ph497 Privacy Policy

1. Introduction and Identity of the Data Controller

ph497 is the data controller responsible for personal data collected through ph497.org and any associated mobile-compatible interfaces. ph497 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the data protection requirements applicable to PAGCOR-licensed online gaming operators in the Philippines.

ph497 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with the Data Privacy Act of 2012. Contact details for the DPO are provided in Section 13 of this Policy.

2. Categories of Personal Data We Collect

ph497 collects the following categories of personal data from players and platform users:

• Identity Data: Full legal name as it appears on a government-issued Philippine ID, date of birth, nationality, and gender.
• Contact Data: Philippine mobile number, email address, and residential address.
• Verification Data: Copies of government-issued identification documents submitted for KYC purposes (e.g., Philippine passport, SSS ID, driver's license, PhilHealth ID, PRC ID), and selfie photographs where required for identity verification.
• Financial Data: GCash account reference numbers, PayMaya account identifiers, bank account details (BPI, BDO, Metrobank), and transaction history including deposits, withdrawals, and bonus activity.
• Gaming Data: Betting and gameplay records, game history, win/loss records, session durations, and responsible gaming tool usage.
• Technical Data: IP addresses, browser type and version, operating system, device identifiers, and log data generated by your use of ph497.org.
• Communications Data: Records of your communications with ph497 support, including live chat transcripts and email correspondence.
• Preference Data: Language preferences, marketing communication preferences, and responsible gaming settings.

ph497 does not knowingly collect sensitive personal information beyond what is strictly necessary for KYC compliance and PAGCOR regulatory obligations. Where sensitive information is collected, ph497 applies enhanced security and access controls in accordance with the Data Privacy Act's heightened protection requirements for sensitive personal information.

3. How We Collect Your Personal Data

ph497 collects personal data through the following channels:

• Direct collection: Information you provide during account registration, KYC verification, deposit and withdrawal requests, support interactions, and promotion participation on ph497.
• Automated collection: Technical and usage data collected automatically when you access ph497.org, including through cookies, web beacons, and server log files.
• Third-party sources: Identity verification data from licensed KYC service providers, payment confirmation data from GCash, PayMaya, and partner banks, and fraud prevention data from authorized third-party screening services where ph497 has a legitimate interest or legal obligation to conduct such screening.

4. Purposes of Processing

ph497 processes your personal data for the following purposes:

• To create, verify, and manage your ph497 account, including KYC identity verification as required by PAGCOR.
• To process deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment channels.
• To operate and deliver ph497's casino, sports betting, slots, and bingo services.
• To administer bonuses, promotions, and the ph497 loyalty program.
• To comply with ph497's legal obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160, as amended), the Data Privacy Act (RA 10173), and other applicable Philippine law.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities on ph497.
• To provide customer support and resolve disputes.
• To enforce ph497's Terms & Conditions and responsible gaming policies.
• To send you service-related communications, including account notifications and security alerts.
• To send you marketing communications about ph497 promotions and new features, where you have provided consent or where ph497 has a legitimate interest to do so, and subject always to your right to opt out.
• To analyze platform usage and improve ph497's services, security, and user experience.

5. Legal Bases for Processing

ph497 processes personal data on the following legal bases as provided under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between ph497 and you as a registered player, including account management, game delivery, and payment processing.
• Legal obligation: Processing required for ph497 to comply with PAGCOR licensing conditions, AML obligations, tax reporting requirements, and other applicable Philippine statutory requirements.
• Legitimate interests: Processing necessary for ph497's legitimate business interests, including fraud prevention, security monitoring, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain optional features, where ph497 relies on your freely given, specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

ph497 does not sell your personal data. ph497 shares personal data only in the following circumstances:

• Licensed game providers: ph497's live dealer and slot game providers may receive gameplay session data necessary to operate the games. All game providers are contractually bound to process data only for game delivery purposes and in accordance with data protection standards consistent with Philippine law.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment partners receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification services: Licensed third-party KYC providers may process your identity documents for verification purposes under data processing agreements with ph497.
• Regulatory authorities: ph497 discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities when required by law or by a valid regulatory or judicial order.
• Fraud and AML screening: ph497 may share data with authorized fraud prevention and AML screening partners where there is a legitimate interest or legal obligation to conduct such screening.

Where ph497 engages third-party processors, ph497 ensures that appropriate data processing agreements are in place that require processors to maintain security standards consistent with the Data Privacy Act of 2012.

7. Data Retention

ph497 retains personal data for as long as your account is active and for a period thereafter as required by applicable law. Specifically:

• KYC and identity verification records are retained for a minimum of five (5) years from account closure, as required under PAGCOR licensing conditions and AML regulations.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, consistent with AML record-keeping requirements.
• Gaming and betting records are retained for a minimum of three (3) years from the date of each transaction.
• Support communications are retained for three (3) years from the date of the communication.
• Technical and log data is retained for twelve (12) months, unless required for longer periods for security investigation purposes.

Upon expiry of applicable retention periods, ph497 securely deletes or anonymizes personal data in accordance with the Data Privacy Act's disposal requirements.

8. Cookies and Tracking Technologies

ph497.org uses cookies and similar tracking technologies to operate the platform, maintain user sessions, remember your preferences, and analyze platform usage. The following categories of cookies are used on ph497:

• Strictly necessary cookies: Required for the ph497 platform to function. These cannot be disabled without impairing core functionality, including secure login session management.
• Performance and analytics cookies: Used to understand how players interact with ph497.org, including which games are most visited and how users navigate between pages. This data is used in aggregate, anonymized form to improve ph497's services.
• Functionality cookies: Used to remember your language preferences, responsible gaming settings, and display preferences across sessions.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing ph497's core gaming services, but may affect the functionality of certain preference-based features.

9. Security Measures

ph497 implements technical and organizational security measures proportionate to the risk of processing, including:

• SSL/TLS encryption on all ph497.org pages, including login, deposit, and withdrawal pages.
• OTP-based two-factor authentication available to all ph497 account holders via their registered Philippine mobile number.
• Role-based access controls limiting internal access to personal data to authorized ph497 personnel who require it for legitimate operational purposes.
• Regular security assessments and penetration testing of the ph497 platform.
• Encrypted storage of passwords and sensitive authentication credentials.
• Incident response procedures in accordance with the Data Privacy Act's 72-hour breach notification requirement to the National Privacy Commission.

Despite these measures, no online platform can guarantee absolute security. ph497 encourages all players to use strong, unique passwords for their ph497 accounts and to enable two-factor authentication.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph497:

• Right to be informed: The right to be notified that your personal data is being collected and processed, and the purposes for which it is used.
• Right of access: The right to obtain a copy of the personal data ph497 holds about you, along with information about how it is being processed.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph497's legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to object: The right to object to processing of your personal data for direct marketing purposes, or where processing is based on ph497's legitimate interests.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph497 has processed your data in violation of the Data Privacy Act.

To exercise any of these rights, contact ph497's Data Protection Officer as described in Section 13. ph497 will respond to data subject requests within thirty (30) days of receipt, consistent with the Data Privacy Act's requirements.

11. Minors

ph497 does not knowingly collect personal data from persons under 21 years of age. ph497 is strictly an adult platform subject to the 21+ age requirement under PAGCOR regulations. If ph497 becomes aware that personal data has been collected from a person under 21, ph497 will take immediate steps to delete that data and suspend the relevant account. If you believe a minor has registered on ph497, please contact ph497 support immediately.

12. Amendments to This Policy

ph497 may update this Privacy Policy from time to time to reflect changes in ph497's practices, applicable Philippine law, or PAGCOR regulatory requirements. Where changes are material, ph497 will notify registered players via in-platform notification or by email to their registered address. The date of the most recent update is displayed at the top of this Policy. Continued use of ph497 following the effective date of an updated Policy constitutes your acceptance of the revised terms.

13. Contact and Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or ph497's processing of your personal data, please contact ph497's Data Protection Officer:

If your concern is not resolved to your satisfaction by ph497's DPO, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, located at 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila.