ph26 Privacy Policy

This Privacy Policy ("Policy") is issued by ph26 ("ph26", "we", "us", "the Company"), the operator of the online gaming platform at ph26.one. This Policy applies to all personal data collected from players, visitors, and prospective members who access or use the ph26 Platform. By registering an account or using any ph26 service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

ph26 operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the relevant issuances of the National Privacy Commission (NPC), and applicable PAGCOR data handling requirements.

1. Data Controller

ph26 is the personal information controller (PIC) responsible for the processing of your personal data collected through the ph26 Platform. For all data privacy matters, ph26 can be reached via our Data Protection Officer at the contact details set out in Section 13 of this Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a ph26 account or use our services, we may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., PhilSys card number, UMID, driver's license, or passport number).
• Contact Data: Philippine mobile number, email address, and mailing address.
• Financial Data: GCash or Maya account references, BPI/BDO account details (for bank transfers), transaction history, deposit and withdrawal records.
• KYC Documentation: Scanned or photographed copies of government-issued IDs and, where required, proof of address or source of funds documents.
• Account Credentials: Username and hashed password (ph26 never stores your password in plain text).

2.2 Information Collected Automatically

When you access the ph26 Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location (country, region, city).
• Device type, operating system, and browser version.
• Session data: pages visited, features used, time spent, game sessions initiated, and bet history.
• Cookie identifiers and similar tracking technologies (see Section 6).
• Referral source: how you arrived at ph26.one (e.g., direct URL, search engine, or internal navigation).

2.3 Information from Third Parties

ph26 may receive personal data about you from third-party payment processors (e.g., GCash, Maya) in connection with deposit and withdrawal transactions, and from identity verification service providers in connection with KYC compliance. We only receive the minimum data necessary to complete the relevant transaction or verification.

3. How We Use Your Data

ph26 processes your personal data for the following purposes:

• Account Management: To create, maintain, and manage your ph26 account, process your login credentials, and communicate account-related updates.
• Service Delivery: To provide access to games, process deposits and withdrawals, and administer bonuses and promotions.
• Identity Verification (KYC): To comply with PAGCOR regulations and Philippine anti-money laundering laws (AMLA — Republic Act No. 9160 as amended) by verifying your identity before processing withdrawals.
• Fraud Prevention & Security: To detect, prevent, and investigate fraudulent activity, money laundering, account takeovers, and other security threats.
• Regulatory Compliance: To meet our obligations under PAGCOR licensing, AMLA reporting requirements, and NPC data privacy regulations.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance via live chat or email.
• Responsible Gaming: To monitor gaming behaviour and, where necessary, flag patterns that may indicate problem gambling, and to administer self-exclusion and limit-setting tools.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the ph26 Platform's features, performance, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have given explicit consent and subject to your right to withdraw that consent at any time.

4. Legal Basis for Processing

ph26 processes your personal data under the following legal bases as recognised by the Philippine Data Privacy Act:

• Contractual Necessity: Processing required to perform the contract between you and ph26 (i.e., providing the gaming platform services).
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, and NPC requirements.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, where we rely on your freely given, informed, and specific consent.

5. Data Sharing & Disclosure

ph26 does not sell your personal data. We may share your data only in the following circumstances:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, and other payment partners receive transaction data strictly as necessary to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and fraud detection providers who assist us in verifying player identities. These providers operate under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) as required by law.
• Legal Process: Courts, law enforcement agencies, or government bodies where disclosure is required by a valid court order, subpoena, or applicable law.
• Business Operations: Trusted technology service providers (e.g., hosting, analytics, customer support software) who process data on our behalf under binding data processing agreements that require them to maintain confidentiality and security standards no lower than ours.

In all cases, ph26 shares only the minimum data necessary for the stated purpose and requires all third-party recipients to protect that data in accordance with applicable Philippine law.

6. Cookies & Tracking Technologies

ph26 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform. These fall into the following categories:

• Essential Cookies: Required for login sessions, security, and core Platform functionality. These cannot be disabled without impairing your use of ph26.
• Functional Cookies: Remember your preferences (e.g., language, game lobby layout) to improve your experience.
• Analytics Cookies: Collect anonymised data on how players navigate ph26.one, which we use to improve the Platform. We do not share this data with third-party advertising networks.

You may manage non-essential cookies through your browser settings. Note that disabling cookies may affect some Platform features. ph26 does not use advertising tracking cookies or cross-site behavioural advertising technologies.

7. Data Retention

ph26 retains your personal data for as long as your account is active and for a minimum period of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations. KYC documents and transaction records are retained for the period mandated by applicable law, which may extend beyond five years in cases involving regulatory investigations or legal proceedings. After the applicable retention period, personal data is securely deleted or anonymised.

8. Data Security

ph26 implements industry-standard technical and organisational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph26.one.
• Encrypted storage of sensitive data, including hashed passwords and ID document scans.
• Role-based access controls: only authorised ph26 personnel with a legitimate business need may access your personal data.
• Regular security audits and penetration testing of the ph26 Platform and infrastructure.
• Incident response procedures compliant with NPC breach notification requirements (72-hour reporting for qualifying breaches).

Notwithstanding the above, no method of internet transmission or electronic storage is 100% secure. In the event of a personal data breach that poses a real risk to your rights, ph26 will notify affected players and the NPC in accordance with applicable law.

9. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights in relation to your personal data held by ph26:

• Right to be Informed: To know how your data is being collected and processed — which this Policy addresses.
• Right of Access: To request a copy of the personal data ph26 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data in your ph26 account.
• Right to Erasure / Blocking: To request deletion or blocking of your personal data, subject to our legal retention obligations.
• Right to Object: To object to processing of your data for direct marketing or where processing is based on legitimate interests.
• Right to Data Portability: To request a structured, machine-readable copy of personal data you have provided to ph26.
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact ph26's Data Protection Officer via live chat on ph26.one or at the email address in Section 13. We will respond to verified requests within 15 business days.

10. Children's Privacy

ph26 does not knowingly collect personal data from persons under 21 years of age. The ph26 Platform is strictly for adults aged 21 and above in compliance with PAGCOR's minimum age requirements. If we discover that personal data has been collected from a person under 21, that account will be immediately suspended and the data deleted, and the matter will be reported to PAGCOR as required. If you are a parent or guardian and believe your child has registered on ph26, please contact us immediately.

11. Cross-Border Data Transfers

Some of ph26's technology service providers (e.g., cloud hosting infrastructure, game content providers) may be located outside the Philippines. Where personal data is transferred internationally, ph26 ensures that appropriate safeguards are in place — including data processing agreements that require recipient parties to maintain privacy and security protections equivalent to those required under Philippine law. We do not transfer your data to jurisdictions that do not provide adequate data protection standards without appropriate contractual safeguards.

12. Amendments to This Policy

ph26 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR requirements, or our data processing practices. Material changes will be communicated to registered players via email or a prominent notice on the ph26 Platform at least 15 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy. We recommend reviewing this page periodically.

13. Contact & Data Protection Officer

For any privacy-related inquiries, requests to exercise your data subject rights, or to reach ph26's Data Protection Officer (DPO):

• Live Chat: Available 24/7 at ph26.one — the fastest way to reach us.
• Email (DPO): [email protected] with subject line "Data Privacy Request" — displayed as plain text only, not a clickable link.

Our support and compliance team includes Filipino staff based in the Philippines, familiar with local regulations and able to assist players in Manila, Cebu, Davao, Quezon City, and nationwide.