About This Policy: This Privacy Policy ("Policy") describes how ph128.cam ("ph128," "we," "us," or "our") collects, uses, discloses, stores, and otherwise processes the personal information of individuals ("you," "your," or "Player") who register an account on, access, or otherwise interact with the ph128 online casino platform. ph128 is committed to protecting your privacy and handling your personal data with transparency and care, in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations.
Your Consent: By creating an account on ph128, completing the registration process, or continuing to use the ph128 Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the ph128 Platform.
Your Privacy at ph128 – Key Commitments
These cards summarise ph128's core privacy commitments. The full legal text below governs in all cases.
Data Subject Rights
As a Filipino data subject, you have the right to be informed, the right of access, the right to object, the right to erasure, the right to rectify inaccurate data, and the right to data portability. ph128 will honour all valid data subject requests in accordance with the Data Privacy Act of 2012 and within the timeframes that law requires.
Security & Encryption
All personal data transmitted between your device and ph128 servers is protected by 256-bit SSL/TLS encryption. Your account data is stored on secure, access-controlled servers. ph128 applies industry-standard technical and organisational security measures to prevent unauthorised access, disclosure, or destruction of your personal information.
No Data Selling
ph128 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Personal data shared with third parties is limited strictly to what is necessary for providing the ph128 service – payment processing, identity verification, regulatory compliance, and platform operation – and is always subject to binding data protection obligations.
Philippine Data Privacy Act Compliance
ph128 processes your personal data in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations as administered by the National Privacy Commission of the Philippines. A registered Data Protection Officer oversees all data processing activities and privacy compliance at ph128.
Retention & Deletion
ph128 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law, regulatory requirements, and anti-money laundering obligations. When data is no longer required, it is securely deleted or anonymised in accordance with ph128's data retention schedule.
Transparency First
ph128 believes you should always know what data is collected, why it is collected, and how it is used. This Policy is written in plain language alongside proper legal text precisely so Filipino players can understand their privacy rights without needing a law degree. If anything is unclear, our Data Protection Officer is reachable at the contact details at the end of this Policy.
1Definitions
For the purposes of this Privacy Policy, the following definitions shall apply:
- "Personal Information" means any information from which the identity of an individual can be reasonably and directly ascertained, or when combined with other information, would directly and certainly identify an individual, as defined in the Data Privacy Act of 2012.
- "Sensitive Personal Information" means personal information about a Player's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic information, government-issued identification numbers, financial information, or any combination thereof, as defined in the Data Privacy Act of 2012.
- "Processing" means any operation or set of operations performed upon personal information including but not limited to collection, recording, organisation, storage, updating, modification, retrieval, consultation, use, consolidation, blocking, erasure, or destruction.
- "Data Controller" means ph128.cam, which determines the purpose and means of processing personal information collected through the ph128 Platform.
- "Data Subject" means any natural person whose personal information is processed by ph128, including registered Players and Platform visitors.
- "Platform" means the ph128 website accessible at ph128.cam and all associated pages, services, and features.
- "NPC" means the National Privacy Commission of the Philippines, the regulatory authority responsible for administering and implementing the Data Privacy Act of 2012.
- "DPO" means the Data Protection Officer designated by ph128 to oversee compliance with the Data Privacy Act of 2012 and this Policy.
2Data Controller
The Data Controller responsible for your personal information is ph128.cam, the operator of the ph128 online casino and gaming platform. ph128 has registered its data processing activities with the National Privacy Commission of the Philippines in accordance with the Data Privacy Act of 2012.
ph128 has designated a Data Protection Officer responsible for overseeing all data protection matters. Contact details for the ph128 DPO are provided in Section 15 of this Policy. The DPO can be contacted for any queries relating to this Privacy Policy, your data subject rights, or any privacy-related concern regarding ph128's processing of your personal information.
3Personal Data We Collect
ph128 collects the following categories of personal data in the course of providing its services to Players:
| Data Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, government-issued ID number and document scan | Yes – KYC requirement |
| Contact Data | Email address, mobile phone number, residential address (including barangay, city, province) | Yes – account registration |
| Account Data | Username, account ID, account preferences, login history, session timestamps | Yes – account operation |
| Financial Data | GCash account number, PayMaya account number, bank account details, transaction history, deposit and withdrawal records | Yes – payment processing |
| Gaming Activity Data | Game history, wager amounts, win/loss records, bonus usage, session duration | Yes – platform operation and regulatory compliance |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, referral URL | Automatic collection |
| Communication Data | Live chat transcripts, support email correspondence, feedback and survey responses | When you contact support |
| Marketing Data | Marketing preference settings, promotional offer redemption history, communication opt-in/opt-out records | Where consent is given |
ph128 does not knowingly collect personal information from individuals under 21 years of age. Where ph128 determines that personal information from an underage individual has been collected, that information will be deleted promptly and the associated account closed.
4How We Collect Your Data
ph128 collects personal data through the following means:
4.1 Directly from You
The majority of personal data ph128 holds about you is provided directly by you during:
- Account registration at ph128.cam;
- Identity verification (KYC) document submission;
- Deposit and withdrawal transactions;
- Completion of responsible gaming forms and preference settings;
- Interactions with ph128 customer support via live chat or email;
- Participation in surveys, promotions, or feedback requests;
- Any voluntary correspondence with ph128.
4.2 Automatically
Certain technical data is collected automatically when you access and interact with the ph128 Platform, including through the use of cookies and similar tracking technologies as described in Section 10. This includes device identifiers, IP addresses, session logs, and behavioural interaction data generated by your use of the Platform.
4.3 From Third Parties
ph128 may receive personal data from the following third-party sources in connection with providing its services:
- Payment providers: GCash, PayMaya, BPI, BDO, UnionBank, and other payment service providers may confirm transaction details and account ownership information;
- Identity verification services: Third-party KYC and anti-money laundering screening providers may confirm the validity of submitted identity documents and check against sanctions and politically-exposed-person databases;
- Analytics partners: Aggregated and anonymised behavioural analytics from platform performance tools;
- Regulatory authorities: Where required, ph128 may receive data from or share data with PAGCOR, the Anti-Money Laundering Council (AMLC), or other applicable Philippine regulatory bodies.
5Purposes of Processing & Legal Basis
ph128 processes your personal data for the following purposes, each supported by an applicable legal basis under the Data Privacy Act of 2012:
5.1 Account Registration and Management
Purpose: To create and maintain your ph128 Account, authenticate your identity on login, and manage account settings and preferences.
Legal basis: Performance of a contract between you and ph128.
5.2 Identity Verification and KYC Compliance
Purpose: To verify your identity and age in accordance with Philippine gaming regulations, anti-money laundering requirements, and responsible gaming obligations.
Legal basis: Compliance with a legal obligation under Philippine gaming law and the Anti-Money Laundering Act.
5.3 Payment Processing
Purpose: To process your deposits and withdrawal requests via GCash, PayMaya, bank transfer, and other supported Philippine payment methods, and to maintain accurate financial records of all transactions.
Legal basis: Performance of a contract and compliance with legal obligations regarding financial record-keeping.
5.4 Provision of Gaming Services
Purpose: To provide access to casino games, live dealer tables, sports betting markets, bingo, and all other ph128 gaming services; to record game outcomes and maintain gaming histories for dispute resolution and regulatory purposes.
Legal basis: Performance of a contract.
5.5 Responsible Gaming and Player Protection
Purpose: To monitor gaming activity for patterns consistent with problem gambling behaviour; to apply player-requested limits, cooling-off periods, and self-exclusion; and to comply with responsible gaming requirements under Philippine gaming regulations.
Legal basis: Compliance with a legal obligation and legitimate interests in player protection.
5.6 Customer Support
Purpose: To handle your queries, complaints, and requests through ph128's 24/7 live chat and email support channels; to maintain records of communications for quality assurance and dispute resolution purposes.
Legal basis: Performance of a contract and legitimate interests.
5.7 Marketing Communications
Purpose: To send you information about ph128 promotions, bonuses, new games, and other offers where you have opted in to receive such communications.
Legal basis: Your explicit consent. You may withdraw this consent at any time as described in Section 13.
5.8 Fraud Prevention and Security
Purpose: To detect and prevent fraud, money laundering, account takeover attempts, and other forms of prohibited conduct; to protect the integrity of the ph128 Platform and its players.
Legal basis: Legitimate interests and compliance with legal obligations under the Anti-Money Laundering Act and applicable Philippine gaming regulations.
5.9 Platform Improvement and Analytics
Purpose: To analyse aggregated and anonymised usage patterns to understand how the ph128 Platform is used, to identify technical issues, and to improve platform performance, game selection, and user experience.
Legal basis: Legitimate interests, provided that these interests are not overridden by your interests or fundamental rights.
6Disclosure of Personal Data to Third Parties
ph128 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. ph128 may share your personal data with the following categories of recipients solely to the extent necessary to provide the ph128 service or fulfil legal obligations:
6.1 Payment Service Providers
Identity and financial data is shared with payment processors including GCash, PayMaya, BPI, BDO, UnionBank, and Coins.ph solely to process your deposit and withdrawal transactions. These providers process your data as independent data controllers subject to their own privacy policies and Philippine financial regulation.
6.2 Identity Verification and Compliance Providers
Identity documents and personal information are shared with third-party KYC and anti-money laundering service providers for the purpose of verifying your identity and screening against sanctions lists, PEP databases, and adverse media sources. These providers act as processors under binding data processing agreements with ph128.
