ph 29 is committed to protecting the personal information of every Filipino player on our platform. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold under Philippine law.
Six core privacy principles that guide how ph 29 collects, uses, and safeguards the personal information of Filipino players.
ph 29 processes your personal data only where a lawful basis exists under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). We are transparent about what data we hold, why we hold it, and how long we keep it. Nothing is collected in the background without disclosure in this Policy.
Personal data collected by ph 29 is used only for the purposes stated in this Privacy Policy. We do not repurpose your data for unrelated commercial activities, and we do not sell your personal information to third-party advertisers or data brokers under any circumstances.
ph 29 collects only the personal data that is strictly necessary for the specific purpose it serves. KYC data is collected because PAGCOR and the AMLA require it — not for marketing profiling. Payment data is collected to process transactions — not stored beyond operational necessity. We do not hoard data speculatively.
ph 29 implements 256-bit SSL encryption for all data in transit, AES-256 encryption for stored sensitive personal data, role-based access controls limiting staff access to personal data to the minimum necessary for their function, and regular independent security audits of the ph 29 platform and data infrastructure.
Philippine law under the Data Privacy Act grants you significant rights over your personal data held by ph 29 — including the right to access, correct, erase, object, and port your data. ph 29 has a dedicated process for handling Data Subject Requests and commits to responding within the timeframes required by the National Privacy Commission.
In the event of a personal data breach that poses a real risk of serious harm to ph 29 players, ph 29 will notify affected individuals and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the Data Privacy Act and NPC Circular 16-03. We will communicate what happened, what data was affected, and what steps we are taking.
This Privacy Policy applies to all personal data collected, processed, stored, or otherwise handled by ph 29 in connection with the ph 29 online casino platform accessible at ph29.win (the "Platform"). It applies to all registered players, prospective players who have initiated registration, and visitors to the Platform who have not yet registered.
This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (the "DPA") and its Implementing Rules and Regulations (IRR), and applicable issuances of the National Privacy Commission (the "NPC"). It complements and should be read alongside ph 29's Terms and Conditions.
Scope Note: This Policy does not cover personal data processed by third-party service providers operating their own independent platforms — for example, GCash, Maya, BPI, or BDO when you interact with those platforms directly to fund your ph 29 account. Those providers maintain their own privacy policies, which govern their independent data processing activities.
ph 29 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the Platform, as defined under Section 3(h) of the DPA. ph 29 determines the purposes for which and the means by which personal data is processed.
ph 29 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Privacy Policy, responding to data subject requests, and liaising with the National Privacy Commission. The DPO may be contacted at the details provided in Section 16 of this Policy.
ph 29 collects the following categories of personal data about registered players and Platform users:
| Data Category | Specific Data Points | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government ID number (PhilSys, passport, driver's licence, SSS/GSIS) | Registration / KYC verification |
| Contact Data | Philippine mobile number, email address, residential address (province, city/municipality, barangay) | Registration |
| Financial Data | GCash / Maya registered mobile number, bank account name and number (for bank transfer withdrawals), deposit and withdrawal transaction records, account balance history | Deposits / withdrawals |
| Gaming Activity Data | Game sessions played, bet amounts, wager outcomes, bonus usage, session duration, game category preferences | Ongoing platform use |
| Technical Data | IP address, device type and identifier, browser type and version, operating system, approximate geolocation, login timestamps | All platform visits |
| Communications Data | Customer support chat transcripts, email correspondence, support ticket records | Support interactions |
| Responsible Gaming Data | Deposit limit settings, session limit settings, self-exclusion status and period, cooling-off history | Account settings |
ph 29 does not collect biometric data, sensitive personal information as defined under Section 3(l) of the DPA (other than government ID numbers as required for KYC compliance), or information about religious or political beliefs.
ph 29 collects personal data through the following means:
ph 29 processes your personal data for the following purposes:
Under the DPA and its IRR, ph 29 relies on the following legal bases for processing personal data:
ph 29 does not sell your personal data. ph 29 may disclose your personal data to the following categories of recipients strictly as necessary for the purposes described in this Policy:
Third-Party Processors: All third parties that process personal data on ph 29's behalf are engaged under written data processing agreements that impose DPA-equivalent confidentiality, security, and purpose-limitation obligations. ph 29 remains accountable as PIC for processing conducted by these parties on its behalf.
Some of ph 29's IT infrastructure and third-party service providers may process personal data outside the Philippines. Where personal data is transferred to a recipient in a foreign country, ph 29 ensures that adequate safeguards are in place, including contractual data protection clauses consistent with NPC requirements under Section 21 of the DPA IRR.
