ph282 Casino – Privacy Policy

Who Is Responsible for Your Data

1.1 For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, ph282 is the personal information controller ("Controller") in respect of the personal data collected through the ph282 platform, website, and related services.

1.2 As Controller, ph282 determines the purposes and means of processing your personal data. ph282 has registered its data processing systems with the National Privacy Commission (NPC) as required under applicable Philippine law.

1.3 ph282 has appointed a Data Protection Officer (DPO) who can be contacted for any privacy-related inquiries. Contact details for the DPO are provided in Section 13 of this Policy.

Categories of Data Collected

2.1 ph282 collects personal data from you in the following circumstances: when you register an account, when you complete KYC verification, when you make deposits or withdrawals, when you contact our support team, and automatically when you use the Platform. The categories of data we collect include:

Sensitive Personal Information

2.2 Certain data collected by ph282 — including government ID numbers and financial account details — may constitute "sensitive personal information" under the Data Privacy Act of 2012. ph282 applies heightened security and access controls to all sensitive personal information and processes it only to the extent strictly necessary for the purposes described in this Policy.

2.3 ph282 does not collect sensitive personal information relating to health, race, ethnicity, religious beliefs, or political affiliations, except where voluntarily provided by the player in the context of a responsible gaming self-exclusion request.

Purposes of Processing

3.1 ph282 uses your personal data for the following purposes:

• Account Management: To create, verify, maintain, and administer your ph282 player account;
• Identity & Age Verification: To verify that you are at least 21 years of age and are who you claim to be, as required by PAGCOR regulations;
• Payment Processing: To process deposits and withdrawals via GCash, Maya, and Philippine bank transfers in Philippine Peso (₱ PHP);
• Regulatory Compliance: To comply with PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine laws;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools such as deposit limits and self-exclusion;
• Platform Improvement: To analyze usage patterns and improve the ph282 platform, game selection, and user experience;
• Marketing Communications: To send you promotional offers and updates about ph282, where you have provided consent or where permitted by applicable law. You may opt out at any time.

3.2 ph282 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by Philippine law.

Why We Are Allowed to Process Your Data

4.1 Under the Data Privacy Act of 2012, ph282 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and ph282 (i.e., to operate your player account and provide gaming services);
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself;
• Legitimate Interests: Processing is necessary for ph282's legitimate interests in fraud prevention, platform security, and business improvement, provided these interests are not overridden by your privacy rights;
• Consent: For marketing communications and certain optional data processing activities, ph282 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Who We Share Your Data With

5.1 ph282 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC ), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulatory obligation;
• Payment Processors: GCash, Maya, and Philippine banking partners, solely to the extent necessary to process your deposits and withdrawals in ₱ PHP;
• KYC & Identity Verification Providers: Third-party identity verification services engaged by ph282 to assist with age and identity verification, operating under strict data processing agreements;
• IT & Infrastructure Providers: Cloud hosting, server, and cybersecurity service providers who process data on ph282's behalf under binding data processing agreements that require them to protect your data to the same standard as ph282;
• Game Software Providers: Licensed game developers whose software is integrated into the ph282 platform, to the extent necessary to deliver gameplay and resolve technical disputes;
• Professional Advisers: Lawyers, auditors, and accountants engaged by ph282, subject to professional confidentiality obligations.

5.2 All third parties with whom ph282 shares personal data are required to handle that data in accordance with applicable Philippine data protection law and ph282's data protection standards. ph282 does not permit third-party service providers to use your personal data for their own purposes.

How Long We Keep Your Data

6.1 ph282 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by AMLA and PAGCOR record-keeping obligations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act;
• KYC Documents: Retained for the duration of your account and for five (5) years after account closure;
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent;
• Support Communications: Retained for two (2) years from the date of the last interaction.

6.2 Where retention beyond these periods is required by a specific legal obligation, court order, or ongoing regulatory investigation, ph282 will retain the relevant data until that obligation is fulfilled.

