ph974 Casino — Privacy Policy

1 Introduction and Data Controller Identity

ph974 ("ph974," "we," "us," or "our") operates the online casino and sports betting platform accessible at ph974.vip, which is directed at and used by players in the Philippines. ph974 is the data controller responsible for the personal data of registered users and visitors to the ph974.vip platform.

ph974 is committed to protecting the privacy and security of all personal data it processes. This Privacy Policy has been prepared in accordance with the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). All data processing activities conducted by ph974 are intended to be consistent with the principles of transparency, legitimate purpose, and proportionality as required by Philippine law.

ph974 recognizes that Filipino players entrust us with sensitive personal and financial information when they register and use our platform. That trust is not taken lightly. ph974 collects only what is necessary, uses it only for the stated purposes, and protects it using technically appropriate and commercially reasonable security measures throughout the data lifecycle.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information from which a natural person ("data subject") can be directly or indirectly identified, including but not limited to name, mobile number, email address, identification document details, financial account information, IP address, and device identifiers.
• "Sensitive Personal Information" — personal data relating to an individual's health, government-issued identification numbers, financial information, and other categories afforded heightened protection under the DPA.
• "Processing" — any operation performed on Personal Data, including collection, recording, organization, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" — ph974, which determines the purposes and means of processing Personal Data.
• "Data Processor" — any third party that processes Personal Data on behalf of ph974 pursuant to a data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data.
• "DPA" — Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines.
• "NPC" — the National Privacy Commission of the Philippines.

3 Personal Data We Collect

ph974 collects the following categories of Personal Data from players and platform users:

3.1 Registration and Account Data

• Full legal name as it appears on a Philippine government-issued identification document;
• Date of birth (used for age verification — 21+ requirement);
• Philippine mobile number (used for account authentication and OTP delivery);
• Username selected at registration;
• Account password (stored in encrypted, hashed form — never in plain text);
• Email address, if voluntarily provided.

3.2 KYC and Identity Verification Data

• Copies of Philippine government-issued identification documents (PhilSys, passport, LTO driver's license, UMID, Voter's ID, PRC ID);
• Proof of address documentation, where requested;
• Selfie or liveness verification images, where required for enhanced KYC;
• National identification numbers as they appear on submitted documents.

3.3 Financial and Transaction Data

• GCash and Maya account identifiers (mobile numbers associated with e-wallets), as used for deposits and withdrawals;
• Bank account details (account number and bank name) where bank transfer is used;
• Transaction history — deposit amounts, withdrawal amounts, dates, and payment method references;
• Cryptocurrency wallet addresses for USDT TRC20 transactions.

3.4 Gameplay and Betting Data

• Game session records — games played, bet amounts, outcomes, session duration, and timestamps;
• Sports betting selections, stake amounts, odds accepted, and settlement results;
• Bonus and promotion utilization records;
• Responsible gaming tool settings and self-exclusion records.

3.5 Technical and Device Data

• IP address at time of login and during active sessions;
• Device type, operating system version, and browser type;
• Mobile network carrier and geographic region (not precise GPS location);
• Session activity logs and error reports.

3.6 Communications Data

• Records of live chat conversations with ph974 support;
• Email correspondence related to your ph974 account;
• Records of complaints and dispute communications.

4 How We Collect Personal Data

ph974 collects Personal Data through the following means:

• Directly from you — when you complete the account registration form, submit KYC documents, initiate deposits or withdrawals, contact support, or update your account profile;
• Automatically — through server logs, session cookies, and similar tracking technologies when you access and navigate the ph974.vip platform;
• From payment providers — ph974 receives transaction confirmation data and payment identifiers from GCash, Maya, and other payment processors when you conduct financial transactions on the platform;
• From identity verification services — where ph974 uses third-party KYC verification services, those providers may return verification outcomes and data quality signals to ph974;
• From fraud detection tools — automated risk-scoring systems may generate data points based on behavioral patterns observed during account use.

5 Purposes of Processing

ph974 processes Personal Data for the following specific, legitimate purposes:

ph974 does not process Personal Data for purposes beyond those stated above without first obtaining your consent or establishing an alternative legal basis under the DPA.

