ph1111 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

§1 Who We Are — Data Controller

ph1111 ("ph1111," "we," "us," "our") is the operator of the online gaming platform accessible at https://ph1111.club. ph1111 acts as the Data Controller in relation to the personal information of players and website visitors collected through the ph1111 platform, in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

ph1111 operates under the PAGCOR regulatory framework, which imposes specific obligations regarding the collection and retention of player identity and transaction data for compliance, anti-money laundering, and responsible gaming purposes. These regulatory obligations coexist with, and are not superseded by, ph1111's data privacy obligations to its players.

Questions relating to data privacy at ph1111 should be directed to our Data Protection Officer (DPO). Contact details are provided in Section 13 of this policy.

§2 Personal Data We Collect

ph1111 collects the following categories of personal data from players and visitors:

ph1111 does not collect sensitive personal information (as defined under RA 10173, such as health data, race, or political affiliations) except where specifically required for responsible gaming purposes (e.g., self-exclusion documentation) and with your explicit consent.

§3 How We Collect Your Data

ph1111 collects personal data through the following means:

• Direct Collection: Information you provide when creating a ph1111 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technical Collection: Information collected automatically when you access ph1111, including through cookies, web beacons, server logs, and session tracking technologies. This includes your IP address, device identifiers, and browsing behaviour on the platform.
• Payment Processors: Transaction confirmation data shared by GCash, Maya, and other payment service providers when you make deposits or receive withdrawals. ph1111 does not store full payment account credentials — only the reference information necessary to process and reconcile transactions.
• Identity Verification Partners: Where ph1111 uses third-party KYC verification services to authenticate identity documents, we receive a verification result and relevant identity data confirmed through that process.
• Fraud Prevention Services: Technical and behavioural signals from fraud detection systems that help ph1111 identify suspicious account activity and protect players.

§4 How ph1111 Uses Your Personal Data

ph1111 uses the personal data it collects for the following specific purposes:

• Account Management: Creating, operating, and maintaining your ph1111 player account; verifying your identity and age; and enabling you to log in and access platform services.
• Service Delivery: Processing deposits and withdrawals; enabling game play; delivering customer support; managing bonuses and promotions relevant to your account.
• Regulatory Compliance: Fulfilling ph1111's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws — including transaction monitoring, suspicious activity reporting, and KYC record keeping.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct described in the ph1111 Terms & Conditions.
• Responsible Gaming: Monitoring gaming activity to identify patterns consistent with problem gambling; applying player-set limits and restrictions; processing self-exclusion requests; and complying with PAGCOR responsible gaming requirements.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, user experience, and payment processing.
• Marketing Communications: Sending promotional offers, bonus notifications, and relevant platform updates to players who have opted in to receive such communications. You may opt out at any time by contacting ph1111 support.
• Legal Proceedings: Preserving and disclosing data where required by court order, regulatory direction, or other lawful legal process.

ph1111 does not use player personal data for automated decision-making that produces legal or similarly significant effects on players, except in fraud detection contexts where such decisions are subject to human review upon player request.

§5 Legal Basis for Processing

ph1111 processes your personal data under the following lawful bases as provided under Republic Act 10173:

• Contractual Necessity: Processing required to fulfil ph1111's obligations under the player account agreement — including account creation, game play access, payment processing, and customer support.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, National Privacy Commission (NPC) obligations, and other applicable Philippine law.
• Legitimate Interests: Processing carried out for ph1111's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing of personal data for optional purposes — such as direct marketing communications — where you have given clear, informed, and freely withdrawable consent. Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

§6 Sharing of Personal Data

ph1111 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ph1111 shares personal data only in the following circumstances:

• Payment Service Providers: GCash, Maya, BPI, BDO, Metrobank, and other payment processors receive the minimum data necessary to process deposit and withdrawal transactions.
• Game Content Providers: Licensed third-party game developers and live dealer studios may receive anonymised session data for game integrity and technical performance purposes. They do not receive your personal identity information.
• KYC and Compliance Partners: Identity verification providers and compliance screening services receive identity data to perform verification and AML screening on behalf of ph1111.
• PAGCOR and Regulatory Authorities: ph1111 is required to share player account and transaction data with PAGCOR and other Philippine regulatory or law enforcement authorities upon lawful request or as required under the operator's regulatory licence.
• Legal and Professional Advisers: ph1111's lawyers, auditors, and financial advisers may access personal data on a strictly confidential basis to the extent necessary to provide professional services.
• Business Transfers: In the event of a merger, acquisition, or sale of ph1111's business operations, player data may be transferred to the acquiring entity subject to equivalent data protection obligations.

All third parties with whom ph1111 shares personal data are required to handle it in accordance with applicable data protection law and, where relevant, under written data processing agreements that impose confidentiality and security obligations.

§7 Data Retention

ph1111 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention standards:

• Active Player Accounts: Personal and transaction data is retained for the duration of your ph1111 account relationship and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of the most recent transaction on the account, as required under Philippine AML regulations.
• Responsible Gaming Records: Self-exclusion records and responsible gaming communications are retained for the duration of any exclusion period plus five (5) years to prevent re-registration by excluded players.
• Technical Logs: Server logs, IP address records, and session data are typically retained for twelve (12) months for security and fraud investigation purposes.
• Marketing Consent Records: Records of marketing opt-in consents and opt-outs are retained for the duration of the account relationship and three (3) years thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ph1111's data disposal procedures.

§8 Security Measures

ph1111 implements technical and organisational security measures appropriate to the risk level of the personal data it processes. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and the ph1111 platform is encrypted using TLS 1.2 or higher (256-bit SSL). This is the same encryption standard used by major Philippine banks including BPI and BDO.
• Encryption at Rest: Sensitive personal data stored in ph1111's systems — including identity documents and financial information — is encrypted at rest using industry-standard encryption.
• Access Controls: Access to personal data within ph1111's organisation is restricted to personnel who require it to perform their specific functions. Access is governed by role-based permissions, multi-factor authentication, and audit logging.
• Two-Factor Authentication: ph1111 offers optional 2FA via OTP to all players to protect against unauthorised account access. Players are strongly encouraged to enable this feature.
• Penetration Testing and Vulnerability Management: The ph1111 platform undergoes regular security testing and vulnerability assessments to identify and remediate security weaknesses.
• Incident Response: ph1111 maintains a data breach response procedure. In the event of a personal data breach that poses a real risk of harm to players, ph1111 will notify affected players and the National Privacy Commission (NPC) within the timeframes required under RA 10173.

While ph1111 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to maintain strong, unique account passwords and to enable 2FA for maximum personal account protection.

§9 Cookies and Tracking Technologies

ph1111 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and analyse platform usage. The types of cookies used include:

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your session. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences (e.g., language settings, game preferences) to personalise your ph1111 experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the ph1111 platform — pages visited, session duration, and features used — to help ph1111 improve the product. Individual players are not identifiable from analytics data.
• Security Cookies: Assist in detecting and preventing fraudulent activity and unauthorised access attempts on the ph1111 platform.

ph1111 does not use third-party advertising cookies or cross-site tracking technologies that share your data with external advertising networks for behavioural targeting purposes.

You may manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the ph1111 platform, including the ability to stay logged in.

§10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph1111:

• Right to be Informed: The right to know what personal data ph1111 collects, the purposes of collection, and how it is processed — as described in this Privacy Policy.
• Right of Access: The right to obtain a copy of the personal data ph1111 holds about you, and information about how it is being used.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update certain account details (e.g., contact information) directly through your ph1111 account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph1111's retention obligations under PAGCOR regulations and AMLA.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. To opt out of marketing communications, contact ph1111 support.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph1111 has processed your personal data in violation of RA 10173.

To exercise any of the above rights, contact ph1111's Data Protection Officer using the details in Section 13. ph1111 will respond to all data rights requests within thirty (30) days in accordance with NPC guidance. We may require identity verification before processing access or erasure requests.

§11 Children's and Minors' Privacy

ph1111 is strictly an adults-only platform. Access to and use of ph1111 is prohibited for any person under twenty-one (21) years of age as required by Philippine law governing gaming activities.

ph1111 does not knowingly collect personal data from individuals under 21. If ph1111 discovers or has reasonable grounds to believe that a player account has been registered by a person under 21, the account will be immediately suspended, all transactions will be reviewed and reversed where possible, and the data will be deleted except to the extent that retention is required for regulatory or legal reasons.

If you have reason to believe that a minor may have accessed or registered on ph1111, please contact ph1111 support immediately so that the matter can be investigated and resolved.

§12 Changes to This Privacy Policy

ph1111 may update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or platform functionality. When material changes are made, ph1111 will notify registered players by email or through a prominent notice on the ph1111 platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates the date of the most recent revision. Continued use of the ph1111 platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated policy. If you do not agree with the revised policy, you may close your ph1111 account by contacting support.

The version of this Privacy Policy published at https://ph1111.club/privacy-policy is the current operative version.

§13 Contact and Data Protection Officer

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph1111, please contact our Data Protection Officer:

Data Protection Officer, ph1111

Email: [email protected] (plain text — not a clickable link; subject line: "Data Privacy Request")

Live Chat: Available 24/7 through the ph1111 platform. For data privacy matters, please identify your request as a data privacy query in the opening message.

ph1111 commits to acknowledging all data privacy requests within five (5) Philippine Standard Time business days and providing a substantive response within thirty (30) days unless extended in accordance with NPC guidance for complex requests.

You also have the right to contact the National Privacy Commission of the Philippines directly if you believe ph1111 has handled your personal data in violation of Republic Act 10173. The NPC can be reached through its official website at privacy.gov.ph (note: ph1111 does not control this external resource and cannot be responsible for its content).