p897 Privacy Policy

1. Introduction

1.1 p897 is committed to protecting the personal data of all individuals who interact with the p897 platform. This Privacy Policy sets out the types of personal data we collect, the purposes for which we process it, the legal bases for that processing, and the rights available to data subjects under Philippine law.

1.2 By registering an account on p897, accessing the p897 platform, or communicating with p897 through any channel, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. Where consent is the legal basis for processing, you have the right to withdraw consent at any time, subject to the consequences described in Section 10.

1.3 This Policy applies to data collected through p897.vip and all associated subdomains, mobile-optimised pages, and support communication channels operated by p897.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, p897 is the personal information controller in respect of the personal data it collects directly from Players and platform users. p897 operates under PAGCOR regulatory oversight.

2.2 p897 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 p897 collects the following categories of personal data from Players and platform users:

3.2 p897 does not collect sensitive personal information as defined under RA 10173 (e.g., health data, political opinions, religious beliefs) except where explicitly required by law or PAGCOR regulation.

4. How We Collect Personal Data

4.1 p897 collects personal data through the following means:

• Direct collection: Data provided by the Player during account registration, KYC verification, deposit/withdrawal requests, and support interactions;
• Automated collection: Technical and gaming data collected automatically as you use the p897 platform, via cookies, log files, and session analytics tools;
• Third-party sources: Identity verification providers, payment processors (GCash, Maya, banks), fraud detection services, and PAGCOR where regulatory data sharing is required;
• Public sources: Where permitted by law, publicly available information used to verify identity or assess fraud risk.

5. Purposes of Processing & Legal Bases

5.1 p897 processes personal data only for specified, explicit, and legitimate purposes. The principal purposes and their corresponding legal bases under RA 10173 are as follows:

• Account creation and management: Processing necessary for the performance of the contract between p897 and the Player;
• Identity verification (KYC/AML): Processing necessary for compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA);
• Payment processing: Processing necessary for the performance of the contract (deposit and withdrawal transactions);
• Fraud detection and platform security: Legitimate interests of p897 in protecting the integrity of the platform and its users;
• Responsible gaming monitoring: Compliance with PAGCOR responsible gaming obligations and p897's duty of care to Players;
• Customer support: Performance of the contract and legitimate interests in resolving Player queries;
• Marketing communications: Consent of the Player (opt-in only). Players may withdraw marketing consent at any time via account settings or by contacting support;
• Regulatory reporting: Compliance with PAGCOR, AMLC, NPC, and other applicable Philippine regulatory obligations.

5.2 p897 does not process personal data for purposes incompatible with those listed above without first obtaining separate consent from the Player.

6. Data Sharing & Disclosure

6.1 p897 does not sell, rent, or trade personal data to any third party for commercial purposes.

6.2 p897 may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Game providers: Certified game studios and live dealer operators whose games are available on p897, for the purpose of game session management and dispute resolution;
• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, Coins.ph, and other payment service providers for transaction processing;
• KYC/Identity verification providers: Third-party services engaged to verify Player identity and comply with AML requirements;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement authorities, where required by law or regulatory direction;
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics providers engaged by p897 under binding data processing agreements.

6.3 Any third party receiving personal data from p897 is required to maintain appropriate technical and organisational security measures and to process the data only in accordance with p897's instructions and applicable Philippine data protection law.

7. Cookies & Tracking Technologies

7.1 p897 uses cookies and similar tracking technologies on the p897.vip platform for the following purposes:

• Strictly necessary cookies: Required for the platform to function — including session management, login state, and security tokens. These cannot be disabled without affecting platform functionality;
• Performance cookies: Used to analyse platform usage patterns and improve user experience (e.g., page load times, error logging). Data collected is aggregated and anonymised;
• Functionality cookies: Store Player preferences such as language settings and display options;
• Analytics cookies: Help p897 understand how Players navigate the platform, which games are most accessed, and where technical issues occur.

7.2 p897 does not use third-party advertising or behavioural tracking cookies. Players may manage non-essential cookie preferences through their browser settings. Disabling strictly necessary cookies will impair or prevent access to the p897 platform.

8. Data Retention

8.1 p897 retains personal data only for as long as necessary for the purposes described in this Policy or as required by applicable law and PAGCOR regulation. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of the Player's active account plus five (5) years following account closure, consistent with AMLA record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years in accordance with AMLA and PAGCOR requirements;
• KYC documentation: Retained for five (5) years following the end of the business relationship;
• Support communications: Retained for two (2) years from the date of the interaction, unless a longer period is required for ongoing dispute resolution;
• Marketing consent records: Retained for the duration of the Player's account plus two (2) years.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with p897's data disposal procedures.

9. Data Security

9.1 p897 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between Players and the p897 platform;
• Encryption of sensitive data at rest, including financial and identity data;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the p897 platform;
• Incident response procedures, including notification obligations to the National Privacy Commission (NPC) in the event of a personal data breach affecting Player rights.

9.2 While p897 implements industry-standard security measures, no online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own p897 login credentials and for promptly notifying p897 of any suspected unauthorised access to their account.

10. Your Data Subject Rights

• Right to be informed: The right to know how your personal data is collected, used, and shared — addressed by this Privacy Policy;
• Right of access: The right to request a copy of the personal data p897 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of personal data where retention is no longer necessary, subject to legal and regulatory retention obligations;
• Right to data portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller, where technically feasible;
• Right to object: The right to object to processing based on legitimate interests, including direct marketing. Objection to marketing processing will be honoured unconditionally;
• Right to withdraw consent: Where processing is based on consent, the right to withdraw at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe p897 has not handled your personal data in compliance with RA 10173.

p897 will respond to verified data subject requests within fifteen (15) business days of receipt. Complex requests may require up to thirty (30) business days; Players will be notified of any extension.

11. Children's Privacy & Age Restriction

If you believe a minor has created a p897 account, please contact p897 support immediately via live chat so that the account can be investigated and closed.

12. Cross-Border Data Transfers

12.1 Some of p897's service providers — including game studios, payment processors, and cloud infrastructure providers — may be located outside the Philippines. Where personal data is transferred internationally, p897 ensures that appropriate safeguards are in place, which may include standard contractual clauses, adequacy decisions, or binding corporate rules as applicable.

12.2 All cross-border data transfers involving Philippine personal data are conducted in compliance with the requirements of RA 10173 and any applicable NPC guidelines on cross-border transfers.

13. Updates to This Privacy Policy

13.1 p897 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform functionality. The effective date at the top of this page will be updated to reflect the most recent revision.

13.2 For material changes that significantly affect Player rights or the way personal data is processed, p897 will notify active Players via the platform or registered contact details prior to the changes taking effect. Continued use of p897 following notification of an update constitutes acceptance of the revised Policy.

14. Contact & Data Protection Officer

For data subject rights requests, privacy complaints, or any questions about this Privacy Policy, Players may contact p897's Data Protection Officer through the following channels: