This Privacy Policy ("Policy") describes how ph24 ("Company", "We", "Us", "Our"), the operator of the online gaming platform at ph24.one, collects, uses, stores, shares, and protects the personal data of its registered members, visitors, and prospective users ("You", "User", "Data Subject").
ph24 is a PAGCOR-licensed operator serving the Philippine market. This Policy is issued in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as administered by the National Privacy Commission of the Philippines. By registering an account with ph24 or by otherwise using the ph24 platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.
ph24 takes the privacy and security of your personal data seriously. As a regulated online gaming platform serving Filipino players across Metro Manila, Cebu, Davao, and the wider Philippines, ph24 processes personal data as a necessary part of providing gaming services, maintaining regulatory compliance, and protecting both the platform and its users from fraud and financial crime.
This Policy explains, in clear and accessible language, exactly what data ph24 collects from you, why ph24 collects it, how it is used and stored, with whom it may be shared, and what rights you have as a data subject under Philippine law. ph24 is committed to processing your personal data lawfully, fairly, and transparently, and to maintaining the security and integrity of that data throughout its lifecycle.
ph24 operates as both a personal information controller and, in certain contexts involving third-party service providers, as a personal information processor in accordance with the definitions in the Data Privacy Act of 2012. Where ph24 engages third parties to process personal data on its behalf, those third parties are subject to binding data processing agreements that require compliance with the same data protection standards applicable to ph24.
This Policy applies to all personal data collected through the ph24.one website, the ph24 mobile platform, customer support interactions, identity verification processes, payment transactions, and any other interaction you have with ph24. It applies to registered members, users who have commenced but not completed registration, and visitors to the ph24.one website.
ph24 processes your personal data only where there is a lawful basis for doing so under the Data Privacy Act of 2012. The applicable legal bases for ph24's data processing activities are:
ph24 collects personal data from you through several channels and at different points during your interaction with the platform. The categories of personal data collected are described below.
When you register a ph24 account, you provide: your full legal name as it appears on your government-issued identification; your date of birth; your email address; your mobile number; a username and password of your choosing; and optionally, your residential address within the Philippines.
To comply with PAGCOR's KYC requirements and the Anti-Money Laundering Act, ph24 collects and stores copies of identity documents submitted for verification, including photographs of government-issued IDs, selfie verification images, and proof of payment method ownership. This data is treated as sensitive personal information and is subject to enhanced security measures.
ph24 records all financial transactions associated with your account, including deposit amounts, dates, and payment method identifiers; withdrawal requests and processing records; bonus credits and wagering activity; and wallet balance history. Complete payment card numbers and bank account credentials are not stored by ph24 — these are handled directly by certified payment processors.
ph24 collects data relating to your gaming activity on the platform, including games played, wager amounts and outcomes, session duration, login frequency, and responsible gaming tool usage. This data is used to provide the gaming service, detect problematic gambling patterns, enforce responsible gaming limits, and comply with regulatory reporting requirements.
When you access ph24, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, referring URL, pages visited, and session timestamps. This data is used for platform security, fraud detection, technical troubleshooting, and service optimization.
ph24 retains records of communications you have with our customer support team through live chat, email, and any other support channel. These records are used to resolve disputes, improve service quality, and comply with regulatory obligations to maintain records of player interactions.
| Data Category | Examples | Sensitivity |
|---|---|---|
| Account Data | Name, email, mobile number, username | Standard |
| KYC / Identity Data | Government ID, selfie, date of birth | Sensitive |
| Financial Data | Deposit/withdrawal records, GCash reference | Elevated |
| Gaming Activity | Wager history, session logs, game results | Standard |
| Technical Data | IP address, device type, browser, OS | Standard |
| Communications | Support chat transcripts, email records | Standard |
ph24 uses the personal data it collects for the following purposes:
ph24 does not sell your personal data to any third party. Disclosure of your personal data to third parties is limited to the circumstances set out below, each of which is subject to appropriate legal and contractual safeguards.
ph24 is required by its PAGCOR license and by applicable Philippine law to disclose certain player data to regulatory authorities upon request. This includes PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR) where applicable, and any court or tribunal exercising lawful jurisdiction. ph24 will comply with all lawful orders and requests from these bodies and will not notify you of such disclosures where doing so would be prohibited by law or where notification would compromise an ongoing investigation.
ph24 shares limited personal and transactional data with GCash, PayMaya (Maya), BPI, BDO, Metrobank, and other certified payment service providers as necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations, and ph24 has no control over their internal data practices beyond the contractual requirements imposed by ph24's agreements with them.
ph24 may engage specialized third-party identity verification and KYC service providers to assist in the verification of player identity documents and the detection of fraudulent identities. Such providers process identity data solely for verification purposes and are bound by data processing agreements requiring compliance with the Data Privacy Act of 2012.
ph24 uses third-party providers for certain platform functions including cloud hosting and infrastructure, game content delivery from licensed game providers, live dealer studio services, customer support platform software, email delivery services, and platform analytics tools. Each of these providers is engaged under a data processing agreement that prohibits use of ph24 player data for any purpose beyond the contracted service.
In the event of a merger, acquisition, corporate restructuring, or sale of ph24's business or assets, player personal data may be transferred to the acquiring entity as part of the transaction. In such an event, ph24 will notify affected players and ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.
ph24 shares your personal data only where required by law, necessary to provide the service you have contracted for, or where you have given explicit consent. We do not sell your data, and we do not share it with advertisers or unrelated third-party businesses.
ph24 uses cookies and similar tracking technologies on the ph24.one platform. Cookies are small text files stored on your device that allow the platform to recognize your browser, maintain session state, and collect usage information. The categories of cookies used by ph24 are as follows:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in to and use ph24. ph24 does not use advertising or cross-site tracking cookies for the purpose of delivering third-party targeted advertising.
ph24 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The general retention periods applicable to the major categories of personal data processed by ph24 are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Registration Data | Duration of account plus 5 years post-closure | PAGCOR / AMLA requirements |
| KYC / Identity Documents | Duration of account plus 5 years post-closure | Anti-Money Laundering Act (RA 9160) |
| Transaction Records | 5 years from date of transaction | AMLA mandatory record-keeping |
| Gaming Activity Logs | 3 years from date of activity | PAGCOR licensing conditions |
| Support Communications | 3 years from date of interaction | Legitimate interest / dispute resolution |
| Marketing Consent Records | Until consent is withdrawn plus 1 year | Data Privacy Act compliance |
| Technical / Log Data | 12 months from collection | Security and fraud prevention |
Upon the expiry of the applicable retention period, ph24 will securely delete or anonymize your personal data in a manner that prevents reconstruction or identification. Where data is retained beyond an account's closure date for mandatory regulatory compliance reasons, access to that data within ph24 is restricted to personnel with a specific compliance-related need to access it.
ph24 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data it processes, and commensurate with the risks identified through ph24's ongoing security assessment program. These measures include:
Notwithstanding ph24's security measures, no system connected to the internet can guarantee absolute security against all threats. ph24 encourages all users to take reasonable steps to protect their own account security, including using a strong unique password, enabling two-factor authentication, and promptly reporting any suspected unauthorized access through ph24's live chat support.
As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data processed by ph24. You may exercise any of these rights by contacting ph24's Data Protection Officer (DPO) through the contact details provided in Section 16 of this Policy.
You have the right to obtain confirmation from ph24 of whether your personal data is being processed, and to receive a copy of the personal data ph24 holds about you.
You have the right to request correction of inaccurate or incomplete personal data that ph24 holds about you. Certain data corrections may require identity verification before they can be processed.
You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph24's legal obligations to retain certain data.
You have the right to object to ph24's processing of your personal data for direct marketing purposes. Where you object, ph24 will cease marketing communications without requiring justification.
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible.
You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph24 has not complied with its obligations under the Data Privacy Act of 2012.
ph24 will respond to all valid data subject requests within thirty (30) calendar days of receipt. In cases where the request is particularly complex, ph24 may extend this period by a further thirty (30) days with prior notification. There is no fee for exercising your data subject rights unless requests are manifestly unfounded or excessive, in which case ph24 reserves the right to charge a reasonable administrative fee.
ph24 does not knowingly collect personal data from individuals under the age of twenty-one (21) years. The 21-year minimum age requirement is a strict legal requirement under PAGCOR's regulatory framework and is enforced by ph24 through mandatory identity verification for all accounts prior to the processing of any withdrawal.
Registration on ph24 includes a declaration by the registrant that they are 21 years of age or older. Providing a false declaration of age constitutes a breach of ph24's Terms and Conditions and may constitute an offense under applicable Philippine law. Any account subsequently identified as belonging to a minor will be immediately closed, all funds will be forfeited in accordance with PAGCOR regulations, and the matter will be reported to PAGCOR as required by ph24's licensing obligations.
ph24's services are exclusively for persons aged 21 years and older. If you become aware that a minor has accessed or registered on ph24, please notify ph24's support team immediately via live chat so appropriate action can be taken.
In the course of providing its services, ph24 may transfer certain personal data to third-party service providers located outside the Philippines, including cloud hosting infrastructure providers and certain specialized technology service providers. Any such cross-border data transfer is conducted in compliance with Section 21 of the Data Privacy Act of 2012, which requires that the recipient jurisdiction or organization provides a level of data protection substantially equivalent to those afforded by Philippine law.
Where ph24 transfers personal data outside the Philippines, it ensures that appropriate safeguards are in place, which may include contractual clauses specifically approved by the National Privacy Commission, binding corporate rules where applicable, or a determination that the destination jurisdiction provides an adequate level of data protection. ph24 does not transfer sensitive personal information — including identity documents and financial data — outside of its primary secured systems except as strictly necessary to fulfill its PAGCOR compliance and AML obligations.
