ph499 Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how ph499 ("ph499," "we," "us," or "our") — the operator of the online gaming platform accessible at ph499.app — collects, uses, discloses, retains, and protects the personal information of individuals who register for and use the ph499 platform ("you," "Player," or "User").

ph499 operates as a PAGCOR-licensed online gaming service provider in the Philippines. As a data controller processing the personal information of Filipino data subjects, ph499 is bound by the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and the issuances of the National Privacy Commission (NPC).

By registering an account with ph499, accessing the ph499 platform, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, you must refrain from creating a ph499 account or submitting personal information to us.

2Data Controller

For the purposes of the Data Privacy Act of 2012 and its implementing rules, ph499 is the personal information controller in respect of the personal data processed through the ph499 platform. ph499 determines the purposes and means by which your personal information is processed.

ph499 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Policy. Contact details for the ph499 DPO are provided in Section 16 of this Policy. Our DPO is registered with the National Privacy Commission in accordance with NPC requirements applicable to PAGCOR-licensed operators.

3Personal Data We Collect

ph499 collects personal information across several categories, depending on how you interact with the platform:

ph499 does not collect sensitive personal information as defined under RA 10173 (such as racial or ethnic origin, health data, or religious beliefs) unless it is directly relevant to a specific regulatory compliance obligation — for example, obtaining a medical certificate as part of an exclusion reinstatement process.

4Purposes of Data Processing

ph499 processes your personal information for the following specific purposes:

• Account creation and management: To register your ph499 account, verify your identity, maintain your player profile, and manage account access and security.
• KYC and regulatory compliance: To fulfill know-your-customer obligations required by PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and NPC regulations.
• Payment processing: To process deposits through GCash, Maya, BPI, BDO, Metrobank, and other approved channels, and to process withdrawal requests to your registered payment accounts.
• Gameplay provision: To deliver game services, maintain game session integrity, calculate results, and record transaction history in your ph499 account.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account abuse, and unauthorized account access.
• Customer support: To respond to inquiries, resolve disputes, and provide assistance through live chat and other support channels.
• Responsible gaming: To monitor gaming patterns for indicators of problematic behavior, administer self-exclusion and deposit limits, and comply with PAGCOR responsible gaming requirements.
• Legal and regulatory reporting: To comply with reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and other Philippine government agencies as required by law.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have given explicit consent to receive such communications and have not subsequently withdrawn that consent.
• Platform improvement: To analyze aggregated usage data for the purpose of improving the ph499 platform, correcting errors, and optimizing user experience.

5Legal Basis for Processing

ph499 processes your personal information only where a valid legal basis exists under RA 10173. The applicable legal bases are:

• Contractual necessity: Processing required to enter into or perform the player agreement between you and ph499 — including account setup, gameplay provision, and payment processing.
• Legal obligation: Processing required to comply with mandatory legal or regulatory obligations, including PAGCOR licensing requirements, AMLA reporting, and NPC compliance obligations.
• Legitimate interests: Processing necessary for ph499's legitimate business interests — such as fraud prevention, security monitoring, and platform analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential analytics, which are conducted only with your explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6Data Sharing and Disclosure

ph499 does not sell your personal information to third parties. ph499 shares personal data only in the following circumstances and only to the extent necessary:

• Payment service providers: GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), BPI, BDO, Metrobank, GrabPay, and other approved payment partners — solely for the purpose of processing deposits and withdrawals related to your ph499 account.
• Game content providers: Licensed game studios (e.g., PG Soft, Pragmatic Play, Jili) receive technical session identifiers necessary to deliver game content. These providers do not receive your name, mobile number, or financial data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies — as required by applicable law, court order, or regulatory direction.
• Technology service providers: Cloud hosting, database management, and cybersecurity service providers engaged by ph499 under data processing agreements that require them to protect your data to the same standard as ph499.
• Professional advisers: Legal counsel, accountants, and auditors — subject to confidentiality obligations — where necessary to obtain professional advice or conduct audits.

7Cookies and Tracking Technologies

ph499 uses cookies and similar tracking technologies on the ph499.app website to facilitate core platform functionality and to improve your experience. A cookie is a small data file stored on your device by your browser when you visit a website.

ph499 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — including session authentication, account login state, and security tokens. These cannot be disabled without impairing your ability to use ph499.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalized experience.
• Analytics cookies: Collect anonymized data about how players interact with ph499, which pages are most visited, and where errors occur — used solely to improve the platform. These are deployed only with your consent.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized logins, and bot activity on the platform.

