Your privacy matters at 89ph. This Policy explains exactly what personal data we collect when you use the 89ph platform, why we collect it, how we protect it, and the rights you hold over your own information under Philippine law.
Last Updated: 1 January 2026 · Effective: 1 January 2026We collect only the personal data strictly necessary to operate your 89ph account and comply with PAGCOR regulations. Nothing more.
We tell you what we collect, why we collect it, who sees it, and how long we keep it. No hidden data practices, no ambiguous language.
All personal data stored and transmitted through 89ph is protected by 256-bit TLS encryption and industry-standard server security controls.
You hold rights over your personal data under the Philippine Data Privacy Act of 2012. We honour access, correction, deletion, and portability requests.
89ph complies with the National Privacy Commission (NPC) framework under Republic Act No. 10173 (Data Privacy Act of 2012).
89ph does not sell, rent, or trade your personal data to third-party marketers or data brokers. Your data is used solely for platform operations.
We retain personal data only for as long as necessary for the original purpose of collection or as required by Philippine law and PAGCOR regulations.
In the event of a personal data breach, 89ph will notify affected players and the NPC within the timeframes prescribed by applicable Philippine law.
This Privacy Policy ("Policy") describes how 89ph ("89ph", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("Player", "User", "you", "your") who access or use the 89ph online casino and sports betting platform, including the website at 89ph.win, the 89ph Android application, the iOS application, and all associated services and features (collectively, the "Platform").
This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as enforced by the National Privacy Commission of the Philippines (NPC). 89ph is also bound by the applicable data handling requirements of PAGCOR, under whose licence the Platform operates.
By registering a 89ph account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.
🔒 Scope: This Policy applies to all personal data processed in connection with your use of the 89ph Platform, regardless of where you are located, the device you use, or the access method employed. It covers data collected both automatically (e.g., through cookies and device identifiers) and data you provide directly (e.g., during registration or KYC verification).
The data controller responsible for your personal data collected through the 89ph Platform is the 89ph operating entity, licensed by PAGCOR to offer online gaming services to players in the Philippines. As data controller, 89ph determines the purposes for which your personal data is processed and the means by which that processing is carried out.
Where 89ph engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification services, or hosting providers), those parties act as data processors under binding data processing agreements that restrict their use of your data to the specific purpose for which it was shared.
✍ Data Protection Officer: 89ph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy. Privacy-related enquiries and data subject requests may be directed to the DPO at [email protected] with the subject line "Data Privacy Request".
The categories of personal data collected by 89ph depend on your level of interaction with the Platform. The following table provides a comprehensive overview of the data categories we process:
| Data Category | Specific Data Elements | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID type and number, photograph (from ID document) | Registration & KYC verification |
| Contact Data | Philippine mobile number, email address, residential address (province / city / barangay level) | Registration & account updates |
| Financial Data | GCash or PayMaya account reference, bank account name and number (for BPI, BDO, Metrobank transfers), deposit and withdrawal transaction history | Payment processing |
| Gaming Activity | Game sessions, bet amounts, game outcomes, wagering history, bonus usage, session duration and frequency | Ongoing platform use |
| Technical Data | IP address, device type and OS, browser type and version, mobile network operator, session timestamps, unique device identifiers | Automatic — platform access |
| Communications Data | Live chat transcripts, email correspondence with support, feedback submissions | Support interactions |
| Verification Data | Source-of-funds declarations, enhanced due diligence documents, politically exposed person (PEP) status | KYC / AML compliance |
| Marketing Preferences | Opt-in or opt-out status for email, SMS, and push notification communications | Account settings |
✔ No Sensitive Data: 89ph does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA — including racial or ethnic origin, political opinions, religious beliefs, trade union membership, or health data — unless such information is contained within identity documents submitted for KYC verification, in which case it is treated with the highest level of protection and used solely for verification purposes.
89ph collects personal data through the following primary channels:
89ph processes your personal data for the following specific, legitimate purposes:
To create and maintain your 89ph account, verify your identity and age in compliance with PAGCOR's 21+ requirement, manage your account settings, and provide you with access to the Platform's features.
To process deposits made via GCash, PayMaya, BPI, BDO, Metrobank, and debit cards; to process withdrawal requests to your verified payment accounts; to maintain an accurate record of your transaction history; and to prevent payment fraud.
To comply with PAGCOR's licensing requirements, including age verification and player identification; to meet 89ph's obligations under Philippine anti-money-laundering (AML) legislation (Republic Act No. 9160, as amended); and to cooperate with lawful requests from regulatory and law enforcement authorities.
To monitor gaming patterns and identify indicators of problem gambling behaviour; to apply and enforce player-requested deposit limits, session limits, and self-exclusions; and to ensure compliance with the 21+ age restriction on all real-money accounts.
To detect, investigate, and prevent fraud, bonus abuse, multi-accounting, collusion, money laundering, and other prohibited conduct; to verify that each player holds only one account; and to maintain the integrity of the gaming environment for all 89ph players.
To respond to enquiries, complaints, and support requests; to maintain records of support interactions for quality assurance and dispute resolution purposes; and to improve the efficiency and effectiveness of the 89ph support function.
To analyse aggregated, anonymised usage data to improve platform performance, game selection, user experience, and mobile app quality. Individual-level gaming activity data used for analytics is pseudonymised where practicable.
To send you promotional communications about 89ph offers, bonuses, new games, and events via email, SMS, or push notification, strictly where you have opted in to receive such communications. See Section 14 for marketing opt-out instructions.
Under the Data Privacy Act of 2012, 89ph relies on the following legal bases to process your personal data:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation & management | Performance of contract (your 89ph Terms & Conditions agreement) |
| Payment processing | Performance of contract |
| PAGCOR & AML compliance | Legal obligation (PAGCOR licensing conditions; RA 9160) |
| Age and identity verification | Legal obligation (PAGCOR 21+ requirement; DPA legitimate purpose) |
| Fraud prevention & security | Legitimate interests of 89ph and its players |
| Responsible gaming monitoring | Legal obligation (PAGCOR); legitimate interests |
| Marketing communications | Consent (opt-in only; withdrawable at any time) |
| Analytics & platform improvement | Legitimate interests (pseudonymised / aggregated data) |
89ph does not sell your personal data to third parties. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:
⚠ Prohibition on Data Sale: Under no circumstances does 89ph sell, rent, or license your personal data to third-party advertisers, data brokers, marketing agencies, or any other commercial entity. This prohibition is absolute and applies regardless of whether your data has been anonymised.
The 89ph Platform is operated primarily within the Philippines. Where it is necessary to transfer personal data to service providers, game content platforms, or infrastructure providers located outside the Philippines, 89ph ensures that such transfers are protected by appropriate contractual safeguards, including data processing agreements with standard contractual clauses that require overseas recipients to protect your data to a standard equivalent to that required by Philippine law.
You may request information about the specific countries to which your personal data may be transferred by contacting the 89ph Data Protection Officer using the contact details in Section 17.
89ph retains your personal data for as long as your account remains active and for the period thereafter required by applicable Philippine law and PAGCOR's record-keeping requirements. The following retention periods apply:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account identity data | Duration of account + 5 years post-closure | PAGCOR requirements; RA 9160 (AML) |
| Financial transaction records | 10 years from transaction date | RA 9160 (AML); PAGCOR |
| KYC documents | Duration of account + 5 years post-closure | PAGCOR; RA 9160 |
| Gaming activity logs | Duration of account + 3 years | PAGCOR; dispute resolution |
| Customer support records | 3 years from last interaction | Legitimate interests; dispute resolution |
| Marketing preferences | Until opt-out or account closure | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 89ph's data destruction procedures.
89ph implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
🛡 Security Incident Response: In the event of a personal data security breach that is likely to result in a risk to the rights and freedoms of affected players, 89ph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by NPC Circular No. 16-03, and will notify affected players without undue delay.
The 89ph Platform uses cookies and similar tracking technologies to deliver the service, maintain your session, and improve platform performance. By using the Platform, you consent to the use of cookies as described in this section.
You may manage non-essential cookies through your browser settings. Most modern browsers allow you to view, block, and delete cookies. Note that blocking essential cookies will affect your ability to log in and use the 89ph Platform. Browser-based cookie management instructions are available through the help section of your specific browser.
89ph does not use advertising cookies or third-party tracking cookies for cross-site behavioural advertising. No player activity data is shared with external advertising networks.
