ph2828 Privacy Policy
01 Introduction
This Privacy Policy ("Policy") describes how ph2828 ("ph2828," "we," "us," or "our") — the operator of the online gaming platform accessible at ph2828.cam ("Platform") — collects, uses, discloses, and safeguards personal information obtained from individuals ("you," "your," or "Player") who visit, register on, or otherwise interact with the Platform.
ph2828 is committed to handling personal data responsibly, transparently, and in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA"), its Implementing Rules and Regulations, and relevant issuances from the National Privacy Commission (NPC) of the Philippines.
By accessing the Platform, creating a ph2828 account, or submitting personal information to us, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy is incorporated by reference into our Terms & Conditions.
02 Who We Are
ph2828 is the personal information controller responsible for the personal data collected through the Platform. As personal information controller, ph2828 determines the purposes and means of processing your personal data in accordance with the DPA.
For any privacy-related inquiries, requests to exercise data subject rights, or complaints, please contact our designated Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.
03 Personal Data We Collect
ph2828 collects personal data in the following categories:
3.1 Identity & Registration Data
- Full legal name;
- Date of birth (required for age verification — you must be 21 or older);
- Gender;
- Government-issued identification number and document type (e.g., Philippine passport, UMID, driver's license, SSS/GSIS ID);
- Selfie or live photo for identity verification purposes.
3.2 Contact Data
- Philippine mobile number;
- Email address;
- Residential address (province/city/municipality level at minimum).
3.3 Financial Data
- GCash or Maya account reference (non-sensitive, for payment matching);
- Bank account details where applicable (BPI, BDO, Metrobank) for withdrawal processing;
- Transaction history — deposit amounts, withdrawal amounts, dates, and payment method types;
- Wallet balance history for audit and compliance purposes.
3.4 Gaming Activity Data
- Game session logs — titles played, wagers placed, outcomes, session durations;
- Betting patterns and gameplay history;
- Bonus and promotion participation history;
- Win/loss records and RTP data for account review purposes.
3.5 Technical & Device Data
- IP address and approximate geographic location derived from IP;
- Device type, operating system, and browser version;
- Mobile network operator (e.g., Smart, Globe, DITO);
- Session identifiers, cookies, and similar tracking technologies.
3.6 Communications Data
- Support ticket content and chat logs;
- Email and SMS correspondence with ph2828;
- Survey and feedback responses.
Sensitive Personal Information: Government-issued ID details, financial account numbers, and identity verification documents are classified as sensitive personal information under the DPA. ph2828 applies enhanced security and access controls to this category of data.
04 How We Collect Your Data
ph2828 collects personal data through the following channels:
| Channel | Examples |
|---|---|
| Directly from you | Registration form, KYC document upload, support requests, payment processing, survey responses |
| Automatically | Session cookies, device fingerprinting, IP logging, gameplay event tracking, page visit logs |
| Third-party payment providers | GCash, Maya, BPI, BDO, Metrobank transaction confirmation data shared with us upon payment completion |
| Identity verification services | KYC/AML screening results from third-party verification partners used to confirm identity and age |
| Fraud and risk systems | Device risk scores, IP reputation data, and AML watchlist screening results |
05 Legal Basis for Processing
ph2828 processes your personal data on the following legal grounds as defined under the DPA:
- Contractual necessity — processing required to create and manage your account, process deposits and withdrawals, and deliver gaming services under the Terms & Conditions;
- Legal obligation — processing required to comply with anti-money laundering laws (AMLA), PAGCOR regulatory requirements, NPC directives, and court or government orders;
- Legitimate interests — fraud prevention, platform security, responsible gaming enforcement, and improving platform performance;
- Consent — processing for marketing communications and non-essential analytics, where we have obtained your explicit prior consent;
- Vital interests — where processing is necessary to protect your interests or those of another person, such as in cases of suspected problem gambling harm.
06 How We Use Your Personal Data
ph2828 uses personal data for the following specific purposes:
6.1 Account Management & Service Delivery
To create, maintain, and secure your ph2828 account; to process deposits and withdrawals; to deliver gaming content and promotional offers; to verify your identity and eligibility; and to manage your account settings, including responsible gaming tools such as deposit limits and self-exclusion.
6.2 Legal & Regulatory Compliance
To comply with PAGCOR regulatory requirements, the Anti-Money Laundering Act (Republic Act No. 9160 as amended), Know Your Customer (KYC) obligations, and any lawful orders from Philippine government agencies or courts. Transaction data and identity records may be retained for compliance audit purposes for up to seven (7) years or as otherwise required by law.
6.3 Fraud Prevention & Security
To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, unauthorized account access, money laundering, and other prohibited activities outlined in our Terms & Conditions.
6.4 Responsible Gaming
To monitor gameplay patterns for indicators of problem gambling behavior; to administer self-exclusion requests; to enforce deposit limits and session time limits; and to facilitate referrals to responsible gaming support resources when necessary.
6.5 Customer Support
To respond to your inquiries, resolve disputes, manage complaint processes, and improve our support quality through review of support interaction records.
6.6 Marketing & Communications
With your prior consent, to send you promotional offers, bonus announcements, new game notifications, and platform updates via SMS, email, or push notification. You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.
6.7 Platform Analytics & Improvement
To analyze gameplay data, session behavior, and platform performance to improve user experience, optimize game loading times, and identify technical issues — particularly for mobile users on Smart and Globe LTE networks across the Philippines.
07 Sharing Your Personal Data
ph2828 does not sell your personal data to third parties. We may share personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
- Payment processors — GCash, Maya, BPI, BDO, Metrobank, 7-Eleven payment partners, Coins.ph, and USDT TRC20 processing services, solely for transaction processing and reconciliation;
- Identity verification providers — third-party KYC and AML screening services engaged to verify player identity and age in compliance with regulatory obligations;
- Game content providers — licensed game studios (such as Pragmatic Play, PG Soft, and Evolution) that require session identifiers to deliver their game content; these providers do not receive personally identifiable data beyond technical session tokens;
- Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or court order;
- Fraud prevention networks — industry-standard fraud detection services that process device and behavioral signals to flag suspicious activity;
- Professional advisors — lawyers, auditors, and accountants who are bound by professional confidentiality obligations.
All third-party service providers engaged by ph2828 are contractually required to process personal data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable Philippine data protection law.
No sale of data: ph2828 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances.
08 Data Retention
ph2828 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 7 years after account closure | AMLA compliance requirement |
| Transaction records | 7 years after transaction date | AMLA & tax compliance |
| Gaming activity logs | 5 years after account closure | Dispute resolution & audit |
| Support communications | 3 years after closure of ticket | Quality assurance & legal claims |
| Marketing consent records | Duration of consent + 3 years | NPC compliance documentation |
| Technical & device logs | 12 months on a rolling basis | Security & fraud detection |
| Self-exclusion records | Indefinitely (permanent exclusion) or per agreement | Responsible gaming enforcement |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph2828's data destruction procedures.
09 Security Measures
ph2828 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security practices include, without limitation:
- SSL/TLS encryption for all data transmitted between your device and the ph2828 Platform;
- Encryption at rest for sensitive personal information stored on our servers;
- Role-based access controls ensuring that personal data is accessible only to ph2828 personnel who need it to perform their job functions;
- Multi-factor authentication for internal systems handling personal data;
- Regular security assessments and vulnerability testing of the Platform;
- Data breach response procedures aligned with NPC notification requirements under the DPA (notification within 72 hours of breach discovery for qualifying incidents).
Your responsibility: You are responsible for maintaining the security of your ph2828 login credentials. Do not share your password with anyone. ph2828 will never ask for your password via email, chat, or telephone. If you suspect unauthorized access to your account, contact our support team immediately at [email protected].
10 Cookies & Tracking Technologies
ph2828 uses cookies and similar tracking technologies on the Platform for the following purposes:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly necessary | Session management, login state, security tokens, anti-fraud checks | No — essential to service operation |
| Functional | Language preference, game lobby layout, notification settings | No — supports core user experience |
| Analytics | Platform usage patterns, page load performance, error tracking | Yes — consent via cookie banner |
| Marketing | Retargeting, promotional campaign measurement | Yes — explicit consent required |
You can manage or withdraw consent for non-essential cookies through the cookie preference center accessible from the Platform. Note that disabling strictly necessary cookies will prevent you from using the Platform.
11 Your Rights as a Data Subject
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph2828. You may exercise these rights by contacting our Data Protection Officer (see Section 14):
Right to Access
Request a copy of the personal data ph2828 holds about you, along with information about how it is being processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data about you. Identity verification may be required.
Right to Erasure
Request deletion of your personal data where there is no longer a legal basis for retention, subject to overriding legal obligations (e.g., AMLA).
Right to Object
Object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
Right to Data Portability
Receive a copy of personal data you provided to ph2828 in a structured, commonly used, machine-readable format.
Right to Lodge a Complaint
File a complaint with ph2828's Data Protection Officer or directly with the National Privacy Commission (NPC) of the Philippines.
How to exercise your rights: Submit a written request to our Data Protection Officer at [email protected] with "Data Subject Request" in the subject line. ph2828 will respond within 15 business days of receiving a complete and valid request. Identity verification will be required before processing any rights request.
12 Minors (Persons Under 21)
The ph2828 Platform is strictly restricted to individuals aged 21 years or older, in compliance with PAGCOR regulations governing casino-style online gambling in the Philippines. ph2828 does not knowingly collect personal data from any person under the age of 21.
If ph2828 discovers that personal data has been collected from a person under 21, the account will be immediately suspended, the personal data will be deleted as soon as practicable (subject to any legal retention obligations), and deposits will be returned following verification. Parents or guardians who believe their child has registered on ph2828 should contact our support team immediately.
21+ Only: ph2828 applies mandatory age verification during registration. Providing a false date of birth to circumvent age restrictions is a breach of our Terms & Conditions and may constitute an offence under applicable Philippine law.
13 Changes to This Privacy Policy
ph2828 may revise this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, NPC guidance, or our Platform's features and functionality. When material changes are made, we will notify registered players via the email address or mobile number on their account prior to the effective date of the revised Policy.
The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of ph2828 following notification of material changes constitutes your acceptance of the revised Policy.
14 Contact & Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or ph2828's data processing practices, please contact our Data Protection Officer:
Data Protection Officer — ph2828
Email: [email protected]
Subject line: Data Privacy Inquiry / Data Subject Request
Response Time: ph2828 aims to acknowledge all privacy inquiries within 3 business days and to resolve data subject requests within 15 business days of receipt of a complete, verified request.
National Privacy Commission (NPC): If you are not satisfied with our response to your privacy inquiry or complaint, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines at privacy.gov.ph (for reference purposes only — ph2828 does not link to external sites).
ph2828 Privacy Commitments
These are the concrete practices ph2828 follows to keep your personal data safe, private, and under your control — not just promises in a policy document.
End-to-End Encryption
Every connection between your device and ph2828 is protected by SSL/TLS encryption. Your account credentials, payment details, and personal information are never transmitted in plain text — even on mobile data over Smart and Globe LTE.
DPA-Compliant KYC
ph2828's identity verification process is designed to satisfy both PAGCOR and NPC requirements. KYC documents are handled with enhanced security controls and are never shared with third parties beyond what is required for regulatory compliance.
No Data Selling — Ever
ph2828 does not sell, rent, or trade your personal data to advertisers, data brokers, or any other commercial third party. Your data is used to run your account and improve your experience — nothing more.
You Control Your Consent
Marketing consent on ph2828 is opt-in, not opt-out. You can withdraw consent for promotional communications at any time through your account settings without any impact on your ability to play or withdraw funds.
Clear Retention Limits
ph2828 publishes its data retention schedule openly in this Policy. We don't keep your data indefinitely "just in case." When the retention period expires, data is securely deleted or anonymized in line with NPC guidance.
Breach Notification
In the unlikely event of a personal data breach affecting your information, ph2828 will notify you and the National Privacy Commission within 72 hours of discovery, in full compliance with the Data Privacy Act of 2012.
Play on ph2828 With Confidence
Your data is protected, your privacy is respected, and your gaming experience is built on transparency. Explore everything ph2828 has to offer — live sabong, 500+ slots, live dealer tables, sports betting, and bingo. All in PHP. All on mobile. For players aged 21 and above only. Play responsibly.
Visit the ph2828 Casino Lobby