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use ph499 normally.

8Data Retention

ph499 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active ph499 account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements and PAGCOR conditions.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLA and BIR record-keeping obligations.
• Gaming session data: Retained for a minimum of two (2) years from the date of each session for dispute resolution, regulatory inspection, and responsible gaming monitoring purposes.
• Customer support records: Retained for two (2) years from the date of the most recent interaction, or longer if the record relates to an unresolved dispute or ongoing regulatory matter.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent history.

Upon expiry of the applicable retention period, ph499 will securely delete or anonymize your personal data. Where anonymization is used, the resulting data is no longer considered personal data and may be retained for statistical and analytical purposes indefinitely.

9Security Measures

ph499 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph499 servers
• Encryption of personal and financial data stored in ph499 databases at rest
• Multi-factor authentication (OTP-based) for account login and sensitive account actions
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis
• Regular security audits and vulnerability assessments conducted by qualified cybersecurity professionals
• Incident response and breach notification procedures aligned with NPC requirements
• Staff training on data privacy obligations and security best practices

10Your Data Subject Rights

As a data subject under the Philippines Data Privacy Act of 2012, you have the following rights in respect of your personal information held by ph499. These rights may be exercised by contacting ph499's Data Protection Officer (see Section 16).

ph499 will respond to data subject requests within ten (10) business days of receipt. Where a request is complex or involves a large volume of data, ph499 may extend this period by a further fifteen (15) business days, providing written notice of the extension and the reason for it.

Where ph499 is unable to comply with a request — for example, because fulfilling it would conflict with a legal obligation — ph499 will explain the reason in writing. If you are unsatisfied with ph499's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11Minors and Age Restrictions

ph499 is strictly an adult gaming platform. In accordance with PAGCOR regulations and ph499's Terms & Conditions, no person under the age of 21 years may register for or use the ph499 platform. ph499 does not knowingly collect personal information from individuals below the age of 21.

During registration and KYC verification, ph499 verifies the age of all prospective players. If ph499 becomes aware that personal information has been collected from a person below the age of 21, ph499 will promptly delete that data and close the relevant account. If you believe that a minor may have registered on ph499, please contact ph499 support immediately via live chat.

12Marketing Communications

ph499 may send you promotional communications — including deposit bonus alerts, free spin offers, reload promotions, and platform news — by SMS to your registered mobile number or by email, but only where you have provided explicit consent to receive such communications at the time of registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your ph499 account settings
• Replying STOP to any SMS communication from ph499
• Contacting ph499 support via live chat and requesting to be unsubscribed

Withdrawal of marketing consent does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, OTP messages, and security alerts — which are sent as part of the account service and do not require separate consent.

13International Data Transfers

Some of ph499's technology service providers, including cloud hosting and game content delivery partners, may be located outside the Philippines. Where ph499 transfers your personal data to a recipient in another country, ph499 ensures that appropriate safeguards are in place to protect your data to a standard consistent with RA 10173.

Such safeguards include contractual data processing agreements requiring the recipient to apply data protection standards equivalent to those under Philippine law, and where applicable, verification that the recipient country offers an adequate level of data protection as recognized by the NPC.

14Data Breach Notification

In the event of a personal data breach that is likely to result in a serious risk to the rights and freedoms of affected data subjects, ph499 will:

• Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and subsequent NPC issuances
• Notify affected data subjects without undue delay where the breach is likely to result in a high risk to their rights and freedoms, providing details of the nature of the breach, the types of data affected, and the steps they can take to protect themselves
• Document all data breaches, including those not subject to mandatory notification, in ph499's internal breach register

ph499 maintains a breach response plan that is reviewed and updated regularly. All ph499 staff are trained to recognize and immediately escalate potential data security incidents to the ph499 DPO.

15Changes to This Privacy Policy

ph499 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or business operations. When material changes are made, ph499 will:

• Update the "Last Updated" date at the top of this Policy
• Post the revised Policy on ph499.app
• Where practicable, notify registered players by SMS or in-app notification before the changes take effect

Your continued use of ph499 after the effective date of a revised Policy constitutes acceptance of the updated terms. ph499 recommends reviewing this Policy periodically. If you object to any changes to this Policy, you should cease using ph499 and may close your account in accordance with the ph499 Terms & Conditions.

16Contact Us & Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or ph499's handling of your personal data — including the exercise of your data subject rights — please contact the ph499 Data Protection Officer using the details below:

If you are not satisfied with ph499's response to your data privacy request or complaint, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for enforcing RA 10173.