Privacy Policy

58ph ("we", "us", "our", or "the Company") operates the online gaming platform accessible at 58ph.org and is committed to protecting the privacy and personal data of all individuals who interact with our Platform — whether as registered players, prospective registrants, or general visitors.

This Privacy Policy has been prepared in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations, and all relevant issuances by the National Privacy Commission of the Philippines. It also reflects the requirements of the Philippine Amusement and Gaming Corporation (PAGCOR) with respect to player data management.

By accessing the 58ph Platform, creating an account, or making use of any of our gaming services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any aspect of this Privacy Policy, you should discontinue use of the 58ph Platform.

This Privacy Policy should be read together with the 58ph Terms & Conditions, which form a binding agreement between 58ph and each registered player.

This Privacy Policy applies to all personal data processed by 58ph in connection with the operation of the 58ph Platform and all associated services, including but not limited to:

• Account registration and identity verification (KYC) processes;
• Deposit and withdrawal transactions via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels;
• Participation in all gaming activities including slots, live casino, bingo, Ocean Lord, sports betting, and sabong;
• Customer support interactions conducted via live chat, email, or any other channel;
• Marketing communications and promotional activities, including bonus offers and loyalty programmes;
• Responsible gaming tool usage, including deposit limits, self-exclusion requests, and cooling-off periods; and
• General browsing and navigation of the 58ph.org website.

This Policy does not apply to third-party websites or services that may be linked from the 58ph Platform. Where 58ph integrates third-party game providers, payment processors, or other service partners, those parties operate under their own privacy policies, for which 58ph is not responsible.

58ph collects the following categories of personal data from players and Platform users. We collect only data that is necessary for the purposes described in Section 5 of this Policy and do not process personal data beyond what is proportionate and required.

58ph collects personal data through the following channels and methods:

4.1 Direct Collection. You provide personal data directly to 58ph when you:

• Complete the account registration form at 58ph.org;
• Submit identity documents and selfie photographs as part of the KYC verification process;
• Make a deposit or submit a withdrawal request and provide associated payment account details;
• Contact our support team via live chat or email;
• Update your account profile or security settings; or
• Participate in surveys, feedback forms, or promotional opt-in activities.

4.2 Automated Collection. 58ph automatically collects certain technical and behavioural data when you access and use the Platform, including through the use of cookies, session tracking, and server logs. See Section 11 for full details on cookie usage.

4.3 Third-Party Sources. In limited circumstances, 58ph may receive personal data about you from third parties, including:

• Payment processors (confirmation of GCash, PayMaya, or bank transaction details);
• Identity verification service providers engaged by 58ph for KYC processing;
• Anti-fraud and AML screening databases; and
• PAGCOR or other regulatory authorities where lawfully directed to provide or receive data.

58ph processes your personal data for the following specific, legitimate, and declared purposes:

• Account Registration and Management: To create and maintain your 58ph account, verify your identity, and manage your access to Platform services.
• Identity Verification (KYC): To fulfil our obligations under PAGCOR regulations and the Anti-Money Laundering Act of 2001, as amended, by verifying that all account holders are who they claim to be and meet eligibility requirements including the minimum age of 21.
• Transaction Processing: To process deposits via GCash, PayMaya, and Philippine bank accounts, and to process withdrawal requests to verified player-owned payment accounts.
• Gaming Services Delivery: To provide, operate, and maintain all gaming services on the 58ph Platform including slots, live casino, bingo, Ocean Lord, and sports betting.
• Bonus and Promotion Administration: To credit bonuses, track wagering requirements, and administer all promotional offers made available through the 58ph Platform.
• Customer Support: To respond to and resolve player queries, complaints, and disputes submitted through live chat, email, or other support channels.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, AML reporting obligations, NPC directives, and all other applicable Philippine laws and regulations.
• Responsible Gaming: To monitor gaming behaviour and administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the design, performance, and functionality of the 58ph Platform.
• Marketing Communications: To send promotional communications about 58ph bonuses, new games, and events — subject to your marketing preferences and consent where required.

Under the Data Privacy Act of 2012, personal data may be processed where at least one lawful basis applies. The lawful bases relied upon by 58ph are:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and 58ph — specifically, the Terms & Conditions you accepted at registration. This covers account management, transaction processing, gaming service delivery, and bonus administration.
• Legal Obligation: Processing is required for compliance with a legal obligation to which 58ph is subject — including PAGCOR regulatory requirements, AML reporting obligations under RA 9160, and data retention mandates.
• Legitimate Interest: Processing is necessary for the legitimate interests of 58ph, including fraud prevention, security monitoring, Platform improvement, and responsible gaming programme operation — where such interests are not overridden by your rights and freedoms.
• Consent: Where required by applicable law (e.g., for certain marketing communications or the processing of Sensitive Personal Information), we will obtain your freely given, specific, informed, and unambiguous consent before processing. You may withdraw consent at any time without detriment to your account standing, subject to processing already completed.

7.1 58ph does not sell your personal data. We do not sell, rent, or trade personal data to third parties for their own commercial or marketing purposes under any circumstances.

7.2 Service Providers. 58ph engages trusted third-party service providers who process personal data on our behalf and under our instruction, subject to written data processing agreements that require them to maintain appropriate security standards and process data only as directed. These include:

• Payment processors (GCash / Maya / BancNet and Philippine banking partners);
• Identity verification and KYC technology providers;
• Cloud hosting and infrastructure providers;
• Anti-fraud and AML screening service providers;
• Customer support platform operators; and
• Game content providers, to the extent necessary for game session delivery.

7.3 Regulatory Authorities. 58ph is required by law to disclose personal data to the following authorities upon lawful request, without prior notification to the affected player:

• The Philippine Amusement and Gaming Corporation (PAGCOR);
• The Anti-Money Laundering Council (AMLC);
• The National Privacy Commission (NPC);
• Philippine law enforcement agencies (NBI, PNP) where duly authorised by court order or other lawful authority; and
• The Bureau of Internal Revenue (BIR), where required by applicable tax law.

7.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets involving 58ph, personal data held by 58ph may be transferred to the acquiring or successor entity, subject to the same data protection obligations described in this Policy. Players will be notified of any such transfer that materially affects the use of their personal data.

58ph retains personal data only for as long as necessary to fulfil the stated processing purposes, or as required by applicable law and regulatory obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Data subject to an active legal hold, regulatory investigation, or ongoing dispute will be retained until such matter is fully resolved.

58ph implements appropriate technical and organisational security measures proportionate to the nature, scope, and sensitivity of the personal data processed, and to the risks presented by the processing activities carried out on the Platform. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and the 58ph Platform is encrypted using TLS (Transport Layer Security / SSL). This applies to all pages including login, deposit, withdrawal, and account management pages.
• Encryption at Rest: Personal data and sensitive account information stored in 58ph databases is encrypted at rest using industry-standard encryption protocols.
• Password Hashing: User passwords are stored exclusively as one-way cryptographic hashes. 58ph does not store or have access to plain-text passwords. This means even if a database were to be accessed without authorisation, passwords would not be directly exposed.
• Access Controls: Access to systems containing personal data is restricted to authorised 58ph personnel on a strictly need-to-know basis. Access rights are reviewed periodically and revoked promptly when no longer required.
• Two-Factor Authentication: 58ph offers two-factor authentication (2FA) to all players via SMS OTP and strongly recommends its use. Internal administrative access to player data systems requires multi-factor authentication.
• Intrusion Detection and Monitoring: 58ph operates continuous security monitoring on platform infrastructure to detect and respond to suspicious access patterns, login anomalies, and potential intrusion attempts.
• Breach Response Plan: 58ph maintains a documented data breach response procedure, including immediate containment actions, notification obligations to the NPC and affected players, and post-incident review processes.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 58ph. These rights may be exercised by contacting our Data Protection Officer (DPO) using the contact details in Section 16.

58ph will respond to verified data subject rights requests within fifteen (15) business days. In complex cases, an extension of up to thirty (30) additional business days may apply, and you will be notified accordingly. We may require verification of your identity before actioning any request to protect against unauthorised access to account data.

The 58ph Platform uses cookies and similar tracking technologies to support the functional operation of the site, maintain your login session, and collect analytical data that helps us improve Platform performance. A cookie is a small text file placed on your device by a website you visit.

11.1 Types of Cookies Used by 58ph:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cookies cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences — such as preferred language, layout settings, and responsible gaming limit configurations — so you don't need to re-enter them each session.
• Analytical Cookies: Collect aggregated, anonymised data about how players use the Platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve the 58ph Platform and is not used for player profiling or marketing targeting.
• Session Tracking: 58ph uses server-side session tracking to record gaming activity for regulatory logging purposes, including compliance with PAGCOR requirements for maintaining detailed gaming session records.

11.2 Cookie Management. You can manage cookie preferences through your browser settings, including deleting existing cookies and blocking future ones. Note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the 58ph Platform. Instructions for managing cookies vary by browser and operating system.

11.3 No Third-Party Advertising Cookies. 58ph does not use third-party advertising cookies or retargeting pixels to track your browsing behaviour across other websites for advertising purposes.

The 58ph Platform is strictly restricted to individuals who are at least twenty-one (21) years of age. 58ph does not knowingly collect or process personal data from minors. The minimum age requirement of 21 is enforced through the account registration process and verified during KYC review.

If 58ph becomes aware that personal data has been collected from a person under the age of 21, the account will be immediately closed, all associated personal data will be securely deleted to the extent permitted by law, and any deposited funds will be returned to the originating payment method following identity verification of the account owner.

Where 58ph engages third-party service providers located outside the Republic of the Philippines — for example, cloud infrastructure providers or game technology companies operating from other jurisdictions — personal data may be transferred internationally. Such transfers are conducted only where:

• The recipient jurisdiction has been determined to provide an adequate level of data protection comparable to Philippine standards;
• Appropriate contractual safeguards are in place, such as standard contractual clauses binding the recipient to data protection obligations consistent with the Data Privacy Act; or
• The transfer is necessary for the performance of a contract between 58ph and the player, or for pre-contractual measures taken at the player's request.

58ph's primary data infrastructure is hosted within facilities serving the Asia-Pacific region. We do not transfer Sensitive Personal Information, including KYC identity documents, outside of the Philippines or to recipients who do not maintain equivalent data protection standards.

If you are not satisfied with 58ph's response to a data subject rights request, or if you believe that 58ph has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission of the Philippines.

Before filing a complaint with the NPC, we strongly encourage you to first contact the 58ph Data Protection Officer (see Section 16) to allow us an opportunity to address your concern directly and promptly. 58ph is committed to resolving all data privacy concerns in good faith and in accordance with applicable law.

Information about filing complaints with the NPC — including the formal complaint process and submission requirements — is available through official Philippine government channels.

58ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform functionality. The "Effective Date" at the top of this document will be updated whenever a material revision is published.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — 58ph will notify registered players via email to the registered address or via a notice prominently displayed upon login to the Platform. Your continued use of the 58ph Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms.

We recommend reviewing this Privacy Policy periodically. The current version is always accessible at 58ph.org/privacy-policy.

In accordance with the Data Privacy Act of 2012, 58ph has designated a Data Protection Officer (DPO) responsible for overseeing the Company's data protection programme and serving as the point of contact for data subject rights requests, privacy-related queries, and regulatory communications.

To exercise your data subject rights, raise a privacy concern, or seek clarification on any aspect of this Privacy Policy, please contact the 58ph DPO through the following channels: