958ph Privacy Policy – Data Protection for Filipino Players

958ph is an online gaming platform operating at https://958ph.app and serving players in the Philippines. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), 958ph is the personal information controller responsible for the personal data collected from and about registered players and visitors to the platform.

This Privacy Policy applies to all personal data collected through the 958ph website, mobile interface, customer support channels, and any other service operated under the 958ph brand. It covers data collected from registered account holders, individuals in the process of registering, and visitors who browse the platform without creating an account.

For all data privacy matters — including data rights requests, privacy complaints, and inquiries about our data practices — you can reach our Data Protection Officer at privacy@958ph.app.

958ph collects personal data that is necessary for operating your account, processing transactions, verifying your identity, preventing fraud and money laundering, and meeting our legal obligations. The specific data collected depends on how you interact with the platform.

958ph collects personal data through several channels:

• Directly from you — when you register an account, complete the KYC process, make deposits or withdrawals, contact our support team, or respond to surveys and promotions.
• Automatically — when you visit or interact with the 958ph platform, our systems automatically collect technical and usage data including your IP address, device information, and browsing behavior on our site through cookies and similar technologies (see Section 7 on Cookies).
• From payment processors — when you make a deposit or request a withdrawal, our payment processing partners share transaction confirmation data with us to reconcile your account balance.
• From identity verification providers — during the KYC process, we may use third-party identity verification services to cross-check the documents you provide against authoritative data sources. These services return a verification result to 958ph; the underlying document data remains subject to our security standards.
• From fraud prevention and AML screening services — we may check account activity and transaction patterns against databases maintained by fraud detection and anti-money laundering compliance service providers as part of our regulatory obligations.

958ph uses your personal data for specific, legitimate purposes. We do not process personal data beyond what is necessary for the stated purpose at the time of collection.

• Account management: Creating and maintaining your 958ph account, verifying your identity, processing login and authentication, and managing account settings.
• Payment processing: Processing deposits and withdrawals via GCash, Maya, BDO, BPI, UnionBank, and other supported Philippine payment methods; reconciling transaction records; and investigating any payment discrepancies.
• KYC and identity verification: Verifying that you are who you say you are, confirming that you meet the age requirement of 21 years, and confirming ownership of your payment method — all as required by applicable regulations.
• Fraud prevention and AML compliance: Monitoring account activity for patterns consistent with fraud, account takeover, bonus abuse, or money laundering; reporting suspicious transactions to relevant Philippine authorities as required by law.
• Customer support: Responding to your queries, complaints, and requests; investigating disputes; and maintaining records of our support interactions for quality assurance and legal purposes.
• Responsible gaming: Monitoring gaming behavior for indicators of problem gambling; administering deposit limits, cooling-off periods, and self-exclusion requests; and providing access to responsible gaming resources.
• Platform improvement: Analyzing aggregated usage data to improve game performance, platform design, and the overall player experience. This analysis uses anonymized or pseudonymized data where possible.
• Marketing communications: Sending you information about 958ph promotions, bonuses, and new games — but only where you have provided consent or where we have a legitimate interest, and always with a clear opt-out option in every communication.
• Legal obligations: Complying with Philippine law, including the Data Privacy Act, Anti-Money Laundering Act, and any regulatory requirements applicable to online gaming operations in the Philippines.

Under the Data Privacy Act of 2012, 958ph processes your personal data on the following legal bases:

• Contractual necessity: Much of our data processing is necessary to perform the contract between you and 958ph — specifically, to operate your account, process your bets and payments, and provide the gaming services you have signed up for.
• Legal obligation: 958ph is required by Philippine law to collect and retain certain data for KYC, AML compliance, regulatory reporting, and tax purposes. This processing is mandatory and cannot be opted out of while you maintain an active account.
• Legitimate interests: We process some data — such as technical logs and aggregated analytics — based on our legitimate interest in maintaining platform security, preventing fraud, and improving our services. We apply a balancing test to ensure our legitimate interests do not override your privacy rights.
• Consent: Where we send you direct marketing communications or deploy non-essential cookies, we rely on your prior consent. You can withdraw consent at any time by updating your communication preferences in your account settings or contacting privacy@958ph.app.

958ph does not sell your personal data. We share personal data only with parties that need it to help us operate the platform or to meet our legal obligations. All third parties who process personal data on our behalf are bound by data processing agreements that require them to protect your data in accordance with RA 10173.

• Payment service providers: GCash (Mynt), Maya, GrabPay, Coins.ph, and partner banks (BDO, BPI, UnionBank) receive the minimum data necessary to process your transactions.
• Identity verification providers: Third-party KYC services receive your identity document images and personal details solely for the purpose of verifying your identity and age. These providers are prohibited from using your data for any other purpose.
• Fraud detection and AML compliance services: We share transaction data with fraud screening and AML compliance platforms to detect and prevent financial crime.
• IT infrastructure and cloud services: Platform hosting, database management, and backup services are provided by secure cloud infrastructure providers. All data stored on these systems remains subject to 958ph's security standards and encryption requirements.
• Customer support platforms: Our live chat and email support systems are operated with tools that process communication data. Support staff are trained in data confidentiality requirements.
• Regulatory and law enforcement authorities: 958ph will disclose personal data to the National Privacy Commission, Anti-Money Laundering Council (AMLC), or other Philippine government authorities when required by law, court order, or legal process.

