ph8cash Privacy Policy

1. Introduction

1.1 ph8cash is committed to protecting the privacy and security of your personal information. We understand that Filipino players trust us with sensitive data, and we take that responsibility seriously. This Policy applies to all personal data we process in connection with your use of the ph8cash Platform, whether you are a registered player in Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the Philippines.

1.2 This Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated herein by reference. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

1.3 If you have any questions about how ph8cash handles your personal data, please contact our Data Privacy Officer at the details provided in Section 15 of this Policy.

2. Data Controller

2.1 For the purposes of the Philippine Data Privacy Act of 2012, ph8cash acts as the personal information controller in respect of the personal data it collects from players and users of the Platform.

2.2 ph8cash has appointed a Data Privacy Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. The DPO can be contacted at [email protected].

3. Data We Collect

ph8cash collects the following categories of personal data from players and users of the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Nationality and country of residence
• Email address and mobile phone number
• Residential address (barangay, city/municipality, province)

3.2 Identity Verification Data

• Copies of government-issued identification documents (e.g., PhilSys ID, passport, driver's license, UMID, voter's ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie or facial image for identity verification purposes

3.3 Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details for BPI, BDO, or Metrobank transactions
• Transaction history, including deposits, withdrawals, and wager amounts in Philippine Peso (PHP)

3.4 Technical & Usage Data

• IP address and device identifiers
• Browser type, version, and operating system
• Pages visited, features used, and time spent on the Platform
• Login timestamps and session duration
• Game history and betting activity

3.5 Communications Data

• Records of communications between you and ph8cash customer support
• Feedback, survey responses, and complaint records
• Marketing preferences and communication opt-in/opt-out records

ph8cash does not intentionally collect sensitive personal information beyond what is necessary for identity verification and regulatory compliance. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law.

4. How We Collect Data

ph8cash collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you use the Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-party sources: Data received from payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification service providers, fraud prevention agencies, and regulatory authorities where permitted by law.
• Publicly available sources: Information from public databases or government registries where relevant to our legal compliance obligations.

5. How We Use Your Data

ph8cash uses your personal data for the following purposes:

6. Legal Basis for Processing

6.1 ph8cash processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform our contract with you, including operating your ph8cash account, processing transactions, and delivering gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, anti-money laundering obligations, and tax reporting requirements.
• Legitimate interests: Processing is necessary for ph8cash's legitimate interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent to process personal data — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

7.1 ph8cash does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, to facilitate deposits and withdrawals in Philippine Peso.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers engaged to verify your identity and age in accordance with regulatory requirements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law.
• Fraud prevention agencies: Third-party providers engaged to detect and prevent fraudulent activity on the Platform.
• Technology service providers: Cloud hosting, data analytics, and platform infrastructure providers engaged by ph8cash to operate and maintain the Platform, subject to appropriate data processing agreements.
• Professional advisers: Legal counsel, auditors, and other professional advisers where necessary for the conduct of ph8cash's business.

7.2 All third parties with whom ph8cash shares personal data are required to handle that data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

8. International Data Transfers

8.1 Some of ph8cash's service providers and technology partners may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that afforded under Philippine law, ph8cash will implement appropriate safeguards to protect your data, including contractual clauses approved by the National Privacy Commission.

8.2 By using the ph8cash Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described in this section.

9. Data Retention

9.1 ph8cash retains your personal data for as long as your account remains active and for such additional period as is necessary to comply with our legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC requirements.
• Transaction records: Retained for a minimum of five (5) years following the date of the transaction, as required by Philippine anti-money laundering regulations.
• Customer support records: Retained for three (3) years following the resolution of the relevant enquiry or complaint.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, after which it will be deleted or anonymized within thirty (30) days.

9.2 Where personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, ph8cash will securely delete or anonymize that data.

10. Cookies & Tracking Technologies

10.1 ph8cash uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the ph8cash website. We use the following types of cookies:

• Strictly necessary cookies: Required for the Platform to function correctly, including maintaining your login session and processing transactions. These cannot be disabled.
• Performance cookies: Used to collect anonymized data about how players use the Platform, helping us identify areas for improvement.
• Functionality cookies: Used to remember your preferences, such as language settings and display options, to personalize your experience.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only placed with your consent.

10.2 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ph8cash Platform.

11. Your Data Rights

11.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph8cash:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data ph8cash holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph8cash has not handled your personal data in accordance with applicable law.

11.2 To exercise any of the above rights, please contact ph8cash's Data Privacy Officer at [email protected]. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

12. Security Measures

12.1 ph8cash implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ph8cash Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform;
• Two-factor authentication options for player accounts;
• Staff training on data protection and information security best practices.

12.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph8cash will notify the National Privacy Commission and affected players in accordance with the requirements of the Philippine Data Privacy Act.

12.3 While ph8cash takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your ph8cash login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

13. Children's Privacy

13.1 The ph8cash Platform is strictly intended for persons who are at least twenty-one (21) years of age. ph8cash does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account.

13.2 If you believe that ph8cash may have collected personal data from a person under the age of 21, please contact us immediately at [email protected].

14. Changes to This Policy

14.1 ph8cash reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide reasonable notice by posting a prominent notice on the Platform or by sending an email to your registered address prior to the changes taking effect.

14.2 The date at the top of this Policy indicates when it was last updated. Your continued use of the ph8cash Platform following the posting of an updated Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ph8cash handles your personal data, please contact our Data Privacy Officer. We are committed to resolving all data privacy enquiries promptly and transparently.

Data Privacy Officer — ph8cash
Email: [email protected]

ph8cash aims to respond to all data privacy requests within thirty (30) days of receipt. For complex requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about how to contact the NPC is available through official Philippine government channels.