Your Privacy Matters
to 48ph
At 48ph, protecting your personal information is not just a legal obligation — it is a core part of how we operate. This Privacy Policy explains exactly what data we collect, why we collect it, and how it is kept safe under Philippine law.
Six Privacy Principles That Guide 48ph
Every data practice at 48ph is built on these core principles, aligned with the National Privacy Commission's guidelines and the spirit of the Data Privacy Act of 2012.
Purpose Limitation
48ph collects personal data only for specific, legitimate purposes directly related to your gaming account and our regulatory obligations. We do not repurpose your data without your knowledge or a valid legal basis.
Data Minimization
We collect only what is genuinely necessary. If a piece of information is not needed to deliver our services or meet our PAGCOR and AML obligations, 48ph does not ask for it — plain and simple.
Accuracy
48ph takes reasonable steps to keep the personal data we hold about you accurate and up to date. You can review and correct your account information at any time through your 48ph account settings.
Security by Design
Your data is protected using industry-standard encryption, access controls, and security monitoring. 48ph applies technical and organizational safeguards at every layer of our platform infrastructure.
Retention Limits
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by Philippine law and PAGCOR regulations. Data no longer needed is securely deleted or anonymized.
Respect for Rights
48ph recognizes and upholds your rights as a data subject under the Data Privacy Act of 2012 — including your right to access, correct, object to processing, and request erasure of your personal data.
- 01 About This Policy
- 02 Data We Collect
- 03 How We Use Your Data
- 04 Legal Basis
- 05 Data Sharing
- 06 Cookies & Tracking
- 07 Data Security
- 08 Retention Periods
- 09 Your Rights
- 10 Children's Privacy
- 11 Policy Changes
- 12 Contact & DPO
1 About This Policy
This Privacy Policy describes how 48ph — the online gaming platform accessible at 48ph.bet — collects, uses, stores, shares, and protects personal information provided by or collected from users ("Players") of the platform. 48ph is operated under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its implementing rules and regulations issued by the National Privacy Commission (NPC).
This Policy applies to all personal data collected through any channel associated with 48ph, including the 48ph.bet website, any mobile-optimized version of the site, customer support communications via live chat or email, and any promotional campaigns or surveys conducted by 48ph. It applies to all current and former registered Players, as well as visitors to the site who have not yet created an account.
This Privacy Policy is incorporated into and forms part of the 48ph Terms & Conditions. Capitalized terms not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.
2 Data We Collect
48ph collects personal data from you in three ways: data you provide directly, data generated automatically through your use of the platform, and data received from third parties in the course of delivering our services.
2.1 Data You Provide Directly
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Registration & KYC |
| Contact Data | Philippine mobile number, email address, residential address | Registration & KYC |
| Identity Documents | PhilSys ID, passport, driver's license, UMID, voter's ID | KYC verification |
| Financial Data | GCash number, Maya account, BPI/BDO account details, USDT wallet address | Deposit & withdrawal |
| Communications | Support chat transcripts, email correspondence, feedback submissions | Customer support interactions |
| Source of Funds | Employment details, income documentation (where AML screening requires) | Enhanced due diligence |
2.2 Data Collected Automatically
When you access the 48ph platform, our systems automatically collect certain technical data necessary for the operation, security, and optimization of the service:
- Device and browser information: device type, operating system, browser version, screen resolution, language settings
- Network data: IP address, approximate geolocation derived from IP (country and city level), mobile network operator
- Usage data: pages visited, time spent on pages, navigation paths, game sessions initiated, betting history, login timestamps
- Transaction logs: deposit and withdrawal records, bonus activations, wager amounts, game outcomes (server-side records)
- Cookie and session data: session identifiers, preference settings, authentication tokens (see Section 6 for full cookie details)
2.3 Data From Third Parties
48ph may receive personal data about you from the following categories of third parties, strictly for the purposes of delivering and securing the platform:
- Payment processors (GCash, Maya, BPI, BDO, Coins.ph): transaction confirmation data, account verification status
- Identity verification providers: results of document authenticity checks and biometric verification (where applicable)
- Anti-fraud and AML screening services: watchlist screening results, politically exposed person (PEP) status, adverse media flags
- Game content providers: game session results and RNG audit data required for dispute resolution
3 How We Use Your Data
48ph processes your personal data for the following purposes. Each purpose is tied to a specific legal basis, which is detailed in Section 4:
- Account creation and management: Processing your registration, verifying your identity, maintaining your account profile, and enabling access to 48ph services.
- Payment processing: Facilitating deposits and withdrawals through GCash, Maya, BPI, BDO, USDT, Coins.ph, and other supported Philippine payment channels. Verifying that payment accounts are registered in your own name.
- KYC and regulatory compliance: Fulfilling our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and related Philippine laws. Screening players against watchlists and PEP databases as required.
- Service delivery and improvement: Operating games, resolving technical issues, analyzing platform performance, and improving the 48ph user experience based on anonymized usage data.
- Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling, administering self-exclusion and deposit limit tools, and fulfilling our responsible gaming obligations under PAGCOR guidelines.