958ph uses cookies and similar tracking technologies to operate the platform, maintain your session, prevent fraud, and analyze how the platform is used. The types of cookies we use are:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preferences, and support platform security features. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences — such as game settings and notification preferences — to provide a more personalized experience.
• Analytics cookies: We use aggregated, anonymized analytics to understand how players navigate the platform so we can improve its design and performance. These cookies do not identify you personally.
• Security and fraud prevention cookies: These help us detect and prevent fraudulent activity, including account takeover attempts and bonus abuse patterns.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or using core platform features. For non-essential cookies, you can adjust your preferences via the cookie consent settings available on the platform.

958ph retains personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law — whichever is longer.

• Account data and KYC records: Retained for a minimum of 5 years following account closure, as required by the Anti-Money Laundering Act (Republic Act No. 9160, as amended) and related AMLC regulations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support records: Retained for 3 years following the resolution of each support interaction.
• Gaming activity logs: Retained for 5 years from the date of each gaming session for fraud investigation, regulatory compliance, and dispute resolution purposes.
• Technical logs: Retained for 12 months and then deleted or anonymized.
• Marketing consent records: Retained for 5 years from the date of consent or until consent is withdrawn, whichever comes first.

Where data is no longer required for any lawful purpose, 958ph will securely delete or anonymize it. Anonymized data — where all identifying information has been removed — may be retained indefinitely for statistical and platform improvement purposes.

958ph implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. Our security measures include:

• Encryption in transit: All data transmitted between your device and 958ph servers is protected using TLS (Transport Layer Security) protocol.
• Encryption at rest: Sensitive data stored on our servers — including identity documents and payment details — is encrypted using AES-256 standard encryption.
• Access controls: Personal data is accessible only to staff who need it to perform their job functions. All staff access is role-based, logged, and regularly reviewed.
• Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication.
• Regular security testing: Our systems undergo regular penetration testing and vulnerability assessments by independent security professionals.
• Staff training: All 958ph staff who handle personal data receive regular training on data protection obligations and security practices.
• Incident response plan: We maintain a documented data breach response plan and will notify the National Privacy Commission and affected individuals within 72 hours of discovering a breach that poses a real risk of serious harm.

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights regarding your personal data held by 958ph. To exercise any of these rights, contact our Data Protection Officer at privacy@958ph.app. We will respond within 15 business days of receiving your request and verifying your identity.

Right to Access: You can request a copy of the personal data 958ph holds about you, the purposes for which it is being processed, and the parties it has been shared with.

Right to Correction: You can request that inaccurate, incomplete, or outdated personal data be corrected. For basic account details, you can update these directly through your account settings.

Right to Erasure: You can request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that some data must be retained to meet our legal obligations even after account closure, as described in Section 8.

Right to Object: You can object to processing of your personal data for direct marketing at any time. You can also object to other processing based on legitimate interests, though some such processing may be necessary to continue operating your account.

Right to Data Portability: You can request a copy of the personal data you have provided to 958ph in a structured, machine-readable format for transfer to another service provider.

If you believe your data rights have not been respected, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

958ph is an online gaming platform for adults. The minimum age to register and play is 21 years old. We do not knowingly collect personal data from anyone under the age of 21.

If we discover that a person under 21 has created a 958ph account, we will immediately close the account, forfeit all associated balances, and securely delete all personal data associated with that account as soon as our legal retention obligations permit.

If you are a parent or guardian and believe your child has created a 958ph account without your knowledge, please contact us immediately at privacy@958ph.app. We take underage gambling prevention seriously and will act on verified reports without delay.

Some of the third-party service providers that 958ph works with — including certain IT infrastructure, fraud detection, and analytics providers — may process data in locations outside the Philippines. Where such transfers occur, 958ph ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that provided under Philippine law.

Safeguards for cross-border transfers may include: contractual data processing agreements that incorporate data protection standards consistent with RA 10173; reliance on jurisdictions that the National Privacy Commission has determined provide adequate protection; or specific technical and organizational measures appropriate to the nature of the data being transferred.

We do not transfer special categories of personal data — such as identity document images — outside the Philippines without first ensuring that equivalent protections are in place and that the transfer is strictly necessary for the stated purpose.

958ph reviews this Privacy Policy regularly and may update it to reflect changes in our data practices, applicable Philippine law, or NPC guidance. The date of the most recent update is shown at the top of this page.

Where changes are material — meaning they affect how your personal data is used in a way that could impact your rights or reasonable expectations — 958ph will notify registered players via email and/or a platform notification at least 14 days before the changes take effect. For minor updates (such as clarifications or formatting corrections), we may update the policy without advance notice.

We encourage you to review this Privacy Policy periodically. Continued use of the 958ph platform after any update constitutes acceptance of the revised policy. If you do not agree with a material change, you may request account closure before the change takes effect.

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a privacy concern, please contact our Data Protection Officer directly. We respond to all data privacy inquiries within 15 business days.

Data Protection Officer — 958ph
Email: privacy@958ph.app
General support: support@958ph.app
Response time: Within 15 business days for formal data rights requests; within 48 hours for general privacy inquiries.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines. The NPC handles complaints from data subjects regarding alleged violations of RA 10173 and its implementing rules.

For general information about our platform, see our About Us page. For rules about using the platform, see our Terms and Conditions. For information about responsible gaming tools and support, visit our Responsible Gaming page.