Privacy Policy
49ph is committed to protecting the personal information of every Filipino player on our platform. This Privacy Policy explains exactly what data we collect, how we use it, and your rights under Philippine law.
Our Privacy Commitments
Six principles that guide how 49ph handles your personal data — in plain language, before the full legal text
RA 10173 Compliant
All personal data processing on 49ph follows the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission (NPC).
We Never Sell Your Data
49ph does not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing or commercial purposes. Your data stays within 49ph's controlled ecosystem.
256-Bit SSL Encryption
Every page, every login, and every transaction on 49ph is protected by bank-grade 256-bit SSL encryption. Your personal and financial data is secured in transit and at rest.
Purpose Limitation
49ph only collects the personal data that is genuinely necessary for operating your account, processing payments, and meeting our regulatory obligations. We do not collect data for its own sake.
Your Rights Are Real
As a data subject under RA 10173, you have real, enforceable rights — including the right to access, correct, delete, and port your data. 49ph has a dedicated process to handle every data subject request promptly.
Dedicated DPO
49ph has appointed a Data Protection Officer (DPO) responsible for overseeing all data privacy matters and ensuring ongoing compliance with Philippine data protection laws and NPC regulations.
Contents
- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis
- 7. Sharing Your Data
- 8. Data Retention
- 9. Security Measures
- 10. Cookies & Tracking
- 11. Your Rights
- 12. Minors
- 13. Marketing
- 14. Cross-Border Transfers
- 15. Policy Updates
- 16. Contact & DPO
Plain-Language Summary: 49ph collects personal data to run your account, process payments, verify your identity, and comply with PAGCOR and AMLA regulations. We protect your data with industry-standard security, never sell it to third parties, and respect your rights under the Philippine Data Privacy Act (RA 10173). If you have questions, our Data Protection Officer is reachable at [email protected].
SECTION 1Introduction
This Privacy Policy ("Policy") describes how 49ph ("we," "us," "our," or "the Company") collects, uses, stores, shares, and protects the personal information of players and visitors who access the 49ph online gaming platform at 49ph.net and all associated pages, features, and services (collectively, the "Platform").
49ph is committed to the responsible handling of personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). We also comply with applicable PAGCOR regulations regarding player data management and anti-money laundering obligations under Republic Act No. 9160 (Anti-Money Laundering Act) as amended.
By registering an account on 49ph, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, which together form the complete regulatory framework governing your use of 49ph.
SECTION 2Data Controller
49ph acts as the personal information controller ("PIC") in respect of all personal data collected from players and visitors through the Platform. As the PIC, 49ph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
49ph has appointed a Data Protection Officer ("DPO") who is responsible for overseeing data protection strategy, ensuring compliance with RA 10173, responding to data subject requests, and serving as the primary point of contact for the National Privacy Commission. Contact details for the DPO are provided in Section 16 of this Policy.
Data Protection Officer: All privacy-related inquiries, data subject access requests, and concerns may be directed to the 49ph DPO at: [email protected] — please include "Data Privacy Request" in the subject line of your message.
