Privacy Policy — How ph7990 Protects Your Data

For the purposes of Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, the personal data controller in respect of data collected through the ph7990 platform at ph7990.cam is ph7990 ("ph7990," "we," "us," "our").

ph7990 operates within a PAGCOR-context licensed framework for online gaming in the Philippines. As data controller, ph7990 determines the purposes and means of processing personal data collected from registered players and website visitors. ph7990 has appointed a designated Data Protection Officer (DPO) in accordance with NPC requirements. The DPO may be contacted via the details set out in Section 14 of this Policy.

ph7990 collects personal data in the categories listed below. We collect only what is necessary for the purposes set out in this Policy and in compliance with our obligations under PAGCOR-context licensing, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.

ph7990 does not collect or process special categories of personal data (as defined under Section 13 of the Data Privacy Act) such as racial or ethnic origin, religious or philosophical beliefs, health data, or biometric data, except where a player voluntarily discloses health-related information in the context of a responsible gaming support request, in which case such information is treated with the highest level of confidentiality.

ph7990 collects personal data through the following means:

3.1 Direct Collection from You

You provide data directly to ph7990 when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, set responsible gaming limits, or participate in promotions. This is the primary channel through which identity, contact, address, and financial data is collected.

3.2 Automated Collection

ph7990's platform automatically collects technical data and gaming activity data as a necessary function of operating the service. This includes session logs, IP addresses, device information, and gameplay records. This data is generated automatically whenever you access or interact with the ph7990 Platform and is essential for security monitoring, fraud detection, and regulatory compliance.

3.3 Third-Party Sources

ph7990 may receive data about you from third parties in limited circumstances, including:

• Identity verification providers that confirm the authenticity of government-issued Philippine IDs submitted during KYC;
• Payment processors (GCash, Maya, BPI, BDO, Metrobank) that confirm transaction status and payment account ownership;
• PAGCOR and AMLC where required for regulatory compliance, including self-exclusion register checks;
• Fraud prevention databases operated by third-party security partners for the purpose of detecting and preventing fraudulent activity on the ph7990 Platform.

Under the Data Privacy Act of 2012, ph7990 must have a lawful basis for every category of personal data processing it undertakes. The following legal bases apply to ph7990's data processing activities:

• Contractual Necessity: Processing required to perform the contract between ph7990 and the player — including account management, game provision, deposit and withdrawal processing, and customer support.
• Legal Obligation: Processing required to comply with applicable Philippine law — including AMLA-mandated KYC verification, AMLC transaction reporting, PAGCOR-context regulatory compliance, and NPC data protection requirements.
• Legitimate Interests: Processing necessary for ph7990's legitimate business interests where those interests are not overridden by your data protection rights — including fraud detection, security monitoring, platform improvement, and responsible gaming monitoring.
• Consent: Processing based on your explicit consent — including optional marketing communications and preference personalization. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

ph7990 uses your personal data for the following purposes:

• Creating and managing your ph7990 player account and verifying your identity and age (21+ requirement);
• Processing deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, USDT TRC20, Coins.ph, and 7-Eleven CLiQQ;
• Providing access to casino games, live dealer tables, and sports betting markets;
• Applying and tracking bonuses, promotions, and loyalty program rewards;
• Conducting KYC identity verification and ongoing customer due diligence as required under AMLA and PAGCOR-context licensing;
• Detecting, investigating, and preventing fraud, money laundering, multi-accounting, and other prohibited activities;
• Monitoring for responsible gaming indicators and administering deposit limits, loss limits, cool-off periods, and self-exclusion requests;
• Responding to customer support inquiries, disputes, and formal complaints;
• Complying with regulatory reporting obligations to PAGCOR, AMLC, NPC, and other Philippine government authorities;
• Improving platform performance, game library, and user experience through anonymized analytics;
• Sending transactional communications (account notifications, security alerts, transaction confirmations) and, where consent has been given, promotional communications.

ph7990 does not sell, rent, or trade your personal data. We share data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Service Providers (Data Processors)

ph7990 engages third-party service providers who process personal data on our behalf as data processors under binding data processing agreements. These include: KYC and identity verification providers; payment processing gateways (GCash, Maya, BPI, BDO, Metrobank); IT infrastructure and cloud hosting providers; game content suppliers (Evolution Gaming, Ezugi, and others); fraud prevention and cybersecurity partners; and customer support platform providers. All processors are contractually required to maintain data security standards equivalent to those described in this Policy and to process data only on ph7990's documented instructions.

