reflect any material changes.

Where changes are material, 98php will provide notice to registered members via email or in-platform notification at least fourteen (14) days before the revised Policy takes effect. Your continued use of the 98php platform following the effective date of the revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you may close your account by contacting our support team.

13. Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 98php Casino, please contact our Data Protection Officer:

Data Protection Officer — 98php Casino
Email: [email protected]
Live Chat: Available 24/7 from your logged-in account dashboard
Response Time: Within 30 days for DPA-related requests; within 24 hours for general support inquiries.

You also have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with our response to a data privacy concern. Information on how to file a complaint with the NPC is available on the NPC's official website.