Privacy Policy for ph26

1. Introduction

This Privacy Policy ("Policy") describes how ph26 ("ph26", "we", "us", "our"), a Philippine Amusement and Gaming Corporation (PAGCOR) licensed online gaming platform operating at https://ph26.cam, collects, uses, discloses, stores, and protects the personal information of our users ("you", "your", "User", "Player") in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its implementing rules and regulations, and all applicable Philippine data protection laws.

ph26 is committed to safeguarding your privacy and ensuring that your personal data is processed lawfully, fairly, and transparently. By creating an account with ph26, accessing our platform, or using any of our gaming services, you acknowledge that you have read, understood, and agreed to the data processing practices described in this Privacy Policy.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your relationship with ph26.

2. Data Controller Information

For the purposes of the Data Privacy Act of 2012, ph26 acts as the Data Controller with respect to the personal information collected through our platform. ph26 determines the purposes for which and the manner in which your personal data is processed.

Data Controller Details:

• Entity Name: ph26
• Registered Address: Metro Manila, Republic of the Philippines
• PAGCOR License Number: [PAGCOR-2026-PH26]
• Data Privacy Officer Contact: [email protected]
• Website: https://ph26.cam

ph26 has appointed a Data Privacy Officer (DPO) who is responsible for overseeing our data protection strategy, ensuring compliance with the DPA, and serving as the point of contact for data subjects and the National Privacy Commission (NPC). You may contact our DPO at any time regarding privacy concerns, data access requests, or other data protection matters.

3. Information We Collect

ph26 collects various categories of personal information necessary to provide our gaming services, comply with legal and regulatory obligations, prevent fraud, and improve the user experience. The types of information we collect include:

3.1 Account Registration Information

When you create a ph26 account, we collect identifying information including but not limited to:

• Full legal name (as it appears on government-issued identification)
• Date of birth
• Gender
• Nationality and country of residence
• Email address
• Mobile phone number
• Residential address (street address, barangay, city/municipality, province, postal code)
• Username and encrypted password
• Security questions and answers

3.2 Identity Verification and KYC Documents

To comply with PAGCOR regulations, anti-money laundering laws (Republic Act No. 9160, as amended), and Know Your Customer (KYC) requirements, ph26 collects and verifies identity documents including:

• Government-issued photo identification (Philippine passport, driver's license, UMID, PhilSys ID, Voter's ID, PRC ID, or other valid government ID)
• Proof of address documents (utility bills, bank statements, government correspondence dated within the last three months)
• Facial verification photographs (selfie with ID)
• In certain circumstances, source of funds documentation

3.3 Financial and Transaction Information

ph26 processes financial data necessary to facilitate deposits, withdrawals, and gaming transactions, including:

• Payment method details (GCash mobile number, PayMaya account, bank account details for BPI/BDO/Metrobank transfers, cryptocurrency wallet addresses)
• Transaction history (deposits, withdrawals, wagers, winnings, bonus redemptions)
• Account balance and ledger information
• Payment verification records

3.4 Gaming and Behavioral Data

To provide personalized gaming experiences, detect problem gambling behaviors, and prevent fraud, we collect:

• Game play history and betting patterns
• Session durations and frequency of play
• Game preferences and favorite games
• Bonus and promotion participation history
• Self-exclusion and responsible gaming limit settings
• Customer support interaction records

3.5 Technical and Device Information

When you access ph26, we automatically collect technical data including:

• IP address and geolocation data
• Device type, model, and operating system
• Browser type and version
• Screen resolution and display settings
• Cookies and similar tracking technologies (see Section 9)
• Referral source and clickstream data
• Connection timestamps and session logs

3.6 Communications and Correspondence

ph26 retains records of all communications between you and our platform, including:

• Live chat transcripts with customer support agents
• Email correspondence
• SMS and mobile app notifications
• Survey responses and feedback submissions
• Marketing preference selections

4. How We Use Your Personal Data

ph26 processes your personal information for specific, legitimate, and lawful purposes. We use your data to:

4.1 Account Management and Service Provision

• Create, maintain, and administer your ph26 user account
• Verify your identity and age to comply with 21+ gaming restrictions
• Process deposits, withdrawals, and gaming transactions
• Provide access to gaming products including slots, live casino, bingo, and sports betting
• Manage bonuses, promotions, and loyalty programs
• Provide customer support and respond to inquiries

4.2 Legal and Regulatory Compliance

• Comply with PAGCOR licensing requirements and regulatory directives
• Fulfill obligations under the Anti-Money Laundering Act (AMLA) and its implementing regulations
• Respond to lawful requests from law enforcement, regulatory authorities, and courts
• Maintain records required by Philippine gaming and financial regulations
• Conduct internal audits and regulatory reporting

4.3 Fraud Prevention and Platform Security

• Detect and prevent fraudulent account creation and duplicate accounts
• Monitor for suspicious betting patterns, collusion, and bonus abuse
• Protect against unauthorized access, hacking, and cyber attacks
• Verify the legitimacy of transactions and payment methods
• Enforce our Terms and C onditions and other platform policies

4.4 Responsible Gaming

• Monitor gaming behavior to identify signs of problem gambling
• Apply and enforce player-requested deposit limits, loss limits, and session limits
• Process voluntary self-exclusion requests and enforce exclusion periods
• Provide responsible gaming resources and referrals where appropriate
• Comply with PAGCOR responsible gaming program requirements

4.5 Marketing and Communications

Subject to your marketing preferences and applicable law, ph26 may use your personal information to:

• Send promotional offers, bonuses, and special event notifications by email, SMS, or in-platform messaging
• Personalise game recommendations and promotional content based on your gaming preferences and history
• Conduct player satisfaction surveys and research
• Notify you of changes to our products, services, terms, or policies

You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team. Opting out of marketing does not affect our ability to send you service-related communications that are necessary for account administration.

4.6 Platform Improvement and Analytics

• Analyse usage patterns to improve platform design and user experience
• Conduct statistical analysis of gaming trends across our player base
• Test new features and product improvements
• Troubleshoot technical issues and optimise platform performance

5. Data Sharing and Disclosure

ph26 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may disclose your personal data only in the limited circumstances described below:

5.1 Service Providers and Data Processors

ph26 works with carefully selected third-party service providers who process personal data on our behalf and under our instructions, subject to strict data processing agreements. These include:

• Payment processors: GCash, PayMaya, and banking partners including BPI, BDO, and Metrobank, for the purpose of processing deposits and withdrawals;
• Identity verification providers: KYC technology platforms that assist in verifying government-issued identification and performing liveness checks;
• Game content providers: Third-party game studios and live casino platform operators whose software is integrated into the ph26 platform;
• Cloud infrastructure providers: Hosting, storage, and content delivery network providers that support platform operations;
• Customer support platforms: Live chat and helpdesk software providers;
• Analytics and fraud detection: Technology providers that assist with platform analytics, fraud detection, and security monitoring.

5.2 Regulatory and Law Enforcement Authorities

ph26 is required by Philippine law to disclose certain personal information to regulatory and law enforcement bodies, including but not limited to:

• PAGCOR, in its capacity as our licensing and regulatory authority;
• The Anti-Money Laundering Council (AMLC), as required under Republic Act No. 9160 and its amendments;
• The National Privacy Commission (NPC), in connection with any investigation or enforcement action;
• The Bureau of Internal Revenue (BIR), in connection with applicable tax obligations;
• Any other competent Philippine government authority pursuant to a valid legal order, court order, or lawful request.

5.3 Business Transfers

In the event that ph26 undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, your personal information may be transferred to the acquiring or successor entity as part of that transaction. We will provide notice of such a transfer and any material changes to data processing arrangements through our platform or by direct communication before any such transfer takes effect.

5.4 Cross-Border Data Transfers

In the course of providing services, some personal data may be transferred to and processed in countries other than the Philippines, including the locations where our game content providers, cloud infrastructure partners, and other service providers operate. When transferring personal data outside the Philippines, ph26 ensures that adequate safeguards are in place in accordance with National Privacy Commission guidelines, including contractual data transfer agreements that impose obligations equivalent to those under the Data Privacy Act of 2012.

6. Data Retention

ph26 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The primary retention periods applicable to ph26 are set out in the table in Section 4 above.

Upon the expiry of the applicable retention period, ph26 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. In some circumstances, we may retain anonymised, aggregated data for statistical and analytical purposes indefinitely, as this data can no longer identify any individual.

