12ph Casino Privacy Policy

1Who We Are

12ph Casino is an online gaming platform operating at 12ph.cam. The platform is operated by a legal entity (hereinafter "the Operator") holding a valid license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). For the purposes of Republic Act No. 10173 (the Data Privacy Act of 2012), the Operator acts as the Personal Information Controller (PIC) with respect to all personal data collected from players and website visitors.

The Operator has appointed a Data Protection Officer (DPO) responsible for overseeing data privacy compliance. Inquiries related to this Privacy Policy or the exercise of Data Subject Rights may be directed to the DPO at [email protected].

2Personal Data We Collect

12ph collects the following categories of personal data from players and website visitors. The specific data points collected depend on your level of engagement with the platform — visitors who do not register an account are subject only to automatic collection through cookies and server logs.

3How We Collect Your Data

12ph collects personal data through the following methods:

3.1 Direct Collection

You provide data directly to 12ph when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account profile. All fields marked as mandatory during registration are required for the lawful operation of your account under PAGCOR regulations.

3.2 Automatic Collection

When you access 12ph.cam, our servers automatically record technical data including your IP address, device identifiers, browser information, and session activity. This automatic collection occurs regardless of whether you are a registered player or an anonymous visitor. Cookies and similar tracking technologies are used as described in Section 6 of this Policy.

3.3 Third-Party Sources

12ph may receive data about you from third-party sources including:

• Payment processors and e-wallet providers (GCash, Maya, BPI, BDO, Metrobank) in connection with deposit and withdrawal processing.
• Identity verification service providers engaged to assist with KYC compliance.
• Fraud detection and anti-money laundering screening services.
• PAGCOR or other Philippine government authorities, where data sharing is authorized or required by law.

4Purpose & Legal Basis for Processing

12ph processes your personal data only for specific, legitimate purposes. The following table summarizes the primary purposes for which data is processed and the legal basis for each under RA 10173:

5Data Sharing & Disclosure

12ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. Personal data is shared only in the following circumstances:

5.1 Service Providers (Data Processors)

12ph engages third-party service providers to assist in delivering platform services. These include payment processing partners (GCash, Maya, BPI, BDO, Metrobank), cloud infrastructure and hosting providers, KYC and identity verification providers, fraud detection and AML screening services, and customer support software platforms. All such third parties are bound by written data processing agreements that restrict their use of your data to the specific purpose for which it was shared and impose security obligations consistent with RA 10173.

5.2 Regulatory and Legal Disclosure

12ph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other Philippine government authorities where such disclosure is required by law, court order, or regulatory directive. In such cases, 12ph will provide only the minimum data necessary to satisfy the lawful requirement.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the Operator's assets, player data may be transferred to the acquiring entity as part of the business transaction. Players will be notified of any such transfer and the acquirer will be required to honor this Privacy Policy or provide equivalent protections.

5.4 With Your Consent

12ph may share your data with third parties not described above where you have given explicit, informed consent to such sharing. You may withdraw such consent at any time by contacting [email protected].

6Cookies & Tracking Technologies

12ph uses cookies and similar tracking technologies on 12ph.cam to operate the platform effectively and improve the player experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in, CSRF protection tokens, and load balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your preferences such as preferred language, game lobby layout, and notification settings. These persist across sessions to avoid requiring you to reconfigure preferences on each visit.
• Analytical Cookies: Collect aggregated, anonymized data about how visitors navigate 12ph.cam — pages visited, time spent, click paths. This data helps 12ph improve platform usability. Individual players are not identifiable from analytical cookie data in its aggregated form.
• Responsible Gaming Cookies: Used to enforce session time limits, cooling-off periods, and self-exclusion restrictions set by the player or imposed by 12ph compliance processes.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of portions of the 12ph platform. As a player based in the Philippines, cookie preferences may be managed through your account settings where technically feasible.

7Data Security

12ph implements layered technical and organizational security measures to protect player personal data against unauthorized access, disclosure, alteration, destruction, or loss. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between players and 12ph.cam servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment identifiers.
• Role-based access control (RBAC) ensuring that internal staff can only access the minimum data necessary for their function.
• All internal access to player personal data is logged and monitored. Access logs are retained and reviewed as part of regular security auditing.
• Two-factor authentication enforced for all administrative platform accounts.
• Regular third-party penetration testing and vulnerability assessments conducted on the 12ph platform infrastructure.
• Documented incident response procedures aligned with NPC notification requirements under RA 10173, including the obligation to notify the NPC and affected players of a personal data breach within 72 hours of discovery where the breach is likely to result in a serious risk of harm.

8Data Retention

12ph retains personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal, regulatory, and record-keeping obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of the player's active membership on 12ph, plus a mandatory post-closure retention period.
• Post-Account-Closure Retention: A minimum of five (5) years from the date of account closure, to comply with PAGCOR record-keeping requirements, AMLC obligations under RA 9160, and BIR requirements.
• KYC Documents: Retained for a minimum of five (5) years post-account closure or longer where required by law.
• Customer Support Records: Retained for two (2) years from the date of the final interaction, or five (5) years if the support interaction is related to a formal complaint, dispute, or investigation.
• Marketing Consent Records: Retained for the duration of the player's account plus two (2) years post-closure to evidence compliance with consent-based marketing.
• Technical Logs: Retained for twelve (12) months on primary systems, with archives maintained for up to three (3) years for security investigation purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized using industry-standard methods such that it can no longer be associated with an identified or identifiable individual.

9Your Data Subject Rights

As a data subject under Republic Act No. 10173, Filipino players have the following rights with respect to personal data held by 12ph. These rights may be exercised by submitting a written request to [email protected], subject to identity verification and any applicable legal exemptions:

10Cross-Border Data Transfers

The operation of 12ph involves certain service providers and technology infrastructure partners whose systems may be located outside the Philippines. Where personal data is transferred to servers or processors located in other countries, 12ph ensures that such transfers occur only to entities that provide adequate data protection through one of the following mechanisms:

• The recipient country provides an adequate level of data protection as recognized by the National Privacy Commission.
• The recipient entity has entered into a data processing agreement containing standard contractual clauses approved by the NPC, imposing data protection obligations equivalent to those applicable in the Philippines.
• The transfer is necessary for the performance of your player account contract (e.g., processing a GCash transaction where payment infrastructure involves cross-border systems).

Regardless of where personal data is processed, 12ph remains responsible for its protection under the terms of this Privacy Policy and RA 10173.

11Children's Privacy & Age Restrictions

12Changes to This Privacy Policy

12ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR requirements, or 12ph's data practices. When material changes are made, 12ph will notify registered players by email to their registered address or by an in-platform notification, providing a minimum of 14 days' notice before the changes take effect where practicable.

The current version of this Privacy Policy is always accessible at 12ph.cam/privacy-policy. The effective date at the top of this document indicates when the current version came into force. Continued use of 12ph following the effective date of any update constitutes acceptance of the revised Policy.

12ph encourages all players to review this Privacy Policy periodically. If you do not agree to an updated version, you should cease using the platform and contact [email protected] to arrange account closure and data processing instructions.

13Contact & Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or the exercise of your Data Subject Rights under RA 10173, please contact 12ph's Data Protection Officer using the following details:

• Email: [email protected] — use subject line "Privacy / DPO Inquiry"
• Platform: 12ph.cam — live chat available for registered players 24/7
• Regulator: National Privacy Commission of the Philippines (NPC)
• Gaming Regulator: Philippine Amusement and Gaming Corporation (PAGCOR)

12ph aims to respond to all privacy-related inquiries within five (5) business days and to resolve formal Data Subject Rights requests within the 15-business-day period stipulated by NPC regulations.