18ph Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 18ph ("18ph," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals who access, register with, or use the 18ph online casino and sports betting platform available at 18ph.one ("Platform").

18ph is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection obligations under Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable PAGCOR regulatory requirements for licensed online gaming operators.

By registering an account with 18ph, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform and may close your account by contacting our support team.

2. Scope & Application

This Policy applies to all personal data collected by 18ph in connection with:

• Registration and creation of a player account on the 18ph Platform;
• All deposits, withdrawals, and financial transactions processed through the Platform;
• Gameplay activity, including game sessions, bets placed, and outcomes;
• Customer support interactions via live chat, email, or any other communication channel;
• Participation in 18ph promotional programs, bonus schemes, or loyalty arrangements;
• Browsing and use of the 18ph website even without a registered account;
• Identity verification (KYC) processes conducted by 18ph or its appointed verification service providers.

This Policy does not apply to third-party websites, payment processors, or game providers that may be accessible through or in connection with the 18ph Platform. Those entities maintain their own privacy policies, and 18ph bears no responsibility for their data practices.

3. Personal Data We Collect

18ph collects personal data in the following categories:

4. How We Collect Your Data

18ph collects personal data through the following methods:

• Directly from You: When you register an account, complete a deposit or withdrawal form, submit KYC documents, contact support, or update your account profile.
• Automatically During Platform Use: Through server logs, browser cookies, and similar tracking technologies when you browse or use the 18ph Platform. Technical data such as IP address, device identifiers, and session data are collected automatically.
• From Payment Processors: When you initiate a deposit or withdrawal via GCash, PayMaya, or a Philippine bank, the relevant payment platform may pass transaction confirmation data to 18ph for reconciliation purposes.
• From KYC Verification Services: 18ph may use third-party identity verification providers to assist with document authentication. These providers return verification outcomes and, where applicable, confirmed identity data to 18ph.
• From Game Providers: Game session data — including bet amounts, game choices, and outcomes — is generated by third-party game engines and transmitted to 18ph for account crediting, dispute resolution, and regulatory reporting.

5. How We Use Your Personal Data

18ph uses the personal data it collects for the following purposes:

• Account Operations: To create, verify, maintain, and administer your 18ph player account, including processing logins, managing your balance, and fulfilling deposit and withdrawal requests.
• Identity & Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in accordance with PAGCOR KYC requirements before approving withdrawal requests.
• Payment Processing: To process deposits received from GCash, PayMaya, and Philippine bank accounts, and to execute withdrawal payments to your verified payment methods.
• Fraud & Security: To detect and prevent fraud, account takeovers, money laundering, and other prohibited activities. IP and device data are analyzed to identify suspicious login patterns or payment anomalies.
• Regulatory Compliance: To meet 18ph's obligations under PAGCOR licensing requirements, Philippine anti-money laundering (AML) regulations, and the Data Privacy Act of 2012, including statutory record-keeping and mandatory reporting requirements.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behavior and to administer voluntary responsible gaming settings such as deposit limits, session timers, cooling-off periods, and self-exclusion.
• Customer Support: To respond to support queries, resolve disputes, and maintain records of support interactions for quality assurance and legal purposes.
• Platform Improvement: To analyze aggregated, anonymized data about how players use the 18ph Platform to identify technical issues, improve game selection, and optimize user experience.
• Marketing Communications: With your explicit consent, to send you promotional communications about bonuses, new games, and special offers at 18ph. You may withdraw marketing consent at any time through your account settings.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, 18ph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and 18ph — specifically, to operate your account, process transactions, and provide gaming services.
• Legal Obligation: Processing required to comply with 18ph's obligations under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012 itself.
• Legitimate Interest: Processing necessary for 18ph's legitimate interests in preventing fraud, protecting the security of the Platform, conducting aggregated analytics for platform improvement, and maintaining accurate business records — where these interests are not overridden by your privacy rights.
• Consent: For marketing communications and any non-essential cookie categories. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

7. How We Share Your Data

18ph does not sell or rent personal data. We share your data only in the following limited circumstances:

• Payment Service Providers: GCash (Mynt – Globe Fintech Innovations), PayMaya (Voyager Innovations), and Philippine banking institutions through which deposits and withdrawals are processed. Data shared is limited to what is necessary to execute and confirm transactions.
• KYC & Identity Verification Providers: Third-party services that assist 18ph in verifying player identities and authenticating government-issued documents. These providers are bound by confidentiality agreements and data protection obligations.
• Game Providers: Licensed game providers whose software powers the 18ph game lobby receive session data necessary to operate game rounds. Game providers do not receive your full personal profile or financial data.
• PAGCOR and Regulatory Authorities: As required by 18ph's operating obligations under PAGCOR regulations and applicable Philippine law, including mandatory reporting to the Anti-Money Laundering Council (AMLC) where triggered by applicable AML thresholds or suspicious transaction criteria.
• Law Enforcement: Where required by a valid lawful order from a Philippine court or law enforcement agency.
• Professional Advisors: Legal, accounting, and audit firms engaged by 18ph under binding confidentiality obligations, on an as-needed basis for professional services.

8. Cookies & Tracking Technologies

18ph uses cookies and similar technologies to operate the Platform and improve your experience. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cannot be disabled without rendering the Platform unusable.
• Functional Cookies: Remember your Platform preferences such as language settings, remembered login details (if "Remember me" is selected), and responsible gaming notification states.
• Analytics Cookies: Collect aggregated, anonymized data about how visitors use the 18ph website — which pages are visited, session duration, and navigation paths. This data helps 18ph identify technical issues and improve Platform usability. These cookies do not identify individual visitors.
• Security Cookies: Used to detect and prevent fraudulent account access, including cookies that help identify whether a login attempt comes from a previously recognized device.

Most browsers allow you to control cookie settings through browser preferences. Disabling cookies may affect your ability to use certain features of the 18ph Platform, including maintaining a logged-in session.

9. Data Security

18ph implements a range of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure:

• Encryption in Transit: All data transmitted between your browser or mobile device and 18ph servers is protected by 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive personal information — including KYC documents and financial account identifiers — is encrypted at rest in 18ph's data storage systems.
• Access Controls: Access to personal data within 18ph is restricted on a need-to-know basis. Staff members who handle personal data are subject to confidentiality obligations and receive data protection training.
• Authentication Security: 18ph account logins are protected by password hashing. Optional SMS two-factor authentication is available to all players and is strongly recommended.
• Monitoring: 18ph employs automated monitoring systems to detect unusual access patterns, potential data breaches, and unauthorized system activity.

Despite these measures, no system is completely immune to security threats. In the event of a data breach that is likely to result in risk to your rights and freedoms, 18ph will notify you and, where required, the National Privacy Commission of the Philippines, in accordance with the Data Privacy Act of 2012.

10. Data Retention

18ph retains personal data for the periods set out below, unless a longer retention period is required by applicable Philippine law or PAGCOR regulatory requirements:

• Active Account Data: Retained for the duration of your account's active life and for a period thereafter sufficient to resolve any pending disputes, apply any applicable responsible gaming restrictions, or satisfy regulatory reporting obligations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations administered by the AMLC.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years from account closure, as required by PAGCOR and AML compliance requirements.
• Support Communications: Customer support records are retained for three (3) years from the date of the relevant interaction, unless associated with an ongoing dispute or regulatory matter requiring longer retention.
• Marketing Consent Records: Records of your marketing preferences and consent decisions are retained for as long as necessary to demonstrate compliance with applicable data protection requirements.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymized. Anonymized data — which cannot be attributed to any individual — may be retained indefinitely for aggregated analytics purposes.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 18ph:

To exercise any of these rights, contact the 18ph Data Protection Officer at [email protected] with the subject line "Data Privacy Request" and your registered account email address. 18ph will acknowledge your request within 72 hours and aim to resolve it within 30 calendar days.

Please note that the right to erasure and the right to object to processing may be limited where 18ph is required to retain or process data to comply with a legal obligation — such as AML record-keeping requirements or PAGCOR regulatory mandates. In such cases, 18ph will explain the specific legal basis for continuing to hold or process the relevant data.

12. Minors & Age Restriction

The 18ph Platform is strictly intended for adults aged 21 years and older, in accordance with PAGCOR regulations governing casino-style gambling in the Philippines. 18ph does not knowingly collect personal data from individuals under the age of 21.

If 18ph becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately:

1. Suspend the associated account;
2. Delete or anonymize all personal data associated with the underage account to the extent permitted by law;
3. Return any deposited funds to the payment source used, net of any applicable investigation costs; and
4. Report the matter to PAGCOR as required by our regulatory obligations.

Any winnings accrued by an account determined to belong to a person under 21 will be voided and forfeited. Parents or guardians who believe a minor has created an account on 18ph should contact our support team immediately at [email protected].

13. International Data Transfers

Certain third-party service providers engaged by 18ph — including game software providers and technical infrastructure services — may process or store data outside the Republic of the Philippines. Where such international data transfers occur, 18ph ensures that:

• The receiving country or organization provides an adequate level of data protection as recognized by the National Privacy Commission of the Philippines;
• Appropriate contractual safeguards — such as data processing agreements incorporating standard contractual clauses — are in place with the receiving party; and
• The transfer is limited to data strictly necessary for the service being provided by the third party.

Your KYC documents and full financial transaction records are stored on servers located within or subject to Philippine regulatory jurisdiction, consistent with PAGCOR data localization requirements where applicable.

14. Anti-Money Laundering & Regulatory Data Processing

As a regulated gaming operator subject to PAGCOR oversight, 18ph is required to comply with the Anti-Money Laundering Act of 2001 (Republic Act No. 9160), as amended, and related regulations issued by the Anti-Money Laundering Council (AMLC) of the Philippines.

In connection with these obligations, 18ph:

• Maintains records of all financial transactions for a minimum of five years;
• Performs customer due diligence (CDD) and enhanced due diligence (EDD) on player accounts based on transaction volume, behavior patterns, and risk indicators;
• Files covered transaction reports (CTRs) and suspicious transaction reports (STRs) with the AMLC where legally required, without notice to the player where the law prohibits such notification (tipping-off restrictions);
• Screens player identities against applicable sanctions lists and politically exposed person (PEP) registers as part of the KYC process.

Processing of personal data for AML compliance purposes is a legal obligation and cannot be opted out of. Players who decline to provide information required for AML compliance will be unable to complete withdrawal requests and may have their accounts suspended pending further review.

15. Changes to This Privacy Policy

18ph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, 18ph will notify registered players through one or more of the following channels:

• A notice displayed on the 18ph Platform at login;
• An email notification to your registered email address;
• An SMS notification to your registered Philippine mobile number.

The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the 18ph Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

Where changes require a new or additional legal basis for processing your personal data — for example, a new type of data collection — we will seek your explicit consent before that new processing begins, except where such processing is required by law.

16. Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or 18ph's data protection practices, please contact us using the details below:

• Data Protection Officer — 18ph: [email protected] — please use the subject line "Data Privacy" and include your registered email address in all correspondence
• Live Chat: Available 24 hours a day, 7 days a week directly through the 18ph Platform in English — appropriate for urgent account security matters

18ph acknowledges all privacy-related correspondence within 72 hours and resolves substantive requests within 30 calendar days. Complex requests involving regulatory obligations may require a longer resolution timeline, in which case we will communicate an estimated timeframe upon acknowledgment.