Where retention of personal data is required for the purposes of actual or anticipated litigation, regulatory investigation, or dispute resolution, ph26 may retain relevant data beyond the standard retention periods described above until the matter is fully resolved.

7. Data Security Measures

ph26 takes the security of your personal information very seriously. We implement a comprehensive set of technical, organisational, and physical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and the ph26 platform is protected using industry-standard Transport Layer Security (TLS) encryption. Sensitive data, including payment information and identity documents, is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data within ph26's systems is restricted on a strict need-to-know basis. Staff access is controlled through role-based access management, multi-factor authentication, and comprehensive access logging;
• Pseudonymisation: Where feasible, ph26 pseudonymises personal data to reduce risk in the event of a security incident;
• Regular Security Audits: ph26 conducts regular penetration testing, vulnerability assessments, and security audits by independent third parties;
• Employee Training: All ph26 staff who handle personal data receive regular data privacy and security training;
• Incident Response: ph26 maintains a formal data breach response plan, and in the event of a personal data breach, we will notify affected users and the National Privacy Commission as required under the Data Privacy Act of 2012.

8. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph26. To exercise any of these rights, please contact our Data Privacy Officer at [email protected] with a clear description of your request and proof of your identity.

• Right to Be Informed: You have the right to be informed about the collection and processing of your personal data, including the identity of the data controller, the purposes of processing, and your rights as a data subject;
• Right of Access: You have the right to request a copy of the personal data ph26 holds about you, along with information about how it is being used and shared;
• Right to Rectification: You have the right to request the correction of any inaccurate, incomplete, or outdated personal data we hold about you;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw your consent, or where processing is unlawful — subject to our legal retention obligations under PAGCOR and AMLA regulations;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interest, subject to our overriding legitimate grounds;
• Right to Data Portability: You may request that ph26 provide your personal data in a structured, commonly used, machine-readable format so that it may be transferred to another service provider;
• Right to Lodge a Complaint: If you believe your data privacy rights have been violated, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) at www.privacy.gov.ph.

ph26 will respond to all verified data subject requests within thirty (30) calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

9. Cookies and Tracking Technologies

ph26 uses cookies and similar tracking technologies to enhance your experience on our platform, analyse site traffic, personalise content, and support our security and fraud prevention systems. A cookie is a small text file placed on your device when you visit our website.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of the ph26 platform, including session management, login authentication, and security functions. They cannot be disabled without significantly impairing your ability to use our services;
• Performance and Analytics Cookies: These cookies help us understand how players interact with the ph26 platform by collecting aggregated information about page visits, session durations, and feature usage. This helps us identify and fix issues and improve platform performance;
• Functional Cookies: These cookies remember your preferences such as language settings, game filter selections, and display options to provide a more personalised experience;
• Marketing and Targeting Cookies: Subject to your consent, these cookies track your activity on the ph26 platform to enable personalised promotional content and measure the effectiveness of our marketing campaigns.

9.2 Managing Cookies

You can manage your cookie preferences through the Cookie Preferences Centre accessible from the footer of our platform. You may also configure your browser settings to refuse cookies, although doing so may affect the functionality of the ph26 platform. Note that deleting or blocking strictly necessary cookies may prevent you from logging in or using certain features of the platform.

10. Children's Privacy

The ph26 platform is strictly intended for adults aged twenty-one (21) years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. ph26 does not knowingly collect, process, or store personal information from individuals under the age of twenty-one (21).

All account registration attempts are subject to age verification procedures. If ph26 discovers or suspects that a user is under the minimum age requirement, the account will be immediately suspended pending verification, and any funds deposited will be held or returned pending investigation. If you believe a minor has gained access to ph26's services using false information, please contact our support team immediately.

11. Updates to This Privacy Policy

ph26 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will notify you by posting a prominent notice on the ph26 platform, sending an email to the address registered to your account, and updating the "Last Updated" date at the top of this page.

Your continued use of the ph26 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

12. Contact Our Data Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ph26 handles your personal data, please do not hesitate to reach out to our dedicated Data Privacy Officer:

• Data Privacy Officer: ph26 DPO
• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 on the ph26 platform
• Response Time: Within 30 calendar days for formal data subject requests

If you are unsatisfied with our response to any privacy-related concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.