ph479 Privacy Policy

1. Introduction

ph479 is the Philippines' PAGCOR-regulated online gaming platform, serving hundreds of thousands of Filipino players from Manila, Cebu, Davao, and across the archipelago. As part of delivering our gaming services — slots, live casino, bingo, Happy Fishing, Fortune Snake, and more — ph479 necessarily collects and processes certain personal information about our players.

We take this responsibility seriously. ph479 collects only the data necessary to operate our platform safely, legally, and fairly. We do not sell your personal data to third parties. We do not share your information with advertisers without your consent. This Policy is designed to give you a clear, honest picture of how your data is handled from the moment you visit ph479.org to long after your last session.

This Policy should be read alongside the ph479 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

The data controller responsible for your personal information collected through ph479.org is the ph479 operating entity registered and regulated to offer online gaming services in the Philippines under PAGCOR oversight. For purposes of the Data Privacy Act of 2012, ph479 has appointed a Data Protection Officer (DPO) who can be contacted as specified in Section 14 of this Policy.

ph479 is registered with the National Privacy Commission (NPC) as required under the DPA and its Implementing Rules and Regulations.

3. Personal Data We Collect

ph479 collects the following categories of personal data:

ph479 does not intentionally collect sensitive personal information (as defined under Section 3(l) of the DPA) unless specifically required for compliance purposes, in which case additional consent will be sought.

4. How We Collect Your Data

ph479 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access ph479.org, including via cookies, web beacons, log files, and analytics tools;
• Third-party sources: Identity verification providers, payment processors (GCash, PayMaya, banking partners), and fraud detection services — solely to verify the accuracy of information you have provided or to detect suspicious activity;
• PAGCOR and government sources: Where required by law to comply with PAGCOR reporting obligations or the Anti-Money Laundering Act (RA 9160, as amended).

5. Purpose & Legal Basis for Processing

ph479 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The primary bases we rely on are:

• Contractual necessity: Processing required to provide you with ph479 gaming services — account management, deposits, withdrawals, game access, bonus administration;
• Legal obligation: Compliance with PAGCOR regulations, Anti-Money Laundering Act requirements, National Privacy Commission registration, and tax reporting;
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and improving our services — where these interests do not override your fundamental privacy rights;
• Consent: Marketing communications and optional analytics, where you have given explicit consent. You may withdraw consent at any time by contacting support or updating your communication preferences in account settings.

6. Sharing Your Personal Data

ph479 does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary:

• Payment processors: GCash (Mynt/Globe Fintech Innovations), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, UnionBank, and 7-Eleven payment partners — to process deposits and withdrawals;
• Gaming software providers: Game studios and live casino platform providers who supply games offered on ph479 — limited to the session and wagering data necessary to operate their games;
• Identity verification services: Third-party KYC providers engaged to verify government-issued IDs in compliance with PAGCOR and AMLC requirements;
• Regulators and law enforcement: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and Philippine law enforcement agencies — where required by law or court order;
• Professional advisors: Legal counsel, auditors, and compliance consultants — bound by strict confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or transfer of ph479's business assets, your data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third parties with whom ph479 shares personal data are contractually required to maintain the confidentiality and security of that data in accordance with the DPA and applicable law.

7. Data Retention

ph479 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are:

• Active account data: Retained for the duration of your active relationship with ph479 plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLC regulations;
• Transaction records: Retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act;
• KYC documentation: Retained for five (5) years after account closure or the last transaction, whichever is later;
• Support communications: Retained for three (3) years after the resolution of the relevant inquiry or dispute;
• Technical/log data: Generally retained for twelve (12) months, after which it is anonymized or deleted.

When data is no longer required, ph479 securely destroys or anonymizes it in accordance with NPC-recommended disposal practices.

8. Data Security

ph479 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph479.org;
• Encryption of sensitive data at rest, including passwords (hashed with bcrypt) and financial information;
• Two-factor authentication (2FA) available to all players and mandatory for privileged internal accounts;
• Role-based access controls limiting internal access to personal data to only those staff members who require it to perform their duties;
• Regular third-party security audits and penetration testing of the ph479 platform;
• Incident response procedures in compliance with NPC Circular No. 16-03 (Personal Data Breach Management).

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph479 will notify you and the National Privacy Commission within the timeframes prescribed by the DPA and applicable NPC circulars.

9. Cookies & Tracking Technologies

ph479 uses cookies and similar tracking technologies to enhance your experience, maintain session state, and analyze platform usage. The types of cookies we use include:

• Strictly necessary cookies: Required for the platform to function — login sessions, wallet state, game loading. Cannot be disabled;
• Functional cookies: Remember your preferences (language, last game played). Can be disabled but may affect your experience;
• Analytics cookies: Used to understand how players use ph479 in aggregate — game popularity, session length, deposit conversion. Data is anonymized before analysis;
• Security cookies: Used to detect fraudulent login attempts and suspicious activity patterns.

ph479 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using the ph479 platform.

10. Your Rights Under the Data Privacy Act of 2012

As a data subject under RA 10173, you have the following rights with respect to your personal data held by ph479:

• Right to be Informed: The right to know how your data is collected, processed, and used — as described in this Policy;
• Right to Access: The right to request a copy of the personal data ph479 holds about you;
• Right to Object: The right to object to the processing of your personal data on grounds relating to your particular situation, particularly for processing based on legitimate interests;
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary, unlawful, or where you have withdrawn consent — subject to ph479's legal obligations to retain certain data;
• Right to Rectification: The right to correct inaccurate or incomplete personal data held about you;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Damages: The right to claim compensation if you have suffered harm as a result of ph479's unlawful processing of your personal data;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (privacy.gov.ph) if you believe ph479 has violated your data privacy rights.

To exercise any of the above rights, please contact ph479's Data Protection Officer as described in Section 14 of this Policy. ph479 will respond to all verified requests within fifteen (15) working days of receipt, as required by the DPA.

11. Minors & Age Restriction

ph479 does not knowingly collect personal data from individuals under 21 years of age. In accordance with PAGCOR regulations, access to ph479 gaming services is strictly restricted to adults aged 21 and above. Age verification is a mandatory step during registration.

If ph479 discovers that personal data has been collected from a person under 21 without proper parental or legal guardian consent, such data will be deleted immediately and the associated account permanently closed. Parents or guardians who believe a minor has registered on ph479 should contact our support team immediately.

12. Cross-Border Data Transfers

Some of ph479's third-party service providers — including gaming software suppliers and cloud infrastructure providers — may process data outside the Philippines. Where such transfers occur, ph479 ensures that:

• The recipient country provides an adequate level of data protection, or
• Appropriate contractual safeguards are in place (such as Standard Contractual Clauses or equivalent data processing agreements), and
• The transfer has been registered with or approved by the National Privacy Commission where required by NPC Circular No. 2022-02 on cross-border data transfers.

13. Changes to This Privacy Policy

ph479 may update this Privacy Policy periodically to reflect changes in law, regulatory guidance, or our data processing practices. When material changes are made, ph479 will notify registered players via email and/or an in-platform notification at least seven (7) days before the updated Policy takes effect, where reasonably practicable.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of ph479 following the effective date of any revision constitutes acceptance of the updated Policy.

14. Contact Us & Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph479, please contact our Data Protection Officer:

• DPO Email: [email protected]
• Live Chat: Available 24/7 in Tagalog and English via the ph479 platform.
• NPC Complaint: You may also file a complaint directly with the National Privacy Commission at privacy.gov.ph.

ph479 is committed to resolving privacy concerns promptly and transparently. We will acknowledge all data privacy requests within five (5) working days and provide a full response within fifteen (15) working days.