6.3 Game and Platform Technology Providers
ph128 partners with licensed casino software providers, live dealer studio operators, and sports betting data providers to deliver gaming content on the Platform. These providers may receive pseudonymised player session data necessary for game delivery and outcome determination, subject to confidentiality and data protection obligations.
6.4 Regulatory and Law Enforcement Authorities
ph128 is required by Philippine law to disclose certain personal data to PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, and other competent Philippine government authorities upon lawful demand. ph128 will comply with all such requests in accordance with applicable law and will notify you of any such disclosure where permitted to do so.
6.5 Group Companies
ph128 may share personal data within its corporate group where necessary for internal administrative purposes, subject to the same data protection standards as apply under this Policy.
In all cases where ph128 shares your personal data with third parties acting as data processors, ph128 ensures that appropriate contractual safeguards, including binding data processing agreements, are in place to require those parties to maintain the confidentiality and security of your personal information.
7International Data Transfers
ph128's primary data processing operations are conducted within the Philippines. Where personal data is transferred to or processed in countries outside the Philippines in connection with the services described in Section 6 – for example, by game content providers or cloud infrastructure services operating from other jurisdictions – ph128 ensures that such transfers are made in compliance with the cross-border transfer provisions of the Data Privacy Act of 2012 and its Implementing Rules.
This means that ph128 will only transfer personal data outside the Philippines to countries that have been assessed to provide an adequate level of data protection, or where appropriate safeguards are in place through binding contractual arrangements that impose data protection standards at least equivalent to those under Philippine law.
8Data Security
ph128 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, use, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and ph128 servers;
- Encrypted storage of sensitive personal data at rest using industry-standard encryption protocols;
- Access controls limiting access to personal data to authorised ph128 personnel on a strict need-to-know basis;
- Multi-factor authentication for all administrative access to systems holding personal data;
- Regular security assessments and penetration testing of ph128's technical infrastructure;
- Incident response procedures meeting the notification requirements of the Data Privacy Act of 2012 in the event of a personal data breach.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph128 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected individuals in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.
While ph128 takes every reasonable measure to protect your personal data, no online platform can guarantee absolute security. You play an important role in keeping your account secure by maintaining the confidentiality of your ph128 login credentials and reporting any suspected unauthorised access to ph128 support immediately.
9Data Retention
ph128 retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable Philippine law. Key retention periods are as follows:
- Account data and identity verification records: Retained for a minimum of five (5) years from account closure, in accordance with anti-money laundering record-keeping requirements under the Anti-Money Laundering Act and PAGCOR regulations;
- Financial transaction records: Retained for a minimum of five (5) years from the date of the relevant transaction;
- Gaming activity data: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
- Customer support communication records: Retained for two (2) years from the date of each interaction;
- Marketing consent records: Retained for the duration of your Account and for two (2) years following Account closure;
- Technical and log data: Typically retained for twelve (12) months in rolling logs.
Following the expiry of the applicable retention period, personal data will be securely deleted, destroyed, or irreversibly anonymised so that it can no longer be associated with you as an identifiable individual.
10Cookies & Tracking Technologies
10.1 What Are Cookies
Cookies are small text files placed on your device by a website when you visit it. ph128 uses cookies and similar tracking technologies (collectively "Cookies") to operate the Platform, enhance your experience, analyse usage patterns, and deliver relevant promotional content where you have consented to receive it.
10.2 Types of Cookies Used by ph128
- Strictly Necessary Cookies: Essential for the basic operation of the ph128 Platform, including session authentication, security, and platform functionality. These Cookies cannot be disabled without preventing you from using the Platform.
- Performance Cookies: Collect anonymised information about how Players use the ph128 Platform to help us improve performance and identify technical issues. No personally identifiable information is collected by these Cookies.
- Functional Cookies: Remember your preferences such as language settings, display preferences, and region, to provide a more personalised experience on return visits.
- Marketing Cookies: Used only where you have given explicit consent to receive personalised promotional communications. These Cookies help ph128 understand the effectiveness of marketing campaigns and deliver relevant bonus offers.
10.3 Managing Cookies
You can control and manage Cookies through your browser settings. Most browsers allow you to refuse new Cookies, delete existing Cookies, and set preferences for specific websites. Disabling Strictly Necessary Cookies may prevent you from using certain features of the ph128 Platform. Instructions for managing Cookies are available in your browser's help documentation.
11Your Data Subject Rights
As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal information held by ph128:
11.1 Right to be Informed
You have the right to be informed of the purposes for which your personal data is collected and processed, the recipients of your personal data, the retention period applicable to your data, and your rights as a data subject. This Privacy Policy fulfils ph128's obligation to keep you informed.
