ph90 com Privacy Policy

1. Introduction

ph90 com is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that when you share your personal information with us — whether during registration, during gameplay, or when contacting our support team — you are placing your trust in us. We take that trust seriously.

This Privacy Policy has been prepared in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC"). It applies to all personal data collected by ph90 com through the ph90com.org website, mobile applications, customer support channels, and any other touchpoints through which you interact with ph90 com.

This Policy should be read together with the ph90 com Terms & Conditions, which govern your use of the ph90 com platform. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, ph90 com is the personal information controller ("PIC") in respect of the personal data collected through the ph90 com platform. As PIC, ph90 com determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection law.

ph90 com has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. Contact details for the DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

ph90 com collects the following categories of personal data:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — you must be 21 or older)
• Gender
• Nationality and country of residence
• Government-issued ID type and number (e.g., PhilSys ID, passport, driver's license, UMID)
• Photograph or selfie submitted for identity verification

3.2 Contact Data

• Philippine mobile number
• Email address
• Residential address (province, city/municipality)

3.3 Financial Data

• GCash or PayMaya (Maya) account number linked to your ph90 com account
• Bank account details for withdrawal processing (account name, bank name, account number)
• Debit card details (card number masked, expiry date) where applicable
• Transaction history: deposits, withdrawals, bonus credits, and gaming activity

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the ph90 com platform
• Login timestamps and access logs
• Cookie identifiers and similar tracking technologies (see Section 8)

3.5 Communications Data

• Records of communications with ph90 com customer support (live chat transcripts, email correspondence, SMS)
• Feedback, complaints, and dispute records
• Responses to surveys or promotions where you voluntarily participate

3.6 Responsible Gaming Data

• Deposit limits, loss limits, and session time limits you have set
• Self-exclusion status and cooling-off period records
• Responsible gaming tool usage history

4. How We Collect Your Data

ph90 com collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the ph90 com platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from government ID databases or third-party KYC providers; payment verification data from GCash, Maya, or banking partners; fraud prevention data from third-party risk management services.
• Regulatory sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory authorities in connection with compliance obligations.

5. How We Use Your Personal Data

ph90 com uses your personal data for the following purposes:

6. Legal Basis for Processing

ph90 com processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you — including account registration, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for ph90 com's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional platform features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

ph90 com does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

7.1 Service Providers

ph90 com engages trusted third-party service providers to assist in operating the platform, including identity verification (KYC) providers, payment processors (GCash, Maya, banking partners), cloud hosting providers, customer support software providers, and fraud prevention services. These providers act as personal information processors ("PIPs") under the DPA and are contractually bound to process your data only on ph90 com's instructions and in compliance with applicable data protection law.

7.2 Regulatory & Law Enforcement Authorities

ph90 com may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other Philippine government authorities where required by law, court order, or regulatory directive. ph90 com will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ph90 com's business, your personal data may be transferred to the acquiring entity as part of that transaction. ph90 com will notify you of any such transfer and ensure that the acquiring entity is bound by data protection obligations no less protective than those in this Policy.

8. Cookies & Tracking Technologies

ph90 com uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your session, and collect usage analytics. A cookie is a small text file placed on your device by the ph90 com website when you visit.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in to your ph90 com account. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits you have configured.
• Analytics cookies: Collect anonymized data about how users interact with the ph90 com platform to help us improve performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

8.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling certain cookies may affect the functionality of the ph90 com platform — in particular, disabling strictly necessary cookies will prevent you from logging in to your account.

9. Data Retention

ph90 com retains your personal data for as long as necessary to fulfill the purposes for which it was collected, and for as long as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer if related to an ongoing dispute or regulatory investigation.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it is anonymized or deleted.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent as evidence of compliance.

When your personal data is no longer required for any lawful purpose, ph90 com will securely delete or anonymize it in accordance with our data disposal procedures.

10. Data Security

ph90 com implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and ph90 com servers
• AES-256 encryption for sensitive data stored at rest, including financial data and government ID information
• Multi-factor authentication (MFA) options for ph90 com account access
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• 24/7 security monitoring and intrusion detection systems
• Staff training on data protection and information security best practices
• Incident response procedures for detecting, reporting, and managing personal data breaches

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph90 com:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed, as described in this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data ph90 com holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data ph90 com holds about you. You may update most account information directly through your ph90 com account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph90 com's legal and regulatory retention obligations.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to ph90 com's overriding legal obligations.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph90 com has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact ph90 com's Data Protection Officer using the contact details provided in Section 15. ph90 com will respond to all data subject requests within thirty (30) days of receipt, in accordance with NPC guidelines.

12. Children's Privacy

If you are a parent or guardian and believe that your child under the age of 21 has registered an account or provided personal data to ph90 com, please contact our Data Protection Officer immediately using the contact details in Section 15. We will take prompt action to investigate and remediate the situation.

13. Cross-Border Data Transfers

ph90 com primarily stores and processes your personal data within the Philippines. In certain circumstances, your personal data may be transferred to, stored in, or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification services.

Where such cross-border transfers occur, ph90 com ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that impose data protection obligations equivalent to those required under the Philippine Data Privacy Act of 2012. ph90 com will only transfer personal data to countries or organizations that provide an adequate level of data protection, as determined by the National Privacy Commission.

14. Updates to This Privacy Policy

ph90 com may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered users via the email address or mobile number associated with their ph90 com account, and we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how ph90 com protects your personal data. Your continued use of the ph90 com platform after any update to this Policy constitutes your acknowledgment of the revised Policy. If you do not agree to the revised Policy, you must cease using the ph90 com platform and may request account closure in accordance with the Terms & Conditions.

Previous versions of this Privacy Policy are available upon request by contacting the ph90 com Data Protection Officer.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ph90 com, please contact our Data Protection Officer:

If you are not satisfied with ph90 com's response to your data subject request or complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines:

This Privacy Policy was last updated on January 1, 2026 and is effective as of that date.