Privacy Policy

1. Introduction

ph50 ("we", "us", "our") operates the online gaming platform accessible at ph50.asia and is the data controller responsible for the personal information collected through this platform. This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data belonging to registered players, prospective players, and visitors to ph50.asia.

By registering an account on ph50, accessing the ph50 platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the ph50 platform.

This Policy should be read in conjunction with the ph50 Terms & Conditions, which govern the overall use of the ph50 platform.

2. Data Controller

The data controller for personal data processed via ph50.asia is:

3. Personal Data We Collect

ph50 collects personal data that is necessary, adequate, and proportional to the purposes for which it is processed. The categories of personal data we collect include:

Category	Examples	Required
Identity Data	Full legal name, date of birth, gender, nationality, government-issued ID number	Mandatory (KYC)
Contact Data	Email address, mobile number, residential address, city (e.g., Manila, Cebu, Davao)	Mandatory
Account Data	Username, password (hashed), account preferences, gaming history, bonus activity	Mandatory
Financial Data	GCash account reference, PayMaya reference, BPI/BDO/Metrobank account details, transaction history	Mandatory (withdrawals)
Technical Data	IP address, device type, browser type, operating system, session timestamps, geolocation	Automatic
KYC Documents	Copies of government-issued ID, selfie verification images, proof of payment method	Mandatory (withdrawals)
Communications Data	Support chat transcripts, email correspondence, survey responses	Where applicable

4. How We Collect Your Data

ph50 collects personal data through the following means:

• Direct collection: Information you provide when registering a ph50 account, completing KYC verification, making deposits or withdrawals, or contacting ph50 support.
• Automated collection: Technical data collected automatically when you access ph50.asia, including through cookies, session logs, and analytics tools. See Section 10 for full cookie details.
• Third-party sources: Identity verification data obtained from government databases or licensed identity verification service providers for KYC purposes; payment confirmation data from GCash, PayMaya, and partner banks; fraud screening data from licensed anti-fraud service providers.

5. Purpose and Legal Basis for Processing

ph50 processes personal data only where a lawful basis exists under the Philippine Data Privacy Act. The primary purposes and corresponding legal bases are as follows:

• Account registration and management: Performance of a contract — necessary to create and maintain your ph50 account.
• Age verification and KYC compliance: Legal obligation — required by PAGCOR regulations and Philippine anti-money laundering laws (AMLA, RA 9160 as amended).
• Payment processing: Performance of a contract — necessary to process your deposits and withdrawals via GCash, PayMaya, and partner banks.
• Fraud prevention and security: Legitimate interest — to protect ph50 and its players from fraudulent activity, money laundering, and account compromise.
• Responsible gaming compliance: Legal obligation and legitimate interest — to monitor for problem gambling indicators and enforce deposit limits, self-exclusion, and cooling-off periods.
• Marketing communications: Consent — where you have opted in to receive promotional materials from ph50. You may withdraw consent at any time by updating your account communication preferences.
• Platform analytics and improvement: Legitimate interest — to analyze usage patterns and improve the ph50 platform experience for Filipino players.

6. Sharing Your Personal Data

ph50 does not sell, rent, or trade your personal data to any third party for their independent marketing purposes. We share personal data only in the following circumstances and with the following categories of recipients:

• Game providers: Licensed third-party game suppliers (e.g., slot, live casino, bingo, virtual sports providers) receive the minimum data necessary to deliver game services. These providers are contractually bound to process data only as instructed by ph50.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment service providers receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Licensed KYC and AML screening service providers receive identity data for the purposes of regulatory compliance verification.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or court order.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data under strict data processing agreements on behalf of ph50.

7. International Data Transfers

Some of ph50's service providers, including game platform vendors and cloud infrastructure providers, may process personal data outside the Philippines. Where such transfers occur, ph50 ensures that adequate safeguards are in place, including contractual data processing agreements that require the recipient to apply data protection standards consistent with the Philippine Data Privacy Act. ph50 does not transfer personal data to jurisdictions with inadequate data protection laws without implementing appropriate protective measures.

8. Data Retention

ph50 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by applicable law:

• Account and KYC records: Retained for a minimum of 5 years from the date of account closure, as required by PAGCOR regulations and Philippine AMLA obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Support communications: Retained for 2 years from the date of the communication.
• Marketing preference records: Retained until consent is withdrawn and for 1 year thereafter as evidence of the consent obtained.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

9. Security Measures

ph50 implements technical and organizational security measures appropriate to the risk of processing personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph50 servers.
• Bcrypt or equivalent hashing for all stored passwords — ph50 never stores passwords in plaintext.
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis.
• Two-Factor Authentication (2FA) available for all ph50 player accounts.
• Regular penetration testing and vulnerability assessments by independent security firms.
• Data breach detection and incident response procedures in compliance with the NPC's 72-hour breach notification requirement under NPC Circular 16-03.

Despite these measures, no internet-based system is completely immune to security threats. ph50 cannot guarantee absolute security and encourages all players to enable 2FA and use strong, unique passwords for their ph50 accounts.

10. Cookies and Tracking Technologies

ph50 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, prevent fraud, and analyze usage patterns. The categories of cookies used are:

• Strictly necessary cookies: Essential for the ph50 platform to function. Cannot be disabled. These include session authentication tokens and fraud prevention identifiers.
• Functional cookies: Remember your preferences (e.g., language, game lobby display settings). Can be disabled via your browser settings, but doing so may degrade your ph50 experience.
• Analytics cookies: Collect anonymized data about how players use ph50.asia to help us improve the platform. Can be opted out of via your account settings.

ph50 does not use third-party advertising cookies or sell browsing data to advertising networks.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph50:

12. Children's Privacy

ph50's services are strictly restricted to individuals aged 21 years and above under PAGCOR regulations. ph50 does not knowingly collect personal data from individuals under 21 years of age. If ph50 becomes aware that personal data has been collected from a person under 21, that account will be suspended immediately and the data will be deleted in accordance with applicable law. If you believe a person under 21 has registered on ph50, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

ph50 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to you via your registered ph50 email address and via a notice on ph50.asia at least 14 days before taking effect. Your continued use of the ph50 platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

The date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how ph50 protects your personal information.

14. Contact and Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or concerns regarding ph50's data processing practices, please contact ph50's Data Protection Officer:

ph50 will acknowledge all data subject rights requests within 3 business days and provide a substantive response within 15 business days of receiving a complete request, in accordance with NPC timelines.