ph39 Privacy Policy

ph39 ("ph39," "we," "us," "our") operates the online gaming platform accessible at ph39.asia, offering live casino, sports betting, slots, bingo, lottery, and associated services to players in the Philippines. ph39 is the data controller responsible for your personal data collected through this Platform.

ph39 processes personal data in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). All personal data handling practices described in this Privacy Policy are designed to comply with the principles of transparency, legitimate purpose, and proportionality mandated by the DPA.

ph39 collects personal data necessary for operating the Platform, verifying player identity, processing transactions, and meeting regulatory obligations. The categories of data we collect are:

ph39 does not intentionally collect sensitive personal information beyond what is required for KYC identity verification. We do not collect biometric data, health records, or political affiliations.

ph39 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your ph39 account; to authenticate your ph39 Login; and to communicate account-related notifications;
• Service Delivery: To provide access to games, process bets and payouts, manage your wallet balance, and operate all ph39 products (Casino, Slots, Bingo, Lottery, Sports Betting, Golden Bank);
• Financial Processing: To process deposits via GCash, Maya, BPI, BDO, Metrobank, and other supported channels, and to process withdrawals to your registered payment method;
• Identity & Age Verification: To verify that you meet the 21+ age requirement and to confirm your identity during KYC as required by regulatory obligations;
• Legal & Regulatory Compliance: To comply with requirements imposed by Philippine law, PAGCOR guidelines, and anti-money laundering obligations under the AMLA (Republic Act No. 9160);
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct described in the ph39 Terms & Conditions;
• Responsible Gaming: To monitor gaming patterns and provide appropriate responsible gaming interventions, including enforcing self-exclusion orders and deposit limits;
• Customer Support: To respond to inquiries, resolve disputes, and provide 24/7 live chat assistance;
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance and user experience of ph39.asia;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where we have a legitimate interest, and always with an opt-out mechanism.

ph39 does not use automated decision-making or profiling that produces legal or similarly significant effects on players without human oversight.

ph39 processes your personal data on the following lawful bases as defined under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between you and ph39 — i.e., to operate your account, process transactions, and deliver the services you registered for;
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA reporting requirements, and NPC-mandated data handling standards;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and certain optional features, where you have given explicit, freely-given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ph39 may share your personal data with the following categories of recipients:

• Payment Processors: GCash (G-Xchange Inc.), Maya/PayMaya, BPI, BDO, Metrobank, and other Philippine financial institutions — solely to process your deposit and withdrawal transactions;
• Game Providers: Licensed third-party game studios and live casino operators whose games are available on ph39 — for the purpose of delivering and certifying game outcomes;
• KYC / Identity Verification Partners: Third-party identity verification service providers who assist with document authentication and age verification;
• Regulatory and Law Enforcement Authorities: PAGCOR, AMLC, the National Privacy Commission, and other Philippine government authorities — where disclosure is required by law, court order, or regulatory directive;
• IT and Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers operating ph39's technical infrastructure — all bound by data processing agreements with equivalent data protection obligations;
• Professional Advisers: Legal, accounting, and audit firms — where disclosure is necessary in the course of professional services and subject to confidentiality obligations.

Where ph39 engages third-party data processors, we require contractual commitments that such processors handle personal data only on ph39's documented instructions and in compliance with applicable data protection law.

ph39 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal minimum retention periods:

• Active Accounts: Identity, contact, financial, and gaming data is retained for the duration of your active ph39 account plus a minimum of 5 years following account closure, consistent with Philippine anti-money laundering record-keeping requirements;
• Transaction Records: Financial transaction logs (deposits, withdrawals, bet history) are retained for a minimum of 5 years as required by the AMLA and PAGCOR regulations;
• KYC Documents: Identity verification documents are retained for the period required by applicable KYC/AML regulations — typically 5 years after the end of the business relationship;
• Support Communications: Customer support records (live chat transcripts, email correspondence) are retained for 3 years for quality assurance and dispute resolution purposes;
• Technical Logs: Server access logs and IP records are retained for up to 12 months for security monitoring and fraud detection.

When retention periods expire, ph39 securely destroys or anonymises personal data so that it can no longer be linked to an identified individual. Anonymised aggregated data may be retained indefinitely for analytics purposes.

ph39 implements technical and organizational security measures appropriate to the risk level of personal data processing. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph39.asia;
• AES-256 encryption for sensitive data at rest in ph39 databases;
• Two-factor authentication (2FA) available for all player accounts via SMS OTP or authenticator app;
• Bcrypt password hashing — ph39 staff cannot read stored passwords in plain text;
• Role-based access control — ph39 staff access personal data only on a need-to-know basis;
• Automated intrusion detection and 24/7 security monitoring of ph39 infrastructure;
• Regular penetration testing and vulnerability assessments by independent security professionals;
• Segregated player fund accounts — your wallet balance is never commingled with ph39 operating capital;
• Formal incident response procedures — in the event of a data breach, ph39 will notify affected players and the National Privacy Commission within the timeframes prescribed by the DPA.