- Fraud prevention and security: Detecting and preventing unauthorized account access, fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct.
- Customer support: Responding to your inquiries, resolving disputes, and maintaining records of communications for quality assurance and audit purposes.
- Marketing and promotions: Sending you information about 48ph promotions, seasonal campaigns (e.g., Pasko, Sinulog, PBA Finals specials), and bonus offers — but only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out option.
- Legal proceedings: Establishing, exercising, or defending legal claims in connection with disputes or regulatory investigations involving your account.
4 Legal Basis for Processing
Under the Data Privacy Act of 2012 and NPC regulations, 48ph must have a valid legal basis for every processing activity involving your personal data. The legal bases on which 48ph relies are as follows:
| Processing Purpose | Legal Basis (DPA s.12 / s.13) |
|---|---|
| Account registration and service delivery | Performance of a contract (s.12[b]) — necessary to provide the 48ph service you have signed up for |
| KYC identity verification | Legal obligation (s.12[c]) — required under PAGCOR regulations and AMLA |
| Payment processing and transaction records | Performance of a contract (s.12[b]) and legal obligation (s.12[c]) |
| AML screening and fraud prevention | Legal obligation (s.12[c]) and legitimate interest (s.12[f]) |
| Responsible gaming monitoring | Legal obligation (s.12[c]) — PAGCOR responsible gaming framework |
| Marketing communications | Consent (s.12[a]) — freely given and withdrawable at any time |
| Platform analytics and improvement | Legitimate interest (s.12[f]) — using anonymized/aggregated data only |
| Legal claims and regulatory cooperation | Legal obligation (s.12[c]) and legitimate interest (s.12[f]) |
5 Data Sharing and Disclosure
48ph does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and always with appropriate safeguards in place:
5.1 Service Providers (Personal Information Processors)
48ph engages carefully selected third-party service providers who process personal data on our behalf as Personal Information Processors under the DPA. These include payment gateway operators, KYC and identity verification vendors, anti-fraud and AML screening services, cloud infrastructure providers hosting the 48ph platform, customer support software providers, and game content providers. All such providers are bound by data processing agreements that require them to process your data only as instructed by 48ph, to maintain appropriate security standards, and to comply with Philippine data privacy law.
5.2 Regulatory and Law Enforcement Authorities
48ph is legally required to disclose personal data to the following authorities where required by applicable Philippine law or upon receipt of a valid legal order:
- PAGCOR — for regulatory compliance reporting, investigation of player complaints, and audit purposes
- The Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting under the AMLA
- The National Privacy Commission (NPC) — for data breach notifications and regulatory investigations
- Philippine courts and law enforcement agencies — pursuant to a valid court order, subpoena, or lawful government directive
5.3 Business Transfers
In the event that 48ph undergoes a merger, acquisition, corporate restructuring, or sale of all or substantially all of its assets, personal data held by 48ph may be transferred to the acquiring entity as part of that transaction. Where this occurs, 48ph will notify affected Players in advance and ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.
6 Cookies & Tracking Technologies
48ph uses cookies and similar tracking technologies on the 48ph.bet website to ensure the platform operates correctly, to keep you securely logged in, and to understand how players use the site so we can improve the experience. The following types of cookies are used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security cookies, CSRF protection. Required for core platform functionality. | No — essential for the site to function |
| Functional | Remembering your language preference, game lobby filter settings, and responsible gaming reminder configurations. | Yes — disabling may affect experience |
| Analytics | Aggregated, anonymized data on page views, session durations, and feature usage, used solely to improve 48ph's platform performance. | Yes — via cookie settings |
| Fraud Prevention | Device fingerprinting and behavioral analysis cookies used to detect multi-accounting, bot activity, and unauthorized access attempts. | No — required for security |
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling strictly necessary or fraud prevention cookies may impair your ability to log in or use the 48ph platform securely.
7 Data Security
48ph takes the security of your personal data seriously and has implemented a layered set of technical and organizational measures to protect it against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:
- Encryption in transit: All data transmitted between your browser or device and the 48ph platform is encrypted using TLS (Transport Layer Security) 1.2 or higher. HTTPS is enforced across the entire 48ph.bet domain.
- Encryption at rest: Sensitive personal data fields — including identity document references, financial account details, and KYC records — are encrypted at rest in the 48ph database infrastructure.
- Access controls: Access to personal data within 48ph's systems is restricted on a strict need-to-know basis. Internal staff are granted only the minimum level of access necessary for their role. Access is logged and monitored.
- Multi-factor authentication: Administrative access to 48ph's backend systems requires multi-factor authentication. Player accounts are protected by OTP verification sent to your registered Philippine mobile number.
- Security monitoring: 48ph operates continuous security monitoring of its platform infrastructure, including intrusion detection, anomaly alerting, and regular vulnerability assessments.
- Staff training: All 48ph personnel who handle personal data undergo regular data privacy and security training in line with NPC guidelines.
8 Data Retention Periods
48ph retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | PAGCOR regulatory requirement |
| KYC documents and identity records | 5 years after account closure | AMLA and PAGCOR regulations |
| Transaction and financial records | 5 years from transaction date | AMLA s.9 record-keeping requirement |
| Gaming history and bet records | 3 years from the date of the wager | PAGCOR audit and dispute resolution |
| Customer support communications | 3 years from last interaction | Dispute resolution and legal claims |
| Marketing consent records | Until consent is withdrawn + 1 year | DPA consent documentation requirement |
| Platform analytics data (anonymized) | Up to 24 months (anonymized, not personal data) | Legitimate interest in platform improvement |
Upon expiry of the applicable retention period, 48ph will securely delete or irreversibly anonymize your personal data. Where deletion is not immediately possible due to technical constraints (e.g., backup systems), the data will be isolated and protected from further processing until deletion can be completed.
9 Your Rights as a Data Subject
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 48ph. These rights are available to all registered Players and, where applicable, to site visitors whose data we process.
Your Rights Under Philippine Law
48ph is committed to making it straightforward for you to exercise every right granted to you as a data subject under RA 10173. Here is what you are entitled to — and how to use each right.
Right to Be Informed
You have the right to know what personal data 48ph collects about you, why we collect it, how it is used, and with whom it is shared. This Privacy Policy is our primary fulfilment of this right. You may request a plain-language summary at any time by contacting our Data Protection Officer.
Right of Access
You have the right to request a copy of the personal data 48ph holds about you. Upon a verified access request, we will provide you with a summary of your personal data within fifteen (15) business days. Requests can be submitted via [email protected] with the subject line "Data Access Request."
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. You can update basic account information directly in your 48ph account settings, or contact support for corrections to KYC records and other data that cannot be self-edited.
Right to Erasure (Right to Be Forgotten)
You may request that 48ph delete your personal data where it is no longer necessary for the purpose collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that erasure requests cannot override our legal data retention obligations under PAGCOR and AMLA regulations.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time, with no need to provide a reason. You may also object to processing based on legitimate interest where you have grounds relating to your particular situation. Objections to marketing can be submitted via account settings or by emailing our support team.
Right to Data Portability
Where technically feasible and where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. This allows you to transmit your data to another service provider of your choosing.
Right to Restrict Processing
In certain circumstances — such as when you contest the accuracy of your data or have objected to processing pending verification of our legitimate grounds — you have the right to request that 48ph restrict processing to storage only while the matter is being resolved.
Right to Lodge a Complaint
If you believe 48ph has not handled your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. We encourage you to contact us first so we can attempt to resolve your concern promptly, but your right to approach the NPC is unconditional.
10 Children's Privacy and Age Restriction
The 48ph platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling laws and PAGCOR regulations. 48ph does not knowingly collect personal data from individuals under the age of 21. All registration applicants are required to provide a valid Philippine government-issued ID confirming their age as part of the KYC process.
If 48ph becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated funds will be handled in accordance with PAGCOR guidelines, and the personal data will be deleted as soon as practicable. If you are a parent or guardian and believe your child has registered on 48ph, please contact us immediately at [email protected].
11 Changes to This Privacy Policy
48ph may update or revise this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. When material changes are made, 48ph will notify registered Players via the email address or mobile number associated with their account at least fourteen (14) days before the revised Policy takes effect. Non-material changes (such as formatting corrections or clarifications that do not affect your rights) may be made without prior notice.
The "Last Updated" date at the top of this Policy will always reflect the most recent revision. The current version of the 48ph Privacy Policy is always accessible on the 48ph platform. Your continued use of the 48ph platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you may close your account by contacting 48ph support, and your remaining balance will be returned to you subject to applicable verification requirements.
12 Contact Us & Data Protection Officer
48ph has designated a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012 and NPC regulations. The DPO is responsible for overseeing 48ph's data privacy compliance program, handling data subject rights requests, managing data breach responses, and serving as the primary point of contact with the National Privacy Commission.
To exercise any of your data subject rights, submit a data privacy complaint, or ask any question about how 48ph handles your personal data, please contact the 48ph Data Protection Officer through the following channel:
- Email: [email protected] — please use the subject line "Data Privacy Request" or "DPO Inquiry" for prioritized handling
- Live Chat: Available 24/7 within the 48ph platform — request to be connected to the Data Privacy team
- Response Time: 48ph aims to acknowledge all data subject rights requests within five (5) business days and to resolve them within fifteen (15) business days, extendable by a further fifteen (15) business days where requests are complex
If you are not satisfied with 48ph's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph.
Document Information This Privacy Policy was last reviewed and updated on January 1, 2026. This document supersedes all previous versions of the 48ph Privacy Policy. 48ph is operated under a PAGCOR license and is intended exclusively for players located in the Republic of the Philippines. Must be 21 years of age or older to play.
Play with Confidence on 48ph
Now that you know exactly how 48ph protects your personal data, explore our platform with peace of mind. PAGCOR-regulated, DPA-compliant, and built for Filipino players.
Must be 21 years or older to register and play. Please gamble responsibly. 48ph is operated under a PAGCOR license and is intended for players located in the Philippines.