Privacy Policy — p897

1. Introduction

p897.org ("p897," "we," "us," "our") is committed to protecting the privacy and personal data of all individuals who access or use the p897 online gaming platform, including registered players, prospective players who browse the website, and any other users ("you," "your").

This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we process it, the parties with whom we may share it, and the rights you have in respect of your personal data under applicable Philippine law — in particular the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as any applicable PAGCOR data governance requirements.

This Policy is incorporated into and forms part of the p897 Terms & Conditions. By registering an account or continuing to use the p897 platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

The data controller responsible for your personal information collected through p897 is the operating entity behind p897.org. For all data privacy inquiries, requests, and complaints, please contact our designated Data Privacy Officer (DPO) at:

3. Personal Data We Collect

p897 collects the following categories of personal data in connection with the operation of the platform:

3.1 Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (to verify the 21+ age requirement under PAGCOR regulations)
• Gender
• Government ID type and number (e.g., PhilSys National ID, Passport, Driver's License, UMID)
• Photograph (where required for KYC identity verification)

3.2 Contact Data

• Philippine mobile number (primary, used for OTP authentication and account communications)
• Email address
• Residential address (province, city/municipality, barangay, street)

3.3 Financial Data

• GCash registered number and account name (where GCash is used as payment method)
• Maya account details (where Maya is used as payment method)
• Bank account name and number for BPI, BDO, Metrobank, UnionBank, and other bank transfers
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used
• Wallet balance history

3.4 Gaming Activity Data

• Game sessions played, including game titles, bet amounts, win/loss outcomes, and session durations
• Responsible gaming tool activations (deposit limits, session limits, cooling-off periods, self-exclusion requests)
• Bonus and promotion history

3.5 Technical Data

• IP address at time of registration and each login
• Device type, operating system, and browser type
• Geolocation data (country and region level, used to verify Philippine jurisdiction)
• Session logs and platform usage data

3.6 Communications Data

• Records of communications between you and p897 customer support, including email content, chat transcripts, and support ticket history

4. How We Collect Your Data

p897 collects personal data through the following means:

• Direct collection: Information you provide when registering your account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the p897 platform, including through cookies, server logs, and session tracking technologies.
• Third-party sources: Identity verification data may be cross-referenced against government databases or third-party KYC service providers to verify your identity and age. Financial transaction data is received from payment processors including GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), and banking partners.
• Regulatory sources: In connection with our PAGCOR compliance obligations and AML requirements under Republic Act No. 9160 (Anti-Money Laundering Act), as amended, p897 may receive or be required to cross-reference data with the Anti-Money Laundering Council (AMLC) and other relevant Philippine regulatory bodies.

5. How We Use Your Personal Data

p897 processes your personal data for the following specific purposes:

• Account creation and management: To register your player account, verify your identity and age eligibility, and maintain your account in good standing.
• Platform services: To provide access to games, process wagers, record game outcomes, calculate and credit winnings, and maintain your gaming wallet.
• Payment processing: To process deposits and withdrawals via GCash, Maya, bank transfer, and other supported payment channels; to verify that payment accounts are held in your own name.
• Regulatory compliance: To comply with PAGCOR licensing requirements, AML obligations under RA 9160, KYC requirements, and any other applicable Philippine laws and regulations.
• Responsible gaming: To enforce deposit limits, loss limits, cooling-off periods, and self-exclusion restrictions activated by you; to monitor gaming patterns where required by responsible gaming regulations.
• Security and fraud prevention: To detect, investigate, and prevent unauthorized access, account takeover, bonus abuse, collusion, money laundering, and other fraudulent or prohibited activities.
• Customer support: To respond to your queries, complaints, and requests through our support team.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent and not opted out. You may opt out of marketing communications at any time by contacting [email protected].
• Platform improvement: To analyze aggregated usage data (in anonymized form where possible) to improve platform performance, game selection, and user experience.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, p897 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the player account agreement (Terms & Conditions), including operating your account, processing payments, and delivering gaming services.
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, and other applicable Philippine laws — including KYC identity verification, transaction reporting, and record retention requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform integrity purposes, where our legitimate interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing based on other grounds.

7. Sharing Your Personal Data

p897 does not sell your personal data to any third party. We may share your personal data only in the following limited circumstances:

• Payment processors: GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, UnionBank, Visa/Mastercard processing networks, and other payment service providers — solely for the purpose of processing your financial transactions.
• KYC and identity verification providers: Third-party service providers engaged to verify identity documents and cross-reference government records as part of p897's KYC compliance.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory authorities, where disclosure is legally required or where p897 is under a legal obligation to report.
• IT and platform service providers: Cloud hosting providers, cybersecurity service providers, and other technical service providers engaged to operate and secure the p897 platform, under strict data processing agreements.
• Legal and professional advisers: Lawyers, auditors, and other professional advisers where necessary for the exercise or defense of legal claims.
• Business transfer: In the event of a merger, acquisition, or sale of all or substantially all of p897's business assets, personal data held by p897 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom p897 shares personal data are required to process that data only for the specific purpose for which it was shared and in accordance with applicable data protection law.

8. Data Retention

p897 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and operational requirements. Specific retention periods are as follows:

• Account and KYC data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in accordance with PAGCOR record retention requirements and Philippine AML laws.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the recorded activity.
• Support communications: Retained for two (2) years from the date of the last communication, or longer where related to an unresolved dispute or legal matter.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

After the applicable retention period expires, personal data is securely deleted or anonymized.

9. Cookies & Tracking Technologies

p897 uses cookies and similar tracking technologies on the platform for the following purposes:

• Strictly necessary cookies: Essential for the platform to function, including session management, login authentication, and security token storage. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to improve your experience across sessions.
• Analytics cookies: Used to collect aggregate, anonymized data about how players use the platform — pages visited, session durations, and error reports — to help us improve platform performance. Individual player data is not shared with analytics providers in identifiable form.
• Security cookies: Used to detect suspicious login behavior, prevent cross-site request forgery (CSRF), and support our fraud prevention systems.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the p897 platform, including logging in.

10. Data Security

p897 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Industry-standard SSL/TLS encryption for all data transmitted between your device and p897's servers
• Encryption of sensitive data fields (including financial data and identity document data) at rest
• SMS OTP two-factor authentication for account login
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular penetration testing and security audits of the p897 platform and infrastructure
• Incident response procedures for detecting, assessing, and reporting personal data breaches in accordance with the Data Privacy Act of 2012

In the event of a personal data breach that poses a real risk of serious harm to affected individuals, p897 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by p897:

• Right to be informed: You have the right to be informed of how your personal data is being processed — which this Policy fulfils.
• Right of access: You may request a copy of the personal data p897 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected — subject to our legal retention obligations.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You may request a copy of certain personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: You may lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Privacy Officer at [email protected] with the subject line "Data Privacy Request." We will respond within the timeframes required by the Data Privacy Act.

12. Children and Minors

p897 strictly prohibits the use of its platform by any person under the age of twenty-one (21) years. p897 does not knowingly collect personal data from individuals under 21. Age verification is conducted as part of the KYC process for all registered accounts.

If p897 becomes aware that personal data has been collected from an individual under 21 without verifiable parental or guardian consent, that data will be deleted promptly and the associated account will be closed. If you are a parent or guardian and believe a minor has registered on p897, please contact us immediately at [email protected].

13. International Data Transfers

p897 primarily processes personal data within the Philippines. Where personal data is transferred to service providers or processors located outside the Philippines — for example, cloud infrastructure providers or international payment networks — such transfers are conducted only where adequate data protection safeguards are in place, including contractual clauses that impose obligations equivalent to those under the Data Privacy Act of 2012.

p897 ensures that all cross-border data transfers comply with Section 21 of the Data Privacy Act of 2012 and the NPC's rules on cross-border data flows.

14. Amendments to This Policy

p897 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where amendments are material, p897 will notify registered players by email or through an in-platform notification prior to the changes taking effect. Continued use of the p897 platform following the effective date of any update constitutes acceptance of the revised Policy.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by p897, please contact:

If you are not satisfied with p897's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).