ph54 Privacy Policy — How We Handle Your Data

1. Who We Are — Data Controller

1.1 ph54 ("we", "us", "our") operates the ph54 online gaming platform at ph54.lat. ph54 is a PAGCOR-licensed online gaming operator and acts as the Data Controller for all personal data collected through the platform.

1.2 As Data Controller, ph54 determines the purposes for which and the means by which personal data is processed. ph54 is registered with the National Privacy Commission (NPC) of the Philippines as required under RA 10173 and its Implementing Rules and Regulations.

1.3 For all data privacy inquiries, requests, and complaints, players may contact ph54's Data Protection Officer (DPO) at [email protected] with the subject line "Privacy / DPO Request".

2. Personal Data We Collect

2.1 ph54 collects the following categories of personal data from players:

2.2 ph54 does not collect sensitive personal information beyond what is strictly necessary for identity verification and AML compliance. ph54 does not collect biometric data for authentication purposes beyond what is submitted in KYC documents.

3. How We Collect Your Data

3.1 ph54 collects personal data through the following channels:

• Direct submission: Information you provide during registration, KYC verification, payment processing, contact form submissions, and support interactions;
• Automatic collection: Technical data collected automatically when you access or use the ph54 platform, including via cookies, session tracking, and server logs;
• Third-party payment providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, and Metrobank when you initiate deposits or withdrawals;
• Regulatory sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities in the course of regulatory compliance.

3.2 ph54 does not collect personal data from third-party data brokers or purchase marketing lists containing personal information of individuals who have not consented to sharing their data with ph54.

4. How We Use Your Data

4.1 ph54 uses your personal data for the following purposes:

• Creating and managing your ph54 account, including identity verification and KYC processing;
• Facilitating deposits, withdrawals, and all financial transactions in Philippine Peso;
• Providing and improving gaming services including Bingo, Slots, Live Casino, Super Keno, and Ludo Quick;
• Managing bonuses, promotions, and loyalty programs you participate in;
• Detecting and preventing fraud, unauthorized account access, money laundering, and other prohibited conduct;
• Monitoring gaming activity for responsible gaming purposes, including identifying patterns associated with problem gambling;
• Complying with ph54's PAGCOR licensing obligations, Philippine AML law, and other applicable legal requirements;
• Responding to your customer support requests and resolving disputes;
• Sending service-related communications, including account security alerts, transaction confirmations, and material policy updates;
• Sending promotional communications where you have provided consent — you may opt out at any time by contacting support.

4.2 ph54 does not use your personal data for automated decision-making that produces legal effects or significantly affects you without human review, except for fraud detection systems that trigger a human review process when an alert is raised.

5. Legal Basis for Processing

5.1 ph54 processes your personal data on the following legal bases under the Philippine Data Privacy Act (RA 10173):

• Contractual necessity: Processing required to fulfil the Terms and Conditions you agreed to when registering — including account management, game provision, deposits, and withdrawals;
• Legal obligation: Processing required for compliance with PAGCOR licensing requirements, RA 9160 (Anti-Money Laundering Act), and other applicable Philippine law;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where ph54's legitimate interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided express consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

6.1 ph54 does not sell or rent your personal data. ph54 shares personal data only in the following circumstances:

• Service providers: ph54 engages third-party service providers for payment processing (GCash, PayMaya, banks), cloud hosting, fraud detection, customer support tools, and KYC verification services. These providers are contractually bound to process data only for the specific purpose for which it was shared and to maintain adequate security measures;
• Regulatory disclosure: ph54 is required by law and by its PAGCOR license to report certain information to PAGCOR, the AMLC, the NPC, and other competent Philippine authorities. This includes but is not limited to suspicious transaction reports required under the Anti-Money Laundering Act;
• Legal proceedings: ph54 may disclose personal data in response to a valid court order, subpoena, or other lawful process issued by a Philippine court or competent authority;
• Business transfer: In the event of a merger, acquisition, or sale of ph54's business or assets, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. Affected players will be notified.

6.2 ph54 does not share personal data with third-party advertisers or analytics companies for behavioral advertising purposes.

7. Cookies & Tracking Technologies

7.1 ph54 uses cookies and similar tracking technologies on the platform. Cookies are small data files stored on your device that help ph54 recognize you, maintain your session, prevent fraud, and improve platform performance.

7.2 ph54 uses the following types of cookies:

• Strictly necessary cookies: Required for the platform to function — session management, login state, and security tokens. These cannot be disabled without breaking platform functionality;
• Functional cookies: Remember your preferences such as language settings and game history filters;
• Analytics cookies: Collect aggregated data about how players use the platform to help ph54 improve the service. These do not identify you personally;
• Security cookies: Used for fraud detection and identifying suspicious login patterns.

