Privacy Policy

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for the processing of personal information collected through the ph111 platform is ph111, operating the online gaming service accessible at ph111.bio and all associated interfaces.

ph111 has designated a Data Protection Officer (DPO) responsible for overseeing the platform's compliance with RA 10173 and for responding to data subject rights requests. Contact details for ph111's DPO are set out in Section 15 of this Privacy Policy.

This Privacy Policy applies to all personal information collected, processed, stored, or transferred by ph111 in connection with your use of the ph111 platform, including but not limited to account registration, deposits, gameplay, withdrawals, bonus program participation, customer support interactions, and any other service provided through ph111.bio.

This Policy applies to all registered Players, prospective Players who interact with ph111's registration flow without completing registration, and individuals who contact ph111 via support channels without holding an active account.

This Privacy Policy is to be read in conjunction with ph111's Terms & Conditions and Responsible Gaming Policy. In the event of any inconsistency between this Policy and any other ph111 document with respect to data privacy matters, this Privacy Policy shall prevail.

ph111 collects only the personal data necessary to operate the platform, maintain legal compliance, and protect the integrity of both the platform and its players. The categories of personal data we collect are detailed in the table below.

ph111 does not collect sensitive personal information as defined under RA 10173 (including race, religion, health data, genetic data, or political affiliations) except where age-related health information is voluntarily disclosed by a Player in the context of a responsible gaming inquiry, in which case such information is processed solely to provide appropriate support.

ph111 collects personal data through the following channels and methods:

• Direct collection during registration: When you create a ph111 Account, you provide identity, contact, and payment information directly through the registration interface.
• KYC document submission: When ph111 requests identity verification documents as part of the Know Your Customer process, you provide copies of government-issued identification documents directly to ph111.
• Transaction processing: When you make deposits or withdrawal requests, ph111 receives payment reference data from GCash, PayMaya, or your bank as part of the transaction confirmation flow.
• Gameplay activity: All game sessions, bets, results, and in-session behavior are automatically recorded in ph111's server logs as part of the platform's standard operation and are required for audit, dispute resolution, and RNG certification purposes.
• Device and browser data: Standard technical data is automatically collected when you access ph111 — IP address, device type, browser details — for security, fraud detection, and geolocation compliance purposes.
• Customer support interactions: Communications with ph111's support team via live chat or email are recorded and retained as support records.
• Cookies and tracking technologies: ph111 uses cookies and similar technologies as described in Section 8 of this Policy.

ph111 processes your personal data for the following specific, legitimate purposes:

• Account creation and management: To register your account, maintain your player profile, authenticate your identity at login, and manage your account settings.
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment channels.
• Regulatory compliance: To fulfill ph111's obligations under PAGCOR regulations, Philippine anti-money laundering law (AMLA), and the Data Privacy Act (RA 10173), including age verification, identity verification, and transaction reporting.
• Fraud prevention and security: To detect and prevent unauthorized account access, fraudulent activity, bonus abuse, money laundering, and other security threats to the platform and its players.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling behavior, to facilitate Player-initiated limits and exclusions, and to ensure compliance with ph111's responsible gaming commitments.
• Customer support: To respond to Player inquiries, resolve disputes, and process complaints efficiently.
• Platform improvement: To analyze aggregate, anonymized usage data for the purpose of improving ph111's platform performance, game selection, and user experience.
• Promotional communications: To notify you of bonuses, promotions, and platform updates — only where you have not opted out of marketing communications.

Under the Philippine Data Privacy Act (RA 10173), ph111 processes personal data on the following lawful bases:

• Contractual necessity: Processing required to fulfill ph111's obligations under the Player Agreement (Terms & Conditions) — including account management, game operation, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where ph111's legitimate interest in protecting the platform and its players is not overridden by your privacy rights.
• Consent: Processing for marketing and promotional communications, which you may withdraw at any time by contacting ph111 support or updating your account communication preferences.

ph111 does not sell, rent, or trade your personal data. ph111 may share your personal data with the following categories of parties, strictly for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment service providers — solely to process your deposits and withdrawals. Payment processors are bound by their own data privacy obligations under Philippine law.
• Game software providers: Third-party game developers whose titles are hosted on ph111 may receive anonymized session data required for RTP certification, technical audits, and dispute resolution. No personally identifiable information is shared with game providers beyond what is technically necessary for game operation.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies as required by law. ph111 will comply with lawful orders from authorized Philippine authorities requiring disclosure of Player data.
• Identity verification services: Third-party KYC and identity verification providers engaged to assist ph111 in fulfilling its age verification and identity confirmation obligations under PAGCOR regulations.
• IT and infrastructure providers: Hosting, security, and technical service providers who process data on ph111's behalf under data processing agreements consistent with RA 10173. These providers act as processors, not independent controllers, of your data.

