Privacy Policy — 59ph

Scope & Data Controller

This Privacy Policy applies to all personal data collected by 59ph from individuals who visit the 59ph website at https://59ph.cam, register a player account, use any 59ph gaming service, or interact with 59ph through any support, marketing, or communication channel.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), 59ph is the personal information controller responsible for the personal data described in this Policy. 59ph has registered a Data Protection Officer (DPO) in accordance with NPC requirements. Contact details for the DPO are provided in Section 15 of this Policy.

This Policy does not apply to third-party websites, platforms, or services that may be linked to or from the 59ph platform. 59ph is not responsible for the privacy practices of those third parties and encourages you to review their respective privacy policies independently.

Personal Data We Collect

2.1 Registration & Account Data

When you create a 59ph account, we collect the following personal data:

• Full legal name;
• Date of birth (for age verification purposes);
• Residential address, including barangay, city/municipality, province, and postal code;
• Email address;
• Philippine mobile number;
• Username and encrypted password credentials.

2.2 Identity Verification Data

To comply with PAGCOR regulations and anti-money laundering requirements, 59ph may collect copies of government-issued identification documents, including Philippine National IDs, passports, driver's licences, or SSS/GSIS IDs. Proof of address documents such as utility bills or bank statements may also be required.

2.3 Financial & Transaction Data

59ph collects payment method details to facilitate deposits and withdrawals, including GCash account numbers, PayMaya/Maya account references, bank account details, and card details as applicable. Full card numbers are never stored on 59ph servers — card processing is handled by certified PCI-DSS compliant payment processors. We also retain records of all financial transactions, including deposit and withdrawal history, bet placements, and winnings.

2.4 Gameplay & Behavioural Data

59ph collects data about how you interact with the platform, including game session records, bet amounts, game types played, session durations, login timestamps, and responsible gaming tool usage. This data is used to improve platform performance, personalise your experience, and fulfil our responsible gaming obligations.

2.5 Technical & Device Data

We automatically collect certain technical data when you access 59ph, including your IP address, device type and model, operating system, browser type and version, and referring URL. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Communications Data

If you contact 59ph through live chat, email, or any other channel, we retain records of those communications, including the content of your messages, timestamps, and support agent responses. This data is used for quality assurance, training, and dispute resolution.

How We Collect Your Data

59ph collects personal data through the following means:

• Directly from you — when you register an account, complete verification, make a deposit or withdrawal, contact support, or fill in any form on the 59ph platform;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you navigate the 59ph website and use its services;
• From payment processors — transaction confirmation data returned by GCash, PayMaya, BPI, BDO, Metrobank, and card processing networks upon completion of financial transactions;
• From identity verification services — where third-party verification providers are used to cross-check identity document authenticity against government databases, in accordance with PAGCOR KYC requirements;
• From fraud prevention partners — risk signals and device fingerprint data provided by fraud prevention services under binding data processing agreements.

Legal Bases for Processing

59ph processes personal data only where a valid legal basis exists under Section 12 of the Data Privacy Act of 2012. The applicable legal bases are:

• Contractual necessity — processing required to fulfil the player account agreement, including account management, game delivery, and payment processing;
• Legal obligation — processing required to comply with PAGCOR regulations, anti-money laundering laws (Republic Act No. 9160 as amended), the Data Privacy Act, and any other applicable Philippine legislation;
• Legitimate interests — processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics, where such interests are not overridden by your rights and interests;
• Consent — processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

How We Use Your Personal Data

59ph uses the personal data it collects for the following purposes:

• Creating and managing your 59ph player account and providing access to all platform services;
• Verifying your identity and age in compliance with PAGCOR requirements and applicable Philippine laws;
• Processing deposits, withdrawals, and other financial transactions through your chosen payment methods;
• Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct as defined in the 59ph Terms & Conditions;
• Monitoring gameplay patterns to fulfil our responsible gaming obligations and identify players who may benefit from support tools or intervention;
• Providing customer support and resolving disputes, complaints, or account queries;
• Sending account-related communications including transaction confirmations, security alerts, and policy update notifications — these are mandatory service communications and are not subject to marketing opt-out;
• Where you have opted in, sending promotional communications about 59ph bonuses, new games, and special offers via email, SMS, or push notification;
• Improving the 59ph platform through analysis of aggregated, anonymised usage data;
• Complying with any request from PAGCOR, the NPC, law enforcement agencies, or any other competent Philippine authority.

Sharing Your Personal Data

59ph does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with the following categories of recipients, solely for the purposes described in this Policy:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, Visa/Mastercard network processors — for the sole purpose of executing financial transactions;
• Game providers — certified third-party studios such as Pragmatic Play, JILI, Evolution Gaming, and others — limited to the session data required to deliver and validate game outcomes;
• Identity verification services — accredited third-party KYC providers used to validate identity documents in accordance with PAGCOR requirements;
• Fraud prevention services — specialist providers used to detect and prevent fraudulent account activity and money laundering;
• Regulatory and law enforcement authorities — PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where 59ph is legally required to disclose;
• Professional advisers — legal counsel, auditors, and compliance consultants, under strict confidentiality obligations.

Cookies & Tracking Technologies

59ph uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit the 59ph website. The following categories of cookies are used:

• Strictly necessary cookies — essential for core platform functionality, including session management and login authentication. These cookies cannot be disabled without impairing platform use;
• Performance cookies — used to collect anonymised data about how visitors navigate the 59ph website, enabling us to identify and fix performance issues;
• Functional cookies — used to remember your preferences, such as language settings and responsible gaming tool configurations;
• Security cookies — used to detect and prevent fraudulent login attempts and other malicious activity.

You may configure your browser to refuse or delete cookies; however, disabling strictly necessary cookies will impair your ability to use the 59ph platform. 59ph does not use third-party advertising or cross-site tracking cookies.

Data Retention

59ph retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal or regulatory retention obligations. The following retention periods apply:

• Account and identity data — retained for the duration of your account plus 5 years following account closure, in compliance with PAGCOR record-keeping requirements;
• Financial and transaction records — retained for 10 years from the date of each transaction, in compliance with the Anti-Money Laundering Act of 2001 (Republic Act No. 9160 as amended);
• Communications data — retained for 3 years from the date of each interaction, for dispute resolution and quality assurance purposes;
• Technical and device data — retained for up to 12 months from collection, unless required for an ongoing security investigation;
• Marketing consent records — retained for 3 years following withdrawal of consent, as evidence of prior lawful processing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification, unless continued retention is required by applicable law.

Security Measures

59ph implements a layered set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS encryption for all data in transit between your device and 59ph servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment references;
• Role-based access controls limiting data access to authorised 59ph personnel with a documented operational need;
• Multi-factor authentication for all internal 59ph systems that handle personal data;
• Continuous security monitoring with automated anomaly detection and alerting;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Staff data protection training and mandatory acceptance of confidentiality obligations;
• Documented incident response procedures aligned with NPC breach notification requirements.

Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and applicable NPC regulations, you have the following rights with respect to your personal data held by 59ph. To exercise any of these rights, contact the 59ph Data Protection Officer as detailed in Section 15.

59ph will respond to all data subject requests within 15 business days of receipt of a valid, verified request. Identity verification may be required before processing any request to ensure data is not disclosed to unauthorised parties. Requests that are manifestly unfounded or excessive may be declined with written explanation.

If you believe 59ph has not handled your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

Children's Privacy

The 59ph platform is strictly restricted to individuals aged 21 years and above in accordance with PAGCOR regulations governing online casino gaming in the Philippines. 59ph does not knowingly collect personal data from individuals under the age of 21.

If 59ph discovers that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated personal data will be securely deleted, and any funds deposited will be returned through the original payment method following verification. If you believe a minor has registered a 59ph account, please contact our support team immediately at [email protected].

Cross-Border Data Transfers

Some of 59ph's third-party service providers — including certain game platform providers and fraud prevention services — may process personal data on servers located outside the Philippines. Where personal data is transferred internationally, 59ph ensures that appropriate safeguards are in place in accordance with NPC regulations on cross-border data flows, including:

• Binding contractual obligations on the recipient to protect the data to standards equivalent to those required by Philippine law;
• Transfers only to jurisdictions that the NPC has recognised as providing adequate levels of data protection, or;
• Transfer only for the performance of a contract directly benefiting you as the data subject, where no adequate jurisdiction determination exists.

Details of international transfer arrangements may be obtained from the 59ph Data Protection Officer upon written request.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 59ph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03 and subsequent circulars on mandatory breach notification.

Where the breach is likely to result in a high risk to your rights and freedoms — for example, where it involves financial data, identity documents, or access credentials — 59ph will also notify affected players directly via their registered email address without undue delay. Such notifications will include a description of the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures 59ph has taken or proposes to take to address the breach.

Amendments to This Policy

59ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, regulatory requirements, or 59ph's data processing practices. Where amendments are material, 59ph will provide at least 14 days' advance notice via the registered email address associated with your account and/or via a prominent notice on the 59ph website.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the 59ph platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not accept any amendment, you must cease using the platform and contact support to request account closure.

Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 59ph, please contact the 59ph Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the live chat feature on the 59ph website — select "Privacy & Data" as the inquiry category
• Email (plain text, not a clickable link): [email protected] — please include "Data Privacy Request" in the subject line
• Response target: within 5 business days for written data subject requests; within 2 hours via live chat for general queries

If you are not satisfied with 59ph's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.