123ph7 Privacy Policy
Your Data, Your Rights

This Privacy Policy ("Policy") describes how 123ph7 ("the Company," "we," "us," or "our") collects, processes, stores, shares, and protects personal information about users ("Players," "you," or "your") of the 123ph7 online gaming platform, accessible at 123ph7.app and all associated services.

123ph7 is committed to the responsible and lawful handling of personal data. This Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as well as the regulatory requirements imposed by the Philippine Amusement and Gaming Corporation (PAGCOR) and the Anti-Money Laundering Act (AMLA) of the Philippines.

This Policy should be read alongside the 123ph7 Terms & Conditions and the Responsible Gaming Policy, both of which form part of your agreement with 123ph7. In cases of conflict between this Policy and the Terms & Conditions with respect to data handling, this Policy prevails.

2.1 Scope. This Policy applies to all personal data collected by 123ph7 in connection with: (a) the registration and maintenance of Player accounts; (b) the provision of gaming, betting, and entertainment services on the platform; (c) payment processing and financial transactions; (d) customer support and communication; and (e) compliance with legal and regulatory obligations.

2.2 Data Controller. 123ph7 acts as the personal information controller with respect to the personal data collected from Players. As controller, 123ph7 determines the purposes and means of processing your personal information and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

2.3 National Privacy Commission. 123ph7 is registered with and subject to the oversight of the Philippine National Privacy Commission (NPC) in accordance with RA 10173. Players who are unsatisfied with 123ph7's handling of a data privacy complaint may escalate the matter to the NPC through its official channels.

The categories of personal data collected by 123ph7 and the typical data points within each category are as follows:

123ph7 does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for identity verification and AMLA compliance. We do not collect information relating to racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond ID photographs used for KYC verification.

123ph7 collects personal data through the following means:

• Direct Collection: Information you provide when registering a 123ph7 account, completing KYC verification, making deposits or withdrawal requests, contacting our support team, or updating your account settings.
• Automated Technical Collection: Data collected automatically through cookies, server logs, and similar technologies when you access and use the 123ph7 platform. This includes IP address, session identifiers, device fingerprint data, and browsing behavior on the platform.
• Payment Processors: Transaction confirmation data and payment reference numbers received from GCash, Maya, BPI, BDO, and other payment partners when you make deposits or withdrawals. 123ph7 does not receive or store your full payment account credentials — only the minimum data required to reconcile transactions.
• Identity Verification Partners: Results of identity and age verification checks conducted through third-party KYC service providers operating under data processing agreements with 123ph7.
• Regulatory Sources: Information received from PAGCOR, law enforcement, or other regulatory bodies in connection with licensing, compliance, or investigation matters.

123ph7 processes your personal data for the following specific, legitimate purposes:

1. Account Administration: Creating, maintaining, and securing your 123ph7 account, including authentication, password recovery, and session management.
2. Age and Identity Verification: Confirming that all Players meet the mandatory 21+ age requirement under PAGCOR regulations and verifying identity for KYC compliance.
3. Service Delivery: Providing access to all 123ph7 gaming, betting, and entertainment services, processing bets, and calculating and crediting winnings.
4. Payment Processing: Processing deposits, withdrawals, and refunds; maintaining accurate transaction records; reconciling payments with GCash, Maya, and other payment providers.
5. Legal and Regulatory Compliance: Meeting obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), Philippine tax laws, and any other applicable Philippine legislation.
6. Fraud and Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct as defined in the 123ph7 Terms & Conditions.
7. Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior; administering self-exclusion, deposit limits, and cooling-off periods at the Player's request.
8. Customer Support: Responding to support requests, resolving disputes, and maintaining records of support interactions.
9. Marketing Communications (with consent): Sending promotional offers, bonus notifications, and platform news to Players who have opted in to marketing communications. Consent may be withdrawn at any time from account settings.
10. Platform Improvement: Analyzing aggregated, anonymized usage data to improve the 123ph7 platform, identify technical issues, and enhance the player experience.

Under the Philippine Data Privacy Act, 123ph7 relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to perform the contract between 123ph7 and the Player — including account management, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, Philippine tax law, and other applicable legislation.
• Legitimate Interest: Processing necessary for fraud prevention, platform security, and the protection of the rights and safety of 123ph7's player community, where such interests are not overridden by the data subject's rights.
• Consent: Processing for marketing communications and optional analytics purposes, where 123ph7 has obtained your explicit, informed, and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7.1 We Do Not Sell Your Data. 123ph7 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes under any circumstances.

7.2 Authorised Disclosures. 123ph7 may share your personal data with the following categories of recipients only where strictly necessary for a legitimate purpose:

All third-party recipients with whom personal data is shared are contractually required to process that data solely for the specified purpose, implement appropriate security measures, and comply with applicable Philippine data protection law.

123ph7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

• Active Account Data: Retained for the duration of the Player's active account relationship with 123ph7 plus five (5) years following account closure, in accordance with AMLA record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by AMLA and PAGCOR regulations.
• Transaction Records: Retained for a minimum of five (5) years in compliance with AMLA obligations and Philippine tax law record-keeping requirements.
• Support Communications: Retained for three (3) years from the date of the last interaction, or longer where required for dispute resolution.
• Marketing Consent Records: Retained for the duration of the consent period plus three (3) years to demonstrate compliance with consent requirements.
• Technical Logs: Retained for twelve (12) months unless extended for ongoing security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with 123ph7's data deletion procedures.

123ph7 implements a comprehensive set of technical and organizational security measures to protect Player personal data against unauthorized access, accidental loss, alteration, and disclosure:

• Encryption in Transit: All data transmitted between your browser or device and 123ph7 servers is encrypted using TLS 1.2/1.3 (256-bit SSL), the same technology used by Philippine banks for online banking.
• Encryption at Rest: Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256 encryption in 123ph7's secure cloud infrastructure.
• Access Controls: Access to personal data is restricted to 123ph7 personnel and authorized third parties with a strict need-to-know. Access is governed by role-based controls and regularly reviewed.
• Password Security: Player passwords are stored using one-way cryptographic hashing. 123ph7 never stores passwords in plain text and cannot retrieve your password — only reset it.
• Two-Factor Authentication: Two-factor authentication (OTP via SMS) is available to all Players and strongly recommended to protect account access.
• Breach Response: 123ph7 maintains an incident response plan. In the event of a breach, affected Players and the NPC will be notified within 72 hours of confirmed discovery, in compliance with RA 10173.

10.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. 123ph7 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and analyze usage patterns.

10.2 Types of Cookies Used.

10.3 Cookie Preferences. On your first visit to 123ph7, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You may update your preferences at any time through your browser settings. Please note that disabling essential cookies will prevent you from logging in to 123ph7.

Under the Philippine Data Privacy Act (RA 10173), you have the rights summarized in the feature cards above this document. To exercise any of these rights:

• Submit a written request to our Data Protection Officer at [email protected] with the subject line "Data Privacy Request."
• Include your full name, registered mobile number or email address, and a clear description of the right you wish to exercise.
• For access and rectification requests, verification of your identity may be required before the request is actioned.
• 123ph7 will acknowledge your request within five (5) business days and respond substantively within fifteen (15) calendar days. Complex requests may require up to thirty (30) calendar days, in which case we will notify you of the extension.

The 123ph7 platform is strictly for persons aged 21 years and above. 123ph7 does not knowingly collect personal data from any person under the age of 21. The minimum age of 21 is enforced through:

• Date of birth declaration at account registration.
• Mandatory government-issued ID verification (KYC) prior to first withdrawal, which confirms date of birth.
• Account suspension and investigation where there is suspicion of misrepresentation of age.

If 123ph7 discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the personal data will be deleted in accordance with applicable law, and any deposited funds will be returned to the originating payment method after investigation. If you believe a minor has accessed the 123ph7 platform, please report this immediately to [email protected].

123ph7's primary operations and data storage are based in the Philippines. In limited circumstances, personal data may be processed by third-party technology providers and cloud infrastructure partners whose servers are located outside the Philippines — primarily in data centres in Southeast Asia.

Any cross-border transfer of personal data is conducted in compliance with Section 21 of the Philippine Data Privacy Act. Before transferring data internationally, 123ph7 ensures that:

1. The recipient country's data protection laws provide a level of protection comparable to that under RA 10173, or
2. Appropriate contractual safeguards — including standard data protection clauses — are in place with the international recipient, or
3. The transfer is authorized by the National Privacy Commission or otherwise permitted under RA 10173.

123ph7 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, 123ph7 will:

• Update the "Last Updated" date at the top of this page.
• Notify registered Players via the email address or mobile number associated with their account.
• Display a prominent notice on the 123ph7 platform for a period of at least fourteen (14) days following the change.

Your continued use of the 123ph7 platform following notification of a material change constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised Policy, you should cease use of the platform and may request account closure per Section 14 of the Terms & Conditions.

123ph7 has appointed a Data Protection Officer (DPO) as required by the Philippine Data Privacy Act. The DPO is responsible for overseeing 123ph7's compliance with RA 10173 and serves as the primary point of contact for data privacy matters.

Related documents: Terms & Conditions  ·  Responsible Gaming  ·  FAQ  ·  About Us