82ph Privacy Policy

This Privacy Policy ("Policy") describes how 82ph ("we," "us," "our") collects, processes, stores, shares, and protects the personal data of individuals ("you," "Player," "data subject") who access or use the 82ph online gaming platform available at 82ph.org and any associated applications or services.

82ph recognises that privacy matters deeply to Filipino players. When you create an account, deposit via GCash or Maya, participate in games, or contact our support team, you entrust personal information to us. We take that responsibility seriously. This Policy is designed to be transparent, readable, and specific — not a wall of legal boilerplate that obscures rather than informs.

This Policy should be read together with the 82ph Terms & Conditions and the Responsible Gaming Policy. By registering an account on 82ph and continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy in full.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 82ph acts as the personal information controller in respect of all personal data collected and processed in connection with the Platform and its services.

As personal information controller, 82ph determines the purposes for which, and the manner in which, personal data is processed. 82ph has appointed a Data Protection Officer (DPO) to oversee compliance with this Policy and applicable data privacy law. The DPO's contact details are provided in Section 15 of this Policy.

Certain third-party service providers engaged by 82ph — such as payment processors, KYC verification providers, and game software suppliers — may act as personal information processors under the DPA when processing data on 82ph's behalf. These relationships are governed by data processing agreements that require processors to handle data in accordance with 82ph's instructions and this Policy.

82ph collects personal data from Players across several categories. The table below summarises the types of data collected and the circumstances in which each is gathered:

82ph does not intentionally collect sensitive personal information as defined under the DPA (including but not limited to data relating to race, religion, health, or political views) except where specifically required for identity verification purposes and where you have provided explicit consent.

82ph collects personal data through the following channels:

• Directly from you: When you complete the 82ph registration form, update your account profile, submit KYC documents, make a deposit, request a withdrawal, or contact 82ph's customer support team.
• Automatically through Platform use: Technical and gaming activity data is automatically generated and recorded when you access, browse, or interact with the 82ph Platform. This includes IP address logging, session tracking, and game result recording.
• From payment processors: When you initiate a GCash, Maya, or bank transfer transaction, the relevant payment processor provides 82ph with transaction confirmation data including sender details, amounts, and reference numbers to allow 82ph to credit or process your account correctly.
• From KYC verification providers: Third-party identity verification services may provide 82ph with confirmation of your identity and age verification results. The underlying documents themselves are handled according to the KYC provider's own data security standards under contract with 82ph.
• From cookies and similar technologies: As described further in Section 8 of this Policy, 82ph uses cookies and similar tracking technologies to collect data about how Players use the Platform.

Under the Philippine Data Privacy Act, personal data may only be processed where a lawful basis exists. 82ph processes Player data on the following legal bases:

• Contractual necessity: Processing required to create and maintain your 82ph account, process deposits and withdrawals, provide gaming services, and communicate essential account information is necessary for performance of the contract between you and 82ph.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements under Philippine gaming regulations, and tax reporting obligations.
• Legitimate interest: Processing carried out for 82ph's legitimate business interests where these interests are not overridden by your rights, including fraud detection and prevention, platform security, and improving the quality of 82ph's services.
• Consent: Where consent is the legal basis for processing — for example, for optional marketing communications — 82ph will obtain your clear, affirmative consent before such processing commences. You may withdraw consent at any time as described in Section 11.

82ph uses collected personal data for the following specific purposes:

• Creating, verifying, and managing your 82ph account, including processing identity and age verification to confirm eligibility under the 21+ age requirement for Philippine online gaming participants.
• Processing financial transactions — deposits via GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other supported methods — and processing withdrawal requests to verified payment accounts in your name.
• Providing access to and facilitating participation in all games available on the 82ph Platform, including slots, bingo, live casino, and fishing games.
• Administering bonuses, promotions, and reward programmes, including verifying eligibility, applying wagering requirements, and processing winnings.
• Detecting, investigating, and preventing fraudulent transactions, account misuse, collusion, bonus abuse, and other prohibited conduct as described in the 82ph Terms & Conditions.
• Complying with anti-money laundering (AML) obligations, including transaction monitoring, suspicious transaction reporting, and record-keeping requirements applicable to online gaming operators.
• Providing customer support through live chat and email, including resolving account queries, disputes, and technical issues.
• Sending account-related communications, including transaction confirmations, security alerts, and policy update notifications.
• Analysing platform usage patterns to improve the quality, performance, and user experience of the 82ph Platform for Filipino players.
• Administering responsible gaming tools, including processing self-exclusion requests, applying deposit limits, and monitoring for indicators of problem gambling behaviour.

