ph26 Privacy Policy

1 Introduction

ph26 is committed to protecting the privacy and personal data of every player who uses our platform. We understand that Filipino players trust us not only with their gaming activity but also with sensitive personal and financial information. That trust is something we take seriously — and this Policy is our commitment to transparency about how that information is handled.

This Policy applies to all personal data collected through the ph26 website at ph26.net, the ph26 mobile platform, customer support interactions, and any other ph26 service or communication channel. It applies to all registered players, prospective players, and visitors to the ph26 platform.

ph26 acts as the Data Controller for personal data collected through the ph26 platform. This means ph26 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

2 Personal Data We Collect

ph26 collects the following categories of personal data from players and platform users:

ph26 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming assessments or regulatory compliance.

3 How We Collect Your Data

ph26 collects personal data through the following means:

• Direct collection: Data you provide when registering a ph26 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the ph26 platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors.
• Publicly available sources: Publicly accessible information used for fraud prevention and regulatory compliance purposes.

4 How We Use Your Data

ph26 uses your personal data only for legitimate, specified purposes. The primary purposes for which ph26 processes your data include:

• Account management: Creating, maintaining, and securing your ph26 player account, including identity verification and age confirmation (21+ requirement).
• Service delivery: Enabling you to access ph26 games, process deposits and withdrawals, and use all platform features.
• Legal and regulatory compliance: Meeting ph26's obligations under Philippine law, including PAGCOR regulations, the Data Privacy Act of 2012, and Anti-Money Laundering Act requirements.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and other security threats.
• Responsible gaming: Monitoring gaming behaviour to identify signs of problem gambling and applying responsible gaming tools where appropriate.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of ph26 support services.
• Marketing and promotions: Sending you relevant ph26 offers, bonuses, and promotional communications — but only where you have provided consent or where ph26 has a legitimate interest. You may opt out at any time.
• Platform improvement: Analysing usage patterns to improve ph26's games, features, and overall user experience for Filipino players.

ph26 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

5 Legal Basis for Processing

ph26 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and applicable Philippine regulations:

• Contractual necessity: Processing required to perform the contract between you and ph26 — including account registration, game access, and payment processing.
• Legal obligation: Processing required to comply with ph26's legal and regulatory obligations, including KYC, AML, and PAGCOR reporting requirements.
• Legitimate interests: Processing carried out for ph26's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — particularly for direct marketing communications. You may withdraw consent at any time by contacting ph26 support.

6 Data Sharing & Disclosure

ph26 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ph26 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your transactions.
• KYC and compliance providers: Identity verification and AML screening service providers engaged by ph26 to fulfil regulatory obligations.
• Game content providers: Licensed game studios and live casino operators whose games are available on the ph26 platform, to the extent necessary for game operation and dispute resolution.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on ph26's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants engaged by ph26, subject to professional confidentiality obligations.

All third parties with whom ph26 shares personal data are required to handle that data in accordance with applicable Philippine data protection law and ph26's data processing standards.

7 Data Retention

ph26 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active ph26 account, plus a minimum of five (5) years following account closure, in accordance with PAGCOR and AML regulatory requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act of the Philippines.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship.
• Support and communications records: Retained for up to three (3) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for compliance documentation purposes.

When personal data is no longer required, ph26 will securely delete or anonymise it in accordance with industry best practices.

8 Data Security

ph26 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph26 platform.
• Encryption at rest for sensitive personal and financial data stored on ph26 servers.
• Access controls: Strict role-based access controls ensuring that ph26 staff can only access personal data on a need-to-know basis.
• Two-factor authentication (2FA) available to all ph26 players to protect account access.
• Regular security audits and penetration testing conducted by independent cybersecurity specialists.
• Incident response procedures: ph26 maintains documented procedures for detecting, reporting, and responding to personal data breaches in accordance with NPC notification requirements.

While ph26 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph26 login credentials and for notifying ph26 immediately if you suspect any unauthorised access to your account.

9 Cookies & Tracking Technologies

ph26 uses cookies and similar tracking technologies to enhance your experience on the ph26 platform, analyse usage patterns, and support security functions. The following types of cookies are used:

• Strictly necessary cookies: Essential for the ph26 platform to function correctly, including session management and security features. These cannot be disabled.
• Functional cookies: Remember your preferences and settings on the ph26 platform, such as language and display preferences.
• Analytics cookies: Collect anonymised data about how players use the ph26 platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent activity and protect the integrity of the ph26 platform.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph26 platform. ph26 does not use third-party advertising or behavioural tracking cookies.

10 Your Data Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by ph26:

To exercise any of these rights, please submit a written request to ph26's Data Protection Officer at [email protected]. ph26 will respond to all verified data rights requests within fifteen (15) business days, in accordance with NPC guidelines.

If you believe ph26 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Minors & Age Restriction

The ph26 platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. ph26 does not knowingly collect personal data from individuals under the age of 21.

ph26 employs age verification procedures during the registration process to prevent underage access. If ph26 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be closed without delay.

If you are a parent or guardian and believe that a minor has registered on the ph26 platform, please contact ph26 support immediately at [email protected].

12 International Data Transfers

ph26 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game content partners operating internationally.

Where such transfers occur, ph26 ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require overseas recipients to apply data protection standards equivalent to those required under Philippine law. ph26 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

13 Changes to This Privacy Policy

ph26 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, ph26 will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or in-platform notification.

Your continued use of the ph26 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed about how ph26 protects your personal data.

14 Contact & Data Protection Officer

ph26 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact:

• Data Protection Officer: ph26 Data Protection Office
• Email: [email protected]
• General Support: [email protected]
• Response Time: ph26 aims to acknowledge all privacy-related enquiries within 3 business days and resolve them within 15 business days.
• Support Hours: 24 hours a day, 7 days a week

For further information about your rights under the Data Privacy Act of 2012, you may also contact the National Privacy Commission (NPC) of the Philippines directly.