Your personal information belongs to you. This Privacy Policy explains exactly what data 19ph collects, why we collect it, how we protect it, who we share it with, and what rights you hold under the Philippine Data Privacy Act of 2012.
A plain-language summary of the six most important privacy topics. Full legal text is in the sections below and governs in all cases.
19ph collects identity information, contact details, KYC documents, payment records, gaming activity logs, and device/technical data necessary to operate a PAGCOR-regulated online gaming platform safely and lawfully.
→ Section 3Your data is used for account management, identity verification, payment processing, fraud prevention, PAGCOR regulatory reporting, responsible gaming monitoring, and platform improvement. Nothing more.
→ Section 419ph shares your data only with PAGCOR (regulatory obligation), payment processors (GCash, Maya, BPI, BDO), and identity verification providers. Your data is never sold to marketers or third-party advertisers.
→ Section 5256-bit SSL encryption in transit, encrypted storage at rest, role-based internal access controls, regular security audits, and strict data minimization practices protect every piece of information 19ph holds about you.
→ Section 6As a data subject under the Philippine Data Privacy Act, you have rights to access, correct, delete, and object to the processing of your personal data. 19ph provides clear channels to exercise each of these rights.
→ Section 819ph uses session and analytics cookies to maintain your login session, prevent fraud, and understand platform usage patterns. No cross-site tracking cookies or third-party advertising trackers are deployed on 19ph.
→ Section 7Republic Act No. 10173 gives every Filipino data subject a clear set of enforceable rights over their personal information. At 19ph, these rights are not just acknowledged — they are supported by dedicated internal processes and a designated Data Protection Officer (DPO) who handles all data rights requests.
To exercise any right below, contact the 19ph DPO at the email address provided in Section 9. 19ph will acknowledge your request within 72 hours and resolve it within the statutory period under RA 10173.
Request a copy of all personal data 19ph holds about you, the purposes for which it is processed, and any third parties it has been shared with.
Request correction of any inaccurate or incomplete personal data in your 19ph account, including name, contact details, and address.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to regulatory retention obligations.
Object to the processing of your personal data for direct marketing, profiling, or any processing based on legitimate interests where you have grounds to object.
Request temporary suspension of processing where the accuracy of the data is disputed or the processing is unlawful but you do not want erasure.
Receive your personal data in a structured, commonly used, machine-readable format for transfer to another controller where technically feasible.
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 19ph has processed your data in violation of RA 10173.
This Privacy Policy ("Policy") describes how 19ph ("19ph," "the Platform," "we," "us," "our"), the operator of the online gaming platform at 19ph.club, collects, processes, stores, uses, shares, and protects the personal information of individuals ("you," "your," "Player," "User") who register for an account, access, or use any feature of the 19ph platform.
19ph is committed to protecting the privacy and personal data of all Filipino players and website visitors. This Policy is prepared in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC).
By creating a 19ph account or using the 19ph platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must not use the 19ph platform.
This Policy applies to all personal data collected through the 19ph website at 19ph.club and any associated mobile interfaces. It does not apply to third-party websites or services linked from 19ph, which have their own privacy policies.
19ph is the personal information controller ("PIC") under RA 10173 in respect of all personal data collected through the 19ph platform. As PIC, 19ph determines the purposes and means of processing your personal data and is accountable for ensuring that processing activities comply with the Data Privacy Act and all applicable NPC regulations.
19ph has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection compliance, handling data subject rights requests, and serving as the primary point of contact for the National Privacy Commission on matters relating to 19ph's data processing activities. Contact details for the DPO are provided in Section 13 of this Policy.
19ph's Data Protection Officer can be reached at the contact address in Section 13. All data rights requests and privacy concerns should be directed to the DPO in the first instance.
19ph collects only the personal data that is necessary for the lawful, regulated operation of an online gaming platform and compliance with PAGCOR licensing requirements. The categories of personal data we collect are as follows:
When you register for a 19ph account, we collect your full legal name, date of birth, nationality, email address, and Philippine mobile number. This information is required to create and manage your account and to verify that you meet the minimum age requirement of 21 years.
To comply with PAGCOR licensing requirements and RA 9160 (Anti-Money Laundering Act), 19ph requires identity verification documents. This includes copies of government-issued photo identification (Philippine passport, PhilSys ID, UMID, SSS ID, or driver's license), proof of address, and in some cases, proof of payment method ownership.
19ph records all deposit and withdrawal transactions associated with your account, including amounts, timestamps, payment method identifiers (e.g., GCash mobile number or BPI account suffix), and transaction reference numbers. Full payment account credentials are not stored by 19ph — these are processed directly by our licensed payment processors.
All gaming activity on 19ph is logged, including game sessions, wager amounts, game outcomes, bonus redemptions, and session durations. This data is required for regulatory reporting, dispute resolution, responsible gaming monitoring, and RTP audit compliance.
| Data Type | Purpose |
|---|---|
| IP Address | Fraud detection, geographic eligibility verification, security logging |
| Device Type & OS | Platform compatibility, technical support |
| Browser Type & Version | Session management, platform optimization |
| Session Tokens | Maintaining authenticated login state, security |
| Log Files | Error diagnosis, security incident investigation |
| Cookie Data | Session maintenance, fraud prevention (see Section 7) |
If you contact 19ph customer support, we retain records of all communications — including support chat logs, email exchanges, and any documentation submitted — for quality assurance, regulatory compliance, and dispute resolution purposes.
