ph585 Privacy
Policy

ph585 ("ph585", "we", "us", "our") is committed to protecting the privacy and personal data of every Filipino player who uses the ph585 online gaming platform available at https://ph585.net and all associated services, mobile features, and applications (collectively, the "Platform"). This Privacy Policy ("Policy") describes in full and transparent detail how ph585 collects, uses, stores, shares, and protects your personal information.

This Policy is issued pursuant to and in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC") of the Philippines. Where applicable, this Policy also reflects requirements under PAGCOR's licensing conditions regarding player data protection.

By registering a ph585 account, making a deposit, accessing the Platform, or otherwise interacting with ph585 in any capacity, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the ph585 Platform immediately.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, ph585 acts as the personal information controller ("PIC") in respect of all personal data collected from users of the ph585 Platform. As the PIC, ph585 determines the purposes for which, and the manner in which, personal data is processed.

ph585 has designated a Data Protection Officer ("DPO") who is responsible for overseeing the implementation of this Privacy Policy, monitoring compliance with the DPA, and serving as the primary point of contact for data subjects wishing to exercise their rights. Contact details for the DPO are set out in Section 14 of this Policy.

ph585 collects personal data from you through several means — directly when you register and interact with the Platform, automatically through your use of the Platform, and from third parties such as KYC verification services and payment processors. The categories of personal data we collect are set out below.

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued Philippine ID.
• Date of birth — used to verify that you meet the 21+ age requirement for online gambling in the Philippines.
• Residential address in the Philippines, including barangay, city or municipality, and province.
• Email address — used for account communications, bonus notifications, and support correspondence.
• Mobile number — used for SMS two-factor authentication and account security alerts.
• Username and encrypted password hash — ph585 never stores your password in plain text.

3.2 KYC and Verification Data

• Scanned or photographed copies of Philippine government-issued photo IDs — passport, driver's license, UMID, PhilSys national ID, SSS card, or PRC ID.
• Proof of address documents such as utility bills, bank statements, or official government correspondence.
• Selfie photographs submitted for facial verification purposes during KYC review.
• Payment method verification documents confirming ownership of GCash, Maya, BPI, BDO, or other payment accounts used for deposits and withdrawals.

3.3 Financial and Transaction Data

• Deposit and withdrawal history, amounts, timestamps, and payment method references (e.g., GCash reference numbers, bank transaction IDs).
• Game play history, bet amounts, game outcomes, win and loss records, and session durations — retained for regulatory compliance and responsible gaming monitoring.
• Bonus claims, wagering activity, and promotional participation records.

3.4 Technical and Usage Data

3.5 Communications Data

When you contact ph585 support via Live Chat, email, or any other channel, ph585 retains records of those communications — including the content of messages, timestamps, and resolution notes — to ensure quality of service, resolve disputes, and maintain regulatory compliance records.

ph585 uses the personal data it collects for the specific, legitimate purposes described below. We do not use your data for any purpose that is incompatible with the original purpose of collection without first obtaining your separate consent.

• Account Management: To create, verify, maintain, and administer your ph585 account, including processing login requests, password resets, and account security alerts.
• KYC and Age Verification: To verify your identity and confirm that you are at least 21 years of age and legally eligible to use the ph585 Platform in compliance with PAGCOR requirements and the DPA.
• Payment Processing: To process deposits, withdrawals, and refunds in Philippine Peso via GCash, Maya, BPI, BDO, and other accepted payment channels, and to maintain accurate financial records.
• Regulatory Compliance: To fulfill ph585's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the DPA, and other applicable Philippine laws.
• Fraud and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, collusion, and other prohibited conduct.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling and to administer deposit limits, loss limits, cool-off periods, and self-exclusion requests at your direction.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain service quality records in our Live Chat and email support systems.
• Personalization and Promotions: To tailor bonus offers, game recommendations, and promotional communications to your profile — but only where you have not opted out of marketing communications.
• Platform Improvement: To analyze usage data and player behavior in aggregate (anonymized form) to improve the performance, reliability, and features of the ph585 Platform.

Under the Data Privacy Act of 2012, ph585 relies on one or more of the following lawful bases for processing your personal data, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary for the performance of the agreement between you and ph585 as set out in the ph585 Terms and Conditions — for example, processing deposits, verifying your identity, and paying out winnings.
• Legal Obligation: Processing is necessary for ph585 to comply with a legal obligation — for example, KYC verification under AMLA, record-keeping under PAGCOR licensing conditions, and data breach notification under NPC Circular 16-03.
• Consent: Where ph585 relies on your consent as the lawful basis — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect your ability to continue using the ph585 Platform.
• Legitimate Interests: Processing is necessary for ph585's legitimate interests — such as fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.

ph585 does not sell your personal data. We share your personal data only in the specific, limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Trusted Service Providers

ph585 engages third-party service providers who process personal data on our behalf as personal information processors. These include:

• KYC / Identity Verification Providers: To verify identity documents and confirm eligibility as required by PAGCOR and AMLA compliance obligations.
• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, Coins.ph, and cryptocurrency payment gateways — strictly to process your transactions in Philippine Peso and to comply with payment network requirements.
• Game Providers and Studios: Game software providers may receive your player ID and session data necessary to deliver the game experience. They do not receive your full identity or financial data.
• Customer Support Platforms: Third-party Live Chat and ticketing software providers used to deliver ph585 customer support services.
• Analytics Providers: Anonymized, aggregated usage data may be shared with analytics providers to assist in Platform performance analysis. No personally identifiable data is shared for analytics purposes.

All service providers are contractually required to process your data only for the specific purposes ph585 has authorized, to maintain appropriate technical and organizational security measures, and to comply with applicable Philippine data protection law.

