27phfun
Privacy Policy

This Privacy Policy ("Policy") is issued by 27phfun and applies to all personal data collected, processed, stored, or shared in connection with the 27phfun online gaming platform accessible at 27phfun.club ("Platform"). It governs the data of all registered Members, visitors, and any individual who interacts with the Platform in any capacity.

27phfun is committed to protecting the personal information of its Members in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. Where the processing of Member data involves parties in other jurisdictions, 27phfun ensures that equivalent data protection standards are applied.

This Policy should be read in conjunction with the 27phfun Terms & Conditions, which govern the overall use of the Platform. Terms not defined in this Policy carry the meanings assigned in the Terms & Conditions.

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal information is the entity operating the 27phfun platform. As data controller, 27phfun determines the purposes and means by which your personal data is processed.

27phfun has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. The DPO may be contacted via the support channels listed in Section 15 of this Policy. All data-related requests, complaints, and queries directed to 27phfun will be routed to the DPO for review and response.

27phfun collects personal data that is necessary, proportionate, and relevant to the purposes for which it is processed. The categories of personal data we collect are described in the table below:

27phfun collects personal data through the following channels and mechanisms:

• Direct provision by you — when you complete the 27phfun registration form, submit KYC documents, contact our support team, or update your account settings.
• Automated technical collection — through cookies, server logs, session analytics, and device fingerprinting technologies when you access the Platform. See Section 7 for cookie details.
• Payment processor integration — when you initiate a deposit or withdrawal, our payment partners (GCash, Maya, banks) transmit transaction reference data necessary to process and verify the transaction.
• Third-party identity verification services — when KYC verification is conducted, identity verification providers may return verification outcomes and document status information to 27phfun.
• Game provider activity data — our licensed game providers transmit bet, win/loss, and session data to 27phfun's systems as part of the game integration, enabling account balance management and gameplay history.

27phfun processes your personal data on one or more of the following lawful bases as recognised under Republic Act 10173: (a) performance of a contract to which you are a party; (b) compliance with a legal obligation; (c) legitimate interest pursued by 27phfun; or (d) your explicit consent. The table below outlines the primary processing purposes and their corresponding lawful basis:

• Account creation and management — necessary for performance of the 27phfun membership contract.
• Processing deposits and withdrawals — necessary for performance of the contract; legal obligation (anti-money laundering compliance).
• Identity and age verification (KYC) — legal obligation under applicable gaming and financial regulations; protection of minors.
• Fraud detection and prevention — legitimate interest in maintaining a secure platform; legal obligation where applicable.
• Customer support — performance of contract; legitimate interest in providing service quality.
• Responsible gaming monitoring — legitimate interest in protecting player welfare; legal obligation under PAGCOR-aligned standards.
• Platform security and integrity — legitimate interest in protecting Members and 27phfun systems.
• Marketing and promotional communications — your explicit consent (opt-in), which may be withdrawn at any time.
• Analytics and platform improvement — legitimate interest in improving service quality, using anonymised or aggregated data where possible.

27phfun does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share personal data with the following categories of recipients where necessary and lawful:

• Licensed game providers (e.g., Pragmatic Play, JILI, Evolution Gaming) — who receive account and session data necessary to operate the games you play. These providers are contractually bound by data processing agreements.
• Payment processors and e-wallet operators (GCash, Maya, BPI, BDO, UnionBank, Metrobank, Coins.ph) — who receive payment reference data required to process your transactions. Payment providers operate under their own privacy policies.
• Identity verification providers — third-party KYC platforms that assist in verifying your identity and age before withdrawal processing.
• IT infrastructure and security providers — cloud hosting, content delivery, and fraud monitoring services that process data solely as processors under 27phfun's instruction and subject to binding data protection agreements.
• Regulatory authorities and law enforcement — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies in the Philippines, where disclosure is required by law or court order.
• Professional advisors — including lawyers, auditors, and compliance consultants, subject to applicable professional confidentiality obligations.

When 27phfun engages third-party processors, we ensure that appropriate data processing agreements are in place, requiring those parties to maintain the confidentiality and security of your personal data and to process it only on 27phfun's documented instructions.

27phfun uses cookies and similar tracking technologies on the Platform to ensure functionality, improve user experience, and support analytics and security operations. A cookie is a small text file stored on your device by your browser when you visit a website.

The following categories of cookies are used by 27phfun:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that maintain your login state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences such as display language, game lobby layout, and responsible gaming settings. Disabling these may affect personalisation features.
• Analytics Cookies: Collect anonymised information about how Members use the Platform — pages visited, session duration, and navigation paths — to help 27phfun improve the user experience. Analytics data is aggregated and does not identify individual Members.
• Security and Fraud Detection Cookies: Used to detect unusual access patterns, multiple-account creation attempts, and other indicators of fraudulent activity. These cookies are necessary for platform integrity.

