Privacy Policy of 28ph

01 Introduction

28ph is committed to protecting the privacy and personal data of all players who use our platform. We understand that trust is the foundation of any long-term relationship between a gaming platform and its players — and that trust begins with being honest and transparent about how we handle your information.

This Privacy Policy applies to all personal data collected by 28ph through the 28ph website at 28ph.net, the 28ph mobile application, customer support interactions, and any other service or channel through which you interact with 28ph. It applies to all registered players, prospective players, and visitors to the 28ph platform.

28ph operates in compliance with the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines and its implementing rules and regulations. We are committed to ensuring that your personal data is processed lawfully, fairly, and transparently.

By registering an account, making a deposit, or otherwise using the 28ph platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the 28ph platform immediately.

02 Personal Data We Collect

28ph collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include the following:

03 How We Collect Your Data

28ph collects personal data through the following channels and methods:

• Direct Submission: Information you provide when registering an account on 28ph, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies: Technical and usage data collected automatically when you access the 28ph platform, including through cookies, web beacons, pixel tags, and server logs. This data is collected regardless of whether you are logged into your account.
• Third-Party Sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank. 28ph only receives data from third parties where you have consented to that sharing or where it is required by law.
• Regulatory Sources: Data received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.

04 How We Use Your Personal Data

28ph uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your 28ph player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To provide you with access to all games and services available on the 28ph platform, including Table Tennis, Callbreak, Golf, Football, Entertainment, Captain's Bounty, and Dragon Tiger Luck.
• Payment Processing: To process deposits and withdrawals in Philippine Peso (₱) through your chosen payment method, and to maintain accurate financial records of all transactions on your account.
• Regulatory Compliance: To comply with our obligations under Philippine law, including PAGCOR licensing requirements, anti-money laundering (AML) regulations, and the Data Privacy Act of 2012. This includes retaining transaction records for the periods required by law.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the 28ph platform.
• Responsible Gaming: To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, and to administer responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our support channels.
• Marketing and Promotions: To send you information about 28ph promotions, bonuses, and new games where you have consented to receive such communications. You may opt out of marketing communications at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the performance, features, and user experience of the 28ph platform.
• Legal Claims: To establish, exercise, or defend legal claims in connection with the 28ph platform or your account.

05 Legal Basis for Processing

Under the Data Privacy Act of 2012 of the Philippines, 28ph processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you — that is, to provide you with the 28ph gaming services you have registered for, including account management, game access, and payment processing.
• Legal Obligation: Processing that is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AML obligations, and tax reporting requirements.
• Legitimate Interests: Processing carried out for the legitimate interests of 28ph, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in relation to marketing communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Data Sharing & Disclosure

28ph does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only where necessary and in accordance with this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged by 28ph to verify your identity and age in compliance with regulatory requirements.
• Fraud Prevention Partners: Anti-fraud and security service providers who assist 28ph in detecting and preventing fraudulent activity on the platform.
• Regulatory Authorities: PAGCOR and other competent Philippine government authorities, where disclosure is required by law, court order, or regulatory instruction.
• Technology Service Providers: Cloud hosting providers, IT infrastructure providers, and software vendors who support the operation of the 28ph platform. These providers are contractually bound to process your data only on 28ph's instructions and in accordance with applicable data protection law.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by 28ph, where disclosure is necessary for the provision of their services.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 28ph's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and your rights in connection with it.

All third parties with whom 28ph shares personal data are required to maintain appropriate technical and organizational security measures and to process your data only for the purposes for which it was shared.

07 Data Retention

28ph retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active Accounts: Personal data associated with your active 28ph account is retained for the duration of your account's existence and for a period of at least five (5) years following account closure, in accordance with PAGCOR requirements and Philippine AML regulations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history and bet records, are retained for a minimum of five (5) years following the date of the transaction, as required by applicable Philippine law.
• KYC Documents: Identity verification documents are retained for the period required by applicable regulatory requirements, which is generally five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Customer support records are retained for a period of three (3) years following the resolution of the relevant inquiry or dispute.
• Marketing Data: Where you have consented to receive marketing communications, your contact details for marketing purposes are retained until you withdraw your consent or request deletion.

Upon expiry of the applicable retention period, 28ph will securely delete or anonymize your personal data in accordance with its data disposal procedures.

08 Data Security

28ph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Encryption: All data transmitted between your device and the 28ph platform is encrypted using SSL/TLS protocols. Sensitive data stored on our servers is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized 28ph personnel and service providers who have a legitimate need to access it for the purposes described in this Policy. All access is logged and monitored.
• Firewalls and Intrusion Detection: 28ph employs enterprise-grade firewalls, intrusion detection systems, and continuous security monitoring to protect our platform infrastructure.
• Regular Security Audits: 28ph conducts regular security assessments and penetration testing to identify and address potential vulnerabilities in our systems.
• Staff Training: All 28ph personnel who handle personal data receive regular training on data protection obligations and security best practices.

While 28ph takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the security of your 28ph account credentials and for notifying us immediately of any suspected unauthorized access to your account.

09 Cookies & Tracking Technologies

28ph uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support platform security. A cookie is a small text file placed on your device when you visit the 28ph website or use the 28ph app.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 28ph platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by 28ph:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data that 28ph holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data that 28ph holds about you. You can update most account information directly through your 28ph account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 28ph's legal and regulatory retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that 28ph has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact 28ph support. We will respond to all data subject requests within thirty (30) days of receipt. In some cases, we may need to verify your identity before processing your request.

11 Children's Privacy

The 28ph platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. 28ph does not knowingly collect personal data from individuals under the age of 21.

If 28ph becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be closed immediately and all personal data associated with that account will be deleted in accordance with our data disposal procedures, subject to any applicable legal retention requirements.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account on 28ph or provided personal data to 28ph, please contact our support team immediately so that we can take appropriate action.

12 Third-Party Links

The 28ph platform may contain links to third-party websites or services, including payment processors and regulatory bodies. This Privacy Policy applies solely to the 28ph platform and does not cover the privacy practices of any third-party websites or services that you may access through links on the 28ph platform.

28ph is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party services you access in connection with your use of 28ph.

13 Updates to This Privacy Policy

28ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

When material changes are made to this Policy, 28ph will notify registered players via email or through a prominent notice on the platform prior to the changes taking effect. Your continued use of the 28ph platform following the publication of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how 28ph protects your personal data.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 28ph handles your personal data, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 directly within the 28ph platform and mobile app.
• Email: [email protected]
• FAQ: Visit our FAQ page for answers to common privacy and account questions.

For questions about your rights under the Data Privacy Act of 2012, you may also contact the National Privacy Commission of the Philippines directly. For responsible gaming support, please visit our Responsible Gaming page.