6.2 Regulatory and Law Enforcement Disclosures

ph585 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or any other competent Philippine government authority where required to do so by applicable law, a valid court order, or a regulatory directive. ph585 will notify you of any such disclosure request unless prohibited from doing so by law.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring involving ph585, your personal data may be transferred to the successor entity. ph585 will notify you of any such transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those in this Policy.

ph585 uses cookies and similar tracking technologies on the ph585 Platform to ensure proper functionality, enhance your user experience, and gather anonymous analytics about how the Platform is used. A "cookie" is a small text file placed on your device by a web server when you visit the ph585 website.

Essential cookies are strictly necessary for the ph585 Platform to function and cannot be disabled without affecting your ability to use the site. For non-essential cookies, you may manage your preferences through your browser settings. Please note that disabling certain functional cookies may impact the quality of your experience on ph585.

ph585 does not use third-party advertising cookies or place cookies on behalf of external advertisers. We do not use cross-site tracking technologies to follow your activity outside of the ph585 Platform.

ph585 retains your personal data for as long as is necessary to fulfill the purposes described in this Policy, and in any case for the minimum periods required by applicable Philippine law and PAGCOR regulatory obligations.

• Active Account Data: Retained for the full duration of your ph585 account and for a period of five (5) years following permanent account closure, in compliance with PAGCOR record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification, as required by the Anti-Money Laundering Act and PAGCOR licensing conditions.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of transaction in accordance with AMLA and BIR obligations.
• Support Communications: Retained for three (3) years from the date of last interaction, to enable dispute resolution and quality audits.
• Technical / Usage Logs: Retained for twelve (12) months for security monitoring purposes, after which logs are anonymized or deleted.

When personal data is no longer required for any lawful purpose, ph585 will securely delete or permanently anonymize it using industry-standard data destruction methods, ensuring it cannot be reconstructed or re-identified.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph585. You may exercise any of these rights at any time by contacting ph585 support or the Data Protection Officer as described in Section 14.

• Right to be Informed: You have the right to know what personal data ph585 collects about you, the purposes for which it is processed, and with whom it is shared — as set out in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data ph585 holds about you, along with information about how it is being used. ph585 will respond to access requests within fifteen (15) business days of receipt.
• Right to Rectification: You have the right to request correction of any inaccurate, outdated, or incomplete personal data ph585 holds about you. You may update certain details directly in your ph585 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to ph585's overriding legal and regulatory retention obligations.
• Right to Object: You have the right to object to the processing of your personal data on the basis of ph585's legitimate interests, or where processing is used for direct marketing purposes. You may opt out of marketing communications at any time.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible, to facilitate transfer to another service provider.
• Right to Lodge a Complaint: If you believe ph585 has processed your data in violation of the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

The ph585 Platform is strictly intended for adults aged 21 years and above. ph585 does not knowingly collect, process, or retain personal data from any individual under the age of 21. The minimum legal age for online casino gambling in the Philippines is 21, in accordance with PAGCOR regulations.

If ph585 becomes aware — through KYC review, parental notification, or any other means — that personal data has been collected from an individual under the age of 21, ph585 will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and forfeit any account balance in accordance with the ph585 Terms and Conditions.

ph585 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Password hashes use bcrypt with per-user salts — ph585 never stores passwords in plain text.
• Access Controls: Access to personal data is restricted to authorized ph585 employees and contractors on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication.
• Security Monitoring: ph585 operates 24/7 intrusion detection, anomaly monitoring, and security event logging systems to detect and respond to potential threats in real time.
• Regular Audits: ph585 conducts regular internal and third-party security audits, vulnerability assessments, and penetration tests to identify and remediate security risks proactively.
• Secure Infrastructure: The ph585 Platform is hosted on certified cloud infrastructure with ISO 27001 certification, geographic redundancy, and automated failover capabilities.
• Staff Training: All ph585 employees and contractors with access to personal data receive mandatory data privacy training upon onboarding and annually thereafter.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. ph585 cannot guarantee the absolute security of your personal data, and transmission of data to and from the ph585 Platform is at your own risk. If you suspect that your account has been compromised, please contact ph585 support immediately via Live Chat.

ph585 operates primarily within the Philippines and processes personal data in accordance with Philippine law. However, some of ph585's trusted service providers — including game studios, KYC verification providers, and cloud infrastructure partners — may be located in or operate from jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, ph585 ensures that such transfers are made only to countries that provide an adequate level of data protection, or under appropriate contractual safeguards such as data processing agreements incorporating the NPC's standard contractual clauses or equivalent protections as required by the DPA and its IRR.

ph585 will never transfer your personal data to a jurisdiction that does not provide adequate safeguards for the rights of Filipino data subjects. If you have questions about international data transfers involving your personal data, please contact the ph585 Data Protection Officer.

ph585 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When material changes are made to this Policy, ph585 will notify registered users by email to their registered address and/or by a prominent notice on the ph585 website.

The revised Privacy Policy will display an updated "Last Updated" date at the top of this page. Your continued use of the ph585 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should discontinue use of ph585 and contact support to initiate account closure.

ph585 recommends that you review this Privacy Policy periodically — at least once every six months — to stay informed of how we collect, use, and protect your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph585, you may contact us through the following channels:

• Live Chat: Available 24/7 directly on the ph585 website. This is the fastest way to reach our support team — average response time is under 2 minutes.
• Email: [email protected] — for formal data privacy requests, please use the subject line "Data Privacy Request" and include your full name and registered email address.
• Data Protection Officer: For escalated data privacy matters, your request will be forwarded to the ph585 DPO who will respond within five (5) business days of receipt.