Your privacy matters to ph17. This Privacy Policy explains how we collect, use, store, and protect your personal data in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and applicable PAGCOR data protection guidelines.
Effective Date: 1 January 2026These highlights capture the spirit of how ph17 handles your data. The full policy below contains the complete legal detail.
ph17 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared only where strictly necessary to operate our platform, comply with Philippine law, or fulfill our PAGCOR obligations — and never for commercial gain by third parties.
All data transmitted between your device and ph17 servers is protected using industry-standard 256-bit SSL/TLS encryption. Your login credentials, financial information, and personal data are encrypted end-to-end at every point of transmission on the ph17 platform.
ph17 operates in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and the implementing rules issued by the National Privacy Commission (NPC). Filipino players have specific rights under the DPA, and ph17 honors each of those rights as set out in this policy.
ph17 collects only the personal data that is necessary to operate our platform, verify your identity, process payments, comply with PAGCOR anti-money laundering requirements, and provide support. We do not collect personal data speculatively or for purposes we haven't clearly defined.
Under the Philippine DPA, you have enforceable rights over your personal data held by ph17 — including the right to access your data, correct inaccuracies, withdraw consent for certain processing, and request deletion under applicable circumstances. These rights are genuine and exercisable.
ph17 retains personal data only for as long as is necessary for the stated purpose of collection, or as required by Philippine law — including PAGCOR record-keeping obligations and the Anti-Money Laundering Act (AMLA) retention requirements. Data no longer required is securely deleted or anonymized.
This Privacy Policy is published by ph17, the operator of the online gaming platform accessible at ph17.asia (the "Platform"). For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA"), ph17 acts as the Personal Information Controller in respect of personal data collected from users of the Platform.
As a Personal Information Controller, ph17 determines the purposes and means by which personal data provided by Filipino players and Platform visitors is processed. ph17 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA. Contact details for the ph17 DPO are provided in Section 15 of this Policy.
ph17 collects personal data from you through several channels and in the following categories:
| Data Category | Examples | Collected At |
|---|---|---|
| Identity | Full name, date of birth, government ID | Registration / KYC |
| Contact | PH mobile number | Registration |
| Financial | GCash / PayMaya / bank account details | Deposit / Withdrawal |
| Technical | IP address, device type, browser | Every Platform visit |
| Behavioral | Games played, bet history, session logs | Active platform use |
| Communications | Live chat transcripts, support tickets | Support interactions |
ph17 uses your personal data for the following clearly defined purposes:
Under the Philippine DPA, ph17 must have a lawful basis for each processing activity. The bases on which ph17 relies are as follows:
ph17 does not sell your personal data. We share personal data with third parties only in the following circumstances and to the minimum extent necessary:
ph17 shares financial transaction data with GCash, PayMaya, BPI, BDO, and Metrobank to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to Philippine financial regulations including BSP oversight.
ph17 uses licensed third-party KYC (Know Your Customer) and AML screening service providers to verify player identity and screen against Philippine government watchlists as required by AMLA and PAGCOR. These providers process personal data solely on ph17's instructions and under binding data processing agreements.
Third-party game providers whose games are hosted on the ph17 Platform may receive session data necessary to deliver game functionality (e.g., session tokens). They do not receive personally identifying information beyond what is technically required for game operation.
ph17 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or other Philippine government authorities when required to do so by law, court order, or valid regulatory demand.
ph17 may share personal data with legal counsel, auditors, and other professional advisers under binding confidentiality obligations where necessary for legitimate business, legal, or compliance purposes.
ph17 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and maintain session security. Cookies are small text files placed on your device when you visit ph17.asia.
ph17 does not deploy third-party advertising cookies or share cookie data with advertising networks. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality, including the ability to log in to your ph17 Account.
ph17 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:
While ph17 takes data security seriously and implements robust safeguards, no security system is perfectly impenetrable. Players are encouraged to maintain strong, unique passwords for their ph17 Accounts and to contact ph17 support immediately if they suspect unauthorized access.
