Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by 28phcash ("28phcash," "we," "us," or "our") and applies to all personal data collected through the 28phcash online gaming platform accessible at 28phcash.vip (the "Platform"), including all games, services, features, and communications offered therein.

28phcash is committed to protecting the privacy and personal data of every Filipino player who uses our Platform. This Policy has been prepared in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as well as the guidelines issued by the National Privacy Commission (NPC).

By registering an account on 28phcash or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

2. Personal Data We Collect

28phcash collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we may collect include:

Category	Examples
Identity Data	Full legal name, date of birth, government-issued ID number (e.g., PhilSys, passport, driver's licence)
Contact Data	Philippine mobile number, email address, residential address (city/province)
Account Data	Username, encrypted password, account preferences, communication settings
Financial Data	GCash number, Maya account reference, bank account details (BPI, BDO, Metrobank, UnionBank, etc.), transaction history
Gaming Data	Game history, wager amounts, win/loss records, session duration, bonus usage
Technical Data	IP address, device type, browser type and version, operating system, time zone
Usage Data	Pages visited, features used, click patterns, session timestamps
Communications Data	Support chat transcripts, email correspondence, feedback submissions

We do not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance purposes. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by applicable law.

3. How We Collect Your Data

28phcash collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from accredited KYC (Know Your Customer) service providers; fraud prevention data from risk management partners; payment confirmation data from GCash, Maya, and partner banks.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory bodies in connection with compliance obligations.

4. How We Use Your Personal Data

28phcash processes your personal data for the following purposes:

• To create, verify, and manage your 28phcash player account.
• To process deposits and withdrawals in Philippine Peso (PHP) via GCash, Maya, and partner banks.
• To verify your identity and age (21+) in compliance with Philippine gaming regulations and PAGCOR requirements.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To provide customer support and respond to your enquiries and complaints.
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and security alerts.
• To send you promotional communications about 28phcash offers and bonuses, where you have consented to receive such communications.
• To comply with our legal and regulatory obligations under Philippine law, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• To improve the Platform, personalize your gaming experience, and conduct internal analytics.
• To enforce our Terms and Conditions and protect the rights and safety of 28phcash and its players.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 28phcash processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AML/CTF obligations, and NPC requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and improving our services, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

28phcash does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, Maya, and partner Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to facilitate deposits and withdrawals.
• Identity verification providers: Accredited KYC service providers engaged to verify your identity and age in compliance with Philippine regulations.
• Fraud prevention partners: Risk management and fraud detection service providers who assist 28phcash in identifying and preventing prohibited activities.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law or regulatory directive.
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers engaged to operate the 28phcash Platform, subject to strict data processing agreements.
• Professional advisers: Legal counsel, auditors, and compliance consultants, where necessary for the conduct of 28phcash's business operations.

All third parties with whom 28phcash shares personal data are required to maintain appropriate technical and organizational security measures and to process your data only for the specified purpose and in accordance with our instructions.

7. Cookies & Tracking Technologies

28phcash uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use the Platform.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled as they are required for account login, session management, and security features.
• Performance cookies: Collect anonymized data about how players use the Platform (e.g., pages visited, errors encountered) to help us improve functionality.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalized experience.
• Analytics cookies: Used to understand aggregate usage patterns on the Platform. Data collected is anonymized and used for internal reporting purposes only.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 28phcash Platform.

8. Data Retention

28phcash retains your personal data for as long as your account remains active and for such additional period as is required to comply with our legal and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with Philippine AML/CTF regulations.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of the Philippines.
• Gaming history and session data is retained for a minimum of three (3) years following account closure for regulatory audit purposes.
• Support communications are retained for two (2) years from the date of the last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

9. Data Security

28phcash implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the 28phcash Platform.
• Encryption of sensitive data at rest, including financial account details and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for the detection, reporting, and remediation of personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 28phcash will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

10. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 28phcash:

• Right to be informed: The right to know whether 28phcash holds personal data about you and to receive information about how it is being processed.
• Right of access: The right to request a copy of the personal data 28phcash holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the 28phcash data privacy team using the contact details provided in Section 14 of this Policy. We will respond to all verified data subject requests within fifteen (15) business days in accordance with NPC guidelines.

11. Children & Minors

The 28phcash Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations applicable to casino-style online gaming. We do not knowingly collect personal data from individuals under the age of 21.

If 28phcash becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the 28phcash Platform, please contact our support team immediately.

12. International Data Transfers

28phcash primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure partners located outside the Philippines — for example, cloud hosting providers — 28phcash ensures that such transfers are conducted in compliance with the Data Privacy Act of 2012 and applicable NPC regulations, including the implementation of appropriate contractual safeguards such as data processing agreements incorporating standard contractual clauses.

28phcash will not transfer your personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

13. Updates to This Privacy Policy

28phcash reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The date of the most recent revision is indicated at the top of this page.

Where changes are material, we will notify registered players via the mobile number or email address associated with their account, or by posting a prominent notice on the Platform. Your continued use of the 28phcash Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how 28phcash protects your personal data.

14. Contact & Data Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 28phcash, please contact our Data Privacy Officer (DPO) through the following channels:

Email: [email protected]

You may also reach our general support team via the live chat feature available on the Platform, 24 hours a day, 7 days a week. Our team serves players from across the Philippines — from Metro Manila, Quezon City, and Makati to Cebu, Davao, and all other regions of the archipelago.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through the NPC's official channels.

Note: 28phcash is an informational and entertainment platform. All payment method references are for informational purposes only. The Platform does not process payments directly. 28phcash promotes responsible gaming. Gambling is addictive. Know when to stop. Players must be 21 years of age or older.