123ph7 Privacy Policy

This Privacy Policy ("Policy") describes how 123ph7 ("the Platform," "we," "us," "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "Player," "User") who access or use the 123ph7 website, mobile interface, and all associated services (collectively, the "Services").

123ph7 is committed to protecting the privacy and personal data of all players, in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and the implementing rules and regulations issued by the National Privacy Commission ("NPC"). This Policy applies to all personal data collected through your use of the 123ph7 platform, regardless of whether you are a registered account holder or a visitor.

This Policy should be read together with the 123ph7 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

123ph7 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include the following:

123ph7 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions on the 123ph7 platform.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you access and interact with the 123ph7 platform.
• Third-Party Sources: Identity verification data from KYC service providers; fraud detection signals from security partners; payment confirmation data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank.
• Publicly Available Sources: In limited circumstances, 123ph7 may supplement your profile with information from publicly available sources for fraud prevention and AML compliance purposes.

All data collection on the 123ph7 platform is conducted in accordance with the principles of transparency, legitimate purpose, and proportionality as required by the Data Privacy Act of 2012.

123ph7 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your 123ph7 player account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide you with access to all 123ph7 games and features, process your deposits and withdrawals, and deliver customer support services.
• Identity Verification & KYC: To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine AML laws, and to prevent the use of the platform by ineligible persons.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, and other illegal activities on the 123ph7 platform.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including AML reporting obligations, data retention requirements, and PAGCOR licensing conditions.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests.
• Communications: To send you transactional notifications (account activity, deposit confirmations, withdrawal updates), security alerts, and — where you have opted in — promotional communications about 123ph7 offers and new games.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and user experience of the 123ph7 platform.
• Legal Claims: To establish, exercise, or defend legal claims arising from your use of the 123ph7 platform.

Under the Data Privacy Act of 2012, 123ph7 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and 123ph7 — specifically, to operate your player account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and NPC data governance obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of 123ph7, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — 123ph7 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

123ph7 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers engaged by 123ph7 to verify player identity and screen for sanctions and politically exposed persons (PEPs).
• Technology & Infrastructure Partners: Cloud hosting providers, cybersecurity firms, and platform technology vendors who process data on behalf of 123ph7 under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulatory mandate.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required pursuant to a valid legal order, warrant, or subpoena.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by 123ph7, subject to professional confidentiality obligations.

In the event of a merger, acquisition, or sale of all or substantially all of the assets of 123ph7, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

The 123ph7 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform usage. A cookie is a small text file placed on your device when you visit a website.

123ph7 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the 123ph7 platform. These cookies enable core functions such as secure login, session management, and fraud prevention. They cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect anonymized data about how players interact with the 123ph7 platform, helping us identify areas for improvement and optimize the user experience.
• Functional Cookies: Used to remember your preferences and settings on the 123ph7 platform, such as your preferred language, game display settings, and responsible gaming tool configurations.
• Marketing Cookies: Used — only with your consent — to deliver relevant promotional content about 123ph7 games and offers. You may opt out of marketing cookies at any time through your browser settings or the 123ph7 cookie preference center.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 123ph7 platform. For more information on managing cookies, refer to your browser's help documentation.

123ph7 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with 123ph7, and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC & Identity Documents: Retained for the duration of your account and for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Communications Data: Customer support correspondence is retained for up to three (3) years from the date of the last interaction.
• Technical & Usage Data: Log files and usage analytics data are retained for up to twelve (12) months, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with 123ph7's data disposal procedures. Where data is anonymized, it may be retained indefinitely for statistical and analytical purposes.

123ph7 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and the 123ph7 platform is protected using 256-bit SSL/TLS encryption. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within 123ph7 is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: 123ph7 supports and encourages the use of two-factor authentication (2FA) to protect your account from unauthorized access.
• Penetration Testing: The 123ph7 platform undergoes regular security assessments and penetration testing by independent cybersecurity professionals.
• Incident Response: 123ph7 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, 123ph7 will notify the NPC and affected players in accordance with the requirements of the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 123ph7. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.

123ph7 will respond to all verified data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you. We may require proof of identity before processing any data rights request.

The 123ph7 platform is strictly intended for adults aged 21 years and above. 123ph7 does not knowingly collect, process, or store personal data from individuals under the age of 21. The minimum age requirement of 21 years is a mandatory legal requirement under Philippine gaming regulations.

If 123ph7 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds in accordance with our standard procedures. If you believe that a minor has registered an account on 123ph7, please contact our support team immediately.

The 123ph7 platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to the 123ph7 platform and does not extend to any third-party websites or services that may be accessible via links on our platform.

123ph7 has no control over and accepts no responsibility for the privacy practices, content, or data handling of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on the 123ph7 platform does not constitute an endorsement of the linked website or its privacy practices.

123ph7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, 123ph7 will notify registered players through one or more of the following methods: a prominent notice on the 123ph7 platform, an in-account notification, or an email to your registered address. Your continued use of the 123ph7 platform following the effective date of any update constitutes your acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how 123ph7 is protecting your personal data. If you have any questions about changes to this Policy, please contact our Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 123ph7, please contact our Data Protection Officer (DPO) or customer support team using the details below.

When submitting a data rights request, please include "Privacy Request" in your subject line and provide sufficient information to allow us to verify your identity and locate your account. 123ph7 will acknowledge receipt of all privacy-related correspondence within five (5) business days.