27phfun Privacy Policy

This Privacy Policy ("Policy") describes how 27phfun ("we," "us," "our," or "the Platform") collects, uses, stores, discloses, and protects the personal information of users ("you," "your," or "Player") who access or use the 27phfun website at https://27phfun.app and all associated services, games, and features (collectively, the "Services").

27phfun is committed to protecting the privacy and personal data of all players, particularly those based in the Republic of the Philippines. This Policy is drafted in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected through the 27phfun website, mobile-optimized platform, customer support channels, and any other touchpoint through which you interact with 27phfun. It does not apply to third-party websites or services that may be referenced on our platform, each of which operates under its own privacy policy.

27phfun collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the Services, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect include:

We do not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless specifically required for responsible gaming assessments or as mandated by applicable Philippine law.

27phfun uses the personal data we collect for the following specific purposes, each of which is tied to a lawful basis described in Section 4:

• Account Management: To create, verify, and maintain your 27phfun player account, including processing your registration, authenticating your identity at login, and managing your account settings and preferences.
• Service Delivery: To provide you with access to all 27phfun games, features, and services, including processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• KYC & Fraud Prevention: To verify your identity and age (21+) in compliance with Philippine gaming regulations, and to detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activities.
• Legal Compliance: To comply with our obligations under Philippine law, including the Data Privacy Act of 2012, the Anti-Money Laundering Act, and any directives issued by PAGCOR or other relevant regulatory bodies.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our support channels.
• Responsible Gaming: To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion in accordance with our Responsible Gaming policy.
• Platform Improvement: To analyze usage patterns, conduct internal research, and improve the performance, security, and user experience of the 27phfun platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your explicit consent to receive such communications. You may opt out at any time.

Under the Data Privacy Act of 2012 of the Philippines, 27phfun processes your personal data on the following lawful bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and 27phfun — specifically, to operate your player account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including anti-money laundering requirements, age verification obligations, and PAGCOR regulatory directives.
• Legitimate Interests: Processing is necessary for 27phfun's legitimate business interests, including fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

27phfun does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: We share necessary financial data with payment service providers (such as GCash, PayMaya, and partner banks including BPI, BDO, and Metrobank) to process your deposits and withdrawals securely.
• Identity Verification Providers: We engage third-party KYC and identity verification services to confirm your identity and age as required by Philippine gaming regulations.
• Game Software Providers: Our platform integrates games from licensed third-party software providers. These providers may receive limited technical data (such as session tokens) necessary to deliver their games. They do not receive your full personal profile.
• Regulatory Authorities: We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine authorities where required by law or regulatory directive.
• IT & Security Service Providers: We engage trusted technology partners for hosting, cybersecurity, and platform maintenance. These partners process data only on our instructions and are bound by strict confidentiality obligations.
• Professional Advisers: We may share data with lawyers, auditors, and other professional advisers where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

27phfun uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the platform. A cookie is a small text file placed on your device when you visit our website. Cookies help us recognize you on return visits, maintain your session, and understand how you use the platform.

We use the following categories of cookies on the 27phfun platform:

• Strictly Necessary Cookies: These are essential for the platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymized information about how players use 27phfun — such as which pages are visited most frequently and whether error messages are received. This data helps us improve the platform experience.
• Functional Cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalized experience on 27phfun.
• Marketing Cookies: With your consent, we may use cookies to deliver relevant promotional content about 27phfun offers and games. You can withdraw consent for marketing cookies at any time through your browser settings.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 27phfun platform. For more information on managing cookies, refer to your browser's help documentation.

27phfun retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your active account relationship with 27phfun, plus a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of the Philippines.
• KYC Documents: Identity verification documents are retained for the duration of your account plus five (5) years following closure, or longer if required by a regulatory investigation or legal proceeding.
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction, to enable us to resolve any follow-up queries or disputes.
• Technical & Usage Data: Server logs and usage analytics data are retained for up to twelve (12) months, after which they are anonymized or deleted.

When personal data is no longer required, 27phfun will securely delete or anonymize it in accordance with our internal data disposal procedures. Where deletion is not immediately possible (e.g., data stored in backup archives), the data will be isolated and protected from further processing until deletion is feasible.

27phfun implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and 27phfun servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in our systems (such as passwords and financial details) is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data within 27phfun is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Firewalls & Intrusion Detection: Our platform is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems to guard against external threats.
• Regular Security Audits: 27phfun conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in our systems.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 27phfun will notify the National Privacy Commission and affected players in accordance with the timelines prescribed by the Data Privacy Act of 2012 and NPC regulations.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by 27phfun:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that 27phfun holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update basic account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under Philippine law.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests, on grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: If you believe that 27phfun has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact the 27phfun Data Privacy Officer using the contact details provided in Section 12. We will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

The 27phfun platform is strictly intended for adults aged 21 years and above, in compliance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data from our systems, close the associated account, and — where appropriate — report the matter to the relevant authorities. Any winnings or balances associated with an underage account will be forfeited.

27phfun reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players by posting a prominent notice on the 27phfun platform and updating the "Last Updated" date at the top of this document.

For significant changes that materially affect how we process your personal data, we may also send a notification to the email address registered to your account. Your continued use of the 27phfun platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how 27phfun protects your personal data. If you have any questions about changes to this Policy, please contact our Data Privacy Officer using the details in Section 12.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 27phfun, please contact our designated Data Privacy Officer (DPO):

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 and ensuring compliance with its provisions.

Please note that email addresses listed above are for privacy-related inquiries only and must be displayed as plain text for reference. They are not clickable links. For general gaming support, please use the live chat feature available on the 27phfun platform.