SECTION 3Personal Data We Collect
49ph collects the following categories of personal data, depending on how you interact with the Platform:
3.1 Registration & Identity Data
- Full legal name (first name, middle name, last name)
- Date of birth (used to verify 21+ age requirement)
- Gender
- Nationality and country of residence
- Residential address in the Philippines (barangay, city/municipality, province)
- Email address
- Mobile number (used for account verification and OTP)
- Preferred username and encrypted password
3.2 KYC Verification Data
- Government-issued photo identification (e.g., Philippine passport, national ID, SSS UMID, PhilHealth ID, or driver's license) — including the ID number, issuing authority, and expiry date
- Proof of address documents (e.g., utility bill, bank statement, barangay certificate)
- Selfie photographs submitted for live identity verification
- Source of funds declarations where required for AML compliance
3.3 Financial & Transaction Data
- Deposit and withdrawal amounts, dates, and references
- Payment method details (e.g., GCash mobile number, Maya account reference, bank account name and last four digits)
- Account balance history and transaction records
- Bonus redemptions and wagering history
3.4 Gaming Activity Data
- Game session records (games played, bets placed, outcomes, session duration)
- Sports bet records (event, selection, stake, settlement)
- Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)
3.5 Technical & Usage Data
- IP address and approximate geolocation (city/region level)
- Device type, operating system, and browser version
- Pages visited, features used, and time spent on the Platform
- Clickstream and navigation data collected via cookies and analytics tools
- Login timestamps and session identifiers
3.6 Communications Data
- Customer support chat transcripts and email correspondence
- Feedback, survey responses, and complaints submitted to 49ph
- Marketing preference settings and communication opt-in/opt-out records
SECTION 4How We Collect Your Data
49ph collects personal data through the following channels and mechanisms:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a survey or promotion
- Automatically — through cookies, web beacons, server logs, and analytics tools when you browse and interact with the Platform
- From third-party verification services — identity and document verification providers engaged by 49ph to assist with KYC compliance may return verification results to us
- From payment processors — GCash, Maya, BPI, BDO, and other payment providers may share transaction confirmation data with 49ph to reconcile deposits and withdrawals
- From regulatory bodies — PAGCOR and Philippine law enforcement agencies may provide or request data as part of our regulatory obligations
SECTION 5How We Use Your Personal Data
49ph processes your personal data only for specific, legitimate purposes. The table below summarizes our primary processing activities and the data categories involved:
| Purpose | Data Categories Used |
|---|---|
| Account registration & management | Registration & identity data, communications data |
| Age verification (21+ requirement) | Date of birth, KYC documents |
| KYC identity & address verification | KYC verification data, registration data |
| Processing deposits & withdrawals | Financial & transaction data, KYC data |
| Anti-money laundering (AML) compliance | Financial data, KYC data, gaming activity data |
| Fraud detection & prevention | Technical data, financial data, gaming activity data |
| Providing gaming services & support | Gaming activity data, communications data |
| Responsible gaming monitoring | Gaming activity data, registration data |
| PAGCOR regulatory reporting | All categories as required |
| Marketing & promotions (with consent) | Registration data, gaming activity data, communications data |
| Platform security & abuse prevention | Technical & usage data, registration data |
| Analytics & Platform improvement | Technical & usage data (aggregated/anonymized) |
SECTION 6Legal Basis for Processing
Under the Philippine Data Privacy Act (RA 10173), 49ph relies on the following legal bases for processing your personal data:
- Contractual necessity: Processing required to fulfill our contractual obligations to you as a registered player — including account management, payment processing, and delivery of gaming services.
- Legal obligation: Processing required to comply with PAGCOR licensing requirements, AMLA obligations, National Privacy Commission regulations, and other applicable Philippine laws and regulatory directives.
- Legitimate interests: Processing carried out for 49ph's legitimate business interests — including fraud prevention, Platform security, and responsible gaming monitoring — where these interests are not overridden by your data protection rights.
- Consent: Where 49ph relies on your consent as the legal basis for processing — primarily for marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
SECTION 7Sharing Your Personal Data
49ph does not sell your personal data. We share your data only in the following controlled circumstances:
7.1 Service Providers (Personal Information Processors)
49ph engages trusted third-party service providers who process personal data on our behalf and under our instruction. These include KYC verification technology providers, payment gateway operators (GCash, Maya, BPI, BDO, Metrobank, and related processors), customer support platform providers, and IT infrastructure and cloud hosting partners. All such providers are bound by data processing agreements that require them to handle your data securely and in accordance with RA 10173.
7.2 Regulatory & Law Enforcement Disclosure
49ph may be legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, or courts of competent jurisdiction. Such disclosures are made only to the extent strictly required by law or a valid legal order, and 49ph will notify affected players where permitted to do so.
7.3 Business Transfers
In the event of a merger, acquisition, corporate restructuring, or sale of all or part of 49ph's business assets, your personal data may be transferred to a successor entity. You will be notified via the email address registered on your account prior to any such transfer taking effect, and the successor entity will be bound to honor this Privacy Policy.