The ph24 platform integrates with third-party services, including game content providers, live dealer studio operators, payment processors, and certain analytics and support software platforms. These third-party integrations are necessary for the provision of ph24's services and are governed by data processing agreements as described in Section 5.4 of this Policy.
ph24 is not responsible for the privacy practices of third-party organizations whose services are integrated into the ph24 platform. Each third-party provider operates under its own privacy policy. ph24 encourages you to review the privacy policies of any third-party service providers whose services you use in connection with, or independently from, the ph24 platform. This Policy applies only to ph24's own data processing activities and not to those of third parties.
Where you have provided consent at registration or subsequently opted in to marketing communications, ph24 may send you promotional emails and platform notifications relating to new games, promotional offers, bonus opportunities, and other ph24 platform updates.
ph24 will not send you unsolicited commercial electronic messages in violation of applicable Philippine law. You may withdraw your consent to receive marketing communications at any time by contacting ph24's support team via live chat, by emailing ph24's Data Protection Officer at the address in Section 16, or by following the unsubscribe instructions included in any marketing communication you receive from ph24.
Withdrawal of marketing consent will not affect the provision of ph24's gaming services to you, and you will continue to receive transactional and service-related communications that are necessary for the operation of your account regardless of your marketing consent status.
In the event of a personal data breach that is likely to result in harm to affected data subjects, ph24 will comply with the mandatory breach notification requirements under the Data Privacy Act of 2012 and the implementing regulations of the National Privacy Commission.
Specifically, ph24 will notify the National Privacy Commission of the Philippines within seventy-two (72) hours of becoming aware of a notifiable breach. Where the breach is likely to result in serious harm to the rights and freedoms of the affected data subjects, ph24 will also notify the affected individuals without undue delay, providing information about the nature of the breach, the categories of data affected, the likely consequences, and the measures ph24 has taken or proposes to take to address the breach.
ph24 maintains an internal data breach register and conducts post-incident reviews following any confirmed security incident, with a view to improving its security controls and preventing recurrence.
ph24 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, ph24's data processing practices, or the services offered on the platform. The effective date of the current version of this Policy is displayed at the top of this document.
Where amendments are material in nature — including changes that affect your rights as a data subject, the categories of data collected, or the purposes for which your data is used — ph24 will provide advance notice of not less than fourteen (14) days by posting a notice on the ph24 platform and, where practicable, by sending an email to your registered email address. Minor amendments, including typographical corrections and clarifications that do not affect the substance of this Policy, may be made without advance notice.
Your continued use of the ph24 platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of, and agreement to, the amended Policy. If you do not accept any material amendment to this Policy, you may close your account in accordance with ph24's Terms and Conditions.
ph24 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and the National Privacy Commission's implementing regulations. The DPO is responsible for overseeing ph24's data protection compliance and is the designated point of contact for data subject requests and privacy-related enquiries.
If you have any questions, concerns, or requests relating to this Privacy Policy, your personal data, or your rights as a data subject, you may contact ph24 through the following channels:
ph24 will acknowledge all privacy-related requests within five (5) business days and will endeavour to resolve requests fully within thirty (30) calendar days, subject to the complexity of the request and any applicable regulatory constraints. You also have the right to escalate unresolved privacy concerns to the National Privacy Commission of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.
Six ways ph24 protects your personal data as a PAGCOR-regulated Philippine gaming platform.
Every connection between your device and ph24 is protected by TLS encryption — the same standard used by Philippine online banking platforms. Your data travels securely between you and ph24 at all times.
ph24's data practices are designed to comply with the Philippine Data Privacy Act of 2012 in full. A dedicated Data Protection Officer oversees compliance, handles data subject requests, and coordinates with the National Privacy Commission where required.
ph24 does not sell your personal data to advertisers, data brokers, or any third party for commercial purposes. Your information is used to provide the service you signed up for — nothing else without your explicit consent.
Philippine law gives you rights over your personal data — access, rectification, erasure, portability, and objection. ph24 makes it straightforward to exercise these rights through its support channels with a response commitment of 30 days.
Sensitive data — including KYC documents and financial records — is stored with enhanced access controls, encrypted at rest, and accessible only to personnel with a verified compliance-related need to view it.
In the event of any notifiable data breach, ph24 is committed to notifying the National Privacy Commission within 72 hours. Where your data is directly affected, ph24 will notify you promptly in accordance with its obligations under the Data Privacy Act.
ph24 is the Philippines' PAGCOR-regulated platform — live casino, slots, sports betting, and bingo in Philippine Peso. Your privacy is protected under Philippine law. Must be 21 or older.
🔞 For players 21 years and older only. PAGCOR regulated. Gambling involves risk. Please play responsibly.