p958 Privacy Policy

1. Introduction & Scope

Welcome to the p958 Privacy Policy. p958 ("p958," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who visits, registers on, or interacts with the p958 online gaming platform at p958.net (the "Platform"). This Privacy Policy explains, in plain and transparent terms, how p958 collects, uses, stores, shares, and protects your personal information.

This Policy applies to all personal data collected through:

• The p958 website and all pages hosted under p958.net;
• The p958 mobile application (if applicable and available in your region);
• Any p958 login portal, registration form, or account management interface;
• Communications between you and the p958 customer support team via live chat, email, or any other supported channel;
• Participation in p958 promotions, tournaments, surveys, or any other engagement activity.

This Privacy Policy is governed by the Republic Act No. 10173 — Data Privacy Act of 2012 of the Philippines and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC). Where PAGCOR regulations impose additional data handling obligations, those requirements are incorporated into our practices as described throughout this Policy.

By creating a p958 account, completing p958 login, or continuing to use the Platform after this Policy has been published, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2. Personal Data We Collect

p958 collects personal data in several categories, depending on how you interact with the Platform. The table below summarises the categories of personal data we collect, with examples of specific data points within each category.

2.1 Sensitive Personal Information

Under the Philippine Data Privacy Act, certain categories of data are classified as "sensitive personal information" and require a higher standard of protection. p958 may process the following sensitive data in specific, limited circumstances:

• Government ID numbers (e.g., SSS, PhilSys number) — collected for KYC verification only, not stored in plaintext;
• Financial account details — processed solely for payment processing and anti-money laundering compliance, never stored in full unencrypted form;
• Health-related information — only where voluntarily provided in the context of a responsible gaming request (e.g., self-exclusion based on a health condition). Such data is handled with the highest level of access restriction.

p958 does not collect biometric data, racial or ethnic origin data, political opinions, religious beliefs, or sexual orientation data from its players.

3. How We Collect Your Data

p958 collects personal data through the following mechanisms:

3.1 Data You Provide Directly

The majority of personal data p958 holds about you is information you have provided directly when:

• Completing the registration form to create a p958 account;
• Completing the p958 login process on the Platform;
• Submitting KYC identity verification documents;
• Requesting a deposit or withdrawal via GCash, PayMaya, or bank transfer;
• Contacting our 24/7 customer support team via live chat or email;
• Participating in promotions, tournaments, surveys, or feedback requests;
• Updating your account profile or communication preferences.

3.2 Data Collected Automatically

When you access or use the p958 Platform, our systems automatically record certain technical and usage data. This automatic collection uses standard web technologies including:

• Cookies and local storage — for session management, security tokens, and anonymous performance analytics;
• Server logs — which record your IP address, access timestamps, pages requested, and HTTP response codes;
• Device fingerprinting — a limited, anonymised device profile used for fraud detection and to identify duplicate account attempts in accordance with our one-account policy.

3.3 Data from Third Parties

In limited circumstances, p958 may receive personal data about you from trusted third-party sources, including:

• Payment processors (GCash, PayMaya, bank partners) — transaction confirmation data to verify deposit and withdrawal completions;
• Identity verification providers — where p958 uses a third-party KYC service to verify the authenticity of identity documents submitted by players;
• Fraud prevention services — industry-shared fraud databases used to identify high-risk accounts before registration is approved.

4. How We Use Your Data

p958 uses the personal data we collect for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which p958 processes your personal data are:

• Account creation and management — setting up and maintaining your p958 account, enabling secure p958 login, and managing your account settings and preferences;
• Identity verification (KYC) — confirming your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering law;
• Payment processing — facilitating deposits via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and cryptocurrency, and processing withdrawal requests back to your verified payment method;
• Game provision and platform operation — delivering slots, live casino, bingo, and other game content; recording wager and session data to calculate balances and bonus eligibility;
• Fraud prevention and security — detecting and preventing fraud, duplicate accounts, bonus abuse, money laundering, and unauthorised access attempts;
• Regulatory compliance — fulfilling our obligations under PAGCOR regulations, the Philippine Data Privacy Act, and the Anti-Money Laundering Act (AMLA) including transaction monitoring and suspicious activity reporting to the AMLC;
• Customer support — responding to your inquiries, resolving disputes, and improving the quality of our support operations;
• Responsible gaming — monitoring for signs of problematic gaming behaviour, processing self-exclusion requests, and enforcing deposit and loss limits you have set;
• Marketing communications — sending you promotional offers, tournament invitations, and bonus notifications where you have opted in and not subsequently withdrawn consent;
• Platform improvement — analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, every personal data processing activity must have a lawful basis. The following table maps p958's key processing activities to the applicable legal bases under the DPA:

Where p958 relies on your consent as the legal basis for processing (most notably for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing & Disclosure

p958 does not sell, rent, or trade your personal information to third parties for commercial purposes. We share your personal data only in the following limited and defined circumstances:

6.1 Service Providers

p958 engages trusted third-party service providers who process personal data on our behalf as data processors. These include:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and cryptocurrency processing partners — for the sole purpose of completing your financial transactions;
• KYC / identity verification providers: Third-party verification platforms contracted to assist with document authentication, solely for the purpose of satisfying PAGCOR KYC requirements;
• Fraud prevention and security vendors: Industry-standard fraud detection platforms that analyse transaction patterns and device data to protect all players;
• Cloud infrastructure providers: Secure data hosting and cloud server services that store Platform data on encrypted servers.

All service providers are contractually bound to process your data only as instructed by p958, to maintain appropriate security standards, and not to use your data for any purpose of their own.

6.2 Regulatory and Legal Authorities

p958 is required by Philippine law to disclose certain personal and financial data to regulatory bodies, including:

• PAGCOR — as the licensing and regulatory authority for online gaming in the Philippines;
• Anti-Money Laundering Council (AMLC) — for suspicious transaction reports and covered transaction reports as required under RA 9160 (AMLA);
• National Privacy Commission (NPC) — in the event of a personal data breach or pursuant to an NPC investigation;
• Law enforcement authorities — where compelled by a valid court order or lawful request from Philippine law enforcement agencies.

6.3 Game Providers

Where games on the p958 Platform are provided by third-party game studios (such as JILI Gaming, PG Soft, or Pragmatic Play), limited technical session data may be shared with those providers to facilitate game delivery and RNG certification. No directly identifiable personal data beyond a pseudonymous session token is shared with game providers.

6.4 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring involving p958, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to data processing practices that result from it.

7. Data Retention

p958 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable Philippine legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is either securely deleted, anonymised beyond re-identification, or — where physical documents exist — destroyed by certified secure disposal methods. Anonymised, aggregated data that can no longer be linked to an individual player is not subject to these retention limits and may be retained indefinitely for statistical purposes.

8. Cookies & Tracking Technologies

The p958 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to keep your session secure, and to gather anonymised analytics data that helps us improve the service we provide to Filipino players.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete cookies that have already been set. Please note that disabling strictly necessary cookies will prevent you from completing p958 login and accessing Platform features that require an authenticated session.

p958 does not use cookies for cross-site behavioural advertising or for building advertising profiles that are shared with third parties.

9. Data Security Measures

p958 takes the security of your personal data seriously and implements a multi-layered technical and organisational security framework to protect your information from unauthorised access, disclosure, alteration, or destruction.

9.1 Technical Safeguards

• 256-bit SSL/TLS encryption on all data transmissions between your device and p958 servers;
• AES-256 encryption at rest for stored personal data and financial records on our servers;
• Hashed and salted passwords — your p958 login password is never stored in plaintext; only a one-way cryptographic hash is retained;
• Multi-factor authentication (MFA) available for player accounts and mandatory for all p958 staff administrative access;
• Firewall and intrusion detection systems protecting all server infrastructure;
• Regular penetration testing by independent third-party security firms to identify and remediate vulnerabilities.

9.2 Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis; p958 staff cannot access your full financial account details without multi-person authorisation;
• All p958 staff with access to personal data are required to complete data privacy and security training, including PAGCOR compliance modules;
• Data processing activities are reviewed by our Data Protection Officer (DPO) on a regular cycle;
• Third-party data processors are assessed for security compliance before engagement and periodically re-evaluated.

9.3 Data Breach Response

In the unlikely event of a personal data breach that poses a real risk to affected players, p958 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03. Affected players will be notified without undue delay where the breach is likely to result in high risk to their rights and freedoms.

10. Your Privacy Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to personal data held by p958. These rights can be exercised by contacting our Data Protection Officer as described in Section 14.

10.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection Officer by email at [email protected] with the subject line "Data Privacy Rights Request." Please include your registered p958 username and a clear description of the right you wish to exercise. We will respond within 15 business days of receiving your request, in accordance with NPC guidelines.

Where a request requires identity verification before it can be processed — for example, an access or erasure request — p958 may ask you to provide additional verification to confirm your identity. This is to protect you from unauthorised requests by third parties purporting to act on your behalf.

11. Minors & Age Restriction

p958 is strictly an adults-only online gaming platform. In accordance with PAGCOR regulations and Philippine law, the minimum age to participate in any gaming activity on the p958 Platform is 21 years old. p958 does not knowingly collect personal data from individuals under the age of 21.

During the registration process, all applicants are required to:

• Declare that they are 21 years of age or older;
• Submit a valid government-issued photo ID that confirms their date of birth;
• Complete KYC verification before any deposit, withdrawal, or bonus claim is permitted.

If p958 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended pending investigation. Any funds held in the account will be handled in accordance with PAGCOR guidelines and applicable law. The personal data of the underage individual will be deleted from our systems as soon as is practicable, except where retention is required for legal compliance or law enforcement purposes.

If you are a parent or guardian and believe that your child under the age of 21 has registered a p958 account, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

12. International Data Transfers

p958 primarily stores and processes personal data of Filipino players on servers located within or operated in compliance with Philippine data protection standards. However, certain service providers engaged by p958 — including cloud infrastructure providers, KYC verification platforms, and fraud prevention vendors — may operate data processing facilities in countries outside the Philippines.

Where personal data is transferred outside the Philippines, p958 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Philippine Data Privacy Act. These safeguards include:

• Contractual clauses — all international data processors are bound by data processing agreements that incorporate DPA-equivalent data protection obligations;
• Adequacy assessments — before engaging a foreign data processor, p958 assesses the data protection laws of the destination country and the processor's security certification status;
• Data minimisation in transfers — only the minimum personal data necessary for the specific purpose is transferred internationally. Full account profiles are not transferred to foreign processors.

By using the p958 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to international service providers as described in this section, where such transfers are necessary to deliver the services you have requested.

13. Changes to This Policy

p958 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in Philippine privacy law or PAGCOR regulations, or improvements to our Platform and services. The most current version of this Privacy Policy will always be accessible at p958.net/privacy-policy.

When we make material changes to this Privacy Policy — changes that significantly affect how we collect, use, or share your personal data — we will notify you by:

• Updating the "Last Updated" date displayed at the top of this page;
• Displaying a notice on the p958 Platform for a minimum of 14 days following the change;
• Sending an email notification to your registered email address for changes that materially affect your privacy rights or the basis on which we process your personal data.

Where a change requires your fresh consent — for example, if we introduce a new processing purpose that was not covered by your original consent — we will request your explicit consent before that new processing begins. You will not be disadvantaged for declining to consent to new optional processing purposes.

Your continued use of the p958 Platform after an updated Privacy Policy takes effect constitutes your acknowledgement of the changes. If you do not agree with any update to this Policy, you may close your account by contacting our support team. Closure of your account does not affect our right to retain data for the legally mandated periods described in Section 7.

14. Contact Our Data Protection Officer

p958 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests related to your personal data or this Privacy Policy, the DPO is your primary point of contact.

14.1 Contact Details

You may reach the p958 Data Protection Officer through the following channels:

• Email: [email protected] — please use the subject line "DPO — Privacy Inquiry" for all data protection matters;
• Live Chat: Available within the p958 Platform following p958 login — request to speak with a data privacy specialist;
• Written correspondence: Addressed to the Data Protection Officer, p958 Online Gaming Platform, Philippines.

14.2 Response Times

p958 is committed to acknowledging all privacy-related inquiries within 5 business days of receipt. Formal data subject rights requests (access, erasure, portability, etc.) will receive a substantive written response within 15 business days, as required under NPC guidelines. Complex requests that require additional investigation may take up to 30 business days; in such cases, you will be informed of the extended timeline and the reason for it.

14.3 National Privacy Commission

If you are not satisfied with p958's handling of your privacy inquiry or data rights request, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC is the independent government authority responsible for enforcing the Data Privacy Act of 2012 and protecting the privacy rights of all Filipinos. NPC contact information and complaint procedures are available on the NPC's official government website.