Last Updated: January 1, 2026 · Governed by: Republic Act No. 10173 — Philippine Data Privacy Act of 2012
This Privacy Policy explains how 18ph collects, uses, stores, and protects the personal information of players and visitors on the 18ph.asia platform. 18ph is committed to transparency in data handling and to full compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and the regulations of the National Privacy Commission (NPC).
All personal data collected and processed by 18ph complies with the Philippine Data Privacy Act of 2012 and the implementing rules and regulations of the National Privacy Commission.
Every piece of personal data transmitted between your device and 18ph servers is protected by 256-bit SSL encryption — the same standard used by major Philippine banking institutions.
18ph does not sell, rent, or commercially transfer your personal data to any third party. Data sharing is limited to what is strictly necessary for platform operations, payment processing, and legal compliance.
Under RA 10173, you have the right to access, correct, object to, and erase your personal data held by 18ph. These rights are exercisable at any time through the 18ph support channels.
18ph stores personal data on secured servers with access controls, encryption at rest, and regular security audits. Only authorized personnel with a legitimate business need may access player data.
Government IDs and identity documents submitted for KYC verification are processed solely for age verification and anti-money laundering compliance — never for marketing or shared without legal basis.
This Privacy Policy applies to all personal data collected by 18ph through the 18ph.asia website and all services provided thereon. 18ph operates this platform for Filipino players and processes personal data in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations, as enforced by the Philippine National Privacy Commission (NPC). By registering or using 18ph, you consent to the collection and processing of your personal data as described in this Policy.
18ph ("we," "us," "our," or "the Platform") is an online gaming platform serving Filipino players at 18ph.asia. We recognize that your personal information is valuable and that you have the right to know how it is handled. This Privacy Policy ("Policy") describes the types of personal data 18ph collects, the purposes for which that data is processed, the parties with whom it may be shared, the security measures protecting it, and the rights you hold as a data subject under Philippine law.
This Policy applies to all users of the 18ph platform — including registered account holders, visitors browsing 18ph.asia without an account, and any person who contacts 18ph through our support channels. It covers all personal data collected through the website, in-game activity tracking, payment processing interactions, and any correspondence you initiate with the 18ph team.
This Policy should be read in conjunction with the 18ph Terms and Conditions, which governs the overall relationship between you and 18ph. In the event of any conflict between this Policy and the Terms and Conditions specifically regarding data processing matters, this Privacy Policy shall prevail.
For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), the data controller responsible for your personal information collected through 18ph.asia is the operator of the 18ph platform. As data controller, 18ph determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is lawful, fair, and transparent.
18ph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. Contact details for the 18ph DPO are provided in Section 15 of this Policy. The DPO serves as the primary point of contact for all privacy-related inquiries, data subject rights requests, and regulatory matters involving the National Privacy Commission.
18ph collects and processes the following categories of personal data, depending on the nature of your interaction with the platform:
Under RA 10173, government-issued ID numbers and certain financial data are classified as sensitive personal information. 18ph handles all such data with heightened security measures, processes it only for the specific purposes disclosed in this Policy, and limits access to personnel with a verified legitimate business need. 18ph does not process sensitive personal information for direct marketing purposes without your separate, explicit consent.
18ph collects personal data through the following means:
18ph processes your personal data for the following specific, legitimate purposes:
| Purpose | Description |
|---|---|
| Account Registration & Management | To create, maintain, and administer your 18ph account, including login authentication, account security, and communication of account-related notices. |
| Age and Identity Verification | To verify that you meet the 21-year minimum age requirement mandated by PAGCOR regulations and to confirm your identity for KYC compliance purposes. |
| Payment Processing | To process deposits to and withdrawals from your 18ph account via GCash, PayMaya, Philippine banks, and card payment providers. |
| Game Services Delivery | To deliver the gaming services you have contracted for, including game session management, outcome recording, and wagering history maintenance. |
| Regulatory Compliance (AMLA / PAGCOR) | To comply with the Philippine Anti-Money Laundering Act, PAGCOR licensing requirements, and other applicable Philippine regulations requiring transaction monitoring and reporting. |
| Fraud Prevention and Security | To detect, investigate, and prevent fraudulent transactions, unauthorized account access, bonus abuse, and other prohibited conduct. |
| Responsible Gaming | To monitor gaming activity for indicators of problem gambling behavior and to administer self-exclusion, deposit limit, and cooling-off requests in accordance with 18ph's responsible gaming obligations. |
| Customer Support | To respond to your inquiries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes. |
| Marketing Communications | To send you promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications. You may withdraw consent at any time. |
| Platform Improvement | To analyze aggregated, anonymized usage data to improve the 18ph platform, optimize game performance, and enhance the user experience for Filipino players. |
18ph processes personal data on one or more of the following legal bases recognized under the Philippine Data Privacy Act of 2012:
18ph does not sell, rent, or commercially license your personal data to any third party under any circumstances. Data sharing is strictly limited to what is necessary to operate the platform, fulfill legal obligations, and protect the rights and safety of 18ph and its players.
18ph may share your personal data with the following categories of third parties, subject to appropriate contractual data protection obligations:
All third parties with whom 18ph shares personal data are required by contract to process that data in accordance with RA 10173 and to implement appropriate security measures commensurate with the sensitivity of the data shared.
Cookies are small text files placed on your device by a website when you visit it. 18ph uses cookies and similar technologies (including local storage and session tokens) to enable core platform functionality, maintain your login session, and gather anonymized analytics data about platform usage.
You may control non-essential cookies through your browser settings. Most major browsers — including Chrome, Firefox, Safari, and Edge — allow you to view, block, or delete cookies through the browser's privacy settings menu. Please note that blocking essential cookies will prevent you from logging into your 18ph account and accessing gaming services.
18ph retains personal data for as long as is necessary for the purposes described in this Policy, or as required by applicable Philippine law. The following retention guidelines apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 18ph's data disposal procedures. Anonymized data may be retained indefinitely for statistical and analytics purposes, as it no longer constitutes personal data under RA 10173.
18ph implements a comprehensive suite of technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:
256-bit SSL/TLS encryption in transit for all data between your device and 18ph servers. AES-256 encryption at rest for sensitive personal data stored in 18ph databases.
Role-based access control ensuring that 18ph personnel may only access personal data categories directly relevant to their specific job function. All access is logged and auditable.
Regular penetration testing and security assessments conducted by qualified security professionals to identify and remediate vulnerabilities in 18ph's data infrastructure.
A documented data breach response procedure requiring prompt notification to affected players and the National Privacy Commission within 72 hours of discovering a qualifying personal data breach.
While 18ph implements strong security measures, no online platform can guarantee absolute security. You are advised to protect your 18ph account credentials, enable Two-Factor Authentication, and notify 18ph immediately if you suspect unauthorized access to your account.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data 18ph holds about you. These rights may be exercised by contacting the 18ph Data Protection Officer using the details in Section 15.
The right to be informed of what data 18ph collects, the purposes of collection, and how your data is processed — fulfilled through this Privacy Policy.
The right to request a copy of all personal data 18ph holds about you, including the categories of data, processing purposes, and recipients of your data.
The right to request correction of inaccurate, incomplete, or outdated personal data held by 18ph. Corrections to account details may also be initiated through your account settings.
The right to request deletion of your personal data where it is no longer necessary for the purpose collected, subject to 18ph's legal retention obligations under AMLA and PAGCOR regulations.
The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time through your account preferences or by contacting support.
The right to file a complaint with the Philippine National Privacy Commission (NPC) if you believe 18ph has failed to comply with RA 10173 in its handling of your personal data.
18ph will respond to data subject rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. Where a request cannot be fulfilled within this period, 18ph will notify you with an estimated completion date and the reason for the delay. Identity verification will be required before processing any data subject rights request to protect your data from unauthorized access by third parties.
18ph does not knowingly collect personal data from any person under the age of 21 years. The 18ph platform is strictly for adult users aged 21 and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. Account registration requires mandatory age verification, and any account found to have been registered by a person under 21 will be immediately closed and all associated data deleted.
If you are a parent or guardian and believe that a minor in your household has accessed or registered on 18ph without your knowledge, please contact the 18ph support team immediately at [email protected]. Upon verification of your concern, 18ph will take prompt action to close the account, delete all associated personal data, and refund any deposits made, to the extent technically feasible.
Account holders are responsible for ensuring that their 18ph login credentials are not accessible to minors in their household. Enabling Two-Factor Authentication and using a strong, unique password that is not shared with family members is strongly recommended.
In the event that 18ph discovers a personal data breach that is likely to result in harm to affected data subjects, 18ph is committed to responding promptly and transparently in accordance with NPC Circular 16-03 and the requirements of the Data Privacy Act.
18ph will notify the National Privacy Commission within seventy-two (72) hours of confirming a qualifying personal data breach, as required by NPC regulations. Affected data subjects will be notified as soon as practicable following the NPC notification, unless law enforcement authorities indicate that notification would impede a criminal investigation.
Breach notifications to affected 18ph players will be delivered via SMS to the registered mobile number and/or email where available. The notification will describe: the nature of the breach; the categories and approximate number of data subjects affected; the likely consequences of the breach; and the measures taken or proposed to address it.
18ph maintains a documented incident response plan specifically covering personal data breaches, which is reviewed and tested on a regular basis by the 18ph security team and Data Protection Officer.
18ph reserves the right to amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC regulations, PAGCOR requirements, or 18ph's data processing practices. Material changes to this Policy — meaning changes that significantly affect your privacy rights or how 18ph processes your personal data — will be communicated to registered players via SMS notification to the registered mobile number at least fourteen (14) days before the changes take effect.
The most current version of this Policy, with the date of last revision prominently displayed, will always be accessible at 18ph.asia/privacy-policy. Your continued use of the 18ph platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and request account closure in accordance with the 18ph Terms and Conditions.
Non-material changes — such as typographical corrections, clarifications that do not alter the substance of 18ph's data processing practices, and formatting updates — may be made without prior notice, though the revision date at the top of this Policy will be updated to reflect any change.
For all privacy-related inquiries, data subject rights requests, complaints, or questions regarding this Privacy Policy, please contact the 18ph Data Protection Officer (DPO) using the following channels:
Data Protection Officer
18ph Platform — DPO Office
DPO Email
[email protected]
Live Chat
Available 24/7 at 18ph.asia — request DPO escalation
Response Timeline
Within 15 business days per NPC guidelines
If you are not satisfied with 18ph's response to your privacy concern or data subject rights request, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012 (RA 10173) in the Philippines.
This Privacy Policy was last reviewed and updated on January 1, 2026. 18ph recommends reviewing this Policy periodically for updates that may affect your privacy rights or how your personal data is handled on the platform.
18ph handles your personal data with the same care we put into building the platform — transparently, securely, and always in your interest as a Filipino player.