27phfun does not use advertising or behavioural targeting cookies that track your activity across third-party websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent you from accessing certain Platform features, including the login function.

27phfun implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, alteration, and destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the 27phfun Platform is encrypted using 256-bit SSL/TLS encryption, protecting your login credentials, payment information, and personal data in transit.
• Password Security: Member passwords are stored using a one-way cryptographic hashing algorithm. 27phfun staff cannot retrieve or view your plaintext password under any circumstances.
• Two-Factor Authentication (2FA): OTP-based two-factor authentication is available to all Members and is strongly recommended for account security. 2FA adds a second layer of protection beyond your password.
• Access Controls: Access to personal data within 27phfun's internal systems is restricted on a need-to-know basis, with role-based access controls and audit logging applied to all staff interactions with Member data.
• Regular Security Audits: 27phfun conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in platform infrastructure and data handling processes.
• Incident Response: In the event of a personal data breach that is likely to result in harm to Members, 27phfun will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected Members without undue delay, in accordance with NPC regulations.

27phfun retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, as required by law, or as needed to resolve disputes and enforce agreements. The following general retention periods apply:

• Active account data — retained for the duration of your active membership on the 27phfun Platform.
• Financial transaction records — retained for a minimum of 5 years from the date of the transaction, in compliance with Anti-Money Laundering Act (AMLA) obligations and applicable tax regulations in the Philippines.
• KYC identity verification documents — retained for a minimum of 5 years from account closure or the date of the last transaction, whichever is later.
• Customer support communications — retained for up to 3 years from the date of the communication, unless the subject matter relates to an ongoing legal or regulatory matter.
• Technical and security logs — retained for up to 12 months from the date of generation, subject to regulatory requirements.
• Marketing consent records — retained for the duration of your membership and for a period of 3 years after you opt out of marketing, as evidence of consent management.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to any individual. Anonymised or aggregated data may be retained indefinitely for analytical purposes.

Under the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by 27phfun. These rights may be exercised by contacting 27phfun via the channels described in Section 15.

With your consent, 27phfun may send you promotional communications about bonuses, new games, special events, VIP rewards, and platform updates via SMS, email, or in-platform notifications. Your consent for marketing is collected during the registration process and recorded as a preference in your account profile.

You may opt out of marketing communications at any time using any of the following methods:

• Updating your communication preferences in Account Settings → Notifications.
• Following the unsubscribe link included in any 27phfun marketing email.
• Replying "STOP" to any 27phfun SMS marketing message from your registered mobile number.
• Contacting 27phfun support via live chat and requesting removal from marketing lists.

Opting out of marketing communications does not affect transactional communications, which include account verification messages, OTP codes, deposit confirmations, withdrawal notifications, and other communications necessary for the operation of your account. These operational messages cannot be opted out of while your account remains active.

The 27phfun Platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. 27phfun does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted during the registration process and, where required, at the withdrawal stage as part of KYC review. Where 27phfun becomes aware — or has reasonable grounds to believe — that personal data has been collected from an individual who was under 21 years of age at the time of registration, the relevant account will be immediately suspended, the data reviewed, and the account closed in accordance with the Terms & Conditions.

Some of the third parties with whom 27phfun shares personal data — including game providers and technology infrastructure partners — may be located outside the Philippines. Where personal data is transferred to recipients in other countries, 27phfun ensures that appropriate safeguards are in place to protect your data in accordance with Republic Act 10173 and the standards set by the National Privacy Commission.

Such safeguards include, but are not limited to: standard contractual data processing clauses incorporated into agreements with overseas processors; requirements that overseas recipients implement security measures equivalent to those applied by 27phfun; and verification that the receiving jurisdiction provides an adequate level of data protection.

By using the 27phfun Platform, you acknowledge that your personal data may be processed in countries outside the Philippines in accordance with this Policy and subject to the safeguards described above.

27phfun reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Effective Date" at the top of this Policy will be updated each time a revision is made.

Where changes are material — meaning they significantly affect your rights or the way your data is processed — 27phfun will notify active Members via in-platform notification or to the registered email address on file, providing a minimum of 7 days' advance notice before the updated Policy takes effect.

We encourage you to review this Policy periodically. Your continued use of the 27phfun Platform following the effective date of any amended Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you should discontinue use of the Platform and contact 27phfun to request account closure.

For any queries, requests, or concerns relating to this Privacy Policy or the processing of your personal data by 27phfun, please contact our Data Protection Officer through the following channels:

We aim to acknowledge all data-related requests within 5 business days and to provide a substantive resolution within 15 business days. For complex requests, we will notify you of any required extension and the expected timeframe for resolution.

If you are not satisfied with 27phfun's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about the NPC and its complaint processes is available via the NPC's official government website.

This Privacy Policy was last revised and became effective on 1 January 2026. The English-language version of this Policy is authoritative and shall govern in the event of any inconsistency with any translated version.