At 28ph, we believe that your personal information belongs to you. This Privacy Policy explains exactly what data 28ph collects from members across the Philippines, why we collect it, how it is used, who it may be shared with, and the rights available to you under the Republic Act No. 10173 — the Data Privacy Act of 2012 — along with its Implementing Rules and Regulations. Please read this document in full before registering or using the 28ph platform.
28ph collects personal data that is strictly necessary for operating a licensed gaming platform and complying with Philippine KYC and AML regulations. We do not collect data speculatively or for purposes unrelated to your 28ph account and gaming activity.
Under RA 10173, you have the right to access, correct, delete, and restrict how your personal data is processed by 28ph. These rights can be exercised at any time by contacting our Data Protection Officer through the channel listed in this policy.
28ph shares personal data with third parties only where necessary — payment processors like GCash and Maya, game software providers, and compliance service providers. We do not sell personal data to advertisers or data brokers under any circumstances.
All personal and financial data transmitted between your device and 28ph's servers is encrypted using 256-bit SSL. Stored data is subject to access controls, encryption at rest, and regular security audits to prevent unauthorized access.
28ph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law — including tax regulations and anti-money laundering record-keeping requirements. When retention periods expire, data is securely deleted.
In the unlikely event of a data security breach that poses a real risk to your rights, 28ph will notify affected members and the National Privacy Commission (NPC) within the timeframes mandated by the Data Privacy Act of 2012 and its implementing regulations.
For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, the data controller responsible for personal information collected through the 28ph platform is 28ph Casino, operating the online gaming platform accessible at 28ph.club.
28ph processes the personal data of members and visitors to 28ph.club in accordance with the Data Privacy Act of 2012, the guidelines issued by the National Privacy Commission (NPC) of the Philippines, and applicable anti-money laundering and responsible gaming regulations enforced by relevant Philippine authorities.
Questions about this Privacy Policy or our data practices should be directed to our Data Protection Officer (DPO). Contact details for the DPO are set out in Section 16 of this Policy.
This Privacy Policy applies to all personal information collected, processed, stored, or disclosed by 28ph in connection with:
This Policy does not apply to third-party websites, services, or applications that may be accessible through links on the 28ph platform. Those third parties operate under their own privacy policies, for which 28ph bears no responsibility.
28ph collects the following categories of personal data from members and platform visitors:
| Data Category | Specific Data Points | Mandatory / Optional |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID type and number, nationality | Mandatory (KYC) |
| Contact Data | Philippine mobile number, email address, residential address | Mandatory |
| Financial Data | GCash account name/number, bank account details, USDT wallet address, transaction amounts and timestamps | Mandatory for transactions |
| Account Data | Username, hashed password, VIP tier, login history, session timestamps, device fingerprint | Mandatory |
| Gaming Data | Bet history, game results, bonus activity, wagering turnover, game preferences | Mandatory (auto-collected) |
| Technical Data | IP address, browser type and version, operating system, device type, screen resolution, time zone | Mandatory (auto-collected) |
| Communications Data | Content and metadata of support chat transcripts, emails submitted to 28ph support | Conditional (when you contact us) |
| Marketing Preferences | Email and SMS opt-in/opt-out status, preferred communication language, promotional response history | Optional |
Sensitive Personal Information: 28ph does not intentionally collect sensitive personal information as defined under RA 10173 (e.g., racial origin, health data, religious beliefs, political affiliations) unless specifically required for responsible gaming assessments or compliance with a Philippine regulatory directive. Where such collection is necessary, explicit consent will be sought.
28ph collects personal data through the following means:
Direct Collection
Information you actively provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact 28ph support, participate in a promotion, or update your account settings. This includes the registration form, identity document uploads, and any information submitted through communication channels.
Automated Collection
Technical and behavioural data that is collected automatically when you access or interact with the 28ph platform, including your IP address, device characteristics, browser information, pages visited, game sessions initiated, and interaction patterns. This data is collected through server logs, session cookies, and analytics tools operating within the 28ph platform.
Third-Party Sources
Where permitted by applicable law and consistent with this Policy, 28ph may receive data about you from third parties, including identity verification service providers used for KYC processing, payment processors confirming the status or ownership of a payment method, and fraud prevention services that flag high-risk account activity patterns.
Under the Data Privacy Act of 2012 (RA 10173), 28ph processes personal data on the basis of one or more of the following lawful grounds:
28ph uses the personal data it collects for the following specific purposes:
28ph does not sell, rent, or trade your personal data to any third party for commercial gain. Personal data may be disclosed to the following categories of recipients only where necessary and under appropriate contractual data protection obligations:
No Sale of Data: 28ph does not and will never sell personal data to advertising networks, data brokers, or any commercial third party for purposes unrelated to operating your 28ph account and providing the services you have requested.
28ph uses cookies and similar tracking technologies to operate the platform, maintain your login session, and analyze usage patterns. The following categories of cookies are used:
You may manage or delete cookies through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use core platform functions. 28ph does not use cookies to serve third-party advertising or track your activity across other websites.
