ph23 Casino Privacy Policy

1 Introduction

ph23 Casino is committed to protecting the privacy and security of your personal information. We understand that when you share your data with us — whether during ph23 Login, account registration, or day-to-day platform use — you are placing trust in us. We take that trust seriously.

This Policy applies to all personal data collected through the ph23 website at ph23.one, the ph23 mobile platform, customer support interactions, and any other ph23 services. It covers data collected from registered players, prospective players, and general visitors to the ph23 platform.

ph23 acts as the Personal Information Controller (PIC) for the personal data described in this Policy, as defined under the Philippine Data Privacy Act of 2012. Our designated Data Protection Officer (DPO) oversees compliance with this Policy and applicable data privacy laws.

2 Personal Data We Collect

ph23 collects personal data through several channels, including account registration, identity verification, platform usage, and customer support interactions. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., Philippine passport number, SSS/GSIS number, UMID number, driver's license number).
• Contact Data: Email address, mobile phone number, and residential address (including barangay, city/municipality, province, and postal code).
• Account Data: ph23 Login username, encrypted password, account preferences, and communication preferences.
• Financial Data: GCash account details, PayMaya/Maya account details, bank account information (for bank transfer transactions), and transaction history. We do not store full debit card numbers — only masked card details are retained.
• Gaming Data: Game history, wagering activity, session duration, win/loss records, and bonus usage history.
• Technical Data: IP address, device type, operating system, browser type and version, time zone, and platform access logs.
• KYC Verification Data: Copies of government-issued identification documents and proof of address submitted during the verification process.
• Communications Data: Records of your interactions with ph23 customer support, including live chat transcripts and email correspondence.

ph23 does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly required for identity verification and regulatory compliance purposes.

3 How We Use Your Personal Data

ph23 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your ph23 player account, including processing your ph23 Login and verifying your identity.
• Service Delivery: To provide access to ph23 Casino games, process deposits and withdrawals, and deliver the core gaming experience.
• KYC & AML Compliance: To verify your identity and age (21+), comply with PAGCOR's Know Your Customer requirements, and fulfill our obligations under the Anti-Money Laundering Act of the Philippines.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and provide responsible gaming tools in accordance with PAGCOR guidelines.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Platform Improvement: To analyze usage patterns, improve platform performance, and develop new features based on aggregated, anonymized data.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent and only via channels you have opted into. You may withdraw consent at any time.
• Legal Compliance: To comply with applicable Philippine laws, PAGCOR regulations, court orders, and lawful requests from government authorities.

4 Legal Basis for Processing

ph23 processes your personal data on the following legal bases, as recognized under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your ph23 account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for ph23's legitimate interests in operating a secure, fair, and compliant gaming platform — including fraud prevention, security monitoring, and platform improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

ph23 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, PayMaya/Maya, and banking partners, for the purpose of processing deposits and withdrawals in Philippine Peso.
• Game Providers: Licensed game software providers whose games are available on the ph23 platform, to the extent necessary for game delivery and fairness verification.
• Identity Verification Services: Third-party KYC and AML screening providers engaged to assist with regulatory compliance.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on ph23's behalf under strict contractual data processing agreements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, where ph23 is legally compelled to disclose data pursuant to a valid court order, subpoena, or lawful government request.

All third-party service providers engaged by ph23 are contractually required to process your personal data only for the specified purpose, maintain appropriate security measures, and comply with the Philippine Data Privacy Act.

6 Cookies & Tracking Technologies

ph23 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the ph23 platform to function. These include session cookies that maintain your ph23 Login state and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these may affect platform functionality.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the ph23 platform, helping us identify areas for improvement. These are only set with your consent.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your platform activity. These are only set with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through the ph23 Cookie Settings panel, accessible from the platform footer. Note that disabling strictly necessary cookies will prevent you from using the ph23 platform. Most web browsers also allow you to control cookies through browser settings.

7 Data Retention

ph23 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active ph23 account, plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act of the Philippines.
• Transaction Records: Retained for a minimum of five (5) years, in compliance with AML and PAGCOR financial record-keeping obligations.
• Gaming Activity Logs: Retained for three (3) years following the date of the gaming session, for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for two (2) years following the resolution of the support interaction.
• Marketing Consent Records: Retained for the duration of your consent, plus two (2) years following withdrawal of consent, as evidence of lawful processing.

Upon expiry of the applicable retention period, ph23 will securely delete or anonymize your personal data in accordance with our data disposal procedures.

8 Data Security

ph23 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph23 servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Multi-factor authentication (MFA) options for ph23 Login to protect your account from unauthorized access.
• Role-based access controls ensuring that ph23 staff can only access personal data necessary for their specific job functions.
• Regular third-party penetration testing and security audits of ph23 platform infrastructure.
• 24/7 security monitoring and intrusion detection systems.
• Secure, geographically redundant data storage with regular encrypted backups.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph23 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the Data Privacy Act.

9 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph23:

• Right to Be Informed: The right to know what personal data ph23 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph23 holds about you, including information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your ph23 account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph23's legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph23 has violated your data privacy rights.

To exercise any of these rights, please contact ph23's Data Protection Officer using the contact details in Section 13. ph23 will respond to your request within thirty (30) days, as required by the Data Privacy Act.

10 Children's Privacy

The ph23 Casino platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. ph23 does not knowingly collect personal data from persons under 21 years of age.

If ph23 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete all personal data collected, and return any deposited funds to the payment source. If you believe that a minor has registered on the ph23 platform, please contact our support team immediately.

ph23 employs age verification procedures during registration and reserves the right to request additional proof of age at any time. Providing false age information during registration is a serious violation of our Terms & Conditions and may result in legal consequences.

11 International Data Transfers

ph23 primarily stores and processes your personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software vendors with servers in other jurisdictions.

Where such transfers occur, ph23 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements incorporating the standard data protection clauses recognized by the National Privacy Commission.
• Transfers only to jurisdictions that provide an adequate level of data protection, as assessed by ph23 in consultation with our Data Protection Officer.
• Technical and organizational security measures equivalent to those applied to data processed within the Philippines.

ph23 does not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent or a lawful basis under the Data Privacy Act.

12 Updates to This Privacy Policy

ph23 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or PAGCOR regulatory requirements. When material changes are made, ph23 will post the updated Policy on the ph23 platform with a revised "Last Updated" date and, where practicable, notify registered players via email or in-platform notification.

Your continued use of the ph23 platform following the effective date of any update constitutes your acknowledgment of the revised Policy. We encourage you to review this Privacy Policy periodically to stay informed about how ph23 protects your personal data.

If you do not agree with any changes to this Privacy Policy, you should cease using the ph23 platform and may request account closure in accordance with our Terms & Conditions.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or ph23's data processing practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.