5ph2 Privacy Policy

5ph2 ("we," "us," "our") is committed to protecting the privacy and personal data of every player who uses the 5ph2 platform. This Privacy Policy describes how 5ph2 collects, uses, stores, shares, and protects personal information in connection with the operation of its online casino services in the Philippines.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, 5ph2 also adheres to the data privacy requirements set out by PAGCOR in its regulatory framework for online gaming operators.

We encourage you to read this Policy carefully. If you have questions about how 5ph2 handles your personal data, you can reach our Data Protection Officer at any time using the contact details in Section 14.

5ph2 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of data we collect include:

2.1 Registration Data

When you create a 5ph2 account, we collect your full legal name, date of birth, registered mobile number, email address, and a username of your choice. This information is required to create and manage your account.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and PAGCOR requirements, 5ph2 may collect copies of government-issued identification documents (such as a Philippine passport, driver's license, SSS ID, UMID, or PhilSys national ID), proof of address, and source of funds documentation.

2.3 Financial Data

When you make deposits or request withdrawals, 5ph2 collects payment-related information including your GCash mobile number, PayMaya / Maya account details, or bank account information (bank name, account name, account number). 5ph2 does not store full debit card numbers on its servers; card data is handled directly by our PCI-DSS compliant payment processors.

2.4 Transaction & Gaming Data

We maintain records of all deposits, withdrawals, wagers, game results, bonus usage, and account balance history. This data is required for regulatory compliance, dispute resolution, and responsible gaming monitoring.

2.5 Technical & Device Data

When you access the 5ph2 platform, we automatically collect certain technical information including your IP address, device type and model, operating system, browser type and version, session timestamps, and approximate geolocation (derived from IP address). This data is used for security, fraud prevention, and platform optimization.

2.6 Communications Data

If you contact 5ph2 customer support via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments you provide, for quality assurance and dispute resolution purposes.

2.7 Voluntary Data

You may choose to provide additional information, such as preferences for responsible gaming tools or promotional communications. Providing this data is entirely optional and will not affect your access to the platform.

5ph2 uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

5ph2 will never use your personal data to make fully automated decisions that produce significant legal effects on you without human review. Where automated tools are used for fraud detection or responsible gaming monitoring, a human review process is available upon request.

Under the Philippine Data Privacy Act of 2012, 5ph2 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and the Data Privacy Act itself.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as promotional communications, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5ph2 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers to assist in operating the 5ph2 platform, including payment processors (for GCash, PayMaya, and bank transfer transactions), identity verification providers, cloud hosting providers, and customer support software vendors. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data privacy laws.

5.2 Regulatory and Law Enforcement Authorities

5ph2 is required by Philippine law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities upon lawful request. We will notify you of such disclosures where we are legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 5ph2's assets, your personal data may be transferred to the acquiring entity. We will notify you via email or a prominent notice on the platform before your data is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your data with third parties for purposes not described above if we have obtained your explicit prior consent to do so.

5ph2 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players interact with our services. The types of cookies we use are described below:

You can manage your cookie preferences through your browser settings. Please note that disabling essential or security cookies may prevent you from accessing certain features of the 5ph2 platform. 5ph2 does not use third-party advertising cookies or cross-site tracking technologies.

5ph2 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC requirements.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Customer support communications: Retained for three (3) years from the date of the last communication, or longer if related to an ongoing dispute or regulatory inquiry.
• Technical and device data: Retained for up to twelve (12) months from collection, after which it is aggregated or deleted.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal, as evidence of compliance.

When personal data is no longer required, 5ph2 securely deletes or anonymizes it in accordance with industry best practices and NPC guidelines.

5ph2 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
• Multi-factor authentication (MFA) options for player accounts
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular third-party security audits and penetration testing
• 24/7 automated intrusion detection and monitoring systems
• Secure data centers with physical access controls

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 5ph2 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 5ph2. To exercise any of these rights, contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within fifteen (15) business days.

The 5ph2 platform is strictly intended for persons aged 21 years and above. 5ph2 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process.

If 5ph2 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 5ph2 platform, please contact our Data Protection Officer immediately.

The 5ph2 platform may contain references to third-party services such as payment providers. Once you leave the 5ph2 platform and interact with a third-party service, that service's own privacy policy governs the collection and use of your data. 5ph2 is not responsible for the privacy practices of third-party services and encourages you to review their privacy policies before providing any personal information.

5ph2 primarily stores and processes your personal data within the Philippines. In limited circumstances, data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers with data centers in the Asia-Pacific region.

Where such transfers occur, 5ph2 ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to provide a level of data protection equivalent to that required under Philippine law. 5ph2 will not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent or a lawful basis for doing so.

5ph2 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the 5ph2 platform after the effective date of any revised Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you may request account closure as described in our Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 5ph2 handles your personal data, please contact our Data Protection Officer. All data subject requests will be acknowledged within three (3) business days and resolved within fifteen (15) business days.