ph8a1 Privacy Policy

ph8a1 ("we", "us", "our", "the Company") is committed to protecting the privacy and personal data of every player who uses the ph8a1 Casino platform at ph8a1.cam ("the Platform"). This Privacy Policy governs the collection, processing, storage, and disclosure of personal information in accordance with:

• The Data Privacy Act of 2012 (Republic Act No. 10173), as implemented by the National Privacy Commission of the Philippines;
• All implementing rules and regulations (IRR) issued by the National Privacy Commission;
• The Philippine Amusement and Gaming Corporation (PAGCOR) licensing requirements and regulatory directives applicable to online gaming operators;
• The Anti-Money Laundering Act (AMLA) (R.A. 9160, as amended) and related customer due diligence requirements.

By creating an account on ph8a1, accessing the Platform, or using any service provided by ph8a1, you acknowledge that you have read this Privacy Policy in full, understand its provisions, and consent to the collection and use of your personal data as described herein.

ph8a1 is the Personal Information Controller (PIC) for all personal data collected through the Platform. As the PIC, ph8a1 determines the purposes and means of processing your personal information and is responsible for ensuring compliance with the Data Privacy Act of 2012.

ph8a1 has appointed a Data Protection Officer (DPO) as required by the National Privacy Commission. The DPO is responsible for monitoring ph8a1's data protection compliance, serving as the point of contact for data subjects exercising their rights, and liaising with the National Privacy Commission on data protection matters.

Contact details for ph8a1's Data Protection Officer are provided in Section 12 of this Policy.

ph8a1 collects personal information from multiple sources and across multiple phases of your relationship with the Platform. The following categories of personal data are collected and processed by ph8a1:

3.1 Account Registration Information

When you create a ph8a1 account, we collect:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify 21+ age requirement);
• Registered mobile phone number (Philippine +63 number required for SMS OTP authentication);
• Email address;
• Residential address (street, barangay, city/municipality, province, postal code);
• Nationality and country of residence;
• Username and password (password is stored in hashed, non-reversible form only).

3.2 Know Your Customer (KYC) Verification Data

Under PAGCOR licensing requirements and the Anti-Money Laundering Act, ph8a1 is required to verify the identity of every account holder before permitting real-money play or processing withdrawals. KYC verification requires collection of:

• Scanned or photographed copy of a valid Philippine government-issued ID (National ID, Driver's License, Passport, or UMID);
• Proof of address document (utility bill, bank statement, or government correspondence dated within the last three months);
• Selfie photograph holding your government ID (for identity authentication);
• In certain cases, additional documentation verifying source of funds or source of wealth may be requested in compliance with enhanced due diligence (EDD) requirements under AMLA.

3.3 Financial & Transaction Information

ph8a1 collects and processes financial data necessary to facilitate deposits, withdrawals, and account management:

• Deposit method details (GCash number, Maya account, bank account number, cryptocurrency wallet address);
• Withdrawal destination details (must match your verified identity as required by PAGCOR);
• Transaction history (deposits, withdrawals, wagers, wins, losses, and bonus activity);
• Payment processor transaction IDs and timestamps;
• Currency and amounts for all financial transactions.

3.4 Gaming Activity Data

To provide gaming services, ensure fairness, detect abuse, and comply with PAGCOR reporting requirements, ph8a1 automatically logs:

• Game sessions (game title, session ID, start and end times, wager amounts, results);
• Sports betting activity (events, selections, stake amounts, odds, outcomes);
• Bonus claims, wagering progress, and bonus history;
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods activated).

3.5 Technical & Device Information

ph8a1's systems automatically collect technical data when you access the Platform:

• IP address and geolocation data (used to verify Philippine jurisdiction access as required by PAGCOR license);
• Device type, operating system, browser type and version;
• Session timestamps, page views, and navigation paths within the Platform;
• Cookies and similar tracking technologies (see Section 9 for full details).

3.6 Communications Data

ph8a1 retains records of communications between you and ph8a1 support staff, including:

• Live chat transcripts;
• Email correspondence;
• SMS OTP authentication logs;
• Formal complaints and dispute resolution records.

ph8a1 processes your personal data for specific, legitimate purposes consistent with the Data Privacy Act's principles of transparency, legitimate purpose, and proportionality. Your personal data is used for the following purposes:

4.1 Account Creation & Management

To create, maintain, and administer your ph8a1 account; authenticate your identity at login; and provide you with access to your account dashboard, transaction history, and settings.

4.2 PAGCOR Regulatory Compliance

To verify that you are 21 years of age or older and a Philippine resident or physically present in the Philippines, as required by ph8a1's PAGCOR license; to conduct KYC verification procedures mandated by PAGCOR; and to maintain records for periodic regulatory audits.

4.3 Anti-Money Laundering (AML) & Fraud Prevention

To comply with customer due diligence (CDD) and enhanced due diligence (EDD) obligations under the Philippine Anti-Money Laundering Act; to detect and prevent fraudulent activity, including identity theft, payment fraud, bonus abuse, and account hacking; and to monitor transactions for suspicious patterns that may trigger mandatory reporting obligations to the Anti-Money Laundering Council (AML C).

4.4 Payment Processing

To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, USDT, and Coins.ph; to verify that payment methods are registered in your verified name; and to maintain transaction records as required by Philippine financial regulations.

4.5 Gaming Services & Fairness

To deliver casino games, sports betting, bingo, and other gaming products; to detect and investigate cheating, collusion, and exploitation of technical vulnerabilities; and to resolve disputes relating to game outcomes.

4.6 Responsible Gaming

To provide and enforce responsible gaming tools including deposit limits, loss limits, session limits, and self-exclusion; to identify players showing patterns of potentially harmful gambling behavior; and to comply with PAGCOR's responsible gaming program requirements.

4.7 Customer Support

To respond to your support requests, complaints, and inquiries; to maintain support records for quality assurance and dispute resolution purposes; and to improve support service quality.

4.8 Marketing Communications

With your prior consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw consent to marketing communications at any time by updating your notification preferences in Account Settings or by contacting ph8a1 support. Withdrawal of marketing consent does not affect your account access or any other aspect of the Platform's services.

ph8a1 does not sell, rent, or trade your personal data to third parties for commercial purposes. Your personal data may be shared with third parties only in the following circumstances:

All third-party service providers that process personal data on behalf of ph8a1 are engaged under written data processing agreements that require them to maintain confidentiality, implement appropriate security measures, and process data only for the specified purpose. ph8a1 does not transfer personal data outside the Philippines except where required by PAGCOR regulatory obligations or with your explicit prior consent.

ph8a1 implements technical and organizational security measures appropriate to the sensitivity of the personal data processed. These measures include:

• Encryption in Transit: All data transmitted between your device and ph8a1's servers is encrypted using TLS 1.2 or higher. The Platform is accessible only via HTTPS;
• Encryption at Rest: Sensitive personal data, including identity documents and financial information, is encrypted at rest using AES-256 encryption;
• Password Security: Account passwords are stored using industry-standard one-way hashing with salting (bcrypt). Plain-text passwords are never stored or transmitted;
• Access Controls: Access to personal data by ph8a1 staff is strictly limited on a need-to-know basis, enforced through role-based access control (RBAC) and logged for audit purposes;
• Two-Factor Authentication: SMS OTP two-factor authentication is available for all ph8a1 accounts and is strongly recommended;
• Penetration Testing: ph8a1's infrastructure undergoes periodic security assessments and penetration testing by qualified cybersecurity professionals;
• Data Breach Response: ph8a1 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to adversely affect your rights, ph8a1 will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the Data Privacy Act's IRR.

ph8a1 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory requirements. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification, in accordance with ph8a1's data disposal procedures. Certain data may be retained for longer periods where required by a valid court order, ongoing regulatory investigation, or unresolved dispute.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph8a1. ph8a1 commits to responding to all rights requests within 30 calendar days of receipt, or within such extended period as permitted by applicable law where the request is complex or voluminous.

