123ph7 Privacy Policy

123ph7 is the data controller responsible for the personal information collected and processed through the 123ph7 Platform, accessible at 123ph7.vip. As data controller, 123ph7 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC") of the Philippines.

123ph7 operates under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR). Our data processing activities related to anti-money laundering compliance are conducted in accordance with Republic Act No. 9160, as amended (the Anti-Money Laundering Act, "AMLA"), and guidelines issued by the Anti-Money Laundering Council ("AMLC").

123ph7 collects personal data that falls into the following categories. We collect only what is necessary for the purposes described in this policy:

123ph7 does not intentionally collect sensitive personal information beyond what is required for identity verification. Government ID images submitted for KYC are processed and stored securely in accordance with Section 8 of this policy.

123ph7 collects personal data through the following means:

• Direct registration: Information you provide when creating your 123ph7 account, including name, mobile number, and email address.
• KYC submission: Identity documents uploaded during the Know Your Customer verification process required prior to withdrawal processing.
• Payment transactions: Financial data generated when you make a deposit or withdrawal using GCash, Maya, BPI, BDO, Metrobank, Coins.ph, USDT TRC20, or 7-Eleven.
• Platform usage: Automatically collected technical and gameplay data generated as you navigate and interact with the 123ph7 Platform.
• Support interactions: Information you provide when contacting our customer support team via email or live chat.
• Cookies and similar technologies: As described in Section 9 of this policy.

Every personal data processing activity conducted by 123ph7 is grounded in one or more of the following lawful bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to deliver the services you have contracted for — account creation, gameplay, deposits, withdrawals, bonus administration, and support.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations (including customer due diligence, transaction monitoring, and suspicious transaction reporting), and other applicable Philippine laws.
• Legitimate interest: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and analytics to improve platform performance — provided our legitimate interests do not override your rights and freedoms.
• Consent: Processing for optional marketing communications, cookies beyond strictly necessary categories, and any other processing activities for which we seek your explicit agreement. You may withdraw consent at any time without affecting the lawfulness of prior processing.

123ph7 processes your personal data for the following specific purposes:

• Creating and managing your 123ph7 player account, including authentication and account security;
• Processing deposits and withdrawals via Philippine payment methods (GCash, Maya, BPI, BDO, Metrobank, Coins.ph, USDT TRC20, 7-Eleven);
• Verifying your identity and age (21+ requirement) through the KYC process as mandated by PAGCOR;
• Delivering and improving the gaming experience, including personalized game recommendations and lobby customization;
• Administering bonuses, promotions, and the 123ph7 VIP loyalty program;
• Providing customer support and resolving account disputes;
• Complying with AMLA obligations, including customer due diligence, enhanced due diligence, and suspicious transaction reporting to the AMLC;
• Monitoring gameplay for responsible gaming compliance, problem gambling indicators, and self-exclusion enforcement;
• Detecting, preventing, and investigating fraud, cheating, bonus abuse, and other prohibited conduct;
• Analyzing platform performance and user behavior to improve the 123ph7 experience;
• Sending account notifications, security alerts, and (where consented) marketing communications;
• Complying with any court order, regulatory inquiry, or lawful request from a Philippine government authority.

123ph7 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors: GCash (Mynt — Globe Fintech Innovations), Maya (PayMaya Philippines), BPI, BDO, Metrobank, Coins.ph, and other supported payment providers receive transaction data necessary to process your deposits and withdrawals.
• Game providers: Third-party game studios (such as Evolution Gaming, Pragmatic Play, PG Soft, JILI Games) may receive a session token and currency type to enable gameplay. They do not receive your full registration details or payment information.
• KYC and identity verification services: Accredited identity verification partners process your submitted government ID documents on behalf of 123ph7 under strict data processing agreements.
• IT and platform service providers: Cloud hosting providers, CDN services, security monitoring tools, and customer support platforms that process data as our data processors, bound by contractual confidentiality and data protection obligations.
• Regulatory authorities: PAGCOR, AMLC, the National Privacy Commission, and other Philippine government bodies as required by law. These disclosures are mandatory and do not constitute a breach of confidentiality.
• Legal and professional advisers: Lawyers, accountants, or auditors retained by 123ph7 where disclosure is necessary for legitimate professional purposes, subject to professional confidentiality obligations.

123ph7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following general retention periods apply:

• Account data: Retained for the duration of your active account relationship with 123ph7, plus a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and potential dispute resolution needs.
• Financial and transaction records: Retained for a minimum of five (5) years following each transaction, in compliance with AMLA record-keeping obligations (Republic Act No. 9160, as amended).
• KYC documentation: Retained for a minimum of five (5) years following account closure or the conclusion of any investigation involving the account.
• Gameplay logs: Retained for up to three (3) years for dispute resolution, responsible gaming monitoring, and analytics purposes.
• Support communications: Retained for up to two (2) years from the date of the interaction.
• Marketing consent records: Retained for the duration of your account plus one (1) year, to demonstrate compliance with consent obligations.

Following the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual.

123ph7 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data transmitted between your device and 123ph7 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock in your browser's address bar confirms this protection is active.
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest within our storage systems.
• Access controls: Access to personal data within 123ph7 is restricted to personnel who require it for their specific job functions, enforced through role-based access controls and multi-factor authentication.
• Password security: Player passwords are stored using one-way cryptographic hashing. 123ph7 employees cannot view your password — only you know it.
• Intrusion detection and monitoring: Our platform infrastructure is monitored continuously for anomalous activity, unauthorized access attempts, and security events.
• Security audits: 123ph7 undergoes periodic independent security assessments to identify and remediate vulnerabilities.

123ph7 uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate the Platform efficiently and to improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for Platform operation — session authentication, security tokens, load balancing, and fraud prevention. These cannot be disabled without breaking the Platform. No consent is required for these cookies.
• Functional cookies: Remember your preferences — language settings, game lobby filters, preferred payment method. These are set with your implied consent through account settings.
• Analytics cookies: Anonymized or pseudonymized usage data collected to understand how players navigate the Platform, which pages are most visited, and where improvements are needed. Deployed only with your consent.
• Session security cookies: Short-lived cookies used to protect your active login session and detect concurrent session anomalies.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. 123ph7 does not use third-party advertising cookies or cross-site tracking technologies that share your behavior with external advertising networks.

As a data subject under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to the personal data 123ph7 holds about you:

To exercise any of your data subject rights, please contact our Data Protection Officer using the contact details in Section 15. We will respond to verified requests within fifteen (15) working days. Complex requests may require up to thirty (30) days, and we will notify you if an extension is needed. We may need to verify your identity before processing your request to prevent unauthorized disclosure.

123ph7 may send you promotional communications — including bonus offers, tournament announcements, VIP program updates, and new game notifications — via SMS to your registered Philippine mobile number or email, but only where you have provided explicit consent to receive such communications.

You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team. Withdrawal of marketing consent will not affect account-related transactional communications (deposit confirmations, withdrawal notifications, security alerts, and support replies), which are sent as part of our contractual obligations to you and cannot be disabled.

The 123ph7 Platform is strictly intended for individuals aged twenty-one (21) years and above, as required by PAGCOR's licensing conditions. 123ph7 does not knowingly collect personal data from individuals under the age of 21.

As part of our KYC verification process, we verify the age of all players before processing any withdrawal. Where we discover that personal data has been collected from an individual under the minimum age, we will immediately close the associated account, delete the personal data to the extent permitted by applicable law, and report the matter to PAGCOR if required by regulation.

The 123ph7 Platform is primarily hosted on servers located within the Philippines or in data centers that meet equivalent data protection standards. However, some of our third-party service providers — including international game studios (such as Evolution Gaming, headquartered in Latvia, and Pragmatic Play, headquartered in Malta) — may process limited technical data (session tokens, bet results) on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, 123ph7 ensures that such transfers are made only: (a) to recipients located in countries with an adequate level of data protection as recognized by the NPC; (b) under contractual data transfer agreements that impose data protection obligations equivalent to those required by Philippine law; or (c) where such transfer is strictly necessary for the performance of the gaming services you have requested.

123ph7 does not transfer your full personal profile, KYC documents, or financial records to offshore game providers. International transfers are limited to the minimum data necessary for gameplay session management.

123ph7 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, regulatory guidance from the NPC, or improvements to Platform functionality. The effective date at the top of this policy reflects when the current version came into force.

Material changes — those that significantly affect how we process your personal data or expand our use of your data beyond what was previously disclosed — will be communicated to you via email to your registered address or via a prominent notice on the Platform prior to the change taking effect. Where required by law, we will seek fresh consent for any material new processing activities.

We recommend reviewing this Privacy Policy periodically. Your continued use of the 123ph7 Platform after an updated policy has been published and communicated constitutes your acknowledgment of the changes. If you do not agree with an update, you should cease using the Platform and contact our support team to close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 123ph7, please contact us through the following channel:

If you are not satisfied with our response, or if you believe that 123ph7 has violated your data protection rights under the Data Privacy Act of 2012, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC). The NPC accepts complaints through its official channels as published on its government website. 123ph7 cooperates fully with NPC investigations and inquiries.

For matters relating to Responsible Gaming, including self-exclusion requests and deposit limit adjustments, please visit our Responsible Gaming page.