903ph Privacy Policy

1. Who We Are and How to Contact Us

903ph ("we", "us", "our", "the Platform", or "the Operator") is an online casino and sports betting platform serving Filipino players across the Philippines, operating in compliance with the regulatory requirements of the Philippine Amusement and Gaming Corporation (PAGCOR).

For all privacy-related inquiries, requests to exercise your data subject rights, or to contact our designated Data Protection Officer (DPO), please use the following contact details:

• Platform Name: 903ph
• Website: 903ph.cam
• Email (plain text — not a clickable link): [email protected]
• Subject Line for DPO Inquiries: "Data Privacy Request – [Your Name]"

Our Data Protection Officer is responsible for overseeing 903ph's compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant NPC issuances. All formal data subject rights requests will be acknowledged within five (5) business days of receipt.

2. Scope of this Privacy Policy

This Privacy Policy applies to all personal data collected, used, stored, or otherwise processed by 903ph in connection with the operation of the platform, including but not limited to data collected through the 903ph website, mobile-optimised site, account registration process, KYC verification procedures, customer support interactions, payment transactions, and marketing communications.

This Privacy Policy does not apply to the websites or services of third-party companies linked to or from 903ph, including game providers, payment processors, or other service partners. Those entities are governed by their own privacy policies, which we encourage you to review independently.

3. Personal Data We Collect

903ph collects the following categories of personal data from users of the platform:

3.1 Identity and Registration Data

• Full legal name as it appears on government-issued identification
• Date of birth and age verification information
• Gender
• Philippine nationality or citizenship status
• Government-issued identification numbers (e.g., PhilSys ID number, passport number, driver's licence number, UMID number)
• Copies of identity documents submitted for KYC verification
• Proof of address documents (utility bills, bank statements)

3.2 Contact and Communication Data

• Email address
• Philippine mobile phone number
• Residential address (province, city/municipality, barangay, postal code)
• Records of communications with 903ph customer support (live chat transcripts, emails)

3.3 Account and Transaction Data

• Account username and encrypted password (passwords are stored using one-way hashing — they are never stored or accessible in plain text)
• Account balance and transaction history
• Deposit and withdrawal records, including amounts, dates, payment methods, and reference numbers
• GCash account details (mobile number associated with GCash)
• PayMaya account details (mobile number associated with PayMaya)
• Bank account details provided for withdrawal processing (account name, account number, bank name)

3.4 Gaming and Behavioural Data

• Game history (games played, bet amounts, game outcomes, session durations)
• Sports betting history (markets bet on, bet types, odds, outcomes)
• Bonus and promotion claim history
• Responsible gaming tool usage (deposit limits set, self-exclusion status, cool-off period history)

3.5 Technical and Device Data

• IP address and geolocation data (used for access control and fraud detection)
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookies and similar tracking technology data (see Section 9)

Data Category	Examples	Primary Purpose
Identity Data	Full name, DOB, government ID	KYC / Age verification / PAGCOR compliance
Contact Data	Email, mobile number, address	Account management / Support communications
Financial Data	GCash number, bank account, transaction history	Payment processing / AML compliance
Gaming Data	Game history, bets placed, session data	Service delivery / Responsible gaming monitoring
Technical Data	IP address, device info, cookies	Security / Fraud prevention / Analytics

4. How We Collect Your Personal Data

903ph collects your personal data through the following means:

• Directly from you — during account registration, KYC verification, support interactions, and when you update your account profile
• Automatically through platform use — through cookies, server logs, and analytics tools as you browse and use the 903ph platform
• From payment service providers — confirmation and transaction reference data from GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard when you make deposits or request withdrawals
• From identity verification service providers — where third-party KYC tools are used to assist with document verification, those providers may return verification results to 903ph
• From PAGCOR and law enforcement — where required by law or regulatory order, 903ph may receive or be required to provide information to PAGCOR or Philippine law enforcement agencies

5. Why We Process Your Personal Data (Legal Bases)

Under the Data Privacy Act of 2012, 903ph processes personal data on the following lawful bases:

