ph499 Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") describes the data processing practices of ph499.org ("ph499," "we," "us," or "our") with respect to personal information collected from users ("you," "Player," or "Data Subject") who access, register with, or use the ph499 online gaming platform.

This Policy applies to all personal data processed by ph499 in connection with your use of the platform, including account registration, deposits, withdrawals, game play, customer support interactions, and promotional communications. It applies regardless of whether you access ph499 via a desktop browser, mobile browser, or any other interface.

This Policy should be read alongside ph499's Terms & Conditions and Responsible Gaming Policy, which together govern your use of the ph499 platform.

2 Who We Are (Data Controller)

For the purposes of the Philippine Data Privacy Act of 2012, ph499.org acts as the Personal Information Controller in respect of personal data collected from Filipino players and users of the ph499 platform.

ph499 operates as a PAGCOR-licensed online gaming platform serving players in the Republic of the Philippines. Our operations are conducted under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR), and our data handling practices are subject to review by both the National Privacy Commission (NPC) and PAGCOR.

Contact details for ph499's Data Protection Officer (DPO) are set out in Section 14 of this Policy.

3 Personal Data We Collect

ph499 collects personal data in the following categories:

ph499 does not collect sensitive personal information as defined under the Data Privacy Act (e.g., health records, political opinions, sexual life data) unless specifically required by PAGCOR for responsible gaming compliance purposes (e.g., self-exclusion declarations).

4 How We Use Your Personal Data

ph499 processes your personal data for the following purposes:

• Account Administration: Creating, verifying, and managing your ph499 account, including identity and age verification (21+ requirement).
• Service Delivery: Enabling you to deposit funds, place wagers, participate in games, and withdraw winnings via GCash, PayMaya, BDO, BPI, or Metrobank.
• Regulatory Compliance: Fulfilling PAGCOR licensing obligations, anti-money laundering (AMLA) reporting requirements, and KYC verification mandates under Philippine law.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, account compromise, and prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify indicators of problem gambling and administering self-exclusion, deposit limits, and cooling-off measures.
• Customer Support: Responding to enquiries, complaints, and account-related requests submitted via live chat or email.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates via SMS to your registered Philippine mobile number, where you have not opted out.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game performance, user experience, and platform reliability.

5 Legal Basis for Processing

ph499 processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our contract with you (the ph499 Terms & Conditions), including account management, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR regulatory requirements, AMLA obligations, and NPC directives.
• Legitimate Interests: Processing for fraud detection, security monitoring, and platform improvement where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and optional features, where your consent has been explicitly obtained and may be withdrawn at any time.

6 Data Sharing and Disclosure

ph499 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:

• Payment Processors: GCash (Mynt), PayMaya (PayMongo), BDO, BPI, Metrobank, and other licensed Philippine payment service providers, solely to process your transactions. These providers operate under their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.
• Game Providers: Licensed game software providers (including JILI and other certified providers) receive the minimum data necessary to deliver game services. No financial data is shared with game providers.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies as required by law or regulatory mandate.
• Professional Advisers: Legal counsel, auditors, and compliance consultants operating under professional confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the acquiring entity subject to equivalent data protection commitments.

All third-party service providers who receive ph499 player data are contractually bound to process that data solely for specified purposes, implement appropriate security measures, and comply with the Philippine Data Privacy Act.

7 Cookies and Tracking Technologies

ph499 uses cookies and similar tracking technologies on the platform for the following purposes:

• Strictly Necessary Cookies: Session management, login authentication, and security functions. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remembering your language preferences, game settings, and platform display preferences between sessions.
• Analytics Cookies: Collecting anonymised, aggregated data about platform usage patterns to improve performance and user experience. No individual player is identified in analytics reports.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the ph499 platform. ph499 does not use third-party advertising cookies or cross-site tracking cookies.

8 Data Retention

ph499 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law:

• Account and Identity Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in compliance with AMLA and BSP requirements.
• Gaming History: Retained for three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Customer Support Records: Retained for two (2) years from the date of the interaction.
• Marketing Preferences: Retained until you withdraw consent or request erasure, whichever is earlier.

Following the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9 Data Security

ph499 implements the following technical and organisational security measures to protect your personal data:

• Encryption in Transit: All data transmitted between your device and ph499 servers is encrypted using TLS 1.2/1.3 (256-bit SSL).
• Encryption at Rest: Sensitive data fields including passwords (hashed via bcrypt), financial account numbers, and government ID numbers are encrypted in database storage.
• Access Controls: Access to personal data by ph499 personnel is strictly role-based, logged, and audited. No staff member has blanket access to the full player dataset.
• Two-Factor Authentication: OTP-based two-factor authentication is required for player logins on new devices and for administrative platform access.
• Penetration Testing: ph499's infrastructure undergoes regular third-party security assessments and vulnerability testing.
• Incident Response: In the event of a personal data breach, ph499 will notify affected players and the National Privacy Commission within the timeframes required by the Data Privacy Act and its Implementing Rules.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ph499:

• Right to Be Informed: The right to know what personal data ph499 collects and how it is used — fulfilled by this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph499 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to legal retention obligations (see Section 8). Erasure requests are evaluated case-by-case and may be declined where retention is required by PAGCOR or AMLA.
• Right to Object: The right to object to processing based on legitimate interests or direct marketing. Marketing SMS opt-out is available by replying "STOP" to any ph499 message.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Complain: The right to lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe your data rights have been violated.

To exercise any of the above rights, contact ph499's Data Protection Officer at the details in Section 14. ph499 will respond to verified requests within thirty (30) calendar days.

11 Minors and Age Restriction

ph499 is strictly an adult gaming platform. The minimum age to register and use ph499 is twenty-one (21) years, as mandated by PAGCOR regulations governing online casino gaming in the Philippines.

ph499 does not knowingly collect personal data from individuals under 21 years of age. Age is verified at registration through date of birth entry, and enhanced age verification via government-issued ID may be required at any time. If ph499 becomes aware that personal data has been collected from a person under 21 years, that data will be deleted and the account immediately closed.

If you are a parent or guardian and believe your minor child has registered on ph499, please contact our DPO immediately using the details in Section 14.

12 Cross-Border Data Transfers

ph499 is a Philippine-focused platform and processes the majority of player data within the Republic of the Philippines. Where data is transferred to service providers or game technology partners located outside the Philippines (for example, game providers operating servers in other APAC jurisdictions), ph499 ensures that:

• The recipient country or organisation provides a level of data protection comparable to or exceeding the standards of the Philippine Data Privacy Act.
• Appropriate contractual safeguards are in place, including standard data processing agreements that bind recipients to Philippine DPA-equivalent obligations.
• Cross-border transfers are reported to the National Privacy Commission where required under NPC circular requirements.

13 Changes to This Privacy Policy

ph499 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, Philippine law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via SMS to their registered Philippine mobile number at least seven (7) days before the change takes effect.

The current version of this Privacy Policy is always accessible at ph499.org/privacy-policy. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the ph499 platform after the effective date of any amendment constitutes acceptance of the revised Policy.

14 Contact and Data Protection Officer

For all privacy-related enquiries, data subject rights requests, or concerns about ph499's data processing practices, please contact our Data Protection Officer:

• Data Protection Officer: ph499.org DPO
• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy / DPO Request – [Your Account Mobile Number]"
• Live Chat: 24/7 via the ph499 platform support widget (state "Privacy Request" to be routed to the DPO team)
• Response Time: ph499 will acknowledge all DPO requests within 72 hours and provide a substantive response within 30 calendar days.

If you are unsatisfied with ph499's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph.