Privacy Policy

This Privacy Policy ("Policy") describes how ph580 ("ph580," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the ph580 online casino platform available at https://ph580.app (the "Platform"), including all associated games, features, promotions, and support services.

ph580 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

ph580 collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address (including city, province, and postal code)
• Email address
• Mobile phone number
• Username and encrypted password
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or liveness check images for identity confirmation
• Source of funds documentation where required by anti-money laundering regulations

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash account reference, PayMaya account reference, BPI/BDO/Metrobank account details — stored in tokenized form only)
• Account balance history
• Bonus and promotional transaction records

2.4 Gaming Activity Data

• Game session logs, including games played, wagers placed, and outcomes
• Responsible gaming tool usage (deposit limits, session reminders, self-exclusion requests)
• Loyalty program points and tier history

2.5 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited, features used, and time spent on the Platform
• Login timestamps and session duration
• Cookie and tracking technology data (see Section 7)

2.6 Communications Data

• Records of your communications with ph580 customer support
• Feedback, survey responses, and complaint records
• Email and in-platform notification preferences

ph580 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically — through cookies, server logs, and similar technologies when you access and use the Platform (see Section 7);
• From third-party service providers — including identity verification providers, payment processors, and fraud detection services, who may share data with us as part of their service delivery;
• From regulatory and law enforcement authorities — where we are legally required to receive or share information in connection with our compliance obligations.

ph580 uses your personal data for the following purposes:

ph580 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have given explicit consent.

ph580 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing is necessary to perform our contract with you (i.e., to provide the ph580 gaming platform and associated services);
• Legal obligation — processing is required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) laws, PAGCOR licensing requirements, and tax reporting obligations;
• Legitimate interests — processing is necessary for ph580's legitimate interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and freedoms;
• Consent — where we rely on your consent (e.g., for optional marketing communications), you may withdraw that consent at any time by contacting our support team or updating your account preferences.

ph580 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals;
• Identity verification providers — third-party KYC and AML compliance service providers who assist us in verifying your identity and screening for financial crime risks;
• IT and platform service providers — cloud hosting, cybersecurity, and software vendors who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where we are legally required to disclose information;
• Professional advisors — lawyers, auditors, and accountants, where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations;
• Business successors — in the event of a merger, acquisition, or sale of all or part of ph580's business, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

ph580 uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform. The following types of cookies are used:

ph580 does not use third-party advertising or retargeting cookies. You can manage or delete cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform.

ph580 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements;
• Transaction and financial data — retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (RA 9160, as amended);
• KYC documentation — retained for a minimum of five (5) years following the end of the business relationship;
• Customer support communications — retained for three (3) years from the date of the last interaction;
• Technical and usage data — retained for up to twelve (12) months, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph580's data disposal procedures.

ph580 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph580 Platform;
• Encryption at rest for sensitive personal data stored on our servers;
• Access controls — personal data is accessible only to authorized ph580 personnel who require it to perform their job functions;
• Multi-factor authentication for internal systems access by ph580 staff;
• Regular security audits and penetration testing conducted by independent cybersecurity professionals;
• Incident response procedures to detect, contain, and remediate data security incidents promptly.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ph580:

• Right to be informed — the right to know that your personal data is being collected and processed, and to receive clear information about how it is used;
• Right to access — the right to request a copy of the personal data ph580 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking — the right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to object — the right to object to the processing of your personal data on grounds relating to your particular situation, or to object to processing for direct marketing purposes;
• Right to data portability — the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to damages — the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data;
• Right to file a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. ph580 will respond to all verified data subject requests within thirty (30) days of receipt, or within such other timeframe as required by applicable law.

The ph580 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. ph580 does not knowingly collect personal data from individuals under the age of 21.

During registration, ph580 requires all players to confirm that they meet the minimum age requirement and to provide their date of birth. We conduct age verification checks as part of our KYC process and reserve the right to request proof of age at any time.

ph580 primarily processes and stores personal data within the Philippines. In certain circumstances, your personal data may be transferred to, or accessed by, service providers located outside the Philippines — for example, cloud infrastructure providers or identity verification services operating internationally.

Where such transfers occur, ph580 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to maintain data protection standards equivalent to those required under Philippine law;
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by the NPC;
• Your explicit consent, where required.

ph580 will not transfer your personal data to jurisdictions that do not provide adequate data protection safeguards without your prior consent or a lawful basis for doing so.

ph580 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Notify registered players via the email address on file or through a prominent notice on the Platform;
• Where required by law, seek your renewed consent before applying material changes to the processing of your personal data.

We encourage you to review this Privacy Policy periodically to stay informed about how ph580 protects your personal data. Your continued use of the Platform following the posting of any changes constitutes your acceptance of the revised Policy. If you do not agree with any changes, you must stop using the Platform and may request account closure by contacting our support team.

ph580 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channels:

• Support Page: ph580.app/support
• Email: [email protected]

Please include "Privacy Request" or "Data Subject Rights" in the subject line of your message so our team can route your inquiry to the DPO promptly. ph580 aims to acknowledge all privacy-related inquiries within five (5) business days and to resolve them within thirty (30) days.

If you are not satisfied with ph580's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act.