998ph Privacy Policy

998ph ("we," "us," "our") is committed to protecting the privacy and personal data of all individuals who access or use the 998ph online casino platform, available at https://998ph.cam. This Privacy Policy describes our practices regarding the collection, use, disclosure, storage, and protection of your personal information.

This Policy applies to all players, registered account holders, website visitors, and any individual whose personal data is processed in connection with 998ph's operations. It should be read alongside the Terms & Conditions and the Responsible Gaming Policy, which together form 998ph's full framework of player obligations and protections.

998ph processes personal data as a Personal Information Controller as defined under the Data Privacy Act of 2012. Our processing activities are registered with the National Privacy Commission (NPC) of the Philippines as required by applicable law.

The personal data you provide to 998ph is controlled by the operator of the 998ph platform, which operates under PAGCOR licensing and is subject to Philippine jurisdiction. For all data protection matters, including the exercise of your data subject rights, you may contact 998ph's designated Data Protection Officer (DPO) at the contact details set out in Section 15 of this Policy.

998ph collects personal data that falls into the following categories:

998ph does not intentionally collect sensitive personal information as defined under the Data Privacy Act (including racial or ethnic origin, health data, political opinions, or biometric data) unless expressly required for identity verification purposes under PAGCOR KYC obligations, and only to the minimum extent necessary.

998ph collects personal data through the following channels:

• Direct registration and KYC submission — information you voluntarily provide when creating a 998ph account, completing identity verification, or updating your account profile;
• Transactional activity — data generated automatically when you make deposits via GCash, Maya, or other supported Philippine payment methods, place wagers, or submit withdrawal requests;
• Technical collection — data collected automatically by our platform infrastructure when you access 998ph, including IP address, device identifiers, browser data, and session logs;
• Cookies and tracking technologies — as described in Section 10 of this Policy;
• Customer support interactions — data you provide when contacting our support team by live chat or email;
• Third-party payment processors — limited confirmation data received from GCash, Maya, BPI, BDO, and other payment partners to verify transaction status;
• PAGCOR and regulatory sources — data received from regulatory authorities in the course of compliance checks, licence verification, or mandatory reporting obligations.

998ph processes your personal data only for specified, legitimate, and proportionate purposes. The table below sets out our primary processing activities, their stated purposes, and the applicable legal basis under the Data Privacy Act:

Where 998ph relies on consent as the legal basis for processing (primarily for marketing communications), you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You may manage your marketing preferences through your account settings or by contacting the 998ph DPO.

998ph does not sell, rent, trade, or otherwise disclose your personal data to third parties for their own commercial purposes. Personal data is shared with third parties only in the following strictly limited circumstances:

• Licensed game providers — JILI Games, Pragmatic Play, PG Soft, NetEnt, and other certified providers receive the minimum technical data necessary to deliver the gaming services you access;
• Payment processors — GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, and other Philippine payment partners receive transactional data necessary to process deposits and withdrawals;
• PAGCOR and regulatory authorities — 998ph discloses data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities as required by law, licence conditions, or lawful regulatory direction;
• KYC and identity verification providers — third-party identity verification service providers may process identity and document data under contractual obligations equivalent to those imposed by the Data Privacy Act;
• IT and infrastructure providers — cloud hosting, cybersecurity, and platform maintenance providers access data solely to the extent necessary to perform contracted services and under binding confidentiality obligations;
• Professional advisers — legal, compliance, and financial advisers may access data on a need-to-know basis under professional privilege obligations;
• Law enforcement — 998ph may disclose data in response to a lawfully issued court order, subpoena, or formal request from a competent Philippine law enforcement authority.

Certain third-party game providers and infrastructure partners engaged by 998ph may be located outside the Philippines. Where personal data is transferred to a recipient in a foreign country, 998ph ensures that such transfer is governed by one or more of the following safeguards:

• The recipient country has been assessed by the NPC as providing an adequate level of data protection;
• Appropriate contractual clauses incorporating data protection obligations equivalent to those required under the Data Privacy Act have been executed with the recipient; or
• The transfer falls within an applicable exception under Section 21(e) of the Data Privacy Act, including transfer necessary for the performance of a contract to which the data subject is a party.

You may request information about the safeguards applicable to any specific international transfer by contacting the 998ph DPO as set out in Section 15.

998ph retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory obligations. The following retention principles apply:

• Account data — retained for the duration of your active 998ph account and for a period of five (5) years following permanent account closure, in compliance with PAGCOR record-keeping requirements;
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, as required by the AMLC's record-keeping obligations under the Anti-Money Laundering Act;
• KYC documentation — retained for five (5) years from the date of submission or account closure (whichever is later), as required by PAGCOR KYC guidelines;
• Communication records — support correspondence is retained for two (2) years from the date of the last interaction, or longer where relevant to an ongoing dispute or regulatory inquiry;
• Technical and session logs — retained for twelve (12) months for security and fraud detection purposes, after which they are aggregated or deleted;
• Marketing preference data — retained until you withdraw consent or close your account, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification, using processes that comply with NPC guidelines on data disposal.

998ph implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and 998ph's servers;
• Encryption at rest for all stored personal data and financial records;
• Role-based access controls limiting employee access to personal data to those with a documented operational need;
• Multi-factor authentication for all internal system access by 998ph staff;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• 24/7 intrusion detection monitoring on all platform infrastructure;
• Incident response procedures aligned with NPC breach notification requirements.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. 998ph cannot guarantee absolute security, but we continuously review and enhance our security posture in response to emerging threats and NPC guidance.

998ph uses cookies and similar tracking technologies to deliver and improve the platform experience. Cookies are small data files stored on your device by your browser when you visit a website. The types of cookies used by 998ph include:

• Strictly necessary cookies — essential for platform operation, including session management, login authentication, and security functions. These cannot be disabled without significantly impairing platform functionality;
• Functional cookies — remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations to personalise your 998ph experience;
• Performance and analytics cookies — collect aggregated, anonymised data about how players interact with the 998ph platform to help us identify areas for improvement. No personally identifiable information is included in analytics reporting;
• Security cookies — assist in detecting fraudulent activity, preventing multi-accounting, and identifying unusual login patterns that may indicate unauthorised account access.

You may manage your cookie preferences through your browser settings. Disabling all cookies may affect your ability to use certain features of the 998ph platform. 998ph does not use third-party advertising tracking cookies or share cookie data with advertising networks.

Under the Data Privacy Act of 2012 and applicable NPC regulations, you have the following rights in respect of your personal data held by 998ph:

To exercise any of the above rights, please submit a written request to the 998ph DPO at the contact details in Section 15. 998ph will acknowledge your request within five (5) business days and respond substantively within fifteen (15) business days, or within such extended period as permitted by applicable NPC regulations. Requests will be fulfilled at no charge for the first instance in any twelve-month period.

If you are not satisfied with 998ph's response to your data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at its official address or through the NPC's online complaint portal.

The 998ph platform is strictly restricted to individuals aged 21 years and above in compliance with PAGCOR regulations governing online casino gaming in the Philippines. 998ph does not knowingly collect or process the personal data of persons under 21 years of age.

During the account registration and KYC verification process, 998ph verifies the age of every applicant through government-issued identification. Any account found to have been registered by a person under 21 will be immediately closed, all funds held therein handled in accordance with applicable PAGCOR guidelines, and the matter referred to the appropriate regulatory authority where required by law.

If you believe that a person under the age of 21 has submitted personal data to 998ph, please notify our DPO immediately at the contact details in Section 15.

The 998ph platform may contain references to third-party services such as licensed game providers and Philippine payment platforms including GCash and Maya. Where access to these services is integrated within the 998ph platform environment, their operation is governed by the applicable data processing agreements between 998ph and those providers, as described in Section 6.

998ph is not responsible for the privacy practices of any third-party website or service that is accessed independently of the 998ph platform. This Privacy Policy applies solely to data processing activities conducted by or on behalf of 998ph in connection with the operation of https://998ph.cam.

998ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. Where amendments are material — meaning they significantly affect how we process your data or your rights as a data subject — 998ph will provide notice to registered account holders via:

• A prominent notification displayed upon login to your 998ph account;
• An email notification to your registered address; or
• An update notice on this Privacy Policy page.

Amendments take effect on the date stated in the notice. We encourage you to review this Privacy Policy periodically to remain informed of how 998ph protects your personal data. The "Last Updated" date at the top of this document reflects the most recent revision.

For all data privacy matters — including the exercise of your data subject rights, queries about this Privacy Policy, or concerns about 998ph's data processing practices — please contact our designated Data Protection Officer:

998ph's customer support team is also available 24/7 for general account and platform queries at [email protected]. For data subject rights requests specifically, please use the DPO contact above to ensure your request is handled through the correct process.