ph8ag4 Privacy
Policy

1. Introduction

ph8ag4 ("ph8ag4," "we," "us," or "our") is committed to protecting the privacy and personal data of every Filipino player who uses the ph8ag4 online gaming platform at ph8ag4.net and all associated services (collectively, the "Platform"). This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

By registering an account or using the ph8ag4 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.

2. Data Controller

ph8ag4 acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform, as defined under the Data Privacy Act of 2012. ph8ag4 determines the purposes and means of processing your personal data.

ph8ag4 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Privacy Policy. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

ph8ag4 collects the following categories of personal data from players:

ph8ag4 does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance purposes.

4. How We Collect Your Data

ph8ag4 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, Maya, and banking partners.
• Regulatory sources: Information received from PAGCOR, AMLC, or other Philippine government agencies in connection with regulatory obligations.

5. How We Use Your Personal Data

ph8ag4 processes your personal data for the following purposes:

• To create, verify, and manage your ph8ag4 account, including age verification (21+ as required by Philippine law).
• To process deposits and withdrawals via GCash, Maya, bank transfer, and debit card.
• To comply with anti-money laundering (AML) obligations under Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR regulatory requirements.
• To detect, investigate, and prevent fraud, cheating, collusion, and other prohibited conduct on the Platform.
• To provide customer support and resolve disputes.
• To administer bonuses, promotions, and loyalty programmes.
• To monitor gaming activity for responsible gaming purposes, including identifying players who may be at risk of problem gambling.
• To send you account-related communications, including transaction confirmations, security alerts, and regulatory notices.
• To send you marketing communications about ph8ag4 promotions and new games, where you have provided consent (you may withdraw consent at any time).
• To improve the Platform through analytics and user experience research.
• To comply with applicable Philippine laws and respond to lawful requests from government authorities.

6. Legal Basis for Processing

ph8ag4 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with Philippine law, including AML obligations, PAGCOR regulatory requirements, and the Data Privacy Act itself.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

ph8ag4 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash (Mynt), PayMaya / Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for transaction processing.
• KYC and identity verification providers: Third-party services used to verify your identity and age in compliance with PAGCOR and AML requirements.
• Game content providers: Licensed game studios whose games are available on the ph8ag4 Platform, to the extent necessary for game integrity and dispute resolution.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection partners who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or court order.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

Where ph8ag4 engages third-party processors, we ensure they are bound by data processing agreements that require them to process personal data only on our instructions and in compliance with the Data Privacy Act of 2012.

8. Data Retention

ph8ag4 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from account closure, as required by PAGCOR regulations and AML obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act.
• Gaming history: Retained for three (3) years from the date of the gaming session, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for two (2) years from the date of the last communication.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ph8ag4's data disposal procedures.

9. Data Security

ph8ag4 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the ph8ag4 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Passwords are stored using one-way cryptographic hashing and are never stored in plain text.
• Access controls: Access to personal data is restricted to authorised ph8ag4 personnel and third-party processors on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Infrastructure security: The ph8ag4 Platform is hosted on secure, regularly audited cloud infrastructure with firewall protection, intrusion detection systems, and continuous security monitoring.
• Vulnerability management: ph8ag4 conducts regular security assessments, penetration testing, and patch management to identify and remediate vulnerabilities in a timely manner.
• Incident response: ph8ag4 maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk to your rights and freedoms, ph8ag4 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the Data Privacy Act of 2012.

While ph8ag4 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph8ag4 Login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph8ag4:

• Right to be informed: The right to be notified of how your personal data is collected, used, and processed — which this Privacy Policy fulfils.
• Right of access: The right to request a copy of the personal data ph8ag4 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph8ag4's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact ph8ag4's Data Protection Officer using the contact details in Section 14. ph8ag4 will respond to all verified data subject requests within thirty (30) days of receipt, as required by the DPA. We may request proof of identity before processing your request.

11. Cookies and Tracking Technologies

ph8ag4 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session management, security, and ph8ag4 Login authentication. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game display options, and responsible gaming limits you have set.
• Analytics cookies: Collect anonymised data about how players use the Platform to help us improve performance and user experience. Used only with your consent.
• Marketing cookies: Used to deliver relevant ph8ag4 promotions and measure the effectiveness of our campaigns. Used only with your consent.

You can manage your cookie preferences through the cookie settings panel available on the Platform, or through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph8ag4 Platform.

12. Minors and Age Restriction

ph8ag4 is strictly intended for players aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online casino gaming. ph8ag4 does not knowingly collect personal data from individuals under the age of 21.

If ph8ag4 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the personal data concerned, and report the matter to PAGCOR as required. If you believe a minor has registered on the ph8ag4 Platform, please contact our support team immediately.

ph8ag4 employs age verification procedures during the registration and KYC process to enforce this restriction. Gambling is addictive. Know when to stop.

13. Changes to This Privacy Policy

ph8ag4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. Material changes will be communicated to registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The current version of this Privacy Policy, including the effective date, will always be available on this page. Your continued use of the ph8ag4 Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. We encourage you to review this page periodically.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph8ag4, please contact our Data Protection Officer:

• Data Protection Officer: ph8ag4 DPO
• Email: [email protected]
• General Support: [email protected]
• Response Time: Within 30 days for data subject requests; within 72 hours for data breach notifications to the NPC

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with ph8ag4's response to your data privacy concern.