Cross-border transfers occur only where necessary for the service delivery purposes described in this Policy and are limited to the minimum personal data required for the specific service. ph 29 does not transfer personal data to third countries for independent commercial exploitation.
ph 29 retains personal data for the periods set out in the following table, or for longer periods where required by applicable Philippine law:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| KYC / Identity documents | 5 years after account closure | AMLA Section 9(b); PAGCOR requirements |
| Transaction and financial records | 5 years from transaction date | AMLA Section 9(b); BIR record-keeping rules |
| Gaming activity logs | 2 years after account closure | PAGCOR operational requirements; dispute resolution |
| Customer support records | 3 years after interaction | Legitimate interest; dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | DPA consent accountability requirement |
| Technical / server log data | 12 months from collection | Security and fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual player.
ph 29 implements the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:
Player Responsibility: While ph 29 implements robust platform-level security, no security system is impenetrable. You are responsible for maintaining the confidentiality of your ph 29 Account login credentials. ph 29 is not liable for unauthorised access to your Account resulting from your failure to keep your password confidential, your use of a shared or compromised device, or your voluntary disclosure of credentials to a third party.
ph 29 uses cookies and similar tracking technologies on the Platform for the following purposes:
ph 29 does not use third-party advertising cookies or cross-site tracking technologies that share your Platform behaviour data with external advertising networks.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the ph 29 Platform.
The ph 29 Platform is strictly intended for individuals aged 21 years and above, in compliance with Philippine law governing the minimum gambling age. ph 29 does not knowingly collect or process personal data from individuals under 21 years of age.
Where ph 29 discovers or has reasonable grounds to believe that an Account has been registered by or on behalf of a person under 21 years of age, ph 29 will immediately suspend the Account, notify the registered contact and relevant authorities where required, and securely delete any personal data collected, retaining only that which is required by law for the investigation.
If you believe a minor has registered at ph 29: Please contact the ph 29 Data Protection Officer immediately at [email protected] with the relevant Account details. We treat reports of underage access with the highest priority and will act immediately upon receipt of a credible report.
As a data subject under the Philippine Data Privacy Act, you hold the following rights in respect of personal data held by ph 29. These rights may be exercised by submitting a Data Subject Request to the ph 29 DPO as described in Section 16.
ph 29 will respond to verified Data Subject Requests within 15 working days of receipt. Where additional time is required to fulfil a complex request, ph 29 will notify you within the initial 15-day period and provide a revised response timeline.
Note that certain rights are subject to exceptions under the DPA — for example, ph 29 cannot erase personal data it is legally required to retain under the AMLA or PAGCOR regulations, even upon request.
If you are not satisfied with ph 29's response to a Data Subject Request, or if you believe ph 29 has otherwise violated your rights under the DPA, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.
Before escalating to the NPC, ph 29 encourages you to contact the ph 29 DPO directly to attempt resolution. Many privacy concerns can be resolved more quickly and effectively through direct communication with ph 29's privacy team than through a formal regulatory complaint process.
Information on the NPC complaints process is publicly available on the NPC's official website and through its public assistance channels. ph 29 cooperates fully with all NPC investigations and inquiries.
ph 29 may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidance, ph 29's data processing activities, or Platform functionality. Material changes to this Policy will be communicated to registered players via the email address registered to their Account, with at least seven (7) days' notice before the revised Policy takes effect.
The date of the most recent revision is displayed at the top of this Policy. Your continued use of the ph 29 Platform after the effective date of a revised Policy constitutes your acknowledgment of and agreement to the revised Policy terms.
ph 29 recommends that players review this Privacy Policy periodically to remain informed about how their personal data is protected.
For all data privacy enquiries, Data Subject Requests, or concerns regarding ph 29's processing of your personal data, please contact the ph 29 Data Protection Officer:
This Privacy Policy was last revised on 1 January 2026 and supersedes all prior versions. By registering an Account or continuing to use the ph 29 Platform, you acknowledge that you have read and understood this Privacy Policy.
Your personal data is protected under the Philippine Data Privacy Act. Join over 500,000 Filipino players on a PAGCOR-regulated platform built with genuine privacy and security at its core.
For players 21 years of age and older only. Please play responsibly and within your means.
21+ ph 29 is strictly for players aged 21 and above. Online gambling is regulated by PAGCOR in the Philippines. Play responsibly. Visit our Responsible Gaming page for self-exclusion tools and support resources.