82ph shares personal data with third parties only to the extent necessary for the purposes described in this Policy, and only with parties who have agreed to maintain appropriate standards of data security and confidentiality. 82ph does not sell, trade, or rent Player data to any third party for their independent commercial purposes.

The categories of third parties with whom 82ph may share your personal data include:

• Payment processors: GCash (GXI), Maya, BancNet, and banking institutions such as BPI, BDO, Metrobank, and UnionBank receive necessary transaction data to process deposits and withdrawals in connection with your Account.
• KYC and identity verification providers: Third-party providers contracted to perform identity verification, document authentication, and age verification services on behalf of 82ph.
• Game software providers: Licensed game studios and aggregators who supply game content to 82ph receive limited technical data (typically a pseudonymous player identifier and game session data) necessary to operate their games on the Platform.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on 82ph's behalf under data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law or a valid legal order, 82ph will disclose personal data to relevant Philippine government agencies, regulators, law enforcement authorities, or financial intelligence units.
• Professional advisers: Legal, audit, and compliance advisers who are bound by professional confidentiality obligations.

82ph uses cookies and similar tracking technologies on the Platform to provide essential functionality, improve performance, and understand how Players use the site. A cookie is a small data file placed on your device when you visit a website.

The categories of cookies used by 82ph are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as maintaining your login session, remembering your security preferences, and ensuring that your account dashboard loads correctly. These cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how Players navigate the Platform — which pages are visited, how long sessions last, and which features are most used. This helps 82ph identify and fix performance issues and prioritise product improvements.
• Functional cookies: These cookies remember your preferences, such as your preferred game categories, language settings, and notification options, to provide a more personalised experience on return visits.
• Security cookies: Used for fraud detection and prevention purposes, including identifying suspicious session behaviour that may indicate an unauthorised access attempt.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use certain features of the 82ph Platform, including the ability to stay logged in during a session.

82ph implements and maintains technical, organisational, and administrative security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, disclosure, or misuse. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Players' devices and 82ph's servers.
• Encryption at rest for sensitive personal data including KYC documents and payment account information stored in 82ph's systems.
• Access controls restricting internal access to personal data to employees and contractors who have a demonstrated need-to-know for legitimate business purposes.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication options for Player accounts and mandatory multi-factor authentication for 82ph staff accessing administrative systems.
• Comprehensive logging and monitoring of access to systems holding personal data, with automated alerts for suspicious activity patterns.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected Players, 82ph will notify the National Privacy Commission (NPC) of the Philippines within 72 hours of becoming aware of the breach, and will notify affected Players without undue delay as required by the DPA.

82ph retains personal data for as long as necessary to fulfil the purposes for which it was collected, as required to perform the contractual relationship with you, and as required by applicable law. The following general retention periods apply:

• Active Account data: Retained for the duration of your account's existence on the 82ph Platform.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or last transaction, as required by applicable anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with Philippine financial record-keeping requirements applicable to gaming operators.
• Customer support records: Retained for up to three (3) years following the resolution of each support interaction, to facilitate reference in connection with future disputes or queries.
• Technical and session logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or de-identified. Data that has been anonymised such that it can no longer be associated with any individual is no longer considered personal data and may be retained for analytical or statistical purposes indefinitely.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights as a data subject in relation to the personal data that 82ph holds about you:

