Privacy Policy

1. Introduction

57ph ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users who access https://57ph.app. This Privacy Policy is prepared in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, together with its implementing rules and regulations issued by the National Privacy Commission (NPC).

By registering for an account on 57ph, depositing funds, playing games, or otherwise accessing the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and storage of your personal data as described herein.

2. Personal Data We Collect

57ph collects the following categories of personal data in the course of operating the platform and fulfilling its obligations to players and regulators:

57ph does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond what is strictly necessary for identity verification and regulatory compliance.

3. How We Collect Personal Data

57ph collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access 57ph through server logs, session tracking, and browser-based data (cookies and similar technologies — see Section 10).
• Third-party sources: Identity verification data from document verification service providers; transaction confirmation data from payment processors including GCash, Maya, BPI, BDO, and Metrobank; fraud detection signals from anti-fraud service providers.
• Regulatory sources: Information provided to or received from PAGCOR, the AMLC, or other Philippine regulatory bodies in the exercise of their supervisory functions.

4. Purposes of Data Processing

57ph processes your personal data for the following purposes:

• Account creation and management: To register, verify, and maintain your player account on 57ph.
• Identity verification (KYC): To verify your identity and confirm that you meet the minimum age requirement of 21 years under PAGCOR regulations.
• Financial processing: To process PHP deposits, withdrawals, and refunds via GCash, Maya, and Philippine bank transfers.
• Game operations: To deliver game content, record betting activity, calculate winnings and losses, and maintain a transparent transaction history accessible to you.
• Fraud prevention and AML compliance: To detect and investigate suspicious financial activity and comply with the Anti-Money Laundering Act of 2001 (AMLA) and its amendments.
• Regulatory compliance: To meet 57ph's obligations to PAGCOR and other applicable Philippine regulatory bodies, including mandatory reporting of certain transactions.
• Customer support: To respond to your queries, resolve disputes, and process complaints submitted through live chat or email.
• Marketing and promotions: To send you promotional offers, bonus notifications, and newsletters — only where you have not opted out and where we have a lawful basis to do so.
• Responsible gaming: To administer deposit limits, self-exclusion requests, and other player protection tools available through your 57ph account settings.
• Platform improvement: To analyse aggregated and anonymised usage data to improve game offerings, website performance, and the overall player experience.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 57ph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the player agreement formed when you register and use 57ph — including account management, payments, and game operations.
• Legal obligation: Processing required to comply with Philippine law, including AML obligations, PAGCOR regulatory requirements, and NPC data protection obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and improvement of 57ph's services, where such interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing communications, where we rely on your freely given, specific, informed, and unambiguous consent — which you may withdraw at any time.

6. Disclosure and Sharing of Personal Data

57ph does not sell your personal data to third parties. We disclose your data only as necessary and only to the following categories of recipients:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and InstaPay/QR Ph processors — to facilitate financial transactions in PHP.
• Identity verification providers: Third-party KYC and document verification service providers engaged to assist with age and identity verification.
• Game software providers: Providers such as Pragmatic Play, PG Soft, and Jili Games, who may receive session data necessary to deliver their games — subject to their own privacy commitments.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies — where disclosure is required by Philippine law or a court order.
• Fraud prevention and security providers: Third-party services used to detect fraudulent activity and protect the integrity of the 57ph platform.
• IT and infrastructure service providers: Cloud hosting, database, and cybersecurity vendors engaged to operate and secure the 57ph platform infrastructure.

All third-party processors engaged by 57ph are required to handle your data in accordance with the Data Privacy Act of 2012 and are prohibited from processing your data for any purpose other than the specific service they provide to 57ph.

7. Data Retention

57ph retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of 5 years from account closure, consistent with PAGCOR recordkeeping requirements and AMLA obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by the AMLA.
• Game session records: Retained for a minimum of 3 years for dispute resolution and audit purposes.
• Support communications: Retained for 2 years from the date of the last communication, unless a longer period is required for an open dispute.
• Marketing consent records: Retained for as long as your marketing consent is active and for 1 year after withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8. Security Measures

57ph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 57ph's servers.
• Bcrypt password hashing — your login password is never stored in plain text.
• Multi-factor authentication (OTP via registered mobile number) for login and high-value financial operations.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments by independent cybersecurity professionals.
• Encrypted storage of all identity documents submitted for KYC verification.
• Automated fraud detection and anomaly monitoring systems operating continuously.

Notwithstanding these measures, no data transmission over the internet is entirely secure. In the event of a personal data breach that poses a real risk of serious harm, 57ph will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 57ph:

• Right to be informed: The right to know how your personal data is collected, processed, and used — which this Privacy Policy fulfils.
• Right of access: The right to request a copy of the personal data 57ph holds about you, and information about how it is processed.
• Right to rectification: The right to correct inaccurate or incomplete personal data. Some corrections may require supporting documentation.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the original purpose and no overriding legal obligation requires its retention.
• Right to object: The right to object to processing of your data for direct marketing purposes at any time, with immediate effect.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, submit a written request to [email protected]. 57ph will respond within 15 business days. Requests are processed at no charge for the first request in any 12-month period.

10. Cookies and Tracking Technologies

57ph uses cookies and similar browser-based technologies to operate the platform, remember your session, and analyse usage patterns. The cookies used fall into the following categories:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens that keep you logged in to your 57ph account. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language, currency display, and game lobby filters.
• Analytics cookies: Collect anonymised data about how players navigate the platform to help 57ph improve game discoverability, page performance, and support workflows. This data is aggregated and does not identify individual players.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and account takeover attacks.

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to 57ph. Analytics cookies can be disabled without affecting platform access. 57ph does not use third-party advertising or retargeting cookies.

11. Protection of Minors

57ph strictly prohibits access by individuals under the age of 21 years, consistent with PAGCOR regulations. 57ph does not knowingly collect personal data from anyone under 21. If we become aware that a registered account belongs to an individual under the minimum age, that account will be immediately suspended, all balances will be reviewed, and the registration data will be handled in accordance with applicable law.

If you are a parent or guardian and believe that a minor has created an account on 57ph using your contact information or payment methods, contact us immediately at [email protected] with details of the concern.

12. Changes to This Privacy Policy

57ph may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Material changes — particularly those that affect your rights or how we share your data — will be communicated to registered players via their registered mobile number or email address at least seven (7) days before the changes take effect.

Non-material updates (such as clarifications, corrections of typographical errors, or reorganisation of content that does not change the substance of any provision) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the most recent revision date.

Continued use of 57ph after the effective date of any change to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the updated policy, you must cease using 57ph and may request account closure in accordance with our Terms & Conditions.

13. Contact Our Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or concerns about 57ph's handling of your personal data, please contact our designated Data Protection Officer:

Response time for DPO inquiries: within 15 business days. Responses are provided in English. The National Privacy Commission may also be contacted at www.privacy.gov.ph for complaints that have not been resolved through 57ph's internal process.