ph29 is committed to protecting your privacy and handling your personal information responsibly under the Philippine Data Privacy Act of 2012 and PAGCOR regulations. Please read this policy carefully.
Six principles that define how ph29 treats your personal information
ph29 processes all personal data in accordance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and its Implementing Rules and Regulations. Your data rights as a Filipino data subject are fully recognised and upheld.
ph29 collects only the personal data it needs to operate the Platform, fulfil regulatory obligations, and provide player support. We do not collect data speculatively or use it for purposes unrelated to your ph29 account and the services you access.
ph29 employs 256-bit SSL encryption on all data transmissions, industry-standard encryption at rest for sensitive stored data, and access controls that restrict internal data access to staff who need it to perform their role. Security is not an add-on — it is built into every layer of the ph29 Platform.
As a ph29 player, you have the right to access, correct, object to, and request erasure of your personal data. You may exercise these rights at any time through the account dashboard or by contacting ph29 support. Requests are processed within the timeframes prescribed by the Data Privacy Act.
ph29 does not sell, rent, or trade your personal data to third-party marketers. Data is shared only with service providers who process it strictly on ph29's behalf under contractual data processing obligations, or with PAGCOR and Philippine government authorities as required by law.
ph29 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying PAGCOR record-keeping requirements and AML obligations under Philippine law. Retention periods are defined for each data category and data is securely destroyed upon expiry.
A plain-language summary of the three main categories of data ph29 processes
Full legal name, date of birth, government-issued ID details, selfie photograph, and residential address. Collected at registration and KYC verification. Required by PAGCOR and the Anti-Money Laundering Act — not optional. Used to verify your identity, comply with regulatory obligations, and protect your account from fraud.
GCash/PayMaya account references, BDO/BPI/Metrobank account identifiers, deposit and withdrawal history, and wallet balance history. Used to process your transactions, prevent financial crime, satisfy AML reporting obligations, and resolve any payment disputes that arise. Stored in encrypted form.
Login timestamps, device type and identifier, IP address, game session logs, bet history, and responsible gaming tool usage. Used to operate the Platform, detect security threats, personalise your experience, meet PAGCOR reporting requirements, and provide meaningful customer support when you contact us.
This Privacy Policy ("Policy") explains how ph29 ("ph29," "we," "us," "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you," "Player," "User") who register for or access the ph29 online gambling platform at ph29.one and any associated services (collectively, the "Platform").
This Policy applies to all personal data processed by ph29 in the context of operating the Platform for Filipino players. It is intended to inform you of your rights under Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), and to fulfil ph29's disclosure obligations as a PAGCOR-licensed operator.
By registering an account with ph29 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the ph29 Terms and Conditions, which govern your contractual relationship with ph29.
ph29 acts as the personal information controller in respect of the personal data it processes about you in connection with the Platform. As a PAGCOR-licensed online gambling operator, ph29 is registered with the National Privacy Commission (NPC) of the Philippines as required under the DPA and its Implementing Rules and Regulations.
For all privacy-related enquiries and requests to exercise your data subject rights, you may contact ph29's designated Data Protection Officer (DPO) through the contact details provided in Section 14 of this Policy.
ph29 may collect additional information that you choose to provide voluntarily, such as feedback submitted through surveys, preferences communicated through customer support interactions, or information provided in connection with a promotional activity.
ph29 uses your personal data for the following purposes:
ph29 processes your personal data on the following legal bases under the Data Privacy Act of 2012:
ph29 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. ph29 shares your personal data only in the following circumstances:
ph29 is required to share player data with PAGCOR as part of its licensing obligations, with the Anti-Money Laundering Council (AMLC) when reporting covered and suspicious transactions as required by law, and with any other Philippine government authority pursuant to a valid legal demand or court order.
ph29 engages third-party service providers who process personal data strictly on ph29's behalf and only as instructed, including: KYC and identity verification providers, payment processing and e-wallet infrastructure providers, cloud hosting and data storage providers, customer support platform providers, and fraud detection and security monitoring providers. All such providers are subject to contractual obligations that restrict their use of your data to the agreed purpose.
ph29 may disclose your personal data to the extent necessary to establish, exercise, or defend a legal claim, or where disclosure is required by a court or arbitral body of competent jurisdiction in the Philippines.
In certain cases, the service providers engaged by ph29 (including cloud infrastructure and KYC technology providers) may process personal data on servers located outside the Philippines. In such cases, ph29 ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act and NPC guidelines, including contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law.
ph29 retains personal data for the period necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods mandated by applicable law:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ph29's data disposal procedures.
ph29 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
In the event of a personal data breach that is likely to result in serious harm to data subjects, ph29 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will inform affected players as required by NPC guidelines.
ph29 uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and analyse Platform performance. The categories of cookies used include:
ph29 does not use third-party advertising cookies or behavioural tracking cookies that share your data with advertising networks. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair Platform functionality.
Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph29:
To exercise any of the above rights, please contact ph29's Data Protection Officer using the contact details in Section 14. ph29 will respond to data subject requests within the timeframes prescribed by the DPA — generally within fifteen (15) working days for straightforward requests.
The ph29 Platform is strictly for individuals aged 21 years and above. ph29 does not knowingly collect personal data from any individual under the age of 21. If ph29 becomes aware that a player account has been registered by a person under 21, that account will be immediately closed, all associated personal data will be securely deleted (subject to any mandatory legal retention obligations), and any deposits will be dealt with in accordance with ph29's Terms and Conditions.
If you have reason to believe that a minor has registered an account with ph29, please contact the ph29 Data Protection Officer immediately using the contact details in Section 14.
ph29 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players by email to the address associated with their account at least seven (7) days before taking effect, and the revised Policy will be published on this page with an updated effective date.
Your continued use of the ph29 Platform after the effective date of any revision constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically.
For all privacy-related enquiries, requests to exercise your data subject rights, or concerns about how ph29 has handled your personal data, please contact:
If you are not satisfied with ph29's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:
Have questions about your personal data? ph29's support team is available 24/7 in Filipino-English. Sign in to manage your privacy settings or visit our FAQ.
Sign In to ph29 Visit FAQ