• Right to be informed: The right to be informed of how your personal data is collected, used, and processed, as set out in this Privacy Policy.
• Right to access: The right to request a copy of the personal data that 82ph holds about you, along with information about how that data is being processed.
• Right to correct: The right to request correction of inaccurate, incomplete, or outdated personal data that 82ph holds about you. Many basic corrections can be made directly within your 82ph account settings.
• Right to erasure or blocking: The right to request deletion or blocking of your personal data where: the data is no longer necessary for the purpose for which it was collected; you have withdrawn consent (where consent was the legal basis); or the data has been unlawfully processed.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that 82ph transmit that data to another service provider where technically feasible.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time, and to object to other forms of processing in certain circumstances.
• Right to withdraw consent: Where 82ph processes your data based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 82ph has processed your personal data in violation of the DPA.

To exercise any of the above rights, please contact 82ph's Data Protection Officer using the contact details set out in Section 15. 82ph will respond to all data subject requests within thirty (30) days, or as otherwise required by applicable law. Some requests may require identity verification before they can be processed to protect your data from unauthorised access.

The 82ph Platform is strictly intended for use by adults aged 21 years and above only. This is the minimum legal age for participation in casino-style online gaming in the Philippines pursuant to applicable regulations.

82ph does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. All account registrations require confirmation of date of birth, and KYC verification requires submission of valid government-issued Philippine identification confirming the Player's age.

If 82ph discovers or is notified that a person under the age of 21 has registered an account and provided personal data, 82ph will:

• Immediately suspend the relevant account.
• Void any wagers placed and return any deposits to the originating payment method.
• Delete all personal data associated with the underage account as promptly as possible, except where retention is required for legal or regulatory purposes.

Some of 82ph's third-party service providers — including game software suppliers, cloud infrastructure providers, and technology platform vendors — may be located outside the Philippines. Where personal data is transferred to recipients in other jurisdictions, 82ph takes appropriate steps to ensure that such transfers are compliant with the DPA and that the receiving party provides a level of protection for personal data that is at least equivalent to the protections afforded under Philippine law.

Such steps may include requiring the receiving party to sign a data transfer agreement incorporating standard contractual clauses, verifying that the receiving country's data protection laws provide adequate protection as assessed under DPA standards, or obtaining your explicit consent to the transfer where required.

By using the 82ph Platform and accepting this Privacy Policy, you acknowledge that your personal data may be processed and stored in jurisdictions outside the Philippines in connection with the services described in this Policy, subject to the safeguards described above.

82ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes in 82ph's data processing practices, or other operational developments. The "Effective Date" at the top of this Policy indicates when the current version came into effect.

Where changes to this Policy are material — meaning they significantly affect how 82ph processes your personal data or your rights as a data subject — 82ph will notify registered Players via email to the address associated with their account, or through a prominent notice displayed on the 82ph Platform upon login. Non-material updates such as typographical corrections or clarifications may be made without specific notification.

Your continued use of the 82ph Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you should cease using the Platform and may request account closure as described in the 82ph Terms & Conditions.

For questions about this Privacy Policy, to exercise any of your data subject rights described in Section 11, or to report a potential privacy concern, please contact 82ph through the following channels:

• Live Chat (fastest response): Available 24/7 directly on the 82ph Platform. Our Filipino-speaking support agents can handle most account-related privacy queries and escalate formal data subject requests to the Data Protection Officer on your behalf.
• Data Protection Officer (formal requests): For formal data subject access requests, correction requests, erasure requests, or complaints, please contact the 82ph Data Protection Officer directly by email at: [email protected] with the subject line "Data Privacy Request — [Your Name]." Please include your registered account username and a clear description of your request.

82ph will acknowledge receipt of all formal data subject requests within five (5) business days. We aim to fully respond within thirty (30) days, as required by the DPA's Implementing Rules and Regulations. Complex requests may require additional time, in which case 82ph will notify you of the expected timeline.

If you are not satisfied with 82ph's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

This Privacy Policy was last updated and became effective on January 1, 2026. It supersedes all previous versions of the 82ph Privacy Policy.