98php Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data processed by 98php in connection with the operation of the 98php.club online gaming and sports betting platform. It covers personal data collected from registered players, prospective registrants, and website visitors across all device types, including desktop browsers, mobile browsers, and any 98php-branded applications.

This Policy should be read alongside the 98php Terms & Conditions, which govern the contractual relationship between 98php and its players. By registering an account on 98php or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), 98php acts as the Personal Information Controller (PIC) in respect of the personal data it processes about you. Decisions regarding the purpose and manner of processing your personal data are made by 98php.

Contact details for the 98php Data Protection Officer (DPO) are provided in Section 15 of this Policy. The DPO is responsible for ensuring compliance with RA 10173 and its Implementing Rules and Regulations, and for handling all data-related queries and complaints from 98php players and users.

3. Personal Data We Collect

3.1 Registration & Identity Data

When you register on 98php, we collect:

• Full legal name (as it appears on a Philippine government-issued ID)
• Date of birth (to verify that you meet the minimum age requirement of 21 years)
• Philippine mobile number (used as your primary account identifier)
• Email address (where provided)
• Home address (required for KYC verification prior to first withdrawal)

3.2 KYC & Verification Documents

To comply with anti-money laundering (AML) obligations and PAGCOR regulations, 98php collects copies or images of government-issued identification documents. Accepted documents include: PhilSys National ID, UMID, Philippine passport, driver's license, SSS ID, GSIS ID, Voter's ID, and PRC ID. Source of funds documentation may be requested in certain circumstances.

3.3 Financial & Transaction Data

We collect and process:

• GCash mobile number and/or Maya account details linked to deposits and withdrawals
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where applicable
• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Wagering history — bets placed, outcomes, amounts won and lost
• Bonus redemption and wagering data

3.4 Technical & Usage Data

When you access the 98php platform, we automatically collect:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages visited, session duration, and click-path data
• Login timestamps and device identifiers
• Cookie data and similar tracking technologies (see Section 12)

3.5 Communications Data

If you contact 98php's customer support team via any channel, we retain a record of those communications, including the content of messages, timestamps, and resolution outcomes, for quality assurance and dispute resolution purposes.

4. How We Collect Your Data

98php collects personal data through the following means:

• Directly from you — through account registration forms, KYC document submissions, deposit/withdrawal requests, and communications with support
• Automatically — through cookies, session tracking, server logs, and device fingerprinting when you access or use the 98php platform
• From third-party payment providers — GCash, Maya, and Philippine banking institutions provide transaction confirmation data necessary for payment processing
• From identity verification services — third-party KYC and AML compliance partners may provide verification results based on documents you submit

5. Purposes of Processing

98php processes your personal data for the following purposes:

• Account creation and management — to register your 98php account, verify your identity, and maintain your account in good standing
• Payment processing — to process GCash deposits, Maya transfers, and bank withdrawals accurately and securely
• Age verification — to confirm that you are 21 years of age or older as required under Philippine law and PAGCOR regulations
• AML and fraud prevention — to detect, investigate, and prevent money laundering, fraud, and other illegal activities on the platform
• Regulatory compliance — to fulfil reporting obligations to PAGCOR and other relevant Philippine regulatory bodies
• Platform security — to detect unauthorized account access, multi-accounting, and other prohibited conduct
• Customer support — to respond to your queries, resolve disputes, and process responsible gaming requests such as self-exclusion
• Platform improvement — to analyze usage patterns and improve the 98php product for Filipino players
• Marketing communications — to send promotional offers and notifications where you have consented to receive them (see opt-out rights in Section 11)

6. Legal Basis for Processing

Under RA 10173, 98php relies on the following legal bases for processing your personal data:

• Contractual necessity — processing required to provide the 98php gaming service to you under the Terms & Conditions you accepted at registration
• Legal obligation — processing required to comply with Philippine AML laws, PAGCOR regulatory requirements, tax obligations, and other applicable legislation
• Legitimate interests — processing for fraud detection, platform security, and business analytics where these interests are not overridden by your data protection rights
• Consent — processing for marketing communications, where you have expressly opted in

7. Data Sharing & Third-Party Disclosure

98php does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following circumstances:

• Payment processors — GCash (Globe Fintech Innovations), Maya Philippines, and Philippine banking institutions, solely for payment processing purposes
• KYC/AML compliance providers — third-party identity verification and sanctions screening services engaged to fulfil regulatory obligations
• Game content providers — JILI, Pragmatic Play, PG Soft, and other licensed game studios receive anonymised session and wagering data for game performance purposes; no personally identifiable information is shared with game providers
• Regulatory authorities — PAGCOR and other Philippine government agencies where disclosure is required by law, court order, or regulatory directive
• Professional advisers — legal counsel, auditors, and accountants under professional confidentiality obligations
• Business transfers — in the event of a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity subject to equivalent data protection commitments

All third parties with whom 98php shares personal data are required to implement appropriate technical and organizational security measures and to process data only for the specified purposes.