7.4 With Your Consent
Outside of the circumstances above, 49ph will only share your personal data with third parties where you have given your explicit, informed consent for that specific sharing.
SECTION 8Data Retention
49ph retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & KYC records | 5 years after account closure | PAGCOR regulations, AMLA (RA 9160) |
| Financial transaction records | 5 years from transaction date | AMLA obligations |
| Gaming activity logs | 3 years from session date | PAGCOR compliance, dispute resolution |
| Support communications | 2 years from last interaction | Legitimate interests (dispute resolution) |
| Marketing consent records | Until consent is withdrawn + 1 year | NPC accountability requirements |
| Technical / server logs | 90 days (rolling) | Security and fraud monitoring |
After the applicable retention period has elapsed, personal data is securely deleted or anonymized so that it can no longer be associated with any individual. Where anonymization is used, the resulting data may be retained for analytical and statistical purposes indefinitely.
SECTION 9Security Measures
49ph implements a multi-layered approach to data security, employing technical, organizational, and procedural safeguards appropriate to the nature and volume of personal data we process. Key security measures include:
- Transport Layer Security (TLS): All data transmitted between your device and 49ph's servers is encrypted using TLS 1.2 or higher, providing 256-bit encryption in transit.
- Data-at-rest encryption: Sensitive personal data and financial records stored in 49ph's databases are encrypted at rest using AES-256 encryption.
- Access controls: Access to personal data is restricted on a strict need-to-know basis. 49ph staff with access to player data are subject to background checks and confidentiality obligations.
- Password security: Player passwords are hashed using industry-standard cryptographic algorithms. Plain-text passwords are never stored.
- Multi-factor authentication: 49ph uses OTP-based verification for account login and sensitive account actions.
- Intrusion detection and monitoring: 49ph's infrastructure is monitored around the clock for suspicious activity, unauthorized access attempts, and potential data breaches.
- Regular security assessments: 49ph conducts periodic security audits and vulnerability assessments of its Platform and data infrastructure.
Data Breach Response: In the event of a personal data breach that poses a real risk of serious harm to affected players, 49ph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the NPC's Circular on Personal Data Breach Management.
SECTION 10Cookies & Tracking Technologies
49ph uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate and improve the Platform. The types of cookies we use are described below:
10.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, security token validation, and fraud prevention. These cookies cannot be disabled without impairing the operation of the Platform.
10.2 Functional Cookies
Functional cookies remember your preferences and settings — such as your preferred language, responsible gaming tool configurations, and display preferences — to provide a more personalized experience. Disabling these cookies may affect Platform functionality.
10.3 Analytics Cookies
With your consent, 49ph uses analytics cookies to collect aggregated, anonymized data about how players interact with the Platform. This data helps us identify usability issues, optimize page performance, and improve the overall 49ph experience. Analytics data does not identify you personally.
10.4 Marketing Cookies
With your consent, marketing cookies may be used to deliver relevant promotional content and offers on the 49ph Platform. You may withdraw consent for marketing cookies at any time through the cookie preference settings accessible in the Platform's footer.
You may also control cookie behavior through your browser settings. Note that blocking all cookies may prevent the Platform from functioning as intended. For further details on the specific cookies used by 49ph and how to manage them, refer to the cookie preference panel on the Platform.
SECTION 11Your Rights as a Data Subject
Under the Philippine Data Privacy Act (RA 10173), you have the following rights in respect of your personal data held by 49ph. You may exercise any of these rights at any time by contacting our DPO at [email protected]:
Right to Be Informed
You have the right to be informed about how your personal data is being collected and processed, including the legal basis, purposes, and any third parties involved.
Right to Access
You may request a copy of the personal data 49ph holds about you, along with information on how it has been used and who it has been shared with.
Right to Correction
If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction or completion of that data.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Right to Object
You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests, on grounds relating to your particular situation.
Right to Data Portability
You may request that 49ph provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
Right to Block or Restrict
You may request that processing of your personal data be suspended or restricted while a complaint or correction request is being resolved.