Where you use responsible gaming tools (deposit limits, session limits, cool-down periods, or self-exclusion), 19ph records the details of these settings and any changes you make. This data is used solely to implement your chosen protections and is not used for any commercial profiling purpose.
19ph processes personal data only where there is a lawful basis for doing so under RA 10173. The purposes and legal bases for each category of processing are as follows:
19ph does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. If automated systems flag your account for review, a human compliance officer assesses the matter before any account action is taken.
19ph does not sell, rent, or trade your personal data to any third party. Sharing of your personal data is limited to the following categories of recipients, each of whom processes your data only for the stated purposes and under contractual data processing obligations:
All third-party recipients of 19ph player data are required by contract to process such data only for the specified purpose, maintain appropriate security standards, and comply with RA 10173 and all applicable Philippine data protection law.
19ph implements technical and organizational security measures appropriate to the sensitivity of the personal data we process. These measures include:
No security system is completely impenetrable. If you believe your 19ph account or personal data has been compromised, contact 19ph support immediately at the address in Section 13.
19ph uses cookies and similar session technologies solely for the purpose of operating the platform securely and understanding aggregate usage patterns. The cookies deployed on 19ph are limited to the following categories:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session Cookies | Maintain your authenticated login state throughout a gaming session. Deleted when you close your browser or log out. | Session only |
| Security Cookies | CSRF protection tokens and device fingerprinting to detect unauthorized session hijacking. | Session / short-lived |
| Preference Cookies | Remembering your language preference and "Remember Me" login setting if enabled. | 30 days |
| Analytics Cookies | Aggregated, anonymized platform usage data to understand which features are used most frequently. No individual player is identified through analytics data. | 90 days |
19ph does not deploy advertising cookies, third-party tracking pixels, social media trackers, or any cookie technology that tracks your behavior on websites other than 19ph.club. You may adjust your browser settings to block or delete cookies, but doing so may prevent the 19ph platform from functioning correctly and may require you to log in on each visit.
As a data subject under the Philippine Data Privacy Act, you hold the following rights in respect of your personal data processed by 19ph. To exercise any of these rights, submit a written request to the 19ph DPO at the contact address in Section 13, including your full name, registered email address, and a description of the right you wish to exercise.
19ph will acknowledge rights requests within 72 hours and resolve them within the timeframe prescribed by RA 10173 and NPC regulations, subject to identity verification of the requestor.
19ph retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The primary retention periods applicable to 19ph player data are as follows:
At the expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines on data disposal.
The 19ph platform is strictly for persons aged 21 years or older. 19ph does not knowingly collect personal data from individuals under the age of 21. The mandatory KYC process requires age verification for all accounts before real-money play is permitted.
If 19ph discovers that personal data has been collected from an individual under 21 years of age, that account will be immediately closed, all associated data will be deleted or dealt with in accordance with PAGCOR requirements, and any funds will be returned to the verified payment source.
If you believe a minor has registered on 19ph using false age information, please notify the 19ph DPO immediately at the contact address in Section 13. 19ph takes all reports of underage access seriously and investigates them as a priority matter.
Where 19ph transfers personal data outside the Philippines — for example, to game technology providers or cloud infrastructure services with servers in other jurisdictions — such transfers are conducted in accordance with Section 21 of RA 10173 and applicable NPC regulations on cross-border data transfers.
19ph ensures that any recipient outside the Philippines provides a level of data protection substantially equivalent to that provided under Philippine law, either through contractual data processing agreements incorporating NPC-approved standard contractual clauses, or through the recipient's compliance with an internationally recognized data protection framework.
19ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, regulatory requirements, or platform features. Material changes will be communicated to registered players by email notification to the registered email address and by prominent notice on the 19ph platform prior to the effective date of the change.
The "Last Revised" date at the top of this Policy will always reflect the date of the most recent update. Your continued use of 19ph following notification of a material change constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using 19ph and contact the DPO to exercise any applicable data rights before closing your account.
For all privacy-related inquiries, data rights requests, or concerns about 19ph's data processing practices, please contact the 19ph Data Protection Officer:
The DPO will acknowledge all privacy requests within 72 hours of receipt. Complex requests will be resolved within 30 calendar days or such other period as prescribed by RA 10173 and NPC issuances.
If you are not satisfied with how 19ph has handled your data rights request or privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.
This Privacy Policy was last reviewed and confirmed to be accurate and complete as of 1 January 2026. 19ph recommends that players review this document whenever it is updated to remain informed of any changes to their privacy rights and how their data is handled.
19ph doesn't treat your data as a product. It's information you've trusted us with to operate your account — nothing more. Your GCash number stays between you and your bank. Your gaming history stays in your account. And your right to access, correct, or delete your data is always one email away. Sign in and play with that assurance behind every session.
21+ Only — PAGCOR Regulated — Gambling involves financial risk. Play responsibly.