Your personal data belongs to you. This Privacy Policy explains exactly what ph24 collects, why we collect it, how we use it, and the rights you have under Philippine law to control your own information.
These highlights cover the most important points of the ph24 Privacy Policy. They are not a substitute for the full policy — please read the complete document below.
ph24 processes all personal data in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Your data is never sold to third parties for marketing purposes.
All data transmitted between your device and ph24 is protected by 256-bit SSL encryption — the same standard used by major Philippine banks including BPI, BDO, and Metrobank for their online banking platforms.
Under the Data Privacy Act, you have the right to access, correct, erase, and object to the processing of your personal data. ph24 provides clear channels to exercise all of these rights directly through your Account or by contacting support.
ph24 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Data shared with third parties is limited strictly to what is necessary for payment processing, KYC verification, and regulatory compliance.
ph24 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Philippine law. Account data is retained for a minimum of five (5) years following account closure in compliance with AMLA requirements.
In the unlikely event of a personal data breach that poses a real risk to your rights and freedoms, ph24 will notify the National Privacy Commission (NPC) within 72 hours and inform affected users as required under Philippine data privacy regulations.
ph24 ("we," "us," or "our") operates the online gaming platform accessible at https://ph24.app. We are committed to protecting the privacy and personal data of every individual who accesses or uses the ph24 platform, including registered players, visitors, and prospective users (collectively, "you" or "Data Subject").
This Privacy Policy describes how ph24 collects, uses, stores, shares, and protects your personal data. It also explains the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC).
By accessing the ph24 platform, creating an Account, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, please discontinue use of the ph24 platform immediately.
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, ph24 acts as the Personal Information Controller (PIC) with respect to the personal data collected through the ph24 platform. As PIC, ph24 determines the purposes and means of processing your personal data.
ph24 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the DPA and this Privacy Policy. Contact details for the ph24 DPO are provided in Section 13 of this document.
ph24 collects the following categories of personal data, depending on how you interact with the platform:
ph24 collects personal data through the following means:
| Collection Method | Examples |
|---|---|
| Direct submission | Registration form, KYC document upload, support inquiries, deposit and withdrawal requests |
| Automated collection | Cookies, server logs, session tracking, device fingerprinting during platform use |
| Third-party providers | KYC verification partners, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services |
| Regulatory sources | PAGCOR self-exclusion registers, AMLC watchlists, and other legally mandated data sources |
ph24 collects only the minimum personal data necessary for the specific purpose for which it is collected, consistent with the principle of data minimization under the DPA.
ph24 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The following table sets out the primary purposes for which ph24 processes personal data and the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and identity verification | Performance of contract; compliance with legal obligation (KYC/AML) |
| Processing deposits and withdrawals | Performance of contract; compliance with legal obligation (AMLA) |
| Providing gaming services and customer support | Performance of contract |
| Fraud prevention and security monitoring | Legitimate interests; compliance with legal obligation |
| Responsible gaming monitoring and intervention | Legitimate interests; compliance with PAGCOR regulatory requirements |
| Sending transactional communications (e.g., deposit confirmations) | Performance of contract |
| Sending promotional communications and bonus offers | Consent (you may withdraw consent at any time) |
| Regulatory reporting to PAGCOR and AMLC | Compliance with legal obligation |
| Platform analytics and service improvement | Legitimate interests |
ph24 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. ph24 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
ph24 engages third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under the DPA. These include KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection and cybersecurity providers, and cloud infrastructure providers. All PIPs are bound by data processing agreements that require them to process personal data only on ph24's instructions and in compliance with the DPA.
ph24 is required by Philippine law to share certain personal data with regulatory and law enforcement authorities, including but not limited to:
In the event of a merger, acquisition, or sale of all or substantially all of ph24's assets, your personal data may be transferred to the acquiring entity as part of that transaction. ph24 will notify affected users of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.
ph24 uses cookies and similar tracking technologies to operate and improve the platform, personalize your experience, and support security and fraud prevention functions. A cookie is a small text file placed on your device when you visit the ph24 platform.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens | No — required for platform operation |
| Functional | Remembering your preferences (language, game settings) | Yes — via browser settings |
| Analytics | Understanding how players use the platform to improve services | Yes — via cookie preferences |
| Security | Fraud detection, bot prevention, suspicious activity monitoring | No — required for platform security |
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph24 platform. ph24 does not use third-party advertising cookies or share cookie data with external advertising networks.
ph24 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
While ph24 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. ph24 cannot guarantee absolute security but commits to promptly addressing any security incidents in accordance with the DPA and NPC regulations.
ph24 retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following retention periods apply:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account and identity data | Duration of Account + 5 years after closure | AMLA compliance; PAGCOR regulatory requirements |
| KYC verification documents | Duration of Account + 5 years after closure | AMLA; BSP regulations |
| Financial transaction records | 10 years from transaction date | AMLA; BIR requirements |
| Gaming activity logs | 5 years from date of activity | PAGCOR regulatory requirements |
| Support communications | 3 years from last interaction | Legitimate interests; dispute resolution |
| Marketing preferences | Until consent is withdrawn | Consent |
Upon expiry of the applicable retention period, ph24 will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph24:
ph24 may need to verify your identity before processing a data subject rights request to ensure that personal data is not disclosed to unauthorized parties. ph24 reserves the right to decline requests that are manifestly unfounded, excessive, or that conflict with ph24's legal obligations.
The ph24 platform is strictly intended for individuals who are 21 years of age or older, consistent with the minimum legal age for casino-style gambling in the Philippines under PAGCOR regulations. ph24 does not knowingly collect personal data from individuals under the age of 21.
If ph24 becomes aware that personal data has been collected from a person under 21 years of age, ph24 will immediately suspend the associated Account, delete the personal data in question, and take appropriate steps to prevent further access by the underage individual.
ph24 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The most current version of this Privacy Policy will always be available at https://ph24.app/privacy-policy, with the effective date clearly indicated at the top of the document.
Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way ph24 processes your personal data — ph24 will notify registered users via the email address on file at least fourteen (14) days before the changes take effect. Your continued use of the ph24 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.
If you do not agree with any changes to this Privacy Policy, you should discontinue use of the ph24 platform and may request closure of your Account in accordance with the Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or ph24's data processing practices, please contact the ph24 Data Protection Officer using the details below. Our DPO is available to assist you with all data privacy matters, including the exercise of your rights as a Data Subject under the DPA.
ph24 is committed to resolving all data privacy concerns promptly and transparently. We encourage you to contact our DPO in the first instance before escalating any matter to the NPC, as most concerns can be resolved directly and efficiently through our internal process.
Your data is protected, your privacy is respected, and your gaming experience is backed by ph24's commitment to security and compliance. Join players from Manila to Mindanao — 21+ only, play responsibly.