8. International Data Transfers

Some of 98php's third-party service providers — including game content providers and cloud infrastructure partners — may process personal data in countries outside the Philippines. Where such transfers occur, 98php ensures that appropriate safeguards are in place in accordance with RA 10173 and the requirements of the National Privacy Commission (NPC). These safeguards may include contractual data processing agreements incorporating data protection clauses consistent with Philippine standards.

9. Data Retention

98php retains your personal data for as long as your account remains active and for a period of five (5) years following account closure, unless a longer retention period is required by Philippine law (including AML record-keeping requirements). KYC documents are retained for a minimum of five (5) years from the date of the last transaction on the account, consistent with anti-money laundering regulations.

Transaction records — including deposits, withdrawals, and wagering history — are retained for a minimum of seven (7) years to meet tax and regulatory reporting obligations. Communications records are retained for three (3) years for dispute resolution purposes. Data retained beyond the active account period is stored in restricted access archives and is not used for any active processing purpose other than regulatory compliance.

10. Security Measures

These measures include:

• SSL/TLS 256-bit encryption for all data in transit between your device and the 98php platform
• Encryption of sensitive data at rest, including payment details and identity documents
• Multi-factor authentication (2FA) options for all 98php player accounts
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Automated fraud detection and account monitoring systems operating 24/7
• Regular security audits and penetration testing of platform infrastructure
• Incident response procedures for timely breach notification to the NPC and affected players as required by RA 10173

Notwithstanding these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 98php account credentials. Report any suspected unauthorized access to [email protected] immediately.

11. Your Data Protection Rights

Under RA 10173, registered players of 98php who are Philippine data subjects have the following rights with respect to their personal data:

• Right to be Informed — to know that your personal data is being collected and processed, as described in this Policy
• Right of Access — to request a copy of the personal data that 98php holds about you
• Right to Rectification — to request correction of inaccurate or incomplete personal data
• Right to Erasure or Blocking — to request deletion or suppression of your personal data where processing is unlawful or the data is no longer necessary (subject to legal retention obligations)
• Right to Object — to object to processing of your personal data for marketing purposes; you may opt out of marketing communications at any time via your 98php account settings
• Right to Data Portability — to receive your personal data in a structured, commonly used, machine-readable format
• Right to File a Complaint — to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 98php has processed your data in violation of RA 10173

To exercise any of the above rights, submit a request to the 98php Data Protection Officer at the contact details in Section 15. 98php will respond to verified requests within fifteen (15) business days as required by the NPC.

12. Cookies & Tracking Technologies

The 98php platform uses cookies and similar tracking technologies to provide a functional, personalized, and secure player experience. Cookies are small text files placed on your device when you visit 98php.club. They do not contain executable code and cannot be used to access other files on your device.

12.1 Types of Cookies Used

• Essential cookies — required for platform operation, including session authentication and security. These cannot be disabled without affecting platform functionality.
• Functional cookies — remember your preferences (e.g., language settings, last-visited game categories) to improve your experience on 98php
• Analytics cookies — collect anonymised usage data to help us understand how Filipino players interact with the platform and identify areas for improvement
• Marketing cookies — used to deliver relevant promotional content and track the effectiveness of 98php marketing campaigns; only deployed with your consent

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing and using the 98php platform, but some features may function suboptimally.

13. Protection of Minors

The 98php platform is strictly for persons aged 21 years and above. 98php does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted at registration and during KYC review. If 98php becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated account immediately suspended.

If you believe that a person under the age of 21 has registered on 98php, please notify the Data Protection Officer immediately via the contact details in Section 15 so that appropriate action can be taken without delay.

14. Updates to This Policy

98php may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. Material updates will be communicated to registered players via SMS to the registered mobile number and/or via a notice on the 98php platform homepage, with a minimum of seven (7) calendar days' advance notice where practicable.

The effective date at the top of this document reflects the most recent revision. Continued use of the 98php platform following notification of an updated Policy constitutes acceptance of the revised terms.

15. Contact & Data Protection Officer

For all data privacy queries, rights requests, or complaints relating to 98php's processing of your personal data, please contact our Data Protection Officer:

Data Protection Officer — 98php
Email: [email protected]
Subject line: "Data Privacy Request — [your registered mobile number]"
Response time: Within 15 business days of verified request receipt

Alternatively, you may submit a complaint directly to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph if you believe your data protection rights have not been adequately addressed by 98php.

This Privacy Policy was last updated on 1 January 2026. This document supersedes all prior versions. The English-language version is the authoritative version for all purposes.