11.2 Right of Access
You have the right to request a copy of the personal data ph128 holds about you. You can submit an access request by contacting the ph128 DPO at the details provided in Section 15. ph128 will respond to valid access requests within fifteen (15) days of receipt, as required by the Data Privacy Act of 2012.
11.3 Right to Rectification
You have the right to request that inaccurate or incomplete personal data held by ph128 be corrected. Certain changes to account information may require additional identity verification. You can request rectification through your Account settings or by contacting the ph128 DPO.
11.4 Right to Erasure ("Right to be Forgotten")
You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing is based, or where processing is otherwise unlawful. This right is subject to ph128's legal obligations to retain certain data as described in Section 9, including anti-money laundering record-keeping requirements, which override erasure requests where applicable.
11.5 Right to Object
You have the right to object to ph128's processing of your personal data where that processing is based on legitimate interests, including processing for direct marketing purposes. Where you object to processing for direct marketing, ph128 will cease such processing immediately upon receipt of your objection.
11.6 Right to Data Portability
You have the right to receive the personal data you have provided to ph128 in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller where technically feasible. This right applies to data processed on the basis of your consent or for the performance of a contract.
11.7 Exercising Your Rights
To exercise any of the rights described in this Section 11, please submit a written request to the ph128 Data Protection Officer at the contact details provided in Section 15. ph128 will not charge a fee for handling valid data subject requests. ph128 may require proof of identity before processing your request. If ph128 is unable to comply with your request, we will explain the reasons in writing.
11.8 Right to Lodge a Complaint
If you believe that ph128 has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about filing a complaint is available through the NPC's official channels.
12Minors and Age Restriction
The ph128 Platform is intended exclusively for individuals who are twenty-one (21) years of age or older, in accordance with Philippine gaming regulations. ph128 does not knowingly collect personal information from individuals under the age of 21.
If ph128 becomes aware that personal data has been collected from an individual under the age of 21, ph128 will take immediate steps to delete that data, close the associated account, and ensure that no real-money gaming activity conducted by an underage individual results in financial benefit to ph128.
If you are a parent or guardian and believe that your child under the age of 21 has provided personal information to ph128, please contact the ph128 DPO immediately at the details in Section 15 so that appropriate action can be taken.
13Marketing Communications
13.1 Opt-In Marketing
ph128 sends promotional emails, SMS messages, and push notifications regarding bonuses, new games, and special offers only to Players who have explicitly opted in to receive such communications during registration or through their Account preferences settings. Your consent to receive marketing communications is entirely voluntary and separate from the essential Account registration process.
13.2 Withdrawing Consent
You may withdraw your consent to receive marketing communications from ph128 at any time by:
- Updating your communication preferences in your ph128 Account settings;
- Clicking the unsubscribe link included in any ph128 marketing email;
- Replying STOP to any ph128 SMS marketing message;
- Contacting the ph128 DPO or support team with a written request to opt out.
Withdrawal of consent for marketing communications will not affect the lawfulness of processing based on consent prior to withdrawal, and will not affect ph128's right to send you essential service communications relating to your Account (such as transaction confirmations, security alerts, and policy update notices).
14Changes to This Privacy Policy
ph128 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in Philippine data protection law, or for other operational, legal, or regulatory reasons. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.
Where ph128 makes material changes to this Policy that affect your rights or our data processing activities in a significant way, ph128 will notify registered Players via the email address on file or through a prominent notice on the ph128 Platform prior to the amended Policy taking effect. We encourage you to review this Policy periodically to stay informed about how ph128 is protecting your personal information.
Continued use of the ph128 Platform following the effective date of any material amendment constitutes your acceptance of the revised Privacy Policy.
15Contact & Data Protection Officer
For any questions, requests, or concerns relating to this Privacy Policy, the processing of your personal data by ph128, or the exercise of your data subject rights, please contact the ph128 Data Protection Officer using the following details:
ph128 Data Protection Officer
Platform: ph128.cam
Email: [email protected]
Subject Line: Please use "Data Privacy Request – [Your Account Username]" for all data subject requests
Response Time: Within fifteen (15) days of receiving a complete and valid request, as required by the Data Privacy Act of 2012
Availability: The ph128 support team is available 24/7; DPO responses for formal privacy matters are issued within business days
If you are not satisfied with the response from the ph128 DPO, you have the right to escalate your concern to the National Privacy Commission of the Philippines, which can be contacted through its official channels.
Last Updated: 1 January 2026 | Version: 2.0 | This Policy applies to all ph128 Players and supersedes all previous versions of the ph128 Privacy Policy.
Play at ph128 with Confidence
Your personal data is protected, your transactions are encrypted, and your rights under Philippine law are fully respected. Everything ph128 does is built around keeping Filipino players safe and their information secure.
Must be 21 or older to register and play. Please gamble responsibly.