• Consent — where you have given freely, specific, informed, and unambiguous consent to the processing of your data for a specific purpose (e.g., marketing communications)
• Contractual necessity — processing required for the performance of the contract between you and 903ph (i.e., the Terms and Conditions you agreed to at registration), including account management, game delivery, and payment processing
• Legal obligation — processing required to comply with Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (Republic Act No. 9160 as amended), the Data Privacy Act, and other applicable legislation
• Legitimate interests — processing necessary for 903ph's legitimate interests where those interests are not overridden by your rights, such as fraud prevention, platform security, and improving our services

6. How We Use Your Personal Data

903ph uses the personal data it holds for the following purposes:

6.1 Account and Platform Operations

• Creating, managing, and maintaining your 903ph account
• Authenticating your identity when you log in
• Enabling access to games, sports betting markets, and other platform features
• Processing deposits and withdrawal requests
• Providing customer support and resolving disputes

6.2 Regulatory Compliance

• Verifying your age and identity in compliance with PAGCOR requirements (21+ age restriction)
• Conducting ongoing Know Your Customer (KYC) and Customer Due Diligence (CDD) checks
• Monitoring transactions for suspicious activity under the Anti-Money Laundering Act
• Reporting required information to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory authorities

6.3 Security and Fraud Prevention

• Detecting and preventing unauthorised account access, fraud, and abuse
• Monitoring for multi-accounting, collusion, and prohibited activities
• Verifying geolocation to ensure access is from within the Philippines

6.4 Responsible Gaming

• Monitoring gaming patterns to identify potential problem gambling indicators
• Administering deposit limits, session limits, cool-off periods, and self-exclusion requests
• Contacting players where responsible gaming concerns are identified

6.5 Marketing and Communications

With your consent, 903ph may use your email address and mobile number to send you information about promotions, bonuses, new games, and other relevant offers. You may withdraw your consent to marketing communications at any time by updating your communication preferences in your account settings or by contacting customer support.

7. Disclosure of Your Personal Data to Third Parties

903ph does not sell your personal data to any third party. We may share your personal data with the following categories of third parties, strictly as necessary:

7.1 Payment Service Providers

Transaction data is shared with payment service providers (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard) to process your deposits and withdrawals. These providers process your data in accordance with their own privacy policies and applicable Philippine financial regulations.

7.2 Identity Verification Providers

KYC and identity document verification may be conducted with the assistance of specialist third-party verification service providers. These providers process your identity data solely for verification purposes and are contractually bound to maintain the confidentiality and security of your information.

7.3 Game and Technology Providers

Third-party game providers (such as Playtech and other certified providers whose games appear on the 903ph platform) may receive anonymised or pseudonymised gaming session data necessary to deliver and support their games. Personal identity data is not shared with game providers beyond what is technically required.

7.4 Regulatory and Law Enforcement Authorities

903ph is legally required to disclose personal data to PAGCOR, the AMLC, the NPC, and other Philippine government authorities when required to do so by law, regulation, court order, or valid legal process. We will notify you of such disclosure where permitted by law.

7.5 Professional Advisers

Legal advisers, auditors, and other professional service providers may access personal data on a need-to-know basis in connection with the provision of their services to 903ph. All such advisers are bound by professional confidentiality obligations.

8. Cross-Border Data Transfers

Some of 903ph's service providers and technology partners may be located outside of the Philippines. Where personal data is transferred to a country or territory outside the Philippines, 903ph ensures that appropriate safeguards are in place in accordance with the Data Privacy Act and NPC guidelines, including contractual clauses that require recipients to apply equivalent data protection standards.

By using the 903ph platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines as described in this section. Such transfers are made solely as necessary for the delivery of 903ph's services and regulatory compliance obligations.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by the 903ph website. They allow the platform to recognise your device, maintain your session, remember your preferences, and collect analytical data about how you use the platform.

9.2 Types of Cookies We Use

• Strictly necessary cookies — required for the platform to function. These include session cookies that maintain your logged-in state and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional cookies — remember your preferences (such as language settings and display options) to improve your experience.
• Analytics cookies — collect anonymised data about how players use the platform to help us improve the service. No personally identifiable information is transmitted through analytics cookies.
• Security and fraud detection cookies — help 903ph detect unusual account activity, multi-accounting, and potential fraud.

9.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 903ph platform, including your ability to log in or access certain features.

10. Data Security

903ph implements and maintains technical and organisational security measures appropriate to the risk of processing personal data, including:

• Transport Layer Security (TLS) encryption for all data in transit between your device and the 903ph platform
• AES-256 encryption for sensitive data stored in our databases
• One-way cryptographic hashing for all stored passwords (passwords are never stored in readable form)
• Two-factor authentication (2FA) for player account access
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need
• Regular security assessments and penetration testing of the platform infrastructure
• Continuous monitoring of systems for suspicious or unauthorised access

Notwithstanding these measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying 903ph immediately if you suspect any unauthorised use of your account.

11. Data Retention

903ph retains personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and identity data (KYC documents, registration information): Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction data (deposits, withdrawals, gaming history): Retained for a minimum of five (5) years from the date of the transaction, in compliance with AML and PAGCOR requirements.
• Customer support communications: Retained for two (2) years from the date of the last communication, unless a longer retention period is required for an ongoing dispute or regulatory matter.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for compliance documentation purposes.
• Technical and device data: Retained for ninety (90) days in aggregate log form, with detailed logs retained for up to twelve (12) months where a security investigation is ongoing.

Upon expiry of the applicable retention period, personal data is securely deleted or rendered irreversibly anonymous in accordance with 903ph's data disposal procedures.

12. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by 903ph:

• Right to be informed — the right to know whether 903ph processes your personal data, and to receive this Privacy Policy and other relevant disclosures
• Right of access — the right to obtain a copy of the personal data 903ph holds about you
• Right to rectification — the right to have inaccurate or incomplete personal data corrected
• Right to erasure or blocking — the right to have your personal data deleted or blocked where it is unlawfully processed or where the purpose for which it was collected has ceased
• Right to data portability — the right to receive a structured, machine-readable copy of your personal data for transfer to another controller
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest
• Right to damages — the right to be indemnified for damages sustained as a result of a violation of your rights under the Data Privacy Act
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission (NPC) of the Philippines

To exercise any of these rights, please contact 903ph's Data Protection Officer at the email address provided in Section 1, using the subject line "Data Subject Rights Request – [Your Name]". We will respond to all valid requests within twenty (20) business days of receipt, in accordance with the Data Privacy Act and NPC regulations.

Please note that certain rights may be subject to limitations where retention of your data is required by law — for example, AML and PAGCOR record-keeping requirements may prevent the deletion of certain transaction or identity records during the mandatory retention period.

13. Children and Minors

The 903ph platform is strictly intended for adults 21 years of age and above, as required by PAGCOR for casino-style gaming in the Philippines. 903ph does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the registration and KYC process, and accounts found to belong to individuals under the minimum age will be immediately terminated and all associated data deleted.

If you are a parent or guardian and believe that a minor has registered an account with 903ph or provided personal data to the platform without your consent, please contact us immediately at the email address in Section 1 and we will take prompt action.

14. Changes to this Privacy Policy

903ph reserves the right to amend, modify, or update this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date. Where changes are material — meaning they significantly affect your rights or how your data is processed — 903ph will notify registered users via email or in-platform notification prior to the changes taking effect.

Your continued use of the 903ph platform following notification of changes to this Privacy Policy constitutes your acknowledgement and acceptance of those changes. If you do not agree with any modifications, you may exercise your right to close your account in accordance with the Terms and Conditions.

15. How to Lodge a Complaint

If you believe that 903ph has processed your personal data in violation of the Data Privacy Act of 2012 or this Privacy Policy, you should first contact our Data Protection Officer to allow us the opportunity to address your concern directly:

• DPO Email (plain text): [email protected]
• Subject Line: "Data Privacy Complaint – [Your Name]"
• Response Time: Acknowledgement within 5 business days; resolution within 20 business days

If you are not satisfied with 903ph's response, or if you wish to escalate your complaint directly, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for enforcing the Data Privacy Act. Information on filing a complaint with the NPC is available through official Philippine government channels.