787ph Privacy Policy

1. Introduction and Scope

1.1 787ph is committed to protecting the personal information of its players and website visitors in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and all applicable PAGCOR regulatory requirements governing the handling of player data by licensed online gaming operators.

1.2 This Policy applies to all personal data collected through the 787ph Platform — including the website 787ph.vip, the player Account system, payment processing flows, live chat support interactions, and any associated promotional communications where you have provided consent.

1.3 By creating an Account on 787ph, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. Where consent is the legal basis for a particular processing activity, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

2. Data Controller

2.1 For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for personal data collected through the 787ph Platform is the 787ph operating entity licensed by PAGCOR (Philippine Amusement and Gaming Corporation). Details of the registered entity and PAGCOR license reference are available through the 787ph support team and on the About Us page.

2.2 For all data-related queries, correction requests, deletion requests, or formal Data Subject Access Requests, players may contact the 787ph Data Protection Officer ("DPO") via the support email: [email protected]

3. Categories of Personal Data We Collect

The categories of personal data that 787ph collects from players and website visitors are described in the table below:

3.1 787ph does not collect special categories of personal data (such as health data, religious beliefs, or political opinions) unless this is strictly required for responsible gaming intervention purposes and only with explicit consent or where legally required.

4. How We Collect Personal Data

787ph collects personal data through the following mechanisms:

• Directly from you — when you complete the Account registration form, submit KYC documents, make a deposit or withdrawal, contact support via live chat or email, or update your Account settings;
• Automatically through the Platform — technical data such as IP address, device fingerprint, and session data is collected automatically each time you access the 787ph Platform;
• Through payment processors — transaction reference data is shared with 787ph by GCash, Maya, BPI, BDO, Metrobank, and other payment service providers when you complete a financial transaction on the Platform;
• Through third-party KYC providers — where 787ph uses a licensed third-party identity verification service to process government-issued ID documents for age and identity verification purposes;
• Through cookies and similar technologies — as described in Section 10 of this Policy.

5. Purposes of Processing and Legal Basis

5.1 787ph processes personal data for the following defined purposes, each supported by a lawful basis under the DPA 2012:

• Account registration and management — necessary for the performance of the player agreement (contract);
• Identity and age verification (KYC) — legal obligation under PAGCOR regulations and the Anti-Money Laundering Act (AMLA);
• Payment processing — necessary for the performance of the contract and to comply with financial regulatory requirements;
• Fraud prevention and security monitoring — legitimate interests of 787ph and legal obligation under PAGCOR and AMLA;
• Responsible gaming monitoring — legal obligation under PAGCOR's responsible gaming guidelines and legitimate interests;
• Customer support — necessary for the performance of the contract;
• Regulatory reporting to PAGCOR and law enforcement — legal obligation;
• Marketing communications — your explicit consent, which may be withdrawn at any time through Account settings.

5.2 787ph does not use personal data for automated decision-making that produces legal or similarly significant effects on players, with the exception of automated fraud-risk scoring which may trigger a manual review of an Account. Players subject to any such review will be notified and may request human review.

6. Data Sharing and Disclosure

6.1 787ph does not sell, rent, or trade personal data. We share personal data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose:

• PAGCOR — as required under the 787ph operating license, including player activity reports and AML transaction reporting;
• Payment service providers — GCash, Maya, BPI, BDO, Metrobank, and other licensed payment processors, solely for processing deposits and withdrawals;
• KYC and identity verification providers — licensed third-party services engaged to conduct document verification and age confirmation;
• IT infrastructure providers — cloud hosting and technical service providers bound by data processing agreements requiring them to handle data only on 787ph's instructions;
• Law enforcement and Philippine government authorities — where 787ph is legally required to disclose data under a court order, PAGCOR instruction, or applicable Philippine law.

6.2 All third-party processors engaged by 787ph are subject to written data processing agreements that impose obligations consistent with the DPA 2012 and its implementing rules.

7. International Data Transfers

7.1 Some of the third-party service providers engaged by 787ph may process personal data outside the Philippines. Where such transfers occur, 787ph ensures that adequate safeguards are in place in accordance with the DPA 2012, including the use of standard contractual clauses approved by the National Privacy Commission (NPC) of the Philippines.

7.2 Players may request details of the specific safeguards applied to international data transfers by contacting the 787ph Data Protection Officer at the email address provided in Section 14 of this Policy.

8. Data Retention Periods

8.1 787ph retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by PAGCOR regulation or Philippine law (including AMLA record-keeping requirements).

• Account and identity data — retained for the duration of the active Account relationship, plus five (5) years following Account closure, as required under PAGCOR and AMLA regulations;
• Transaction and financial data — retained for five (5) years from the date of the transaction in compliance with AMLA record-keeping obligations;
• Gaming activity data — retained for three (3) years from the date of the relevant session;
• Customer support communications — retained for two (2) years from the date of the last interaction;
• Marketing preference data — retained until consent is withdrawn or the Account is closed, whichever is earlier.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual.

9. Security Measures

9.1 787ph implements technical and organizational security measures appropriate to the sensitivity of the personal data processed, including:

• 256-bit TLS encryption for all data in transit between the player's browser and the 787ph Platform;
• Encryption at rest for all databases containing personal and financial data;
• One-way hashing for all account passwords — 787ph staff cannot view or retrieve player passwords;
• Role-based access controls restricting employee access to personal data on a need-to-know basis;
• Multi-factor authentication for all internal systems accessing personal data;
• Regular penetration testing and security audits by qualified third-party providers;
• Incident response procedures including mandatory breach notification to the National Privacy Commission within 72 hours of discovery of a personal data breach likely to cause harm.

10. Cookies and Tracking Technologies

10.1 The 787ph Platform uses cookies and similar tracking technologies to enable essential platform functionality, maintain login sessions, prevent fraud, and improve the player experience.

10.2 The categories of cookies used on 787ph are as follows:

• Strictly necessary cookies — required for core Platform functionality including secure login session management, fraud prevention, and load balancing. These cannot be disabled without breaking basic Platform features.
• Functional cookies — remember your Platform preferences (e.g., preferred game category, language settings) to personalize your experience across sessions.
• Analytical cookies — collect anonymized or pseudonymized data about how players interact with the Platform to enable 787ph to improve service quality. No individual player is identified in analytical reports.

10.3 787ph does not use third-party advertising cookies or cross-site tracking technologies that would allow external advertisers to profile your behaviour across websites. All cookies served through the 787ph Platform are first-party or from directly contracted service providers operating solely on 787ph's instructions.

10.4 You may control cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in or use core Platform features.

11. Your Rights Under the Philippine Data Privacy Act (RA 10173)

As a data subject under Philippine law, you have the following rights in relation to your personal data held by 787ph:

11.1 To exercise any of the rights listed above, please contact the 787ph Data Protection Officer via the support email: [email protected] — using the subject line "Data Subject Rights Request". We will respond within thirty (30) days of receiving a verified request.

11.2 787ph will not charge a fee for routine data subject requests. Where requests are manifestly unfounded, repetitive, or excessive, 787ph may charge a reasonable administrative fee or decline to respond, providing written reasons.

12. Minors and Age Restriction Policy

12.1 Parents and guardians who believe a person under 21 has registered on the 787ph Platform should contact support at [email protected] immediately to report the matter and request data deletion.

13. Changes to This Privacy Policy

13.1 787ph may update this Privacy Policy from time to time to reflect changes in law, PAGCOR regulatory requirements, or our data practices. The updated Policy will be published on this page with a revised effective date.

13.2 Where changes are material, 787ph will provide notice to registered players via email to their registered address or via an in-Platform notification, no less than fourteen (14) days before the changes take effect.

13.3 Continued use of the 787ph Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you should cease using the Platform and close your Account.

14. Contact, Complaints, and the National Privacy Commission

14.1 For any privacy-related queries, data subject rights requests, or concerns about how 787ph handles your personal data, you may contact us through:

• Live Chat: Available 24/7 via the Platform — fastest response for urgent matters;
• Email (DPO): [email protected] — plain text only, subject line "Privacy Enquiry" or "Data Subject Rights Request";
• Support Hours: 24 hours / 7 days, Philippine Standard Time (PHT, GMT+8).

14.2 If you are not satisfied with 787ph's handling of a privacy complaint, you have the right to escalate the matter to the Philippine National Privacy Commission (NPC). The NPC is the independent government body responsible for enforcing the Data Privacy Act of 2012. Contact information for the NPC is publicly available on the NPC's official government website.