Privacy Policy

This Privacy Policy ("Policy") describes how ph26 ("ph26," "we," "us," "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," "Player," "User") who access or use the ph26 online gaming platform, including the website at ph26.app and the ph26 mobile application (collectively, the "Platform").

ph26 is committed to protecting the privacy and personal data of all its users in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as any other applicable data protection laws and regulations in the Philippines.

By registering an account on ph26, accessing the Platform, or otherwise providing your personal data to ph26, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the ph26 Platform.

This Policy should be read alongside the ph26 Terms & Conditions, which govern your use of the Platform and are incorporated herein by reference.

For the purposes of the Philippine Data Privacy Act of 2012, ph26 acts as the Personal Information Controller in respect of the personal data collected through the Platform. ph26 determines the purposes and means of processing your personal data.

ph26 has designated a Data Protection Officer (DPO) responsible for over seeing compliance with this Policy and applicable data protection laws. You may contact the ph26 DPO using the details provided in Section 14 of this Policy.

ph26 collects the following categories of personal data:

ph26 does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive personal information is collected (such as government ID numbers), it is handled with the heightened protections required under the Data Privacy Act.

ph26 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from payment processors (GCash, Maya, banks).
• Publicly available sources: Information from public records or databases used for fraud prevention and regulatory compliance purposes.

ph26 uses your personal data for the following purposes:

• Account management: Creating and maintaining your ph26 player account, authenticating your identity at login, and managing your account preferences.
• Identity verification (KYC): Verifying your identity and age (21+) in compliance with Philippine gaming regulations and anti-money laundering requirements.
• Payment processing: Processing deposits and withdrawals via your chosen payment method (GCash, Maya, bank transfer, or debit card).
• Platform operation: Delivering games, processing wagers, calculating and crediting winnings, and managing bonuses and promotions.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Regulatory compliance: Meeting ph26's obligations under Philippine gaming regulations, AML laws, and the Data Privacy Act, including reporting obligations to PAGCOR and other authorities.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and administering responsible gaming tools such as deposit limits and self-exclusion.
• Marketing communications: Sending you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may opt out at any time.
• Platform improvement: Analysing usage data to improve the ph26 Platform, fix bugs, and develop new features.

ph26 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications.
• Contractual necessity: Where processing is necessary to perform the contract between you and ph26 — specifically, to operate your player account, process transactions, and deliver gaming services.
• Legal obligation: Where processing is required to comply with ph26's legal obligations under Philippine law, including KYC/AML requirements, gaming regulations, and tax reporting obligations.
• Legitimate interests: Where processing is necessary for ph26's legitimate interests, such as fraud prevention, platform security, and improving the Platform, provided those interests are not overridden by your rights and interests.

ph26 does not sell, rent, or trade your personal data. ph26 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• KYC and identity verification providers: Third-party services that assist ph26 in verifying player identities and ages in compliance with regulatory requirements.
• Payment processors: GCash, Maya, and banking partners that process your deposits and withdrawals. These providers process your financial data under their own privacy policies and applicable regulations.
• Fraud prevention and AML compliance partners: Services that assist ph26 in detecting and preventing fraudulent activity and money laundering.
• IT and platform service providers: Cloud hosting, data storage, and software providers that support the operation of the ph26 Platform. These providers are bound by data processing agreements and may only process your data on ph26's instructions.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government authorities where disclosure is required by law or regulation.
• Professional advisers: Lawyers, auditors, and accountants where necessary for ph26's legal and compliance obligations, subject to professional confidentiality obligations.

ph26 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain your session, and collect usage data. The types of cookies ph26 uses include:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: Remember your preferences (such as language settings and game preferences) to personalise your experience.
• Analytics cookies: Collect anonymised data about how players use the Platform, which pages are visited most, and where errors occur. This data helps ph26 improve the Platform.
• Marketing cookies: Used to deliver relevant promotional content to you on the ph26 Platform. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ph26 Platform. For strictly necessary cookies, no consent is required as they are essential to Platform operation.

ph26 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

After the applicable retention period, ph26 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

ph26 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and ph26 servers
• Encryption at rest for sensitive personal and financial data stored on ph26 servers
• Access controls limiting access to personal data to authorised ph26 personnel on a need-to-know basis
• Multi-factor authentication for internal systems accessing personal data
• Regular security audits and penetration testing of the ph26 Platform
• Incident response procedures for detecting, reporting, and responding to personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph26 will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act and NPC Circular No. 16-03.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph26:

• Right to be informed: The right to be informed of how your personal data is being collected and processed — which this Policy fulfils.
• Right of access: The right to request a copy of the personal data ph26 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your ph26 account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph26's legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to ph26's overriding legal obligations.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph26 has violated your data privacy rights.

To exercise any of these rights, please contact the ph26 Data Protection Officer using the details in Section 14. ph26 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. ph26 may request proof of identity before processing your request.

The ph26 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. ph26 does not knowingly collect personal data from individuals under the age of 21.

If ph26 becomes aware that personal data has been collected from a person under 21 years of age, ph26 will take immediate steps to delete that data and close the associated account. Any deposits made by an underage user will be returned to the original payment source.

If you are a parent or guardian and believe that your child has provided personal data to ph26, please contact ph26 support immediately using the details in Section 14.

ph26 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The most current version of this Policy will always be available at ph26.app/privacy-policy. The date of the most recent update is displayed at the top of this page.

Where changes to this Policy are material — meaning they significantly affect how ph26 processes your personal data or your rights as a data subject — ph26 will provide advance notice via email to your registered address or via an in-platform notification, and will seek fresh consent where required by law.

Your continued use of the ph26 Platform following the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not agree with any changes, you must stop using the Platform and may request account closure in accordance with the ph26 Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or ph26's handling of your personal data, please contact the ph26 Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe ph26 has not handled your personal data in accordance with the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available on the NPC's official website.