1. Introduction and Scope
This Privacy Policy applies to all personal data collected by ph2com Gaming Corporation ("ph2com," "we," "us," or "our") through the ph2com website (ph2com.cam), mobile applications, customer support channels, and any other services we provide (collectively, the "Platform"). By creating a ph2com account, using our services, or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.
ph2com operates in strict compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all issuances of the National Privacy Commission. We are committed to implementing appropriate technical, organizational, and physical security measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage.
2. Personal Data We Collect
2.1 Information You Provide Directly
When you register for a ph2com account, we collect the following personal information:
- Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification documents (e.g., Philippine passport, driver's license, UMID, SSS ID, postal ID) for identity verification and age confirmation purposes.
- Contact Information: Email address, mobile phone number, and residential address within the Philippines.
- Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account protection.
- Financial Information: Payment method details including GCash mobile number, PayMaya account number, bank account numbers, and transaction history related to deposits and withdrawals.
- Communication Records: Live chat transcripts, email correspondence, phone call recordings (with notice), and any other communications between you and ph2com customer support.
2.2 Information Collected Automatically
When you access and use the ph2com Platform, we automatically collect certain technical and usage data:
- Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID), and mobile network information.
- Usage Data: Pages visited, games played, betting patterns, deposit and withdrawal history, login times, session duration, clickstream data, and other interactions with the Platform.
- Location Data: IP address, geolocation data derived from GPS or Wi-Fi positioning to verify you are physically located in the Philippines when accessing our services, as required by PAGCOR regulations.
- Cookies and Tracking Technologies: Cookies, web beacons, pixels, and similar technologies to remember your preferences, analyze Platform usage, prevent fraud, and improve user experience. You can manage cookie preferences through your browser settings.
2.3 Information from Third Parties
We may receive personal data about you from third-party sources including:
- Payment Processors: GCash, PayMaya, banks, and other financial institutions process your payment transactions and may share transaction status, verification results, and fraud detection data with us.
- Identity Verification Services: We use third-party identity verification and anti-fraud services to confirm your identity, verify your age, and detect fraudulent account creation or suspicious activities.
- Gaming Software Providers: Our casino game providers (Pragmatic Play, Evolution Gaming, PG Soft, etc.) share gameplay data, betting records, and game outcomes necessary for account management and dispute resolution.
- Marketing Partners: If you discover ph2com through an affiliate or marketing partner, we may receive referral information and campaign tracking data.
3. How We Use Your Personal Data
3.1 Lawful Bases for Processing
We process your personal data only when we have a lawful basis under the Data Privacy Act. Our lawful bases include:
- Contractual Necessity: Processing necessary to perform our contract with you, including account creation, processing deposits and withdrawals, providing gaming services, and fulfilling our Terms and Conditions.
- Legal Obligations: Processing required to comply with Philippine laws and regulations, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, Know Your Customer (KYC) procedures, age verification mandates, and tax reporting requirements.
- Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, security monitoring, platform improvement, customer support, and marketing communications (where you have not opted out).
- Consent: Processing based on your explicit consent, which you may withdraw at any time by contacting our Data Protection Officer.
3.2 Specific Purposes of Data Processing
We use your personal data for the following specific purposes:
- Account Management: Creating and maintaining your ph2com account, authenticating your identity, securing your account against unauthorized access, and providing personalized account features.
- Service Provision: Enabling you to play casino games, place sports bets, participate in tournaments and promotions, and access all Platform features.
- Transaction Processing: Processing deposits, withdrawals, bonus credits, winnings payouts, and maintaining accurate financial records of all transactions.
- Identity Verification and Compliance: Verifying you are at least 21 years old, confirming your identity to prevent account fraud, complying with PAGCOR regulations, and fulfilling Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT) obligations.
- Security and Fraud Prevention: Detecting and preventing fraud, money laundering, bonus abuse, multi-accounting, collusion, and other prohibited activities through sophisticated monitoring systems.
- Customer Support: Responding to your inquiries, resolving disputes, investigating complaints, and providing technical assistance.
- Marketing and Communications: Sending promotional offers, bonus notifications, product updates, and other marketing communications (where you have consented or not opted out). You may unsubscribe from marketing emails at any time.
- Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviors, enforcing deposit limits and self-exclusion requests, and providing responsible gaming resources.
- Platform Improvement: Analyzing usage patterns, conducting market research, testing new features, optimizing user experience, and developing new products and services.
- Legal and Regulatory Compliance: Responding to legal requests, court orders, and regulatory inquiries; enforcing our Terms and Conditions; protecting our legal rights; and complying with all applicable Philippine laws.
4. Data Sharing and Disclosure
4.1 Third-Party Service Providers
We share your personal data with trusted third-party service providers who assist us in operating the Platform and providing our services. These providers are contractually obligated to protect your data and use it only for specified purposes:
- Payment Processors: GCash, PayMaya, banks, and payment gateways process your financial transactions securely.
- Gaming Software Providers: Pragmatic Play, Evolution Gaming, PG Soft, JILI Games, and other game providers deliver casino games and sports betting functionality.
- Identity Verification Services: Third-party KYC and AML compliance providers verify your identity and screen for fraud.
- Cloud Hosting Providers: Secure data centers and cloud platforms host our servers and store data with encryption and access controls.
- Customer Support Tools: Live chat software, email platforms, and CRM systems enable efficient customer service.
- Marketing and Analytics Services: Analytics platforms, email marketing tools, and advertising networks help us understand user behavior and deliver relevant promotions.
4.2 Legal and Regulatory Disclosures
We may disclose your personal data when required or permitted by law:
- To PAGCOR and other Philippine regulatory authorities for licensing, compliance audits, and regulatory investigations.
- To law enforcement agencies, courts, and government bodies in response to valid legal requests, subpoenas, court orders, or legal processes.
- To the Anti-Money Laundering Council (AMLC) when required under AMLA reporting obligations.
- To tax authorities for compliance with Philippine tax laws and reporting requirements.
- To protect ph2com's legal rights, enforce our Terms and Conditions, investigate fraud or security incidents, or defend against legal claims.
4.3 Business Transfers
In the event of a merger, acquisition, corporate reorganization, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring or successor entity. We will notify you via email and prominent Platform notice before your data is transferred and becomes subject to a different privacy policy.
4.4 No Sale of Personal Data
ph2com does not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is shared only as described in this Privacy Policy and with your consent where required.
5. Data Security Measures
ph2com employs industry-leading technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:
- Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data at rest (including passwords and financial information) is encrypted using AES-256 encryption.
- Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data on a need-to-know basis. Multi-factor authentication is required for administrative access.
- Network Security: Firewalls, intrusion detection systems, DDoS protection, and continuous security monitoring protect our infrastructure.
- Regular Security Audits: Independent security firms conduct regular penetration testing, vulnerability assessments, and security audits.
- Employee Training: All ph2com employees receive mandat
ory data privacy training and follow strict data handling protocols.
- Secure Data Centers: Your data is stored in enterprise-grade data centers with physical security controls, redundant power supplies, and environmental monitoring.
- Incident Response: We maintain a comprehensive incident response plan and will notify you and the National Privacy Commission of any data breaches that pose a risk to your rights and freedoms, as required by law.
While we implement robust security measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us of any unauthorized account access.
6. Data Retention and Deletion
ph2com retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
6.1 Active Account Data
Personal data associated with active ph2com accounts is retained for the duration of your account relationship with us. This includes identity information, contact details, transaction history, gameplay records, and communications.
6.2 Closed Account Data
When you close your ph2com account, we retain certain personal data for the following minimum periods to comply with legal and regulatory requirements:
- Identity and KYC Records: Retained for seven (7) years after account closure per AMLA requirements and PAGCOR regulations.
- Financial Transaction Records: Retained for ten (10) years after the transaction date per Philippine Bureau of Internal Revenue (BIR) record-keeping requirements.
