Privacy Policy — php898 Online Casino & Sportsbook
At php898, we take your personal data seriously. This Privacy Policy explains exactly what information we collect from Filipino players, how we use it, who we share it with, and the rights you hold under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). Please read this document fully before using the php898 platform.
Last Updated: January 2026 | Effective: January 2026Our Privacy Commitments
Before you dive into the full legal text, here are the six core commitments that define how php898 handles the personal data of every Filipino player on the platform.
Data Collected Only When Needed
php898 applies a data minimization principle — we only collect personal information that is strictly necessary for account registration, identity verification, payment processing, responsible gaming monitoring, and compliance with PAGCOR regulations and Philippine anti-money laundering law. We do not collect data speculatively.
No Sale of Your Personal Data
php898 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Your information is shared only with service providers who directly support the operation of the php898 platform, and only under strict contractual data protection obligations.
Philippine DPA Compliance
This Privacy Policy is designed and maintained in full compliance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 — and the implementing rules and regulations issued by the National Privacy Commission (NPC). php898 has appointed a Data Protection Officer (DPO) to oversee data privacy governance and handle player rights requests.
Bank-Grade Data Security
php898 uses TLS encryption for all data transmitted between your device and our servers. Sensitive data including passwords and payment details are stored using industry-standard hashing and encryption protocols. Our infrastructure is subject to regular security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
Full Transparency on Data Use
We tell you exactly what we collect and why. There are no hidden data uses. Every category of personal data we hold on php898 players is documented in this Privacy Policy, together with the lawful basis for processing it, how long we retain it, and the circumstances under which it may be shared with third parties or regulators.
Your Rights Are Respected
Filipino players on php898 hold a comprehensive set of data subject rights under the Philippine Data Privacy Act — including the right to access, correct, object, and erase your personal data. php898 has established clear processes for exercising each of these rights, and commits to responding to verified rights requests within the timelines required by law.
1 Data Controller
php898 is the data controller responsible for the personal data of all registered players and site visitors. As data controller, php898 determines the purposes and means by which your personal information is collected, processed, stored, and disclosed. php898 operates under the brand name php898 and is accessible at https://php898.net.
php898 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the data privacy obligations imposed by the National Privacy Commission (NPC) under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
Data Protection Officer (DPO): php898 has designated a Data Protection Officer responsible for ensuring compliance with the Philippine Data Privacy Act. You may reach the DPO for all data privacy-related inquiries, rights requests, and breach notifications at [email protected] with the subject line "Data Privacy Request – DPO".
2 Scope & Application
This Privacy Policy applies to:
- All registered php898 account holders, regardless of whether they are actively using the platform or have a dormant account;
- Visitors to the php898 website at https://php898.net who have not yet registered an account;
- Any individual who contacts php898 support via email or any other communication channel;
- Any individual whose personal data is provided to php898 as part of a KYC or responsible gaming process (e.g., a concerned family member reporting a minor attempting to register).
This Privacy Policy does not apply to third-party websites, services, or platforms that may be linked from the php898 website. php898 is not responsible for the privacy practices of any third-party operator.
Philippine Players: If you are accessing php898 from within the Philippines, you are protected by the full rights afforded under Republic Act No. 10173. If you are accessing php898 from outside the Philippines, your data will still be processed in accordance with this Privacy Policy and Philippine law, which remains the governing law for all php898 data processing activities.
3 Personal Data We Collect
php898 collects personal data across several categories depending on how you interact with the platform. The table below summarizes the categories of personal data we collect and the typical data elements within each category:
| Data Category | Specific Data Elements | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number (e.g., PhilSys, passport, driver's license) | Registration & KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address (barangay, city/municipality, province) | Registration |
| Financial Data | GCash mobile number, PayMaya account details, bank account name and number (BPI, BDO, Metrobank), card type and last 4 digits | Deposit / withdrawal setup & KYC |
| KYC Documents | Scanned or photographed government IDs, proof of address documents, selfie photographs | Identity verification process |
| Transaction Data | Deposit amounts and timestamps, withdrawal requests, bet history, game session records, bonus claims and wagering history | Ongoing — all platform activity |
| Technical Data | IP address, device type and OS, browser type and version, session identifiers, login timestamps | Automatically on each platform visit |
| Behavioural Data | Game preferences, session duration, betting patterns, pages visited, responsible gaming tool usage | Automatically during platform use |
| Communications Data | Contents of support tickets, chat transcripts, emails sent to or received from php898 support | When you contact php898 support |
| Marketing Preferences | Opt-in or opt-out status for promotional emails, SMS alerts, and platform notifications | Registration & account settings |
php898 does not intentionally collect special categories of personal data (such as health information, religious beliefs, or political opinions) unless directly relevant to a responsible gaming or self-exclusion request submitted voluntarily by the player.
4 How We Collect Your Data
php898 collects your personal data through the following channels and mechanisms:
4.1 Directly from You
The majority of personal data php898 holds is information you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to a survey, or opt in to a promotion. This is data you knowingly and actively submit to php898.
4.2 Automatically During Platform Use
When you visit https://php898.net or use the php898 platform on any device, our systems automatically collect technical and behavioural data including your IP address, device identifiers, browser information, session timing, and in-game activity logs. This collection is necessary for platform security, fraud prevention, and the delivery of a consistent gaming experience across sessions.
4.3 From Third-Party Service Providers
php898 may receive personal data about you from trusted third-party partners in the following contexts:
- Payment processors (e.g., GCash, PayMaya, BPI, BDO) — transaction confirmation data necessary to credit your php898 wallet;
- KYC and identity verification providers — verification outcomes and risk scores generated during the document review process;
- Fraud prevention and AML screening services — risk flags or watchlist matches relevant to your account;
- Game software providers (e.g., JILI Games and other licensed suppliers) — game round results, RTP logs, and jackpot event data associated with your player session.
4.4 Cookies and Tracking Technologies
php898 uses cookies and similar tracking technologies on the php898 website to maintain session state, remember your preferences, analyze site traffic, and support responsible gaming monitoring. Full details of cookies used by php898 are provided in Section 9 of this Privacy Policy.
5 Why We Use Your Personal Data
php898 processes your personal data only for specific, legitimate purposes. The table below sets out each processing purpose, the categories of data used, and the lawful basis under the Philippine Data Privacy Act:
| Processing Purpose | Data Used | Lawful Basis (RA 10173) |
|---|---|---|
| Account registration and management | Identity, Contact | Contractual necessity |
| Identity verification (KYC) | Identity, KYC Documents, Financial | Legal obligation (PAGCOR / AMLA) |
| Processing deposits and withdrawals | Financial, Transaction | Contractual necessity |
| Delivering gaming and sportsbook services | Transaction, Behavioural, Technical | Contractual necessity |
| Fraud detection and AML monitoring | Technical, Financial, Transaction | Legal obligation (AMLA / PAGCOR) |
| Responsible gaming monitoring and intervention | Behavioural, Transaction, Communications | Legitimate interest / Legal obligation |
| Customer support and dispute resolution | Identity, Communications, Transaction | Contractual necessity |
| Platform security and access control | Technical, Identity | Legitimate interest |
| Regulatory reporting to PAGCOR and AMLC | Identity, Financial, Transaction | Legal obligation |
| Marketing and promotional communications | Contact, Marketing Preferences | Consent (opt-in only) |
| Platform analytics and improvement | Technical, Behavioural | Legitimate interest |
Marketing Opt-Out: php898 will only send you promotional emails or SMS messages if you have actively opted in during registration or subsequently updated your marketing preferences in your account settings. You can withdraw your marketing consent at any time by updating your preferences in your php898 account or by contacting support at [email protected]. Opting out of marketing communications does not affect your ability to use the php898 platform.
6 Who We Share Your Data With
php898 does not sell your personal data. We share your personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:
6.1 Payment and Financial Service Providers
To process your deposits and withdrawals, php898 shares relevant financial and identity data with GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard as required by each payment transaction. These providers operate under their own privacy policies and are bound by financial sector data protection obligations under Philippine law.
6.2 KYC and Compliance Technology Providers
php898 uses specialist third-party providers to assist with identity document verification, liveness detection, and AML watchlist screening. These providers process your KYC documents and return a verification outcome to php898. They act as data processors under contract with php898 and are not permitted to use your data for any purpose beyond the verification service.
6.3 Game Software Providers
The casino games and sportsbook markets available on php898 are powered by licensed third-party game suppliers. Session-level data (player ID, bet amounts, game round results) is shared with these suppliers for game delivery and RTP auditing purposes. No directly identifying personal data beyond an anonymized player session identifier is shared with game suppliers by default.
6.4 Regulatory and Law Enforcement Authorities
php898 is legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities when required by law, regulation, court order, or lawful regulatory direction. php898 cannot decline such requests where they are legally binding. We will notify affected players of any such disclosure where we are legally permitted to do so.
6.5 IT Infrastructure and Security Providers
php898 engages cloud hosting, server management, cybersecurity monitoring, and backup service providers who may have access to systems containing player data in the course of providing their services. All such providers are contractually bound to data processor obligations consistent with RA 10173, including security requirements, purpose limitations, and prohibition on independent data use.
No Third-Party Marketing: php898 will never share your personal data with third-party advertising networks, data brokers, or external marketing platforms. Your data is used only to support the operation of the php898 platform and to meet our legal and regulatory obligations.
7 Data Retention
php898 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | PAGCOR regulatory requirement |
| KYC documents | Duration of account + 5 years after closure | AMLA retention obligations (RA 9160) |
| Financial and transaction records | Duration of account + 5 years after closure | AMLA / PAGCOR / tax compliance |
| Support communications | 3 years from the date of the communication | Dispute resolution / contractual |
| Technical logs (IP, session) | 12 months from collection | Security and fraud monitoring |
| Marketing preferences | Until withdrawn or account closed | Consent-based processing |
| Self-exclusion records | Permanent (not deleted on account closure) | Responsible gaming compliance |
Upon expiry of the applicable retention period, php898 will securely delete or anonymize your personal data so that it can no longer be attributed to you as an identifiable individual. Where anonymized data is retained for statistical or analytics purposes, it is no longer considered personal data under RA 10173.
8 Data Security
php898 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include, but are not limited to:
- Transport Layer Security (TLS): All data exchanged between your browser or device and the php898 platform is encrypted using TLS 1.2 or higher;
- Password hashing: Player passwords are stored using industry-standard cryptographic hashing algorithms — php898 staff cannot view your password in plain text;
- Access controls: Access to player personal data by php898 staff is strictly role-based and limited to personnel with a legitimate operational need;
- Audit logging: All access to player data by internal systems and staff is logged and subject to periodic review;
- Penetration testing: php898 engages independent security researchers to conduct regular penetration tests of the platform infrastructure;
- Data breach response plan: php898 maintains a documented personal data breach response procedure. In the event of a breach that poses a risk to player rights and freedoms, php898 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the NPC's breach notification regulations, and will notify affected players without undue delay.
Your Role in Security: php898 urges all Filipino players to protect their account credentials. Use a strong, unique password for your php898 account. Never share your login details with anyone. If you believe your account has been compromised, contact php898 support immediately at [email protected].
9 Cookies & Tracking Technologies
The php898 website uses cookies — small text files stored on your device — and similar tracking technologies to support platform functionality, security, and user experience. php898 uses the following categories of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, CSRF protection, load balancing | No — required for platform to function |
| Functional | Remembering language preference, game lobby layout, responsible gaming reminder settings | Yes — via browser settings |
| Analytical | Aggregated traffic analysis, page performance monitoring, error tracking | Yes — via browser settings or cookie consent |
| Security & Fraud Prevention | Device fingerprinting for duplicate account detection, suspicious login pattern identification | No — required for platform integrity |
php898 does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may prevent you from logging in to or using the php898 platform.
10 Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by php898. You may exercise any of these rights by submitting a written request to [email protected] with the subject line "Data Privacy Rights Request". php898 will respond within 15 business days of receipt of a verified request.
Right to Access
Request a copy of the personal data php898 holds about you, along with information on how it is being used and with whom it has been shared.
Right to Rectification
Request correction of any inaccurate, incomplete, or outdated personal data that php898 holds about you.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to php898's legal retention obligations.
Right to Object
Object to processing based on legitimate interest, including direct marketing. php898 will stop the processing unless we can demonstrate compelling legitimate grounds that override your rights.
Right to Data Portability
Receive a copy of your personal data in a structured, commonly used, machine-readable format, and request that it be transmitted to another data controller where technically feasible.
Right to Lodge a Complaint
File a complaint with the National Privacy Commission (NPC) of the Philippines if you believe php898 has processed your personal data in violation of RA 10173.
Please note that certain rights are subject to limitations where processing is required for legal compliance, fraud prevention, responsible gaming obligations, or the resolution of an ongoing dispute. php898 will clearly communicate any such limitations when responding to your rights request.
11 Minors & Age Restriction
php898 does not knowingly collect personal data from individuals under 21 years of age. The php898 platform is strictly for adults aged 21 and above, as required by Philippine gaming regulations. Age verification is enforced at registration and during KYC document review.
If php898 discovers that personal data has been collected from an individual under 21 years of age, that account will be immediately closed, all collected data will be securely deleted (except where required to be retained for regulatory reporting), and any deposits will be returned to the source payment method where traceable.
If you are a parent or guardian and believe your child under 21 may have registered on php898, please contact us immediately at [email protected] so we can investigate and take corrective action without delay.
21+ Philippine law requires all online casino and sports betting players to be at least 21 years of age. php898 enforces this requirement rigorously. Underage gambling is illegal and will not be tolerated under any circumstances.
12 Cross-Border Data Transfers
Some of php898's service providers — including cloud hosting infrastructure providers and game software suppliers — may store or process personal data on servers located outside the Philippines. Where such cross-border transfers occur, php898 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that required by RA 10173, including:
- Contractual data transfer clauses that bind the receiving party to Philippine-equivalent data protection standards;
- Transfer only to jurisdictions that have been assessed as providing an adequate level of data protection;
- Technical safeguards such as data encryption during transfer and at rest on recipient systems.
php898 will not transfer personal data to any jurisdiction or recipient where adequate protections cannot be confirmed.
13 Changes to This Privacy Policy
php898 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the php898 platform's features. When material changes are made, php898 will notify registered players via email or a platform notification at least 14 calendar days before the change takes effect.
The most current version of this Privacy Policy is always available at https://php898.net/privacy-policy. The "Last Updated" date at the top of this page indicates when the current version took effect. Your continued use of the php898 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.
14 Contact & Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by php898, please contact our Data Protection Officer through the following channel:
Email: [email protected]
Subject Line: "Data Privacy Request – DPO"
Response Time: php898 aims to acknowledge all data privacy inquiries within 3 business days and to provide a full response within 15 business days
Regulator: National Privacy Commission (NPC) — Philippines | PAGCOR — Philippine Amusement and Gaming Corporation
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are unsatisfied with php898's handling of your personal data. Information on how to file a complaint with the NPC is available on the NPC's official government website.
Play Safely on php898
PAGCOR-regulated, DPA-compliant, and built to protect Filipino players. Your data stays yours — always. 21+ only. Play responsibly.