This Privacy Policy explains how 90ph collects, uses, stores, discloses, and protects the personal data of registered users and visitors of 90ph.asia. We process personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations.
This Privacy Policy applies to all personal data processed by 90ph in connection with your use of the 90ph.asia website and all associated gaming, payment, support, and promotional services offered on the Platform. It should be read together with the 90ph Terms & Conditions, which govern the contractual relationship between you and 90ph.
90ph takes the privacy and security of your personal data seriously. As a platform serving Filipino players — from Metro Manila to Davao, from Cebu to Cagayan de Oro — we understand that trust is not given freely, it is earned through consistent, transparent, and responsible handling of the information you share with us. This policy is our commitment to that standard.
By registering an Account on 90ph.asia, using the Platform, or providing us with any personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Platform and may request Account closure.
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information, whether recorded in material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual. |
| "Processing" | Any operation performed upon personal data, including collection, recording, organisation, storage, updating, retrieval, consultation, use, consolidation, blocking, erasure, or destruction. |
| "Data Subject" | You — the individual whose personal data is being processed. In the context of this Policy, any registered 90ph user or visitor of 90ph.asia. |
| "Data Controller" | 90ph — the entity that determines the purposes and means of processing personal data collected via the Platform. |
| "Data Processor" | Any entity that processes personal data on behalf of 90ph pursuant to a written data processing agreement, including payment processors, game providers, and cloud infrastructure providers. |
| "NPC" | The National Privacy Commission of the Philippines — the government authority responsible for administering and implementing the Data Privacy Act of 2012. |
| "Sensitive Personal Data" | Personal data about an individual's race, ethnic origin, marital status, age, color, and religious, philosophical, or political affiliations; health, education, genetic or sexual life; proceedings for any offense committed or alleged; and government-issued identification numbers. |
90ph collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:
Registration & Account Data
Identity Verification (KYC) Data
Financial & Transaction Data
Gaming Activity Data
Technical & Device Data
Communications Data
90ph collects personal data through the following means:
90ph processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:
| Legal Basis | Processing Activity |
|---|---|
| Contractual Necessity | Account creation, payment processing, game operation, support interactions, and withdrawal processing — all necessary to perform the contract between you and 90ph. |
| Consent | Optional communications including promotional offers, loyalty programme updates, and non-essential cookies. Consent may be withdrawn at any time. |
| Legal Obligation | KYC verification and anti-money laundering (AML) compliance as required under Philippine financial regulations and PAGCOR operating requirements. |
| Legitimate Interest | Platform security monitoring, fraud detection, responsible gaming enforcement, and product improvement analytics — provided these interests are not overridden by your rights. |
90ph uses your personal data only for specific, declared, and legitimate purposes. We do not use your data in ways incompatible with the purpose for which it was originally collected. The primary purposes for which 90ph uses your personal data are:
90ph does not sell, rent, or trade your personal data to third parties. We share your personal data only in the following circumstances and only to the extent necessary for each purpose:
Some of 90ph's service providers — including cloud infrastructure providers and game studios — are based or operate servers outside the Republic of the Philippines. Where personal data is transferred to servers or systems located in other countries, 90ph ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012.
These safeguards include contractual clauses that impose data protection obligations on the recipient entity, requirements to maintain security standards at least equivalent to those applicable in the Philippines, and restrictions on secondary use or onward transfer of the data. 90ph does not transfer personal data to countries that do not provide an adequate level of data protection without implementing appropriate contractual safeguards.
90ph retains your personal data for as long as is necessary for the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of Account + 5 years after Account closure (AML obligation) |
| KYC Documents | Duration of Account + 5 years after Account closure |
| Transaction Records | 10 years from transaction date (Philippine financial regulation) |
| Gaming Activity Logs | 3 years from the date of each gaming session |
| Support Correspondence | 3 years from last interaction date |
| Technical & Device Logs | 12 months on a rolling basis |
| Self-Exclusion Records | Indefinitely — to prevent re-registration after permanent self-exclusion |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual. Where legal proceedings or regulatory investigations are ongoing, data may be retained beyond the standard periods described above until those proceedings are fully resolved.
90ph.asia uses cookies and similar tracking technologies to enable certain Platform functions, personalise your experience, and collect analytics data that helps us improve the Platform. Below is a summary of the cookies we use:
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform but may affect certain personalisation features. Note that disabling fraud detection cookies may trigger additional verification steps at login.
Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by 90ph. You may exercise these rights by contacting our Data Privacy Officer at the details provided in Section 16.
Request a copy of the personal data we hold about you and information on how it is processed.
Request correction of inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where we no longer have a legal basis to retain it.
Object to processing based on legitimate interest, including direct marketing communications.
Request temporary suspension of processing pending a dispute about accuracy or legal basis.
Lodge a complaint with the National Privacy Commission if you believe your rights have been violated.
90ph will respond to all verifiable data subject rights requests within thirty (30) calendar days of receipt. Where a request is particularly complex or numerous, the response period may be extended by a further sixty (60) days, of which you will be notified within the initial 30-day window.
Please note that certain rights are subject to limitations where processing is required for compliance with legal obligations (such as AML record-keeping), where it is necessary for the establishment, exercise, or defence of legal claims, or where permanent self-exclusion records must be retained to protect your own welfare.
The 90ph Platform is strictly for individuals who are at least twenty-one (21) years of age. 90ph does not knowingly collect personal data from individuals below this age. Age is verified during the registration process via OTP-verified Philippine mobile number and, where required, documentary evidence of age.
If 90ph discovers that personal data has been collected from a person under the age of 21, the associated Account will be immediately closed, all Funds will be disposed of in accordance with applicable regulations, and all personal data associated with the underage Account will be deleted in accordance with the retention obligations described in Section 9 and applicable law.
90ph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 90ph will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected data subjects without undue delay where the breach is likely to result in a high risk to their rights.
The 90ph Platform may contain references to or integrations with third-party services, including game providers and payment gateways. Where you interact with a third-party service through the 90ph Platform, that service's own privacy policy governs the processing of your personal data by that third party. 90ph is not responsible for the privacy practices of third-party services and encourages you to review the privacy policy of any third-party service you engage with through the Platform.
90ph reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the National Privacy Commission, changes in our data processing practices, or changes to the services we offer. When material changes are made, a notice will be posted on the 90ph.asia homepage and, where required, registered users will be notified via their registered mobile number or email address.
The "Effective" date at the top of this Policy reflects the date of the most recent version. Your continued use of the Platform following any update to this Policy constitutes your acceptance of the updated terms. If you do not agree to any updated version, you should contact 90ph support to close your Account before the update takes effect.
90ph has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with this Policy and the Data Privacy Act of 2012. If you wish to exercise any of your data subject rights, have a question about this Policy, or want to raise a privacy-related concern, you may contact our DPO through the following channels:
Our DPO will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days. For complex or multi-faceted requests, the timeline may be extended as described in Section 11.
If you are not satisfied with how 90ph has handled your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Details of the NPC's complaint process are published on the NPC's official website.
Six commitments that define how 90ph handles your personal data — every day, for every Filipino player on the platform.
90ph does not sell, rent, or trade your personal data to advertisers, data brokers, or any other third parties for commercial purposes. Your information is used solely to operate the platform and comply with legal obligations — nothing else.
Every byte exchanged between your phone and the 90ph platform — login credentials, GCash transaction data, personal information — travels through 256-bit SSL encryption. The same standard used by BPI, BDO, and Metrobank for their online banking services.
90ph processes all personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), supervised by the National Privacy Commission of the Philippines. Your rights as a data subject under Philippine law are fully recognised and enforceable.
90ph has appointed a Data Privacy Officer responsible for ensuring compliance with this Policy and the Data Privacy Act. You can contact the DPO directly via [email protected] to exercise your data subject rights or raise any privacy concern at any time.
We do not hold your data indefinitely. Each category of personal data has a defined retention period aligned with legal requirements. When data is no longer needed, it is securely deleted or anonymised — not archived indefinitely on the off-chance it might be useful.
Access, rectify, erase, object to, or block processing of your personal data — all via a single support contact. 90ph responds to all rights requests within 30 calendar days. No bureaucratic runaround, no unexplained delays, no ignoring requests.
Now that you know exactly how 90ph handles your privacy, play with confidence. GCash deposits in under 60 seconds, 500+ certified games, and 24/7 Filipino support — all built on a platform that takes your data protection as seriously as your security. 21+ only.