6.2 Regulatory and Law Enforcement Authorities

ph7990 is required by Philippine law to disclose personal data and transaction records to PAGCOR (under its licensing oversight function), the Anti-Money Laundering Council (AMLC) (for covered and suspicious transaction reports under AMLA), the National Privacy Commission (NPC) in the event of a personal data breach, and Philippine courts or law enforcement authorities acting under lawful authority. Such disclosures are made only to the extent required or permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of ph7990 business assets, personal data may be transferred to the relevant acquiring entity, subject to the acquiring entity assuming ph7990's data protection obligations under this Policy and applicable Philippine law. Registered players will be notified of any such transfer that materially affects their data rights before it takes effect.

ph7990 uses cookies and similar tracking technologies on the ph7990.cam platform. Cookies are small text files stored on your device that help us recognize your browser, maintain your session, and collect usage data. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, load balancing, and security tokens. These cannot be disabled without impacting platform functionality.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limit displays. Disabling these may reduce your experience but will not prevent core platform access.
• Analytics Cookies: Collect anonymized usage data (page views, session duration, navigation paths) to help ph7990 understand how Filipino players use the platform and where improvements are needed. This data is aggregated and not linked to individual player identities in analytics reports.
• Security Cookies: Support fraud detection and device fingerprinting functions that protect the security of your ph7990 account.

ph7990 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Note that blocking strictly necessary cookies will prevent you from logging in to ph7990. For full cookie details, refer to the Cookie Settings panel accessible from the ph7990 Platform footer.

ph7990 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve disputes or enforce agreements. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures. Data subject to active legal proceedings, regulatory investigations, or unresolved disputes may be retained beyond standard periods until such matters are fully resolved.

ph7990 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:

• Encryption in Transit: All data transmitted between your device and the ph7990 platform is encrypted using TLS 1.3 with 256-bit cipher strength. This covers your login session, game play, payment transactions, and all API communications.
• Encryption at Rest: Sensitive personal data stored in ph7990 databases — including KYC documents, payment account references, and identity data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to ph7990 personnel and authorized processors who require it to perform their functions. Role-based access controls (RBAC) are enforced with multi-factor authentication required for all administrative access.
• Penetration Testing: ph7990 engages independent cybersecurity specialists to conduct regular penetration tests and vulnerability assessments of its platform infrastructure.
• Incident Response: ph7990 maintains a documented Personal Data Breach Response Plan. In the event of a notifiable breach, ph7990 will notify the NPC within 72 hours of becoming aware and will notify affected players where required under NPC Circular No. 16-03.
• Employee Training: All ph7990 personnel with access to personal data undergo mandatory data protection training at onboarding and on an annual basis thereafter.

Notwithstanding the foregoing, no data transmission over the internet or electronic storage system is completely secure. While ph7990 employs industry-standard security practices, we cannot guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their ph7990 account.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph7990. These rights are enforceable against ph7990 as your data controller and may be exercised by contacting our Data Protection Officer at [email protected].

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account email address and a description of the right you wish to exercise. ph7990 will acknowledge your request within three (3) business days and respond substantively within fifteen (15) business days, or within the timeframe mandated by the NPC for the relevant right.

ph7990 is an online casino and sports betting platform. Access is strictly restricted to persons aged 21 years and older in accordance with PAGCOR guidelines applicable to casino-style gaming in the Philippines. ph7990 does not knowingly collect personal data from persons under 21 years of age.

Age verification is conducted during the KYC process for all registered players. If ph7990 becomes aware that personal data has been collected from a person under 21 years of age — whether through false registration information or any other means — ph7990 will immediately close the associated account, delete the relevant personal data to the extent permitted by applicable law, and report the matter to the relevant authorities where required.

Some of ph7990's third-party service providers — including game content suppliers such as Evolution Gaming and Ezugi, and certain IT infrastructure providers — are located outside the Philippines. Where ph7990 transfers personal data to countries outside the Philippines, we ensure that such transfers are subject to appropriate safeguards in accordance with Section 21 of the Data Privacy Act of 2012 and NPC guidelines on cross-border data flows.

Safeguards applicable to cross-border transfers from ph7990 include: binding contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law; transfers limited strictly to those necessary for the contracted service; and prohibition on the recipient making onward transfers of ph7990 player data without ph7990's prior written authorization.

Players may request information about the specific safeguards applied to their data in the context of cross-border transfers by contacting the ph7990 Data Protection Officer at [email protected].

ph7990 reviews this Privacy Policy at least annually and whenever a material change to our data processing practices occurs. Material changes — defined as changes that affect the categories of data collected, the purposes for which data is used, the third parties with whom data is shared, or the rights available to players — will be communicated to registered players via email to the address on record at least fourteen (14) calendar days prior to the effective date of the change.

Minor or non-material changes (such as formatting corrections, clarifying language that does not alter the substance of the Policy, or updates to contact details) will be reflected in the Policy document with an updated "Last Reviewed" date without advance notice. The current version of this Privacy Policy is always accessible at ph7990.cam/privacy-policy. We encourage you to review this page periodically to stay informed of how ph7990 protects your data.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to report a data protection concern, please contact the ph7990 Data Protection Officer using the following details:

• Data Protection Officer: ph7990 Data Privacy Team
• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Inquiry"
• Response Commitment: Acknowledgment within 3 Philippine business days; substantive response within 15 business days
• Platform: ph7990.cam

If you are not satisfied with ph7990's response to a data protection concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. The NPC is the independent government agency responsible for administering and enforcing the Data Privacy Act of 2012 in the Philippines.