7.3 You may manage non-essential cookies through your browser settings. Disabling strictly necessary cookies will affect platform functionality and your ability to remain logged in to your ph54 account.

8. Data Security

8.1 ph54 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These include:

• 256-bit TLS encryption for all data transmitted between your device and the ph54 platform;
• 256-bit AES encryption for personal data stored in ph54's databases;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for all ph54 staff accessing production systems;
• Regular security audits and penetration testing conducted by independent third parties;
• Intrusion detection systems and 24/7 security monitoring.

8.2 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, ph54 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required by RA 10173 and NPC Circular No. 16-03.

8.3 While ph54 implements robust security measures, no internet-based system can be guaranteed to be completely secure. Players are responsible for maintaining the security of their own account credentials.

9. Data Retention

9.1 ph54 retains personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by Philippine law and PAGCOR regulations. The following retention periods apply:

• Account and identity data: Retained for the duration of the player's account and for a minimum of 5 years following account closure, as required by PAGCOR and AML regulations;
• Financial transaction records: Retained for a minimum of 5 years per the requirements of RA 9160 (Anti-Money Laundering Act) and PAGCOR regulatory standards;
• KYC documents: Retained for a minimum of 5 years following the end of the business relationship, as mandated by AMLC rules;
• Gaming activity data: Retained for 3 years following the last game session, then anonymized for aggregate reporting;
• Support communications: Retained for 2 years following ticket closure unless the matter is subject to ongoing legal proceedings;
• Technical logs: Retained for 12 months for security and fraud detection purposes, then deleted.

9.2 After the applicable retention period, ph54 will securely delete or anonymize your personal data so that it can no longer identify you.

10. Your Data Rights

10.1 Under the Philippine Data Privacy Act (RA 10173), you have the following rights in relation to your personal data held by ph54:

• Right to be informed: The right to know whether ph54 processes your personal data and, if so, what data, for what purpose, and to whom it is disclosed;
• Right of access: The right to obtain a copy of the personal data ph54 holds about you, along with information about how it is processed;
• Right to rectification: The right to have inaccurate or incomplete personal data corrected without undue delay;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to ph54's legal retention obligations;
• Right to object: The right to object to processing based on legitimate interests, including profiling for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

10.2 To exercise any of the above rights, contact ph54's Data Protection Officer at [email protected] with the subject line "Data Rights Request". ph54 will respond within 15 business days. Identity verification will be required before processing any data rights request.

11. Children's Privacy — 21+ Only

11.1 The ph54 platform is strictly for adults aged 21 and above in accordance with Philippine gaming law and PAGCOR regulations. ph54 does not knowingly collect or process personal data from individuals under the age of 21.

11.2 If ph54 discovers that an account was registered by a person under 21, the account will be immediately suspended, all personal data associated with the account will be deleted to the extent permitted by AML retention requirements, and the matter will be reported to PAGCOR as required by ph54's operating license.

11.3 If you have reason to believe that a minor has registered an account on ph54, please notify us immediately at [email protected].

12. Cross-Border Data Transfers

12.1 ph54 primarily stores and processes player data within the Philippines. Where ph54 engages cloud service providers or technical partners whose infrastructure is located outside the Philippines, ph54 ensures that adequate data protection safeguards are in place, including contractual clauses that require the receiving party to apply data protection standards equivalent to those required under RA 10173.

12.2 ph54 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards as required by the NPC.

13. Changes to This Privacy Policy

13.1 ph54 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. Where changes are material, ph54 will notify registered players via email or a prominent notice on the platform at least 7 days before the changes take effect.

13.2 The effective date at the top of this policy indicates when it was last updated. Your continued use of ph54 after the effective date of any update constitutes your acknowledgement of the revised policy.

13.3 You are encouraged to review this Privacy Policy periodically. The current version is always available at ph54.lat/privacy-policy.

14. Contact & Data Protection Officer

14.1 ph54 has designated a Data Protection Officer (DPO) in compliance with RA 10173 and NPC requirements. For all data privacy matters — including access requests, correction requests, deletion requests, complaints, and consent withdrawals — please contact:

• DPO Contact: [email protected] (Subject: "Privacy / DPO Request")
• Response Time: Within 15 business days of verified identity
• NPC Complaint: National Privacy Commission — privacy.gov.ph
• Platform Regulator: PAGCOR — pagcor.ph

14.2 ph54 takes all data privacy complaints seriously. We encourage players to contact us directly before filing a complaint with the NPC, as most issues can be resolved promptly through our internal process.