6.3 Upon expiry of the applicable retention period, ph282 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

How We Protect Your Data

7.1 ph282 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and ph282 servers is encrypted using 256-bit SSL/TLS protocols;
• Encryption at Rest: Sensitive personal data stored on ph282 servers is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. ph282 staff are granted access only to the data necessary to perform their specific job functions;
• Multi-Factor Authentication: Administrative access to ph282 systems containing personal data requires multi-factor authentication;
• Regular Security Audits: ph282 conducts regular internal and third-party security audits and penetration testing of its systems;
• Staff Training: All ph282 staff who handle personal data receive regular data protection and cybersecurity training;
• Incident Response: ph282 maintains a documented data breach response procedure and will notify affected players and the National Privacy Commission within 72 hours of becoming aware of a breach that poses a real risk of serious harm, as required by NPC Circular 16-03.

7.2 While ph282 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your ph282 account credentials confidential and for notifying ph282 immediately if you suspect unauthorized access to your account.

How ph282 Uses Cookies

8.1 ph282 uses cookies and similar tracking technologies on its website and platform to enhance your experience, maintain your session, and analyze platform usage. A cookie is a small text file placed on your device when you visit the ph282 website.

8.2 ph282 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in during your visit. These cookies cannot be disabled without affecting Platform functionality;
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalize your ph282 experience;
• Analytics Cookies: Collect anonymized data about how players use the ph282 platform — such as which games are most popular and how long sessions last — to help us improve the Platform;
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

8.3 ph282 does not use third-party advertising or behavioral tracking cookies. Your gaming activity on ph282 is not shared with external advertising networks.

8.4 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or using certain Platform features. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

Rights Under the Data Privacy Act of 2012

9.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph282:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy;
• Right of Access: The right to request a copy of the personal data ph282 holds about you, along with information about how it is being processed;
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data ph282 holds about you;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph282's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on ph282's legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph282 has violated your data privacy rights.

9.2 To exercise any of the above rights, please contact ph282's Data Protection Officer using the contact details provided in Section 13. ph282 will respond to all verified data subject requests within fifteen (15) business days of receipt, as required by NPC regulations.

9.3 ph282 may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties. You will not be charged a fee for exercising your rights unless your request is manifestly unfounded or excessive.

Protection of Minors

10.1 The ph282 platform is strictly intended for adults aged 21 years and above, in compliance with Philippine gaming law as enforced by PAGCOR. ph282 does not knowingly collect personal data from individuals under the age of 21.

10.2 If ph282 becomes aware that personal data has been collected from a person under 21 years of age, it will immediately suspend the associated account, delete the personal data in question, and void any transactions made on the account.

10.3 If you are a parent or guardian and believe that your child under 21 has registered on ph282, please contact our Data Protection Officer immediately using the details in Section 13. We will investigate and take appropriate action within 48 hours of receiving your report.

International Data Processing

11.1 In the course of providing its services, ph282 may transfer your personal data to service providers or infrastructure partners located outside the Philippines — for example, cloud hosting providers or game software developers operating in other jurisdictions.

11.2 Where such transfers occur, ph282 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Binding data processing agreements incorporating the NPC's standard contractual clauses;
• Transfers to countries or organizations recognized by the NPC as providing an adequate level of data protection;
• Other legally recognized transfer mechanisms approved by the National Privacy Commission.

11.3 ph282 does not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing the safeguards described above.

Policy Updates

12.1 ph282 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or NPC guidance. The "Last Updated" date at the top of this page will be revised accordingly.

12.2 Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — ph282 will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

12.3 Your continued use of the ph282 platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you may close your account in accordance with the ph282 Terms & Conditions.

12.4 We encourage you to review this Privacy Policy periodically to stay informed about how ph282 protects your personal data. Previous versions of this Policy are available upon request from our Data Protection Officer.

Reach Our DPO

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ph282 handles your personal data, you may contact our Data Protection Officer through the following channels:

• Email: [email protected] — for formal data subject requests and privacy inquiries;
• General Support: [email protected] — for account-related questions;
• Live Chat: Available 24/7 from within your logged-in ph282 account for immediate assistance.

ph282 will acknowledge receipt of your privacy inquiry within two (2) business days and provide a substantive response within fifteen (15) business days, as required by NPC regulations.

If you are not satisfied with ph282's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through their official government channels.