Right to Complain
If you believe your data rights have been violated, you may file a complaint with the National Privacy Commission (NPC) of the Philippines through its official channels.
49ph will respond to verified data subject requests within fifteen (15) calendar days of receipt. Where a request is complex or high in volume, we may extend this period by a further fifteen (15) days, with prior written notice to you. There is no charge for submitting a data subject request, though 49ph reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
SECTION 12Protection of Minors
49ph does not knowingly collect personal data from any individual under the age of 21 years. The 49ph Platform is strictly intended for adults aged 21 and above, in compliance with PAGCOR regulations governing online casino-style gaming in the Philippines.
If 49ph becomes aware that personal data has been collected from a person under 21 years of age — whether through the registration process, KYC review, or any other means — the relevant account will be immediately suspended, all data associated with that account will be securely deleted (subject to any mandatory regulatory retention requirements), and any deposits made will be returned to the payment source.
Parental Notice: If you are a parent or guardian and believe that your child under 21 has registered or attempted to register on 49ph, please contact us immediately at [email protected]. 49ph will investigate and act promptly to close the account and delete the data involved.
SECTION 13Marketing Communications
With your consent, 49ph may send you promotional communications about new games, bonuses, seasonal promotions, and platform updates via email and SMS to your registered mobile number. You may indicate your marketing communication preferences during the registration process or at any time thereafter through your account settings.
You may opt out of marketing communications at any time by:
- Clicking the "unsubscribe" link in any marketing email sent by 49ph
- Replying STOP to any SMS marketing message
- Updating your communication preferences in your 49ph account settings
- Contacting 49ph support at [email protected] with the subject line "Marketing Opt-Out"
Withdrawal of consent for marketing will not affect the delivery of transactional and account-related communications (e.g., deposit confirmations, withdrawal notifications, KYC requests, and security alerts), which are essential to the operation of your account and cannot be disabled.
SECTION 14Cross-Border Data Transfers
49ph's primary data processing activities are conducted within the Philippines. However, certain third-party service providers engaged by 49ph — such as cloud hosting infrastructure providers, KYC verification technology platforms, and international gaming software providers — may process personal data in jurisdictions outside the Philippines.
Where personal data is transferred outside the Philippines, 49ph takes steps to ensure that such transfers are carried out in compliance with the requirements of the Data Privacy Act and relevant NPC circulars, including the use of data processing agreements that impose equivalent data protection obligations on the recipient. 49ph does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards as required by applicable Philippine law.
SECTION 15Updates to This Privacy Policy
49ph reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law or NPC regulations, or changes in the scope of 49ph's services. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.
Where changes to this Policy are material — meaning they significantly affect how we collect or use your personal data, or materially change your rights — 49ph will notify registered players via email to the address registered on their account, with at least fourteen (14) days' notice before the changes take effect. For non-material updates (such as clarifications or formatting corrections), the updated Policy will be posted on this page without prior notice.
Your continued use of the 49ph Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any material changes, you should stop using the Platform and may request account closure by contacting our support team.
SECTION 16Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 49ph handles your personal data, please do not hesitate to reach out. Our Data Protection Officer is available to assist you with any data privacy matter, including the exercise of your rights under RA 10173.
49ph Data Protection Officer
Email: [email protected] (plain text — not a clickable link)
Subject Line: "Data Privacy Request" or "Privacy Policy Inquiry"
Response Time: Within 15 calendar days of receipt
Operating Hours: 24 hours a day, 7 days a week
Platform: 49ph.net
Registered and operating in the Philippines under PAGCOR oversight.
If you are not satisfied with 49ph's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) through its official channels. For more information about your rights and how to file a complaint, visit the NPC's official website.
For responsible gaming support, visit our Responsible Gaming page. For the full terms governing your use of 49ph, see our Terms & Conditions. For general platform information, visit our About Us page.
Your Data is Safe with 49ph
Play with confidence knowing that 49ph protects your personal information under the Philippine Data Privacy Act. GCash-ready, PAGCOR-regulated, and built for Filipino players. Strictly 21+ only.
Login to 49ph View Current Offers