- Dispute and Complaint Records: Retained for six (6) years after resolution to defend against potential legal claims under Philippine prescriptive periods.
- Marketing and Analytics Data: Anonymized or deleted within ninety (90) days of account closure unless you have provided separate consent for ongoing marketing communications.
6.3 Automated Deletion
After the applicable retention period expires, your personal data is securely and permanently deleted from our active systems. Backup copies stored for disaster recovery purposes are deleted according to our backup retention schedule (typically within one year).
7. Your Rights Under the Data Privacy Act
Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data. To exercise any of these rights, contact our Data Protection Officer at [email protected]:
7.1 Right to Access
You have the right to obtain confirmation of whether ph2com processes your personal data and to access that data. You may request a copy of your personal data in a commonly used electronic format.
7.2 Right to Rectification
You have the right to correct inaccurate or incomplete personal data. You can update most account information directly through your account settings, or contact customer support for assistance.
7.3 Right to Erasure ("Right to be Forgotten")
You may request deletion of your personal data when: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent (where processing was based on consent); (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. This right is subject to legal retention obligations as described in Section 6.
7.4 Right to Object
You have the right to object to processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting customer support.
7.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.
7.6 Right to Lodge a Complaint
If you believe ph2com has violated your data privacy rights, you may file a complaint with our Data Protection Officer. If you are dissatisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
7.7 Response Timeline
We will respond to your data rights requests within fifteen (15) calendar days of receipt. If we require additional time due to the complexity or volume of requests, we will notify you and may extend the response period by an additional fifteen (15) days.
8. Cookies and Tracking Technologies
ph2com uses cookies, web beacons, pixels, and similar technologies to enhance your experience, analyze Platform usage, prevent fraud, and deliver personalized content.
8.1 Types of Cookies We Use
- Essential Cookies: Required for basic Platform functionality including authentication, security, and session management. These cannot be disabled.
- Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with the Platform and identify technical issues.
- Functionality Cookies: Remember your preferences (language, region, display settings) to provide a personalized experience.
- Marketing Cookies: Track your browsing across websites to deliver targeted advertising and measure campaign effectiveness.
8.2 Managing Cookies
Most browsers allow you to control cookies through settings. You can block or delete cookies, but this may affect Platform functionality. Blocking essential cookies will prevent you from using certain features or logging into your account.
9. International Data Transfers
Your personal data is primarily processed and stored within the Philippines. However, some of our third-party service providers (cloud hosting, gaming software providers, payment processors) may process data in jurisdictions outside the Philippines, including Singapore, Europe, and the United States.
When we transfer personal data internationally, we ensure appropriate safeguards are in place including: (a) transferring data only to jurisdictions recognized by the National Privacy Commission as providing adequate data protection; (b) implementing Standard Contractual Clauses approved by the NPC; or (c) obtaining your explicit consent for the transfer.
10. Children's Privacy
The ph2com Platform is intended exclusively for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover that we have inadvertently collected personal data from a minor, we will immediately delete that information and close the associated account. If you believe a minor has provided personal data to ph2com, please contact our Data Protection Officer immediately.
11. Changes to This Privacy Policy
ph2com reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email to your registered email address and through prominent notice on the Platform at least thirty (30) days before the changes take effect.
Your continued use of the Platform after the effective date of any Privacy Policy changes constitutes acceptance of the revised policy. If you do not agree with the updated Privacy Policy, you must immediately cease using the Platform and may close your account by contacting customer support.
The "Effective Date" at the top of this Privacy Policy indicates when it was last updated. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
12. Contact Information
For questions, concerns, or requests regarding this Privacy Policy or ph2com's data protection practices, please contact:
Data Protection Officer
ph2com Gaming Corporation
Email: [email protected]
General Customer Support: [email protected]
Live Chat: Available 24/7 on ph2com.cam
National Privacy Commission (for complaints)
Website: privacy.gov.ph
Email: [email protected]
Hotline: 1-888-NPC-ISPRO (672-4776)