pg789 Privacy Policy

01 About This Policy

This Privacy Policy ("Policy") is published by pg789 ("we", "us", "our"), the operator of the online gaming and sports betting platform accessible at pg789.lat and all associated subdomains and mobile applications (collectively, the "Platform"). This Policy applies to all individuals who access or use the Platform, including registered players, visitors, and any person whose personal data we process in connection with the Platform.

pg789 is committed to protecting the privacy and security of your personal data. This Policy explains in clear terms what personal information we collect about you, the purposes for which we process it, the legal bases on which we rely, how long we keep it, and the rights available to you under the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

This Policy should be read together with pg789's Terms and Conditions and Responsible Gaming Policy, which are incorporated by reference into this Policy. Where any conflict exists between this Policy and those documents on a matter of data privacy, this Policy shall prevail.

02 Data We Collect

pg789 collects and processes the following categories of personal data about you, depending on how you interact with the Platform:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (used to verify the mandatory 21+ age requirement)
• Residential address in the Philippines (barangay, city/municipality, province)
• Email address used for account communications
• Mobile number registered in the Philippines
• Government-issued ID number and ID document images (for KYC verification)

2.2 Account Data

• Your pg789 username and encrypted account password
• Account settings, preferences, and responsible gaming limit configurations
• Communication history with pg789 support, including live chat transcripts and email correspondence

2.3 Financial Data

• GCash mobile number or PayMaya account details used for deposits and withdrawals
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where used as a payment method
• Transaction history, including deposit amounts, withdrawal requests, and timestamps
• Account balance history for regulatory reporting purposes

2.4 Gaming and Behavioural Data

• Game play history, including games played, bet amounts, and win/loss records
• Sports betting selections and wagering history
• Session duration, login frequency, and activity patterns
• Bonus and promotional campaign participation records

2.5 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Cookies, session tokens, and similar tracking technologies (see Section 7)
• Platform access logs and error reports

03 How We Collect Data

pg789 collects your personal data through the following channels:

3.1 Directly from You

The majority of the personal data we hold about you is provided directly by you during the following interactions:

• Completing the pg789 account registration form
• Submitting KYC verification documents via the account dashboard
• Making a deposit or initiating a withdrawal through your chosen payment method
• Contacting pg789 customer support via live chat or email
• Participating in surveys, promotions, or competitions on the Platform
• Updating your account profile or responsible gaming settings

3.2 Automatically Through Platform Use

When you access and use the pg789 Platform, we automatically collect certain technical and behavioural data, including:

• Log data generated each time you access the Platform (IP address, access time, pages viewed, actions taken)
• Device and browser information collected via standard web technology
• Cookies and similar tracking technologies as described in Section 7 of this Policy
• Game session data recorded by the game server upon each bet placement or game round

3.3 From Third Parties

In limited circumstances, pg789 may receive personal data about you from the following third-party sources:

• Identity Verification Providers: Third-party KYC verification services may confirm or supplement identity data you have provided to us during onboarding.
• Payment Processors: GCash, PayMaya, and our banking partners may share transaction confirmation data with pg789 to reconcile payments.
• PAGCOR and Regulatory Authorities: We may receive data from PAGCOR in connection with our regulatory obligations, including responsible gaming exclusion lists.
• Fraud Prevention Services: Third-party fraud detection platforms may flag certain account behaviours or transactions for our review.

04 How We Use Your Data

pg789 uses your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with these stated purposes without first notifying you and, where required, obtaining your consent:

05 Legal Bases for Processing

pg789 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Consent (Section 12(a), DPA): Where you have freely given, specific, and informed consent to the processing of your personal data for a particular purpose — for example, receiving promotional emails or SMS messages from pg789. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contract (Section 12(b), DPA): Processing is necessary for the performance of a contract to which you are a party — specifically, the Terms and Conditions governing your pg789 account. This covers account creation, game access, and payment processing.
• Legal Obligation (Section 12(c), DPA): Processing is required to comply with a legal obligation to which pg789 is subject, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and reporting obligations to the Anti-Money Laundering Council (AMLC).
• Legitimate Interests (Section 12(f), DPA): Processing is necessary for the legitimate interests pursued by pg789, including fraud prevention, platform security, and improving user experience, where those interests are not overridden by your rights and interests as a data subject.

06 Data Sharing & Disclosure

pg789 does not sell, rent, or otherwise commercially exploit your personal data. We share your data only in the following limited and controlled circumstances:

• PAGCOR and Regulatory Authorities: pg789 is required to share certain player account and transaction data with PAGCOR as part of its licensed operator obligations. We also report suspicious transactions to the Anti-Money Laundering Council (AMLC) as required by the AMLA.
• Payment Service Providers: We share necessary financial and identity data with GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors solely to facilitate deposits and withdrawals on your behalf. These providers act as data processors under binding data processing agreements with pg789.
• KYC and Identity Verification Partners: We share your identity documents and personal details with accredited third-party KYC verification providers for the sole purpose of verifying your identity and age. These providers are bound by strict confidentiality and data security obligations.
• Game Content Providers: Certain game providers integrated into the pg789 Platform may receive technical session data (such as a pseudonymous player token and bet history) necessary to operate the game. These providers do not receive your name, contact details, or financial information.
• Fraud Prevention and Security Services: We share technical data (IP address, device fingerprint, transaction patterns) with third-party fraud detection services to protect the integrity of the Platform and all players.
• Law Enforcement and Courts: pg789 will disclose personal data to Philippine law enforcement agencies, courts, or other competent authorities where required to do so by applicable law, court order, or legitimate law enforcement request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of pg789's assets, your personal data may be transferred to the successor entity, subject to the same data protection obligations outlined in this Policy.

07 Cookies & Tracking Technologies

pg789 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, maintain session security, and analyse usage patterns. The following categories of cookies are used:

• Essential Cookies: These cookies are strictly necessary for the Platform to function. They maintain your login session, remember your authentication state, and ensure the security of your account. Essential cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings and responsible gaming limit configurations — so you don't have to re-enter them each time you visit. They improve your experience on the Platform but are not strictly necessary.
• Analytics Cookies: With your consent, pg789 uses analytics cookies to understand how players interact with the Platform, which pages are most visited, and where errors occur. This data is aggregated and used solely to improve Platform performance and user experience. Analytics cookies are only activated after you have provided consent via our cookie consent banner.
• Session Tokens: Upon login, pg789 issues a secure, encrypted session token stored as a browser cookie. This token expires automatically after a period of inactivity and upon logout. It is used solely to authenticate your session and cannot be used to identify you to third parties.

You can manage cookie preferences through your browser settings at any time. Please note that disabling functional or analytics cookies may limit certain features of the pg789 Platform but will not affect your ability to play or manage your account.

08 Data Retention

pg789 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pg789's internal data disposal procedures. Anonymised data that can no longer be linked to an identifiable individual is not subject to this Policy and may be retained indefinitely for statistical and analytical purposes.

09 Data Security

pg789 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, and destruction. Our security infrastructure includes the following:

• Encryption in Transit: All data transmitted between your device and the pg789 Platform is encrypted using Transport Layer Security (TLS 1.3). Our Platform enforces HTTPS at all times and does not accept unencrypted HTTP connections.
• Encryption at Rest: All personal data stored in pg789's databases is encrypted at rest using AES-256 encryption. Encryption keys are managed using a dedicated key management system with strict access controls.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All pg789 personnel with access to personal data are subject to confidentiality obligations and must complete data privacy training annually.
• Two-Factor Authentication: pg789 offers two-factor authentication (2FA) for all registered player accounts. We strongly recommend that all players activate 2FA through their account security settings.
• Penetration Testing: pg789's Platform undergoes regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms. Critical vulnerabilities are remediated within 48 hours of identification.
• Incident Response: In the event of a personal data breach that poses a risk to data subjects, pg789 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with the DPA's mandatory breach notification requirements. Affected individuals will be notified promptly where required.

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by pg789. To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 15:

• Right to Be Informed (Section 16(a), DPA): You have the right to be informed of the existence of processing of your personal data, the purposes and methods of processing, the identity of the data controller, and the recipients of your data. This Privacy Policy serves as the primary means through which pg789 fulfils this obligation.
• Right of Access (Section 16(b), DPA): You have the right to request a copy of the personal data that pg789 holds about you, the purposes for which it is being processed, and information about any third parties to whom it has been disclosed.
• Right to Rectification (Section 16(c), DPA): You have the right to request correction of any inaccurate, incomplete, or outdated personal data we hold about you. You may update basic account information directly through your pg789 account settings. For changes to identity or KYC data, please contact support.
• Right to Erasure or Blocking (Section 16(d), DPA): You have the right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes it was collected, where consent has been withdrawn, or where processing is unlawful. Please note that this right is subject to overriding legal obligations, including PAGCOR and AMLA data retention requirements, which may prevent immediate deletion of certain data.
• Right to Object (Section 16(f), DPA): You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability (Section 18, DPA): Where technically feasible and legally permissible, you have the right to receive a copy of the personal data you have provided to pg789 in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: If you believe that pg789 has processed your personal data in violation of the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

pg789 will respond to all verified data subject requests within thirty (30) calendar days of receipt. Where a request is complex or where we receive a large number of requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

11 Children's Privacy

The pg789 Platform is strictly for adults. In compliance with PAGCOR regulations and applicable Philippine law, access to and participation in any game, bet, or activity on the Platform is restricted to individuals who are at least twenty-one (21) years of age.

pg789 does not knowingly collect personal data from individuals under 21 years of age. Our registration process requires users to confirm their date of birth, and all accounts are subject to KYC age verification before the first withdrawal can be processed.

If pg789 becomes aware that personal data has been collected from a person under 21 years of age without appropriate verification, we will take immediate steps to suspend the account, delete the personal data, and handle any funds in accordance with PAGCOR guidelines.

If you are a parent or guardian and believe that a minor in your care has registered on the pg789 Platform, please contact our support team immediately at [email protected] so we can investigate and take appropriate action.

12 Cross-Border Data Transfers

pg789 is a Philippine-based gaming operator and processes the majority of personal data within the Philippines. However, certain service providers and technology partners whose systems are used in connection with the Platform may be located outside the Philippines, which may result in your personal data being transferred to or stored in a foreign jurisdiction.

Where such cross-border transfers occur, pg789 ensures that they are conducted in compliance with Section 21 of the Data Privacy Act of 2012, which requires that the recipient country or international organisation provides adequate data protection standards comparable to those under the DPA, or that appropriate contractual safeguards (such as standard data protection clauses or binding corporate rules) are in place.

pg789 maintains a current register of all cross-border data transfer arrangements, which is available for review by the National Privacy Commission upon request. If you would like information about the specific safeguards applicable to any cross-border transfer of your personal data, please contact our Data Protection Officer.

13 Third-Party Links

The pg789 Platform may from time to time contain references to or integrations with third-party services, including payment gateways (GCash, PayMaya, BPI online banking portals) and game content interfaces provided by our licensed game suppliers.

This Privacy Policy applies solely to data processed by pg789 in connection with the pg789 Platform. When you interact with a third-party service — including when you are redirected to a payment provider's website or app to complete a transaction — that third party's own privacy policy governs the collection and use of your data by that third party. pg789 is not responsible for the privacy practices of any third-party service.

We encourage you to review the privacy policies of GCash, PayMaya, and any other third-party service you use in connection with your pg789 account before providing your personal data to those services.

14 Policy Updates

pg789 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When we make material changes to this Policy, we will notify you by one or more of the following methods:

• Displaying a prominent notice on the pg789 Platform homepage and login page for a period of not less than thirty (30) days prior to the changes taking effect
• Sending an email notification to the address registered on your pg789 account
• Displaying an in-platform notification upon your next login after the changes are published

The updated Policy will display a revised "Last Updated" date at the top of this page. Your continued use of the pg789 Platform after the effective date of any updated Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree with any changes to this Policy, you must discontinue your use of the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how pg789 is protecting your personal data. All previous versions of this Policy are archived and available upon request from our Data Protection Officer.

15 Contact & Data Protection Officer

pg789 has designated a Data Protection Officer (DPO) in accordance with Section 21(a) of the Data Privacy Act of 2012. The DPO is responsible for overseeing pg789's data protection compliance programme, handling data subject requests, and serving as the point of contact with the National Privacy Commission.

To exercise your data subject rights, raise a privacy concern, or submit a complaint about how pg789 handles your personal data, please contact us using the following details:

If you are not satisfied with pg789's response to your data subject request or privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.