987ph Privacy Policy — How We Handle Your Personal Data

1 Who We Are — Data Controller

1.1 The 987ph platform, accessible at 987ph.one, is operated by 987ph ("the Platform", "we", "us", "our"). 987ph acts as the Data Controller in respect of personal data collected from players and visitors to the platform within the meaning of the Philippine Data Privacy Act of 2012 (Republic Act 10173).

1.2 As Data Controller, 987ph determines the purposes and means by which your personal information is processed. We are accountable for ensuring that processing activities comply with applicable Philippine data protection law and with the policies described in this document.

1.3 This Privacy Policy applies to all personal data collected through the 987ph website at 987ph.one, the 987ph mobile web platform, customer support channels, and any other service operated by 987ph for Filipino players.

2 Personal Data We Collect

987ph collects personal data that you provide directly, that is generated by your use of the platform, and that is received from third parties in connection with your account. The categories of data we collect are described below.

2.1 Sensitive Personal Information. Government-issued ID numbers and financial account details constitute sensitive personal information under RA 10173. 987ph processes this data only to the extent necessary for KYC verification, payment processing, and AML compliance, and applies heightened security measures to its storage and handling.

3 How 987ph Uses Your Personal Data

987ph uses your personal data for the following purposes:

• Account Management — Creating and maintaining your 987ph player account; authenticating your identity on login; enabling account settings and preferences.
• Service Delivery — Processing deposits and withdrawals in Philippine Peso via GCash, Maya, BPI, BDO, and other supported channels; providing access to the game library; crediting bonuses and promotions.
• Identity Verification (KYC) — Verifying your identity and age (21+) to comply with Philippine gaming regulations and PAGCOR-aligned requirements before processing your first withdrawal.
• Regulatory Compliance — Meeting obligations under Philippine anti-money laundering laws (AMLA), the Data Privacy Act, and other applicable regulations. This includes transaction monitoring and suspicious activity reporting where required.
• Fraud Prevention & Security — Detecting and preventing fraudulent activity, multiple account creation, bonus abuse, and unauthorised account access. Technical data including IP addresses is used for this purpose.
• Responsible Gaming — Monitoring gaming patterns to identify indicators of problem gambling; administering deposit limits, cooling-off periods, and self-exclusion; sending responsible gaming communications where appropriate.
• Customer Support — Processing your support requests, resolving account disputes, responding to complaints, and maintaining records of support interactions for quality assurance.
• Communications — Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts), promotional communications (where you have consented), and important policy updates.
• Platform Improvement — Analysing aggregated, anonymised usage data to understand player behaviour patterns, improve platform performance, and develop new features relevant to Filipino players.

4 Legal Bases for Processing

987ph processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Performance of a Contract — Processing is necessary to perform the contract between you and 987ph (i.e., providing you with the gaming platform and associated services you signed up for).
• Legitimate Interests — Processing is necessary for 987ph's legitimate interests, including fraud prevention, security, platform integrity, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Compliance with a Legal Obligation — Processing is required to comply with applicable Philippine laws, including AML obligations, data retention requirements, and gaming regulatory obligations.
• Consent — Where processing is based on consent (such as sending promotional communications), you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

5 Sharing Your Personal Data

5.1 987ph does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary:

• Payment Processors — GCash, Maya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions. These providers receive only the data necessary to execute the specific transaction.
• Identity Verification Services — KYC and identity verification technology providers engaged by 987ph to assist with document verification and age confirmation.
• Game Content Providers — Third-party game studios and aggregators (such as PG Soft, Pragmatic Play) may receive limited technical session data necessary to deliver gameplay. These providers do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Philippine National Police (PNP), and other competent authorities, where 987ph is legally required to make disclosure.
• Legal and Professional Advisers — Where disclosure is necessary for the conduct of legal proceedings or obtaining legal or professional advice.

5.2 All third-party service providers who receive your personal data are required to process it solely for the purposes specified by 987ph and in accordance with applicable data protection law. 987ph does not authorise any third party to use your personal data for their own independent commercial purposes.

6 Cookies & Tracking Technologies

6.1 The 987ph platform uses cookies and similar tracking technologies to operate platform functionality, maintain your session after login, remember your preferences, and detect fraud. The types of cookies used are:

• Strictly Necessary Cookies — Required for the platform to function. These include session cookies that maintain your logged-in state, security tokens, and load-balancing cookies. These cannot be disabled without preventing platform use.
• Functional Cookies — Remember your language preferences, game settings, and other personalisation options. These improve your experience but are not essential to core functionality.
• Analytics Cookies — Collect aggregated, anonymised data about how the platform is used (pages visited, session duration, feature engagement). This data is used to improve the platform. Analytics data does not identify you personally.

6.2 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect platform functionality, including the ability to remain logged in to your 987ph account.

7 Data Security

7.1 987ph implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and 987ph servers;
• Encryption at rest for sensitive personal data including KYC documents and financial records;
• Role-based access controls limiting employee access to personal data to that which is necessary for their specific function;
• Ongoing monitoring for suspicious access patterns and security incident detection;
• Two-factor authentication options available to players for account login security;
• Regular security reviews and testing of platform infrastructure.

7.2 While 987ph takes reasonable and appropriate security precautions, no internet transmission or electronic storage system is 100% secure. In the event of a personal data breach that poses a real risk of harm, 987ph will notify affected players and the National Privacy Commission as required under RA 10173.

7.3 You are responsible for maintaining the security of your 987ph account credentials. Do not share your password, OTP codes, or any account access information with any third party. 987ph support agents will never ask for your password.

8 Data Retention

8.1 987ph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and KYC Data — Retained for the duration of your account plus a minimum of five (5) years after account closure, as required by Philippine AML regulations (AMLA and its implementing rules).
• Financial Transaction Records — Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLA requirements.
• Gaming Activity Records — Retained for a minimum of three (3) years from the date of the relevant gaming session or activity.
• Support Communications — Retained for a minimum of two (2) years from the date of the last interaction, unless extended retention is required for an ongoing dispute or investigation.
• Technical / Log Data — Typically retained for 90 days for operational and security purposes, unless a specific security incident requires extended retention for investigation.

8.2 After the applicable retention period expires, your personal data is securely deleted or anonymised in a manner that prevents re-identification.

9 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data processed by 987ph. To exercise any of these rights, contact 987ph support via live chat or email at [email protected].

10 Children & Minors — Strict 21+ Policy

10.1 The 987ph platform is strictly intended for adults who are twenty-one (21) years of age or older, in accordance with Philippine regulations governing online gambling. 987ph does not knowingly collect, use, or retain the personal data of any individual under 21.

10.2 If 987ph becomes aware that personal data has been collected from an individual under 21, the relevant account will be immediately closed and the data will be deleted as expeditiously as possible, subject only to any mandatory legal retention obligations.

10.3 If you believe that a minor has registered an account on 987ph, please notify us immediately via live chat so that we can take prompt action. Do not attempt to use another person's account, including a minor's account, to access the platform.

11 International Data Transfers

11.1 Some of 987ph's technology infrastructure, game content providers, and service providers are located outside the Philippines. Where personal data is transferred outside the Philippines, 987ph ensures that adequate protections are in place — either through the use of standard contractual clauses, data processing agreements, or transfers to jurisdictions that have been recognised as providing adequate data protection.

11.2 987ph will not transfer your personal data to any third country without ensuring that appropriate safeguards are in place as required under Section 21 of the Data Privacy Act of 2012 and its Implementing Rules.

12 Changes to This Privacy Policy

12.1 987ph reserves the right to amend this Privacy Policy at any time. When material changes are made — those that significantly affect your rights or how your personal data is used — we will notify you via email to your registered address and via a prominent notice on the 987ph platform, at least seven (7) days before the changes take effect.

12.2 Minor changes that do not materially affect your rights (such as clarifications, corrections of typographical errors, or changes to contact details) may be made without advance notice. The "Last updated" date at the top of this page will always reflect the most recent revision.

12.3 Your continued use of 987ph after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease using the platform and may request account closure.

13 Contact Us & Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise a data right, or need to report a potential data breach or privacy concern, please contact 987ph through the following channels:

• Live Chat: Available 24/7 directly on the 987ph platform — fastest channel for account-related privacy queries, typically under 5 minutes response.
• Email: [email protected] — use subject line "Privacy Request" for data rights enquiries.
• Messenger & Viber: Active daily through 987ph's official channels on the platform.