While ph39 implements robust security measures, no internet-based system is 100% secure. We encourage all players to use strong, unique passwords, enable 2FA, and log out of ph39 after each session — especially on shared or public devices.

ph39.asia uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit ph39.asia. The types of cookies ph39 uses are:

• Essential Cookies: Strictly necessary for the Platform to function — session management, authentication (ph39 Login), security tokens, and shopping cart equivalents (active bets). These cannot be disabled without breaking Platform functionality;
• Analytics Cookies: Used to understand how players navigate and use ph39.asia — page views, session duration, device type, and error rates. This data is aggregated and anonymised. Analytics are used solely to improve ph39 products;
• Preference Cookies: Store your Platform preferences — language settings, preferred lobby view, and table/game layout preferences — so you don't need to set them on every visit.

ph39 does not use third-party advertising cookies. No cross-site tracking pixels are embedded on ph39.asia for advertising network purposes.

You may configure your browser to block or delete cookies. Note that disabling essential cookies will prevent you from logging in and using the ph39 Platform.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by ph39:

• Right to be Informed: The right to know what personal data ph39 collects about you and how it is used — fulfilled by this Privacy Policy;
• Right of Access: The right to request a copy of the personal data ph39 holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data — contact us via live chat or update directly in your account settings;
• Right to Erasure: The right to request deletion of personal data where retention is no longer legally required and no overriding legitimate interests exist. Note: data subject to AML/PAGCOR retention obligations cannot be deleted ahead of the applicable minimum retention period;
• Right to Object: The right to object to processing of your personal data for marketing purposes. You may opt out of marketing communications at any time via account settings or by contacting support;
• Right to Data Portability: The right to receive a machine-readable copy of personal data you have provided to ph39, where technically feasible;
• Right to Damages: The right to lodge a complaint with the National Privacy Commission and to claim compensation for damages arising from ph39's breach of data privacy obligations.

To exercise any of the above rights, submit a request via ph39 24/7 live chat or email at [email protected]. ph39 will respond within 15 business days. We may request identity verification before processing data rights requests to prevent unauthorized access to other people's data.

The ph39 platform is strictly intended for adults aged 21 years and older. ph39 does not knowingly collect personal data from minors. If we discover or are notified that a player under 21 has registered an account, the account will be immediately suspended, any deposits returned, and all data associated with the account deleted in accordance with our data retention policy.

If you believe a minor has registered on ph39.asia using your or their information, please contact ph39 support immediately via live chat or at [email protected]. We take age verification seriously and treat all such reports as high-priority.

ph39's primary data infrastructure is located within the Philippines. However, some third-party service providers (such as game studios, cloud infrastructure providers, and KYC verification partners) may be located or process data in other jurisdictions.

Where personal data is transferred outside the Philippines, ph39 ensures that:

• The receiving jurisdiction provides an adequate level of data protection as recognized under Philippine law or by the National Privacy Commission; or
• Appropriate contractual safeguards are in place — such as data processing agreements incorporating data protection clauses — ensuring the recipient handles your data with equivalent protections to those provided under the DPA.

ph39 does not transfer personal data to jurisdictions subject to international sanctions or identified as presenting unacceptable data protection risks.

ph39 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or Platform features. Material changes — those affecting how we use your data or your rights — will be communicated to registered players via email notification or in-platform alert at least 7 days before taking effect.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. The most current version is always accessible at ph39.asia/privacy-policy and supersedes all prior versions. Your continued use of the ph39 Platform after the effective date of any amendment constitutes acknowledgment of the updated Policy.

For privacy-related queries, data rights requests, or to report a potential data breach, contact ph39 through:

• 24/7 Live Chat: Available on ph39.asia — the fastest channel for urgent privacy matters;
• Email: [email protected] — for formal data rights requests and non-urgent privacy queries. Responses within 15 business days.

For unresolved complaints, you may also lodge a complaint directly with the National Privacy Commission of the Philippines at its official website and contact channels. ph39 will cooperate fully with any NPC investigation.

ph39.asia | [email protected] | Philippines | Data Privacy Act (R.A. 10173) Compliant