• Right to be Informed: The right to know whether ph8a1 holds personal data about you, and to receive clear information about how it is collected, used, and shared. This Privacy Policy fulfils ph8a1's obligation to inform;
• Right to Access: The right to request a copy of the personal data ph8a1 holds about you, including your account information, KYC records, transaction history, and gaming logs;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update certain account information directly in your Account Settings; other corrections may require support assistance;
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the original purpose, where you withdraw consent, or where processing is unlawful — subject to ph8a1's legal retention obligations under PAGCOR and AMLA requirements, which may require retention for specified periods notwithstanding an erasure request;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that ph8a1 transmit that data to another controller where technically feasible;
• Right to Object: The right to object to processing of your personal data for direct marketing purposes. Upon receipt of a valid objection to marketing, ph8a1 will cease processing your data for that purpose within 5 business days;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph8a1 has violated your rights under the Data Privacy Act. Contact information for the National Privacy Commission is available on the NPC's official government website.

To exercise any of the above rights, submit a written request to ph8a1's Data Protection Officer at the contact details provided in Section 12. ph8a1 may request identity verification before processing rights requests to prevent unauthorized access to personal data.

ph8a1 uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain session security, analyze usage patterns, and — with your consent — personalize your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies maintain your login session, store authentication tokens, enforce security controls, and remember your language and display preferences. These cookies cannot be disabled without impairing Platform functionality and do not require your consent under the Data Privacy Act's legitimate interests basis;
• Analytical/Performance Cookies: Collect anonymized data about how visitors navigate the Platform — which pages are accessed most frequently, where users encounter errors, and how sessions flow. This data is used to improve Platform performance and user experience. These cookies require your consent;
• Functional Cookies: Remember your preferences and settings to provide a more personalized experience, such as your preferred game category, table stake levels, or notification settings. These cookies require your consent;
• Security & Fraud Detection Cookies: Support ph8a1's fraud detection systems by identifying unusual access patterns, detecting unauthorized login attempts, and flagging suspicious behavioral signals. These cookies are strictly necessary for security purposes.

ph8a1 does not use cookies for cross-site advertising or retargeting. ph8a1 does not share cookie data with advertising networks or social media platforms. You may manage cookie preferences through your browser settings or through ph8a1's cookie preference center accessible via the cookie banner on first visit.

The ph8a1 Platform is strictly restricted to individuals 21 years of age and older, as required by PAGCOR. ph8a1 does not knowingly collect personal data from individuals under the age of 21.

ph8a1 implements mandatory age verification procedures for all new accounts, requiring submission of a valid Philippine government-issued ID. Accounts that cannot be verified as 21+ are suspended and any deposited funds are returned prior to any real-money play.

If ph8a1 becomes aware that personal data has been collected from an individual under 21 years of age, that data will be immediately deleted and the account closed. If you believe that a minor has accessed or registered on the Platform using false information, please contact ph8a1's Data Protection Officer immediately using the contact details in Section 12.

ph8a1 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, or ph8a1's data processing practices. Material changes — those that significantly affect your rights or how your personal data is used — will be communicated to you via registered email and via a notification on the Platform at least seven (7) days before taking effect.

Non-material updates, such as clarifications, corrections of typographical errors, or formatting changes that do not affect the substance of the Policy, may take effect immediately. The "Last Updated" date at the top of this Policy will reflect the most recent revision.

Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree to an update, you must stop using the Platform and may request account closure and data deletion subject to applicable retention obligations.

For all privacy-related inquiries, rights requests, data breach concerns, or complaints, please contact ph8a1's designated Data Protection Officer:

• Platform: ph8a1.cam
• Email: [email protected] (subject line: "Data Privacy Request – [Your Full Name]")
• Response Commitment: Acknowledgement within 72 hours; substantive response within 30 calendar days
• Regulator: National Privacy Commission of the Philippines (for complaints and regulatory escalation)
• Gaming Regulator: Philippine Amusement and Gaming Corporation (PAGCOR), for gaming-related data processing concerns

This Privacy Policy was last reviewed and updated on 1 January 2026. In the event of any conflict between this English version and any translated version, the English text shall prevail.