The 89ph Platform is strictly restricted to individuals aged 21 years and above, in compliance with PAGCOR's online gaming regulations. 89ph does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the account registration and KYC process.
If 89ph discovers or is notified that personal data of an individual under 21 has been collected — whether through misrepresentation at registration or otherwise — 89ph will immediately close the relevant account, forfeit all associated balances in accordance with the Terms and Conditions, and permanently delete the personal data of the minor from its systems to the extent permitted by applicable law.
⚠ Underage Gambling: Providing false age information to obtain access to the 89ph Platform may constitute a criminal offence under Philippine law. 89ph cooperates fully with PAGCOR and law enforcement authorities in investigating reported cases of underage account access.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you hold the following rights in relation to your personal data held by 89ph. These rights may be exercised by submitting a written request to the 89ph Data Protection Officer as described in Section 17.
Request a copy of the personal data we hold about you, along with information about how it is being processed.
Request correction of inaccurate or incomplete personal data we hold about you without undue delay.
Request deletion of your personal data where it is no longer necessary for the original purpose or where processing was based on consent that has been withdrawn.
Object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Receive a copy of personal data you provided to 89ph in a structured, commonly used machine-readable format.
Lodge a complaint with the National Privacy Commission (NPC) if you believe 89ph has processed your personal data in violation of the DPA.
ℹ Exercising Your Rights: Rights requests are processed within 30 calendar days of receipt. 89ph may require identity verification before actioning a rights request to ensure data is not disclosed to or deleted at the request of an unauthorised party. Some rights are subject to statutory exceptions — for example, data required by law to be retained for AML or PAGCOR purposes cannot be deleted on request until the statutory retention period expires.
89ph may send you promotional communications about bonuses, new games, tournaments, and special offers by email, SMS, or in-app push notification, strictly where you have provided explicit opt-in consent to receive such communications at the time of registration or subsequently through your account settings.
You may withdraw your consent to marketing communications at any time, at no cost and without providing any reason, by:
Withdrawal of marketing consent does not affect your ability to receive transactional communications from 89ph — including account statements, deposit and withdrawal confirmations, security alerts, and support responses. These communications are sent on the basis of contract performance and legitimate interests and are not subject to marketing opt-out.
As a PAGCOR-licensed online gaming operator and a covered institution under Republic Act No. 9160 (Anti-Money Laundering Act of 2001, as amended by RA 10167 and RA 10365), 89ph has mandatory legal obligations to collect, verify, and retain specific personal and financial data from all registered players.
These obligations include, but are not limited to: verification of player identity and age before account activation; ongoing monitoring of player transaction patterns for indicators of money laundering or terrorist financing; filing of covered transaction reports (CTRs) for individual transactions meeting statutory thresholds; and filing of suspicious transaction reports (STRs) with the AMLC where reasonable grounds exist to suspect that funds are proceeds of an unlawful activity.
The processing of personal data for AML and PAGCOR compliance purposes is mandatory and cannot be opted out of. If you do not consent to such processing, you will not be able to maintain an active 89ph account. This processing is carried out on the basis of legal obligation and is not subject to the general data subject rights described in Section 13, to the extent that those rights would conflict with 89ph's statutory obligations.
89ph may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, NPC guidance, PAGCOR requirements, or the features and services offered through the Platform. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.
Where changes are material — for example, a change in the categories of data we collect, a new sharing relationship with a third party, or a change in your rights — 89ph will notify registered Players by email to the address on file and/or through a notice displayed upon next Platform login, at least seven (7) days before the changes take effect.
Continued use of the 89ph Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must close your account before the effective date of the change.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights under the Data Privacy Act of 2012, or wish to raise a concern about 89ph's data handling practices, please contact the 89ph Data Protection Officer through the following channels:
🔒 Identity Verification for Rights Requests: To protect your personal data, 89ph requires identity verification before processing any data subject rights request. You will be asked to confirm your account username and verify your identity using a method consistent with your existing KYC verification level before any data is accessed, corrected, or deleted on your behalf.
Now that you understand how 89ph protects your data, you can play knowing your personal information and financial transactions are secured to PAGCOR and NPC standards. Join over a million Filipino players on the platform.
By creating an account, you agree to the 89ph Privacy Policy and Terms & Conditions. Players must be 21+ years of age.