ph17 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to minimum retention obligations imposed by Philippine law. The following retention periods apply:
| Data Type | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account & registration data | Duration of account + 5 years post-closure | PAGCOR licensing; AMLA |
| KYC / identity documents | 5 years from account closure | AMLA (RA 9160 as amended) |
| Transaction records | 5 years from transaction date | AMLA; PAGCOR; tax regulations |
| Game session logs | 2 years from session date | PAGCOR; dispute resolution |
| Support communications | 3 years from last interaction | Operational; legal claims |
| Marketing consent records | Until consent withdrawn + 1 year | DPA consent documentation |
| Fraud investigation records | 6 years from investigation close | Legal proceedings; PAGCOR |
Upon expiry of the applicable retention period, personal data will be securely deleted, destroyed, or anonymized in a manner that prevents reconstruction of the original personal data.
The Philippine Data Privacy Act of 2012 grants you the following rights in relation to personal data held by ph17. These rights are genuine and exercisable by contacting the ph17 Data Protection Officer using the details in Section 15.
The ph17 Platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR's minimum age requirements for online gambling in the Philippines. ph17 does not knowingly collect personal data from individuals under 21 years of age.
If ph17 discovers that personal data has been submitted by a person under 21, the Account will be immediately suspended, all collected data will be deleted to the extent permitted by law, and the matter may be referred to PAGCOR. Parents and guardians who believe that their child under 21 has registered on ph17 are encouraged to contact our DPO immediately.
Age verification is conducted at the point of registration and through KYC verification procedures. ph17 treats the protection of minors from exposure to gambling as a priority obligation, not merely a compliance formality.
ph17 is a Philippine-focused platform and processes most personal data within the Philippines. However, certain third-party service providers engaged by ph17 — including cloud infrastructure providers, game software providers, and KYC verification services — may be located outside the Philippines and may process personal data in their respective jurisdictions.
Where personal data is transferred to processors outside the Philippines, ph17 ensures that:
ph17 does not transfer personal data to jurisdictions that do not provide adequate or equivalent protection without implementing appropriate safeguards and notifying the NPC as required.
ph17 may send you promotional communications — including deposit bonus offers, reload promotions, VIP tier updates, and Platform announcements — via SMS to your registered Philippine mobile number, or through in-Platform notifications.
Marketing communications are sent only to Players who have provided consent during registration or have opted in through their Account settings. Consent for marketing communications is separate from and does not affect your Account access or Platform use.
You may withdraw your consent for marketing communications at any time by:
Withdrawal of marketing consent will be processed within two (2) business days. Please note that operational messages — including deposit confirmations, withdrawal notifications, OTP codes, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are necessary for the operation of your Account.
The ph17 Platform may contain references to third-party services — such as GCash, PayMaya, and Philippine banking partners — in the context of payment processing. ph17 does not operate these third-party platforms and is not responsible for their privacy practices or the content of their privacy policies.
When you use GCash, PayMaya, BPI, BDO, or Metrobank to deposit or withdraw funds from your ph17 Account, your use of those services is governed by their respective terms of service and privacy policies. ph17 encourages you to review those policies directly through those providers' official channels.
ph17 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law (including NPC regulations and PAGCOR requirements), or changes in the services we offer.
When material changes are made to this Policy, ph17 will provide reasonable notice to registered Players via in-Platform notification or SMS to your registered Philippine mobile number. The revised Policy will be published on ph17.asia with an updated Effective Date.
Your continued use of the ph17 Platform following notification of material changes to this Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with material changes, you should cease using the Platform and may request Account closure in accordance with the ph17 Terms and Conditions.
For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by ph17, please contact our Data Protection Officer through the following channels:
ph17 will acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within fifteen (15) business days, or such shorter period as may be required by NPC regulations.
If you are not satisfied with ph17's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.
Philippine DPA compliance, 256-bit SSL encryption, and no data sales — ph17 protects your privacy while delivering the best Filipino online casino experience. 21+ only.