28ph retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymized:
28ph implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, and destruction:
Breach Response: In the event of a personal data breach that poses a real risk of serious harm to affected members, 28ph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected members without undue delay, as required under the Data Privacy Act of 2012 and NPC Circular 16-03.
As a data subject under the Republic Act No. 10173 (Data Privacy Act of 2012), you are entitled to exercise the following rights with respect to your personal data held by 28ph:
You have the right to be informed whether 28ph holds personal data about you, and to receive information about how that data is used. This Privacy Policy fulfils a core part of that obligation.
You may request a copy of the personal data 28ph holds about you, including the specific data points, the purposes for which each is used, and details of any third parties with whom it has been shared. Access requests are processed within 30 days.
If your personal data held by 28ph is inaccurate or incomplete, you have the right to request that it be corrected. For account-level data such as your registered mobile number or address, updates can be submitted through your account settings or via 28ph support.
You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that legal retention obligations (see Section 9) may require certain data to be retained regardless of an erasure request.
You may object to the processing of your personal data where that processing is based on 28ph's legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
Where technically feasible, you may request a machine-readable copy of personal data you have provided to 28ph in the course of operating your account, for the purpose of transferring it to another controller of your choosing.
If you believe 28ph has processed your personal data in violation of RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Details of the NPC's complaint process are available through Philippine government channels.
To exercise any of the rights described above, please contact 28ph's Data Protection Officer using the contact details in Section 16 of this Policy. All rights requests will be acknowledged within 3 business days and processed within 30 calendar days, consistent with NPC guidelines.
The 28ph platform is strictly for individuals aged 21 years and above, consistent with PAGCOR's minimum age requirement for online casino gaming in the Philippines. 28ph does not knowingly collect personal data from any person under the age of 21.
If 28ph discovers or is notified that an account has been created by, or personal data has been collected from, a person under the age of 21, all personal data associated with that account will be immediately deleted, the account will be permanently closed, and the matter may be referred to the relevant Philippine authorities where required by law.
Parents or guardians who believe their minor child has registered on the 28ph platform are encouraged to contact 28ph support immediately through the live chat channel so the account can be investigated and closed without delay.
28ph's primary data processing infrastructure is operated within facilities that meet the security standards required under RA 10173. However, in the course of providing certain services — particularly in relation to third-party game software providers and fraud detection services — your personal data may be processed in servers or by service personnel located outside the Philippines.
Where such cross-border transfers occur, 28ph ensures that:
NPC Registration: 28ph's personal data processing systems are registered with or notified to the National Privacy Commission of the Philippines as required under NPC Circular 17-01 and subsequent NPC circulars addressing registration requirements for personal information controllers.
28ph may send you marketing communications about new games, promotions, bonuses, VIP tier updates, and other relevant offers where you have given your consent to receive such communications at the time of registration or subsequently through your account preferences.
You may withdraw consent for marketing communications at any time by:
Withdrawal of consent for marketing communications will not affect your ability to receive essential transactional communications related to your account — such as deposit confirmations, withdrawal notifications, security alerts, and communications required by law. These transactional messages are not optional as they are necessary for the proper operation of your 28ph account.
28ph reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or the services offered through the 28ph platform.
Where changes are material — meaning they substantively affect your rights or how your personal data is used — 28ph will notify registered members via email to their registered address and by posting a prominent notice on the 28ph platform at least 7 days before the changes take effect.
Non-material changes, such as clarifications of existing language, corrections of typographical errors, or updates required to reflect changes in applicable law, may take effect upon publication without advance notice. The "Effective" date displayed in the hero section at the top of this page will be updated to reflect the date of the most recent revision.
Your continued use of the 28ph platform after a revised Privacy Policy takes effect constitutes your acknowledgment of the revised Policy. If you do not agree with any changes, you should close your account and cease using the platform before the revised Policy takes effect.
For all privacy-related inquiries — including data access requests, correction requests, erasure requests, and complaints — please direct your correspondence to:
Data Protection Officer — 28ph Casino
Email: [email protected] (please include "Data Privacy" in the subject line)
Live Chat: 24/7 support available through the 28ph platform
Response Acknowledgement: Within 3 business days
Request Processing: Within 30 calendar days of receipt, consistent with RA 10173 and NPC guidelines
All rights requests must include sufficient information to verify your identity as the account holder — typically your registered username and the mobile number or email address associated with your 28ph account. This verification step is required to protect you from unauthorized data disclosure to third parties impersonating you.
This Privacy Policy was last reviewed and updated on January 1, 2026. You can always find the current version of this Policy at 28ph.club/privacy-policy. If you are reviewing a printed or cached copy, please verify the current version online before relying on it.
Now that you understand how 28ph handles your personal information, explore the full platform — 500+ games, GCash payments, sports betting, sabong, and more — all in one secure account.
Sign In to 28ph Explore Games