Privacy Policy – How 48ph Protects Your Personal Data

48ph ("we", "us", "our", "the Platform") is the data controller responsible for the personal information collected from players who use the 48ph website and all associated gaming services, including sports betting, live casino, jackpot slots, and bingo.

As the data controller, 48ph determines the purposes and means of processing your personal data. We are registered with the National Privacy Commission of the Philippines and maintain a designated Data Protection Officer (DPO) who can be contacted at the details provided in Section 13 of this policy.

This Privacy Policy applies to all personal data collected through the 48ph website at https://48ph.best, through our mobile browser platform, and through any communication channels including live chat and email support. It does not apply to third-party websites or services that may be linked from the 48ph platform.

48ph collects personal data through three main channels: information you provide directly, information generated automatically through your use of the platform, and information received from third-party verification or payment partners. Here is a clear breakdown of each category.

48ph does not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect racial or ethnic origin data, political opinions, religious beliefs, or biometric data beyond what appears on government-issued identification documents submitted for KYC purposes.

48ph uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

• Account Creation and Management: Your identity and contact data are used to create and maintain your 48ph account, verify your eligibility to play, and keep your account records accurate and up to date.
• Payment Processing: Your financial data is used to process deposits and withdrawals through GCash, Maya, and other Philippine payment methods. 48ph does not store full payment card numbers on its servers — card data is processed by certified payment gateways.
• Identity Verification and Fraud Prevention: We use identity and document data to verify that players are who they claim to be, to prevent underage gambling, and to detect and prevent fraud, money laundering, and account takeover activity.
• Regulatory Compliance: 48ph is required by its operating license and applicable Philippine law to maintain records of player identity, transactions, and gaming activity for specified retention periods. This data is used to respond to lawful requests from regulatory authorities.
• Platform Improvement: Aggregated and anonymised technical and gaming data is used to analyse platform performance, identify bugs, and improve the 48ph user experience. This analysis never involves individually identifiable data.
• Customer Support: Communication data is used to resolve your support requests, investigate complaints, and maintain records of how issues were handled on 48ph.
• Responsible Gaming: Gaming activity data is monitored to identify players who may be showing signs of problem gambling behaviour. 48ph uses this data to provide timely interventions and support in accordance with our Responsible Gaming policy.
• Marketing Communications: Where you have opted in, your contact data may be used to send promotional offers, bonus alerts, and platform news. You can opt out at any time — see Section 11.

Under the Data Privacy Act of 2012, 48ph must have a lawful basis for processing each category of your personal data. The legal bases we rely on are:

• Contractual Necessity: Processing is necessary to fulfil the contract between you and 48ph — specifically, to operate your account, process bets, and settle winnings. Without this processing, 48ph cannot provide its services to you.
• Legal Obligation: 48ph is required by law to process certain data — including identity records, financial transaction logs, and gaming activity records — to comply with anti-money laundering regulations, tax reporting obligations, and the requirements of our operating license.
• Legitimate Interests: 48ph processes certain technical and usage data to protect the security of its platform, prevent fraud, and ensure fair play. These interests do not override your fundamental privacy rights.
• Consent: Where 48ph relies on consent as the legal basis for processing — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

48ph does not sell your personal data. We share data only with trusted partners and service providers who are contractually bound to use it only for the specific purpose for which it was shared. The categories of recipients are:

• Payment Processors: GCash, Maya, GrabPay, InstaPay/PESONet operators, and card payment gateways receive the minimum payment data necessary to process your transactions. These providers are independently regulated and maintain their own data security standards.
• Identity Verification Providers: 48ph works with licensed KYC verification partners to authenticate government-issued IDs and confirm player identity. Verification data shared is limited to what is necessary for the verification process.
• Game Providers: For casino games and slots, technical game session data may be shared with the game provider (e.g., NetEnt, Pragmatic Play) to resolve disputes and ensure game integrity. Game providers do not receive your identity or financial data.
• Regulatory Authorities: 48ph will disclose personal data to the relevant Philippine regulatory authorities — including gaming regulators, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission — where required by law or lawful order.
• IT and Security Service Providers: Cloud hosting, DDoS protection, and fraud detection service providers may have access to technical data as part of their service delivery. All such providers are contractually prohibited from using 48ph player data for their own purposes.

48ph uses cookies and similar tracking technologies to make the platform work correctly, remember your preferences, and understand how players interact with our service. Below is a summary of the cookie types we use and your control over each.

You can control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent 48ph from functioning correctly. For analytics and marketing cookies, you can update your preferences at any time by contacting our support team.

48ph retains personal data only for as long as necessary for the purpose for which it was collected, or as required by Philippine law and our operating license conditions. The following retention periods apply:

• Active Account Data: Retained for the full duration your 48ph account is active plus 5 years after account closure, in compliance with anti-money laundering and financial record-keeping requirements.
• Transaction Records: Financial transaction and betting history records are retained for a minimum of 5 years from the date of each transaction, as required by AMLC regulations applicable to online gaming platforms in the Philippines.
• Identity Verification Documents: KYC documents are retained for 5 years after account closure or the last transaction, whichever is later. Documents submitted but not accepted during a failed verification are deleted within 30 days.
• Support Communication Records: Live chat transcripts and email records are retained for 2 years to support dispute resolution and service quality monitoring.
• Technical and Log Data: Server logs and session data are retained for 12 months, after which they are automatically purged or anonymised.

After applicable retention periods expire, 48ph will securely delete or anonymise your personal data. Anonymised data may be retained indefinitely for statistical analysis and platform improvement purposes.

Data security is a core operational priority at 48ph, not an afterthought. We implement multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• Encryption in Transit: All data exchanged between your device and 48ph's servers is encrypted using TLS 1.3 / 256-bit SSL. This applies to all platform pages, payment flows, and API communications.
• Encryption at Rest: Sensitive personal data stored in 48ph's databases — including identity data and financial information — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 48ph's systems is restricted on a strict need-to-know basis. All staff with data access undergo background checks and privacy training. Access logs are maintained and regularly audited.
• Two-Factor Authentication: Internal systems containing player data require two-factor authentication for all staff access. Players are also encouraged to enable 2FA on their 48ph accounts.
• Penetration Testing: 48ph's platform undergoes regular third-party security assessments, including penetration testing and vulnerability scanning, to identify and address potential security weaknesses before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, 48ph will notify the National Privacy Commission within 72 hours of discovery and will notify affected players without undue delay, as required by the Data Privacy Act.

Under the Data Privacy Act of 2012 and its Implementing Rules, every Filipino player on 48ph has the following rights with respect to their personal data. You can exercise any of these rights by contacting our Data Protection Officer at the details in Section 13.

To exercise any of these rights, submit a request to our Data Protection Officer at privacy@48ph.best with the subject line "Data Rights Request." Please include your registered 48ph email address and a brief description of your request. We may ask for identity verification before processing your request to ensure we are responding to the correct account holder.

48ph is strictly an adult platform. Registration is only open to individuals aged 21 years or older. 48ph does not knowingly collect or process personal data from individuals under the age of 21.

If 48ph discovers or is notified that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all associated data will be deleted from our systems, and any funds held in the account will be returned to the source payment method after verification of identity and age.

If you believe a person under 21 has created an account on 48ph, please contact us immediately at privacy@48ph.best. We treat all such reports with the highest priority.

48ph sends promotional communications — including bonus offers, free spins alerts, and platform news — only to players who have explicitly opted in to receive them during registration or through their account settings.

• Email Marketing: If you opted in, you may receive promotional emails from 48ph. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting support.
• SMS / Push Notifications: Where you have enabled SMS or push alerts, 48ph may send bonus reminders and account notifications. These can be disabled in your account notification settings.
• Transactional Communications: Certain account communications — such as deposit confirmations, withdrawal receipts, security alerts, and verification requests — are sent regardless of marketing preferences as they are necessary for account operation. These are not marketing communications.

Opting out of marketing communications does not affect your ability to use any part of the 48ph platform, including your eligibility for promotions you actively claim in your account. To opt out of all marketing communications, contact our support team at support@48ph.best with the subject line "Marketing Opt-Out."

48ph reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or regulatory requirements. The current version is always accessible at https://48ph.best/privacy-policy.

When we make material changes to this policy, we will notify registered 48ph players by email and/or in-platform notification at least 14 days before the changes take effect. Minor changes — such as clarifications, corrections, or formatting updates — may be made without advance notice but will be reflected in the "Last Updated" date at the top of the policy.

Your continued use of the 48ph platform after any policy changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should stop using 48ph and request account closure before the effective date of the revised policy.

For any questions, concerns, or requests related to your personal data and this Privacy Policy, please contact the 48ph Data Protection Officer through the following channels:

• Privacy & Data Requests: privacy@48ph.best — for data access, correction, deletion, and portability requests. Please use the subject line "Data Rights Request" and include your registered 48ph account email.
• General Support: support@48ph.best — for all other account and privacy questions. Our Filipino-speaking support team is available 24/7.
• Live Chat: Available within your logged-in 48ph account for immediate assistance with any privacy concern.

If you are not satisfied with 48ph's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC). Information about filing a complaint with the NPC is available at the NPC's official website.