6 Legal Basis for Processing

ph974 relies on the following legal bases under the Data Privacy Act of 2012 for the processing of your Personal Data:

• Contractual necessity: Processing of account, financial, and gameplay data is necessary for ph974 to fulfill its contractual obligations to you as a registered player, including account management, game delivery, and payment processing.
• Legal obligation: KYC data, transaction records, and related compliance data are processed to fulfill ph974's obligations under applicable Philippine anti-money laundering (AML), counter-terrorism financing (CTF), and gambling regulations.
• Legitimate interests: Processing of device data, IP logs, and behavioral data for fraud prevention, security monitoring, and responsible gaming management is based on ph974's legitimate interest in maintaining a secure and compliant platform.
• Consent: Processing for promotional communications and marketing is based on your affirmative consent, provided during or after account registration. You may withdraw consent at any time through your account notification preferences without affecting the lawfulness of prior processing.

7 Data Sharing and Disclosure

7.1 Third-Party Service Providers

ph974 shares Personal Data with trusted third-party service providers who process data on ph974's behalf under data processing agreements that impose obligations at least equivalent to those in this Privacy Policy. Categories of third-party processors include:

• Payment processors — GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven CLiQQ, Coins.ph, and USDT TRC20 network operators, for the purpose of processing deposits and withdrawals;
• Identity verification and KYC service providers, for document verification and fraud screening;
• Game content providers and live casino operators, for delivery of game services;
• Cloud hosting and infrastructure providers, for data storage and platform operation;
• Customer support platform providers, for live chat and ticketing services.

7.2 Regulatory and Law Enforcement Disclosure

ph974 may disclose Personal Data to Philippine government agencies, regulatory bodies, and law enforcement authorities where required to do so by applicable law, court order, or lawful regulatory request. Such disclosures are made in strict accordance with the requirements of the requesting authority and applicable Philippine law. ph974 will not disclose Personal Data to government bodies beyond the scope of a valid and lawfully issued request.

7.3 No Sale of Personal Data

ph974 does not sell, rent, or trade Personal Data to third parties for their own commercial purposes. Personal Data shared with service providers as described in Section 7.1 is shared solely to enable those providers to perform services on ph974's behalf.

8 Data Retention

ph974 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable Philippine law or regulatory requirements. The following retention periods apply as a general guide:

• Account registration data: Retained for the duration of the active account relationship plus five (5) years following account closure, in accordance with AML recordkeeping requirements;
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the last relevant transaction, as required under applicable Philippine AML regulations;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction;
• Gameplay and betting records: Retained for three (3) years from the date of the session or bet, unless a longer period is required for compliance or dispute resolution;
• Customer support communications: Retained for two (2) years from the date of the communication, unless related to an ongoing dispute;
• Technical and device logs: Retained for up to twelve (12) months from collection, unless required for ongoing fraud or security investigations.

Following the expiry of the applicable retention period, ph974 will securely delete or permanently anonymize the relevant Personal Data in accordance with its data disposal procedures.

9 Security Measures

ph974 implements technically appropriate and organizationally sound security measures to protect Personal Data against unauthorized access, accidental loss, destruction, or alteration. Key security measures include:

• SSL/TLS encryption: All data transmitted between your device and ph974's servers is encrypted using SSL/TLS protocols. The ph974.vip website operates exclusively over HTTPS;
• Password hashing: Account passwords are stored using industry-standard cryptographic hashing algorithms. ph974 does not store passwords in plain text or reversibly encrypted form;
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts. SMS-based OTP is supported for all registered Philippine mobile numbers;
• Access controls: Access to Personal Data within ph974's systems is restricted to personnel and systems with a demonstrable need to access that data, consistent with the principle of least privilege;
• Security monitoring: ph974 maintains automated monitoring for suspicious access patterns, unauthorized login attempts, and anomalous transaction behavior;
• Data breach response: ph974 maintains a documented data breach response procedure consistent with NPC notification requirements under the DPA. In the event of a personal data breach that poses a real risk of serious harm to affected data subjects, ph974 will notify the NPC within seventy-two (72) hours of becoming aware of the breach and will communicate with affected players as required.

10 Cookies and Tracking Technologies

10.1 What We Use

ph974.vip uses cookies and similar tracking technologies (including session tokens and local storage) to operate the platform and deliver a functional user experience. The types of cookies used include:

• Strictly necessary cookies: Required for core platform functionality, including maintaining your login session, delivering game content, and processing transactions. These cannot be disabled without impairing platform function;
• Functional cookies: Used to remember your preferences, such as language settings, game lobby filters, and responsible gaming tool configurations;
• Security cookies: Used to support fraud detection and security monitoring, including session integrity verification and bot detection;
• Analytics cookies: Used to collect anonymized and aggregated data about platform usage patterns to support platform improvement. These do not identify individual users.

10.2 Cookie Management

You may manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling strictly necessary cookies will impair or prevent use of the ph974 platform. ph974 does not use third-party advertising cookies or cross-site tracking technologies that share your data with external advertising networks.

11 Processing of Data Relating to Minors

ph974 does not knowingly collect Personal Data from persons under the age of twenty-one (21). The ph974 platform is strictly for adults aged 21 and above in accordance with Philippine gambling regulations. Age is verified through the KYC process prior to approval of first withdrawals.

If ph974 becomes aware that it has inadvertently collected Personal Data from a person under 21, it will promptly close the associated account, delete the relevant Personal Data to the extent not required to be retained for legal compliance purposes, and take appropriate steps to prevent recurrence.

If you believe that a person under 21 has accessed or registered on ph974, please contact ph974 support immediately via live chat so that we may investigate and take prompt action.

12 Your Data Rights Under the DPA

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your Personal Data held by ph974:

• Right to be informed: You have the right to be informed that your Personal Data is being collected and processed, and of the purposes and extent of such processing — which this Privacy Policy fulfills.
• Right to access: You have the right to obtain confirmation of whether ph974 holds your Personal Data and, if so, to receive a copy of that data and information about its processing.
• Right to correction: You have the right to request correction of inaccurate, outdated, or incomplete Personal Data ph974 holds about you.
• Right to erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to ph974's legal obligations to retain certain data for specified periods.
• Right to object: You have the right to object to processing of your Personal Data based on legitimate interests where your own interests override those of ph974, and to withdraw consent for consent-based processing at any time.
• Right to data portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another data controller, where technically feasible.
• Right to file a complaint: If you believe ph974 has processed your Personal Data in violation of the DPA, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the rights above, please contact ph974's Data Protection Officer using the contact information in Section 15. ph974 will respond to rights requests within fifteen (15) calendar days of receipt, or within such longer period as permitted by the DPA for complex requests.

13 Cross-Border Data Transfers

Some of ph974's third-party service providers — including cloud infrastructure providers, game content providers, and KYC technology providers — may process Personal Data in jurisdictions outside of the Philippines. Where such cross-border transfers occur, ph974 ensures that appropriate safeguards are in place to protect Personal Data to a standard consistent with the DPA, including contractual protections equivalent to those required under Philippine law.

ph974 does not transfer Personal Data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining prior authorization from the NPC in accordance with applicable DPA requirements.

14 Updates to This Privacy Policy

ph974 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or platform features. When material changes are made, ph974 will notify registered players via the contact details on file (email notification or in-platform notice) at least seven (7) days before the changes take effect.

The Effective Date at the top of this Privacy Policy indicates when the current version was last updated. ph974 recommends that players review this Privacy Policy periodically. Continued use of the ph974 platform following notification of material changes constitutes acceptance of the updated Privacy Policy.

15 Contact Us and Data Protection Officer

ph974 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the requirements of the DPA. The DPO is the primary point of contact for all data privacy inquiries, rights requests, and complaints from ph974 players.

You may reach ph974's DPO and support team through the following channels:

• Live Chat: Available 24/7 from within the ph974 Platform at ph974.vip — fastest channel for urgent account and data inquiries
• Email: [email protected] — for formal data rights requests and privacy complaints; include "Privacy Request" in your subject line

For formal data rights requests, please include: your full registered name, your registered Philippine mobile number, a description of the right you wish to exercise, and any supporting context. ph974 will acknowledge receipt within twenty-four (24) hours and provide a substantive response within fifteen (15) calendar days.

If you are unsatisfied with ph974's response to a data privacy complaint, you have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines.