18ph Privacy Policy – How We Handle Your Personal Data in the Philippines

18ph operates the online casino and sportsbook platform at 18ph.best, serving members across the Philippines. We understand that sharing personal information online requires trust, and we take that seriously. This Privacy Policy describes how 18ph collects, uses, stores, shares, and protects your personal data in connection with your use of our platform and services.

This policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC). Where any other data protection law applies to a specific processing activity, 18ph will meet the requirements of the stricter standard.

By registering an account at 18ph, depositing funds, placing bets, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, please do not use the 18ph platform. You may close your account at any time by contacting our support team.

The data controller responsible for your personal data collected through the 18ph platform is the operator of 18ph.best. As the data controller, 18ph determines the purposes and means of processing your personal information in accordance with the Data Privacy Act of 2012.

18ph has designated a Data Privacy Officer (DPO) who is responsible for overseeing data protection strategy and compliance, handling data subject requests, and serving as the point of contact between 18ph and the National Privacy Commission. The DPO can be reached at:

18ph collects the minimum personal data necessary to provide a safe, compliant, and functional online gaming platform for Filipino members. The categories of personal data we collect are listed below:

18ph does not collect sensitive personal information as defined by the Data Privacy Act (such as health records, political affiliations, or biometric data) unless specifically required for identity verification purposes and with your explicit consent.

18ph collects personal data through the following methods:

• Direct provision: When you register an 18ph account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in promotions, you directly provide information to us.
• Automated collection: When you use the 18ph platform, our systems automatically collect technical data including your IP address, device identifiers, browser type, and session activity. This is standard practice for online platforms and is necessary for security, fraud prevention, and platform performance monitoring.
• Payment processors: When you make a deposit or withdrawal via GCash, Maya, BDO, BPI, or any other supported payment channel, we receive transaction confirmation and reference data from those providers. We do not store full payment account credentials beyond what is required for transaction matching.
• Identity verification services: When enhanced identity verification is required — for example, when processing a large withdrawal — we may use a third-party identity verification service. Any data shared with these services is governed by their own privacy policies as well as our data sharing agreements with them.
• Cookies and tracking technologies: The 18ph website uses cookies and similar technologies as described in Section 10 of this policy.

18ph uses your personal data only for legitimate purposes directly connected to operating the platform and serving you as a member. The specific purposes are:

• Account management: Creating, maintaining, and administering your 18ph account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Transaction processing: Processing your deposits via GCash, Maya, and other supported channels; processing withdrawal requests and returning funds to your registered payment method; maintaining an accurate record of all transactions on your account.
• Gaming services: Providing access to sports betting markets (PBA, basketball, volleyball, MMA), casino games (slots, live baccarat), and promotional activities such as the Refer a Friend program.
• Customer support: Responding to enquiries, resolving disputes, investigating complaints, and maintaining records of support interactions for quality assurance.
• Security and fraud prevention: Detecting and preventing fraudulent transactions, bonus abuse, multi-accounting, money laundering, and other prohibited activities. Technical data including IP addresses and device identifiers are used for this purpose.
• Legal and regulatory compliance: Meeting our obligations under Philippine law, including the Data Privacy Act, anti-money laundering regulations, and any applicable gaming regulations. This may include retaining records for statutory periods and providing information to regulators or law enforcement when legally required.
• Responsible gaming: Monitoring gaming activity for indicators of problem gambling and providing relevant tools, limits, and resources to members who may benefit from them.
• Marketing and promotions: With your consent, sending you information about promotions, new games, and platform updates at 18ph. You may opt out of marketing communications at any time by contacting support or using the unsubscribe link in any email we send.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, features, and user experience of the 18ph platform.

Under the Data Privacy Act of 2012 and its Implementing Rules, 18ph processes your personal data on the following legal bases:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between you and 18ph — specifically, to operate your account, accept deposits, and pay out winnings.
• Legal obligation: Retaining transaction records, conducting identity verification, and cooperating with regulatory or law enforcement requests are required by Philippine law and cannot be declined.
• Legitimate interest: Processing technical data for security monitoring, fraud prevention, and platform performance improvement is done on the basis of 18ph's legitimate interest in operating a secure and stable platform, provided this interest is balanced against your rights and does not override them.
• Consent: Sending you marketing communications is based on your consent, which you provide by opting in at registration. Consent may be withdrawn at any time without affecting the lawfulness of any prior processing.

18ph shares your personal data only in the circumstances described below. We do not sell personal data to any third party under any circumstances.

• Payment service providers: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and card networks (Visa/Mastercard) receive the transaction data necessary to process your deposits and withdrawals. These providers are bound by their own regulatory obligations and data protection agreements.
• Identity verification services: Third-party identity verification providers receive copies of verification documents when enhanced KYC (Know Your Customer) checks are required. These providers process data only for the verification purpose and are contractually prohibited from using it for any other purpose.
• Game content providers: JILI, PG Soft, Pragmatic Play, and other game providers receive your account identifier and bet data necessary to run the games and settle results. They do not receive your full identity or financial details.
• Legal and regulatory authorities: 18ph will disclose personal data to the National Privacy Commission, law enforcement agencies, or other regulatory authorities when required to do so by law or valid legal process, including court orders and subpoenas.
• Anti-money laundering reporting: As required by applicable anti-money laundering regulations, 18ph may report suspicious transactions and associated account information to relevant authorities. Members are not notified of such reports where notification would interfere with an investigation.
• Professional advisors: Legal, accounting, and auditing professionals who assist 18ph in running its business may access personal data in the course of providing their services, subject to confidentiality obligations.

All third parties with whom 18ph shares personal data are required to maintain appropriate data protection standards and may only use your data for the specific purpose for which it was shared.

18ph retains personal data for as long as necessary to fulfil the purposes described in this policy, subject to any longer retention periods required by Philippine law. Key retention periods are:

After the applicable retention period expires, personal data is either securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised data may be retained indefinitely for aggregate analysis and platform improvement purposes.

18ph implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your browser or mobile device and the 18ph platform is encrypted using SSL/TLS protocols. This applies to login, registration, deposits, withdrawals, and all other account activity.
• Encryption at rest: Sensitive personal data stored in 18ph's databases — including passwords (stored as cryptographic hashes, never in plain text) and financial identifiers — is encrypted at rest.
• Access controls: Access to personal data within 18ph's systems is restricted on a strict need-to-know basis. Employees and contractors with access to member data must comply with confidentiality obligations.
• Fraud monitoring: 18ph operates continuous automated monitoring of account activity and transaction patterns to detect and respond to suspicious or potentially fraudulent activity in real time.
• Incident response: In the event of a data breach that is likely to result in harm to data subjects, 18ph will notify affected members and the National Privacy Commission within 72 hours of discovery, in accordance with the Data Privacy Act and NPC Circular 16-03.

While 18ph takes extensive precautions, no online platform can guarantee absolute security against all possible threats. You also play a role in protecting your account by using a strong, unique password, not sharing your login credentials, and contacting us immediately if you suspect unauthorised access.

The 18ph website uses cookies and similar tracking technologies to make the platform work correctly, improve your experience, and support our security and fraud prevention systems. A cookie is a small text file stored on your device when you visit a website.

18ph uses the following types of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery (CSRF). You cannot opt out of essential cookies without disabling the platform entirely.
• Functional cookies: Remember your preferences such as language, display settings, and previously selected game categories. These improve your experience by reducing the need to re-enter settings on each visit.
• Analytics cookies: Collect anonymised data about how members use the 18ph platform — which pages are visited most, where members drop off, and how the platform performs on different devices. This data helps us improve 18ph. Analytics cookies do not identify you personally.
• Security / fraud prevention cookies: Help 18ph identify unusual patterns that may indicate fraudulent access attempts, account takeovers, or automated bot activity.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, although doing so may affect the functionality of the 18ph platform. Detailed instructions for managing cookies are available in your browser's help documentation.

As an 18ph member and a data subject under the Data Privacy Act of 2012, you have the following rights regarding your personal information. To exercise any of these rights, contact our Data Privacy Officer at support@18ph.best with the subject "Data Privacy Request."

18ph will respond to data subject requests within 15 calendar days of receipt. Complex requests may require up to 30 days, in which case we will notify you of the extension and the reason. Identity verification may be required before processing a request to protect against fraudulent access attempts.

The 18ph platform is strictly for individuals who are 21 years of age or older. 18ph does not knowingly collect personal data from individuals under the age of 21. If we become aware that a member is under 21, their account will be suspended immediately, any winnings will be reviewed and may be forfeited, and all personal data collected in relation to that account will be deleted as soon as possible, subject only to retention obligations required by law.

If you believe that an underage individual has registered an account at 18ph, please contact our Data Privacy Officer immediately at support@18ph.best so we can investigate and take appropriate action.

18ph may update this Privacy Policy from time to time to reflect changes in how we process data, changes in applicable Philippine law, or operational changes to the platform. The current version number and effective date are always displayed at the top of this page.

When material changes are made to this Privacy Policy, 18ph will notify registered members by email and/or by a prominent notice on the 18ph platform at least 7 days before the changes take effect, where practicable. For changes required by law, the effective date may be immediate.

Your continued use of the 18ph platform after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Privacy Policy, you may close your account in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 18ph holds about you, please contact our Data Privacy Officer. We're committed to handling all privacy-related enquiries promptly and respectfully.