At 18ph, your privacy matters. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under Philippine data privacy law.
This Privacy Policy ("Policy") describes how 18ph ("18ph," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you" or "Player") who access or use the 18ph online gaming platform at https://18ph.app, including all associated subdomains, mobile applications, and related services (collectively, the "Platform").
18ph operates in the Philippines and is committed to complying with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). By using the 18ph Platform, you consent to the collection and use of your personal information as described in this Policy.
This Policy should be read together with the 18ph Terms & Conditions, which govern your use of the Platform. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.
18ph collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:
18ph collects your personal data through the following means:
18ph uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity, contact data |
| Age and identity verification (KYC) | Identity, government ID |
| Processing deposits and withdrawals | Financial data, identity |
| Providing and improving gaming services | Gaming & behavioral data |
| Fraud prevention and security monitoring | Technical, financial, identity data |
| Anti-money laundering (AML) compliance | Identity, financial, transaction data |
| Responsible gaming monitoring and intervention | Gaming & behavioral data |
| Customer support and dispute resolution | Contact, gaming, transaction data |
| Sending promotional offers and bonuses (with consent) | Contact, behavioral data |
| Regulatory reporting to PAGCOR and other authorities | Identity, financial, gaming data |
| Platform analytics and performance optimization | Technical, behavioral data |
18ph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.
Under the Data Privacy Act of 2012, 18ph processes your personal data on the following legal bases:
18ph does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
All third parties who process personal data on behalf of 18ph are required to enter into data processing agreements that obligate them to handle your data securely, use it only for the specified purpose, and comply with the Data Privacy Act of 2012. 18ph remains responsible for ensuring that your data is protected even when processed by third parties.
Some of our service providers may be located outside the Philippines. Where personal data is transferred internationally, 18ph ensures that appropriate safeguards are in place — such as contractual data protection clauses — to maintain a standard of protection consistent with the Data Privacy Act of 2012.
Cookies are small text files placed on your device when you visit the 18ph Platform. They help us recognize your browser, remember your preferences, keep your session active, and understand how you interact with the Platform.
You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 18ph Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate securely.
18ph retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Legal / regulatory obligation |
| Financial and transaction records | 10 years from transaction date | AMLC / tax law requirements |
| KYC verification documents | 5 years after account closure | PAGCOR / AML compliance |
| Gaming session logs | 3 years from session date | Dispute resolution / compliance |
| Customer support records | 3 years from last interaction | Legitimate interest |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent / legal obligation |
| Technical / access logs | 12 months from creation | Security / fraud prevention |
After the applicable retention period expires, 18ph will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.
18ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
In the event of a personal data breach that is likely to result in harm to you, 18ph will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 18ph:
To exercise any of the above rights, please contact the 18ph Data Protection Officer using the contact details provided in Section 13 of this Policy. 18ph will respond to all verified requests within fifteen (15) business days of receipt.
The 18ph Platform is strictly intended for individuals who are 21 years of age or older. 18ph does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and report the matter to the appropriate authorities where required.
If you are a parent or guardian and believe that your child has registered on the 18ph Platform, please contact us immediately using the details in Section 13 so that we can take prompt action.
18ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered users via email or through a prominent notice on the Platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
Your continued use of the 18ph Platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how 18ph protects your personal information.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 18ph, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing 18ph's compliance with the Data Privacy Act of 2012 and can be reached as follows:
Data Protection Officer — 18ph
For written inquiries, please use the following email address (plain text — not a clickable link):
18ph aims to acknowledge all privacy-related inquiries within five (5) business days and to resolve them within fifteen (15) business days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.
Beyond legal compliance, here is what 18ph actively does to keep every Filipino player's personal information protected.
All sensitive data stored on 18ph servers — including financial details and identity documents — is encrypted with AES-256, the same standard used by major banks.
18ph operates in full compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and the guidelines issued by the National Privacy Commission.
18ph has a designated Data Protection Officer who oversees all privacy matters and is your direct point of contact for any data-related concerns or requests.
18ph never sells your personal information to third parties. Your data is used solely to operate the platform, comply with regulations, and improve your experience.
Access, correct, or delete your data at any time. Withdraw marketing consent with a single request. 18ph makes it straightforward to exercise your privacy rights.
In the unlikely event of a data breach, 18ph will notify affected players and the NPC promptly and transparently, in line with our obligations under Philippine law.
Now that you know how 18ph protects your data, join thousands of Filipino players who trust 18ph for a safe, fair, and exciting online gaming experience.
Must be 21 or older to register. Please gamble responsibly.