In all cases where ph111 shares data with third-party processors, ph111 ensures that appropriate contractual data protection obligations are in place. ph111 remains responsible for the security of data shared with processors acting on its behalf.

ph111 uses cookies and similar tracking technologies on its platform. Cookies are small data files stored on your device that help ph111 recognize returning users, maintain session integrity, prevent unauthorized access, and improve platform performance.

ph111 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — session authentication, security tokens, fraud prevention identifiers, and geolocation compliance checks. These cannot be disabled without breaking the platform's core functionality.
• Performance cookies: Collect anonymized data on how Players use the platform — which game categories are most visited, typical session paths, and error frequency — used to improve the platform. Data is aggregated and not linked to individual identities.
• Functional cookies: Remember your platform preferences such as language setting, last-played game category, and responsible gaming limit display preferences.
• Marketing cookies: Used to deliver relevant bonus and promotion information based on your gameplay preferences. You may opt out of marketing cookies via your account communication settings.

ph111 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account data: Retained for the duration of your active Account, plus 5 years following Account closure. Extended retention reflects ph111's obligations under Philippine AML regulations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act (AMLA) and its implementing regulations.
• KYC documentation: Retained for 5 years from the date of last account activity, as required for PAGCOR compliance and AML reporting purposes.
• Gameplay logs: Retained for 3 years from the date of the relevant session. Extended where a log forms part of an active dispute investigation.
• Support communications: Retained for 2 years from the date of the most recent communication in each support thread.
• Marketing opt-out records: Retained indefinitely to ensure ph111 honors your communication preferences.

Data that is no longer required for any lawful purpose is securely deleted or anonymized. Anonymized, aggregated data that cannot be linked to any individual may be retained indefinitely for statistical and platform improvement purposes.

ph111 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph111 servers.
• Encryption at rest for all sensitive data fields stored in ph111's database infrastructure, including payment references and identity document data.
• Password hashing using industry-standard cryptographic hashing algorithms — ph111 does not store plaintext passwords.
• Multi-factor authentication for all administrative access to ph111's data systems.
• Access controls restricting personal data access to ph111 staff members whose role requires it, with audit logging of all access events.
• Penetration testing and security audits conducted on a regular basis by independent security professionals.
• Data breach response procedures consistent with RA 10173's breach notification requirements, including mandatory notification to the National Privacy Commission (NPC) and affected data subjects within 72 hours of confirmed breach discovery where required by law.

ph111 is strictly a platform for adults aged 21 years and above, as required by PAGCOR regulations. ph111 does not knowingly collect, process, or retain personal data of any individual under the age of 21.

The age verification process implemented during ph111 registration is specifically designed to prevent minors from accessing the platform. Where ph111 discovers or has reasonable grounds to believe that personal data of a person under 21 has been collected — whether through circumvention of the age verification process or through fraudulent registration — ph111 will:

• Immediately suspend the relevant Account pending investigation.
• Permanently delete all personal data associated with the Account upon confirmed identification as belonging to a minor.
• Return any deposited funds to the payment source following verification.
• File a mandatory incident report with the National Privacy Commission as required under RA 10173.

Parents and guardians who believe a minor may have accessed ph111 are encouraged to contact ph111 support immediately using the contact details in Section 15 of this Policy.

ph111's primary data processing infrastructure is based in the Philippines. Certain technical service providers engaged by ph111 — including cloud infrastructure providers and game software vendors — may process or store data in jurisdictions outside the Philippines.

Where personal data is transferred outside Philippine jurisdiction, ph111 ensures that such transfers are conducted in compliance with RA 10173's requirements for cross-border data flows, including:

• Transfers only to recipients in jurisdictions with comparable data protection standards, or
• Execution of appropriate contractual safeguards (data processing agreements) that impose RA 10173-equivalent obligations on the recipient entity.

ph111 does not transfer personal data to game software providers, payment processors, or any other third party located outside the Philippines for any purpose other than the technical operation of services that Filipino players directly use and benefit from. No personal data is transferred outside the Philippines for marketing, profiling, or data brokerage purposes.

To exercise any of the data rights described in this Privacy Policy — including access, correction, erasure, objection, or portability — submit a Data Subject Rights Request to ph111's Data Protection Officer using the contact details provided in Section 15.

When submitting a rights request, please include:

• Your full name as registered on your ph111 account.
• Your registered ph111 mobile number.
• A description of the specific right you wish to exercise and, where applicable, the specific data involved.
• A copy of a valid Philippine government-issued ID for identity verification purposes.

ph111 will acknowledge all data rights requests within 5 business days of receipt and will provide a substantive response within 15 business days, or within such longer period as permitted by RA 10173 for complex requests. ph111 will not charge a fee for the first rights request submitted per calendar year per data subject.

Where ph111 is unable to fulfill a rights request — for example, where erasure would conflict with ph111's legal data retention obligations — ph111 will explain the legal basis for its decision in writing.

ph111 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, or regulatory guidance from the National Privacy Commission. Material changes — meaning changes that affect how ph111 uses your data in a way that was not contemplated when you first registered — will be communicated to registered Players via notification to their registered mobile number at least 14 days before the change takes effect.

Non-material changes — such as typographical corrections, clarifications of existing practices, or structural reorganization that does not affect the substance of the Policy — may be published without prior notice. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

Your continued use of the ph111 platform following the effective date of any Privacy Policy update constitutes your acknowledgment of the updated Policy. If you do not agree with a material change, you may request Account closure under the process described in ph111's Terms & Conditions.

For all data privacy matters — including data subject rights requests, privacy complaints, and questions about this Privacy Policy — please contact ph111's Data Protection Officer using the details below. All communications are handled in strict confidence.