87ph Privacy Policy

1. Introduction

1.1 87ph is committed to protecting the privacy and personal data of all players and visitors to the Platform. We understand that trust is the foundation of any relationship between a player and an online gaming platform, and we take our data protection obligations seriously.

1.2 This Policy applies to all personal data collected through the 87ph website, mobile application, customer support channels, and any other touchpoints through which you interact with the Platform. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

1.3 87ph processes personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, we also observe international best practices in data protection.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, 87ph acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes through the Platform.

2.2 If you have any questions about how 87ph handles your personal data, or if you wish to exercise any of your rights as a data subject, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

3.1 87ph collects the following categories of personal data:

3.2 Sensitive Personal Information. In certain circumstances, 87ph may collect sensitive personal information as defined under the DPA, such as government-issued identification numbers required for KYC verification. Such data is handled with the highest level of care and is processed only to the extent strictly necessary for compliance with legal and regulatory obligations.

3.3 Voluntary Disclosure. You are not obligated to provide all requested information; however, failure to provide certain data — particularly identity and financial data — may prevent 87ph from opening or maintaining your account or processing transactions.

4. How We Collect Your Data

4.1 87ph collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Data collected automatically when you access the Platform, including cookies, web beacons, log files, and similar tracking technologies;
• Third-party sources: Data received from payment processors (such as GCash and PayMaya), identity verification providers, fraud prevention services, and analytics partners, where permitted by applicable law;
• Publicly available sources: Data obtained from public records or databases where relevant to fraud prevention or regulatory compliance.

5. How We Use Your Personal Data

5.1 87ph uses your personal data for the following purposes:

• To create, verify, and manage your 87ph player account;
• To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods;
• To verify your identity and age (21+) in compliance with PAGCOR requirements and the DPA;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities;
• To comply with applicable laws, regulations, and regulatory directives, including anti-money laundering (AML) obligations;
• To provide customer support and respond to your enquiries and complaints;
• To send you transactional communications, account notifications, and — where you have consented — promotional offers and updates about 87ph;
• To monitor and enforce responsible gaming obligations, including the application of player-set limits and self-exclusion;
• To improve the Platform's functionality, security, and user experience through analytics and performance monitoring;
• To personalise your experience on the 87ph Platform based on your preferences and usage patterns.

5.2 87ph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6. Legal Basis for Processing

6.1 87ph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management and transaction processing;
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and PAGCOR compliance requirements;
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

7.1 No Sale of Data. 87ph does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Full stop.

7.2 87ph may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions;
• Identity verification providers: Third-party KYC and age verification services engaged to verify your identity and age in compliance with regulatory requirements;
• Fraud prevention and security services: Providers engaged to detect and prevent fraudulent activity, money laundering, and other illegal conduct;
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent authorities, where required by law or regulatory directive;
• Professional advisers: Legal counsel, auditors, and compliance consultants, where necessary for the operation of the Platform.

7.3 All third-party service providers engaged by 87ph are required to process personal data only in accordance with our instructions and applicable data protection law, and to implement appropriate technical and organisational security measures.

8. Cookies and Tracking Technologies

8.1 87ph uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, and understand how you use the Platform.

8.2 The types of cookies used by 87ph include:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management and security. These cannot be disabled.
• Functional cookies: Used to remember your preferences and settings, such as language and display options.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform, helping us identify areas for improvement.
• Security cookies: Used to detect and prevent fraudulent activity and protect the integrity of the Platform.

8.3 87ph does not use third-party advertising or behavioural tracking cookies. You can manage or disable non-essential cookies through your browser settings; however, disabling certain cookies may affect the functionality of the Platform.

9. Data Security

9.1 87ph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial and identity information;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for the detection, reporting, and management of personal data breaches.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 87ph will notify the National Privacy Commission and affected data subjects in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

9.3 While 87ph takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying 87ph immediately of any suspected unauthorised access to your account.

10. Data Retention

10.1 87ph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements;
• Transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations;
• Communications data: Retained for up to three (3) years from the date of the communication, or longer where required for dispute resolution or legal proceedings;
• Technical and usage data: Retained for up to two (2) years, after which it is anonymised or deleted.

10.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 87ph's data disposal procedures.

11. Your Rights as a Data Subject

11.1 Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 87ph:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy;
• Right of access: The right to request a copy of the personal data 87ph holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object: The right to object to the processing of your personal data on grounds relating to your particular situation, where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission if you believe your data protection rights have been violated.

11.2 To exercise any of the above rights, please contact 87ph's Data Protection Officer using the contact details in Section 15. We will respond to all verified requests within thirty (30) days, or within such other period as permitted by applicable law.

11.3 87ph may need to verify your identity before processing a data subject request. We reserve the right to refuse requests that are manifestly unfounded, excessive, or repetitive.

12. Children's Privacy and Age Restriction

12.1 87ph employs age verification procedures at registration and may request documentary proof of age at any time. If you are a parent or guardian and believe that a minor has registered on the Platform, please contact us immediately using the details in Section 15.

13. International Data Transfers

13.1 In the course of operating the Platform, personal data may be transferred to and processed in countries other than the Philippines, including countries where 87ph's technology infrastructure or service providers are located.

13.2 Where personal data is transferred outside the Philippines, 87ph ensures that appropriate safeguards are in place to protect your data, including contractual clauses that impose data protection obligations on the recipient consistent with the requirements of the Data Privacy Act of 2012.

14. Changes to This Privacy Policy

14.1 87ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the Platform.

14.2 The effective date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how 87ph protects your personal data. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the changes.

15. Contact Us & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

Data Protection Officer — 87ph
Email: [email protected]
General Support: [email protected]
Website: https://87ph.xyz

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC and how to file a complaint is available through official Philippine government channels.

This Privacy Policy was last updated on January 1, 2026. Previous versions are available upon request by contacting our Data Protection Officer.