Privacy Policy

1 Introduction

72ph ("the Platform," "we," "us," or "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or transacts through 72ph.cam. This Privacy Policy ("Policy") describes the types of personal information 72ph collects, the purposes for which it is processed, the parties with whom it may be shared, and the measures we take to keep it secure.

This Policy applies to:

• All registered 72ph account holders;
• Visitors to 72ph.cam who have not yet created an account;
• Individuals who contact 72ph customer support;
• Any person whose personal data is submitted to 72ph in connection with account registration or verification.

By accessing 72ph.cam or creating a 72ph account, you acknowledge that you have read and understood this Policy. If you do not agree with how 72ph handles personal data, please do not use the Platform. You may close your account at any time by contacting our support team, subject to any legal retention obligations that apply.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which incorporate privacy-related provisions by reference.

2 Who We Are — Data Controller

For the purposes of Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, 72ph is the Personal Information Controller in respect of all personal data collected through the 72ph Platform. This means 72ph determines the purposes and means by which your personal data is processed.

72ph operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to all applicable PAGCOR data governance directives in addition to general Philippine data privacy law.

72ph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with RA 10173. Contact details for the DPO are provided in Section 14 of this Policy.

3 Personal Data We Collect

72ph collects personal data from you directly and automatically in the course of providing our services. The categories of data we process are as follows:

72ph does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Specifically, 72ph does not process health information, biometric data, or criminal history records unless required by a specific regulatory directive from PAGCOR or AMLC.

4 How We Use Your Personal Data

72ph processes your personal data for the following specific, legitimate purposes:

• Account creation and management: To register your 72ph account, maintain your profile, authenticate your identity at login, and manage your account settings.
• Age and identity verification (KYC): To confirm that you meet the mandatory 21-year minimum age requirement under PAGCOR regulations and to verify that you are who you say you are — preventing fraud, identity theft, and underage gambling.
• Payment processing: To process deposits from GCash, PayMaya, BDO, BPI, Metrobank, UnionBank, and 7-Eleven, and to process withdrawals to your verified Philippine payment accounts.
• Regulatory compliance: To fulfill 72ph's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and any other applicable Philippine law.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling, to apply player-requested limits and exclusions, and to comply with PAGCOR's responsible gaming requirements.
• Platform security and fraud prevention: To detect and prevent unauthorized account access, bonus abuse, multi-accounting, money laundering, and other prohibited activities.
• Customer support: To respond to your inquiries, complaints, and requests, and to maintain records of support interactions.
• Service improvement: To analyze aggregated, anonymized usage data for the purpose of improving the Platform's functionality, performance, and user experience.
• Legal proceedings: To investigate and respond to legal claims, regulatory investigations, or court orders where 72ph is required by law to disclose personal data.

5 Legal Basis for Processing

Under RA 10173 and its Implementing Rules and Regulations, 72ph processes personal data on the following lawful grounds:

• Contractual necessity: Processing required to perform the contract between 72ph and you (i.e., the Terms & Conditions you accepted upon registration), including account management, payment processing, and the provision of gaming services.
• Legal obligation: Processing required for 72ph to comply with its legal obligations under PAGCOR licensing, the Anti-Money Laundering Act, RA 10173, and other applicable Philippine law.
• Legitimate interests: Processing necessary for 72ph's legitimate business interests — including fraud detection, platform security, and service improvement — provided such interests do not override your fundamental rights and freedoms.
• Consent: Where 72ph relies on your consent as the basis for processing (e.g., for optional marketing communications), that consent will be obtained separately, clearly, and in a manner that is freely given, specific, and informed. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Cookies & Tracking Technologies

72ph uses cookies and similar tracking technologies on 72ph.cam to operate the Platform effectively. Cookies are small text files stored on your device by your browser when you visit the site. 72ph uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and cookies that store your language or regional preferences. These cannot be disabled without disrupting your use of 72ph.
• Performance cookies: Collect anonymized data about how visitors use 72ph.cam — which pages are visited most, how long sessions last, and where errors occur. This data helps 72ph improve the Platform. No personally identifiable data is collected by performance cookies.
• Functional cookies: Remember choices you make on 72ph — such as your preferred game category or responsible gaming limit settings — to provide a more personalized experience on return visits.

72ph does not use advertising or tracking cookies that serve third-party behavioral advertising. You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the 72ph Platform.

7 Sharing Your Personal Data

72ph does not sell personal data. We share your data only in the specific circumstances below, and only to the extent necessary for the stated purpose:

• Payment processors: GCash (Globe Fintech Innovations), Maya Philippines Inc., and partner banks (BDO, BPI, Metrobank, UnionBank) receive necessary financial data to process deposits and withdrawals. These parties act as independent data controllers for their own payment systems and are subject to BSP and NPC regulation independently.
• PAGCOR: As 72ph's gaming regulator, PAGCOR may require access to player data, transaction records, and game logs for licensing compliance, audit purposes, or regulatory investigations. Disclosure to PAGCOR is a legal obligation.
• Anti-Money Laundering Council (AMLC): 72ph is required by RA 9160 to submit covered transaction reports (CTRs) and suspicious transaction reports (STRs) to AMLC where applicable. Player data may be disclosed in this context without prior notice to you, as permitted under Philippine AML law.
• Identity verification providers: Third-party KYC service providers engaged by 72ph to verify government-issued Philippine IDs may process your identity data on 72ph's behalf under a data sharing agreement that includes data security and confidentiality obligations.
• Law enforcement and courts: 72ph will disclose personal data in response to a valid subpoena, court order, or lawful request from Philippine law enforcement or judicial authorities.
• Professional advisers: Legal counsel, auditors, and insurers engaged by 72ph may access personal data under strict confidentiality obligations where necessary for their professional services.

All third parties who process 72ph player data on our behalf are required to implement appropriate technical and organizational data security measures. 72ph does not transfer personal data outside the Philippines unless required by a specific legal obligation and subject to appropriate data transfer safeguards.

8 Data Retention

72ph retains personal data for as long as is necessary for the purposes described in this Policy, or for as long as required by Philippine law — whichever is longer. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AML obligations under RA 9160.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by PAGCOR and AMLC regulations.
• Gaming activity logs: Retained for a minimum of three (3) years following the date of each gaming session, and for the lifetime of the account for responsible gaming monitoring purposes.
• Customer support records: Retained for three (3) years from the date of the interaction, or for the lifetime of the account, whichever is longer.
• KYC verification documents: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC requirements.

Upon expiry of applicable retention periods, 72ph will securely delete or anonymize personal data so that it can no longer be associated with an identified individual. Anonymized or aggregated data derived from your personal data may be retained indefinitely for statistical and analytical purposes.

9 Data Security

72ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and 72ph.cam is encrypted using TLS 1.2 or higher (HTTPS). The padlock icon in your browser confirms this protection is active during your 72ph session.
• Encryption at rest: Sensitive personal data stored in 72ph's databases — including identity data and financial data — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within 72ph is restricted on a strict need-to-know basis. Staff members with access to player data are subject to confidentiality obligations and regular security training.
• Two-factor authentication: 72ph offers and recommends two-factor authentication (2FA) for all player accounts to prevent unauthorized login.
• Monitoring and incident response: 72ph operates continuous security monitoring of its Platform and has an established data breach response procedure in compliance with NPC breach notification requirements under RA 10173.
• Vendor security: All third-party service providers who process 72ph player data are contractually required to maintain security standards equivalent to or exceeding those applied by 72ph.

10 Your Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 72ph. These rights may be exercised by contacting our Data Protection Officer using the details in Section 14:

72ph will respond to all verified data subject requests within fifteen (15) business days of receipt. Where a request is particularly complex or involves a large volume of data, 72ph may extend this period by a further thirty (30) days with written notice to you. 72ph reserves the right to verify your identity before actioning any data rights request.

11 Minors and Age Restrictions

If you are a parent or guardian and believe your child or a minor in your care has registered on 72ph or submitted personal data to 72ph, please contact our Data Protection Officer immediately using the details in Section 14. We will investigate and take action within 24 hours of your report.

12 Third-Party Links and Integrations

The 72ph Platform may, from time to time, reference or display content from third-party game providers, payment processors, or service integrations. These third parties operate their own platforms and are independent data controllers for any personal data processed through their own systems.

This Privacy Policy applies solely to the 72ph Platform at 72ph.cam. 72ph is not responsible for the privacy practices or content of any third-party platform, service, or application that you access in connection with 72ph — including GCash, PayMaya, or your bank's online banking portal. We encourage you to read the privacy policies of all third-party services you use when transacting with 72ph.

13 Changes to This Privacy Policy

72ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in the Platform's data processing activities, changes in applicable Philippine law or PAGCOR regulations, or changes in industry best practice for data privacy in the online gaming sector.

Where changes to this Policy are material — meaning they substantially affect how we collect, use, or share your personal data — 72ph will notify registered players via the email address or mobile number associated with their account at least seven (7) calendar days before the amended Policy takes effect.

Minor clarifications, typographical corrections, or changes required by a specific NPC or PAGCOR directive may be made without prior notice. The "Effective Date" at the top of this Policy will always reflect the date of the most recent version. We encourage you to review this Policy periodically.

14 Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or 72ph's handling of your personal data — including exercise of your rights under RA 10173 — please contact our Data Protection Officer:

For complaints that cannot be resolved directly with 72ph, you may contact the National Privacy Commission of the Philippines. The NPC is the government body responsible for enforcing RA 10173 and protecting the privacy rights of all Filipinos. Contact details and complaint procedures are available through official Philippine government channels.