5ph2 Privacy Policy — How We Handle Your Personal Data

1. Introduction

1.1 5ph2 is an online casino and sports betting platform serving Filipino players in the Philippines. In the course of providing gaming, payment processing, customer support, and promotional services, 5ph2 collects and processes personal information about its registered users and visitors.

1.2 This Policy describes 5ph2's approach to personal data in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and relevant issuances of the National Privacy Commission ("NPC").

1.3 This Policy applies to all personal data processing activities carried out by 5ph2, including data collected during registration, identity verification, gameplay, financial transactions, customer support interactions, and marketing communications.

2. Data Controller

2.1 5ph2 is the personal information controller ("PIC") with respect to the personal data processed under this Policy. This means that 5ph2 determines the purposes and means of processing your personal data.

2.2 5ph2 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Policy. Contact details for the DPO are set out in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Registration Data: When you create a 5ph2 account, we collect your full legal name, date of birth, residential address, Philippine phone number, and email address. This data is required to establish and verify your identity in compliance with PAGCOR and anti-money laundering requirements.

3.2 Identity Verification Data: To comply with Know Your Customer ("KYC") obligations, 5ph2 collects copies of government-issued Philippine identification documents such as a PhilSys National ID, Passport, UMID, Driver's Licence, or Voter's ID, together with any supporting proof of address documents required.

3.3 Financial Data: We collect GCash account references, Maya account details, bank account numbers (for BPI, BDO, Metrobank, UnionBank transfers), and transaction records. We do not store full card numbers or complete banking credentials on our servers.

3.4 Gaming Activity Data: We record your bet history, game session data, win and loss records, bonus usage, and platform interaction logs. This data is used for account management, dispute resolution, and responsible gaming monitoring.

3.5 Technical Data: We automatically collect IP addresses, device identifiers, browser type and version, operating system, session timestamps, and referring URLs when you access 5ph2.

3.6 Communication Data: We retain records of your communications with 5ph2 customer support, including live chat transcripts and email correspondence.

3.7 Marketing Preferences: We record your opt-in or opt-out choices regarding promotional communications, including SMS, email, and in-platform notifications.

4. How 5ph2 Uses Your Personal Data

4.1 5ph2 processes your personal data for the following purposes:

• Creating, verifying, and maintaining your 5ph2 account;
• Processing deposits, withdrawals, and payment transactions via GCash, Maya, and Philippine bank transfers;
• Fulfilling KYC and anti-money laundering ("AML") obligations required by PAGCOR and Philippine law;
• Providing customer support and resolving account disputes;
• Delivering and administering bonuses, promotions, and VIP programme benefits;
• Monitoring gameplay for fraud detection, collusion, and responsible gaming safeguards;
• Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts);
• Sending marketing communications, where you have provided consent or where legitimate interest applies;
• Complying with applicable Philippine laws and regulatory obligations;
• Improving the 5ph2 platform through aggregated usage analytics.

5. Legal Bases for Processing

5.1 Under the DPA, 5ph2 processes personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and 5ph2 (account management, payment processing, game delivery);
• Legal obligation — processing required to comply with PAGCOR regulations, AML law, tax obligations, and NPC requirements;
• Legitimate interests — fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your fundamental rights;
• Consent — marketing communications and optional profiling activities, where your explicit opt-in consent has been obtained and can be withdrawn at any time.

6. Data Sharing & Third-Party Processors

6.1 5ph2 does not sell personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and governed by data processing agreements:

• Payment processors — GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), and Philippine banking partners for the purpose of processing financial transactions;
• KYC and AML service providers — third-party identity verification platforms used to fulfil PAGCOR and anti-money laundering obligations;
• Game content providers — licensed game studios and live dealer operators whose software powers the 5ph2 game library, to the extent necessary for game delivery and audit;
• Customer support platforms — live chat and helpdesk software providers operating under contractual data protection obligations;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council ("AMLC"), the NPC, and other competent Philippine government authorities, when required by law or court order.

6.2 Any third-party processor engaged by 5ph2 is required by contract to process personal data only on 5ph2's documented instructions and to maintain appropriate technical and organisational security measures.

7. Data Retention

7.1 5ph2 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data — retained for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing conditions and AML record-keeping requirements;
• Financial transaction records — retained for a minimum of five (5) years from the date of transaction, as required under Philippine AML and tax regulations;
• Customer support communications — retained for three (3) years from the date of the last interaction;
• Marketing consent records — retained for the duration of your account and for three (3) years following account closure.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

8. Security Measures

8.1 5ph2 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive personal data fields at rest in our database infrastructure;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for staff accessing internal systems containing personal data;
• Regular security assessments and penetration testing of platform infrastructure;
• Incident response procedures aligned with NPC breach notification requirements.

8.2 In the event of a personal data breach that is likely to result in serious harm, 5ph2 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will inform affected data subjects as required by the DPA.

9. Cookies & Tracking Technologies

9.1 5ph2 uses cookies and similar tracking technologies on the 5ph2.vip platform for the following purposes:

• Essential cookies — required for session management, login authentication, and platform security. These cannot be disabled without affecting platform functionality.
• Analytics cookies — used to understand how players interact with the platform in aggregate (page visits, session durations, navigation paths), helping us improve 5ph2.
• Preference cookies — used to remember your platform settings (language, display preferences) between sessions.

9.2 You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core 5ph2 platform, though certain convenience features may be affected.

10. Your Data Protection Rights

10.1 Under the Philippine Data Privacy Act of 2012, as a registered 5ph2 player you have the following rights with respect to your personal data:

10.2 To exercise any of these rights, please contact the 5ph2 Data Protection Officer at the contact details provided in Section 14. 5ph2 will respond to valid rights requests within fifteen (15) business days.

11. Children and Minors

11.1 The 5ph2 platform is strictly intended for individuals aged 21 years and older. 5ph2 does not knowingly collect personal data from persons under the age of 21.

11.2 If 5ph2 becomes aware that personal data has been collected from a person under 21 without verifiable parental or guardian consent, such data will be deleted promptly and the associated account closed. If you believe a minor has registered on 5ph2, please contact our DPO immediately.

12. Cross-Border Data Transfers

12.1 Some of 5ph2's technology infrastructure and third-party service providers may be located outside the Philippines. When personal data is transferred to recipients in other countries, 5ph2 ensures that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers, including contractual clauses that impose data protection standards equivalent to those required under the DPA.

13. Policy Updates

13.1 5ph2 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or NPC guidance. Material changes will be communicated to registered users via email or in-platform notification at least fourteen (14) days before taking effect.

13.2 The current version of this Policy is always available on this page, with the effective date displayed prominently at the top. We encourage you to review this Policy periodically.

14. Contact — Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 5ph2, please contact the 5ph2 Data Protection Officer: