ph656 Privacy Policy

This Privacy Policy describes how ph656 ("ph656," "we," "us," or "our") collects, uses, stores, shares, and protects personal information in connection with your use of the ph656 online casino and sports betting platform accessible at ph656.org and its associated services (collectively, the "Platform").

This Policy applies to all individuals who register a ph656 account, access the Platform as a visitor, interact with ph656 customer support, or otherwise provide personal information to ph656 in any context. By registering a ph656 account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy is to be read in conjunction with the ph656 Terms & Conditions and Responsible Gaming Policy, each of which forms part of the overall agreement governing your use of the Platform.

For the purposes of the Philippine Data Privacy Act of 2012, ph656 is the personal information controller in respect of your personal data collected through the Platform. ph656 determines the purposes and means by which your personal information is processed.

ph656 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with data privacy obligations and handling data subject requests. Contact details for the ph656 DPO are provided in Section 14 of this Policy.

ph656 collects personal information through your account registration, use of Platform features, customer support interactions, payment processing, and KYC verification. The categories of personal data we collect are set out below:

Data You Provide Voluntarily: In addition to the above, you may voluntarily provide ph656 with information through feedback forms, survey responses, or support requests. Such data is used solely for the purpose for which it was provided.

Data We Do Not Collect: ph656 does not collect or store full payment card numbers, card CVV codes, or complete banking credentials. Payment processing is handled through regulated Philippine payment gateways and e-wallet providers using tokenization and direct integration — ph656 receives only the transaction confirmation and a reference identifier necessary for accounting purposes.

ph656 uses the personal data collected for the following specific purposes:

• Account Management: Creating, maintaining, and securing your ph656 account; verifying your identity on login; processing password resets and account recovery.
• KYC and Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity before processing withdrawals, as required by PAGCOR regulations and the Anti-Money Laundering Act (AMLA).
• Payment Processing: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, 7-Eleven, USDT TRC20, and Coins.ph; reconciling transaction records; investigating payment disputes.
• Platform Delivery: Providing access to ph656 games, live dealer tables, sports betting markets, crash games, bingo, and all other platform features included in your registered account.
• Responsible Gaming: Monitoring gaming activity to identify patterns consistent with problem gambling; implementing and managing deposit limits, loss limits, and self-exclusion requests; complying with player protection obligations under PAGCOR's responsible gaming framework.
• Legal and Regulatory Compliance: Meeting ph656's obligations under PAGCOR licensing conditions, the Philippine Data Privacy Act, the Anti-Money Laundering Act, and any other applicable Philippine law or regulatory direction.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraud, cheating, money laundering, and unauthorized account access; protecting the integrity of the ph656 platform.
• Customer Support: Responding to your inquiries, complaints, and support requests; maintaining records of support interactions for quality and training purposes.
• Promotions and Marketing: Sending promotional offers, bonus notifications, and personalized recommendations where you have provided consent or where a legitimate interest basis applies. You may withdraw marketing consent at any time through your account settings or by contacting support.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game selection, platform performance, user interface design, and customer experience. Aggregated analytics data does not identify individual players.

Under the Philippine Data Privacy Act of 2012, ph656 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing necessary to perform our obligations under the ph656 Terms & Conditions — including account management, game access, and payment processing — is required to deliver the service you have contracted for.
• Legal Obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, and regulatory reporting to PAGCOR — are mandatory legal obligations that ph656 must fulfill regardless of your consent.
• Legitimate Interests: ph656 processes certain data — including Technical Data for fraud prevention, security monitoring, and platform performance — on the basis of legitimate interests, where those interests are not overridden by your fundamental privacy rights.
• Consent: Where ph656 relies on your consent as the legal basis for processing — primarily for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

ph656 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data is shared only in the following limited circumstances:

• Payment Processors and E-Wallet Providers: Transaction data is shared with licensed Philippine payment gateways and e-wallet providers (GCash, Maya, BPI, BDO, Metrobank) strictly to facilitate deposits and withdrawals. These providers are subject to their own privacy obligations and do not receive data beyond what is necessary for the specific transaction.
• Game Content Providers: Game session data necessary for the delivery and integrity of specific games may be shared with certified game providers in accordance with their service agreements with ph656. Game providers do not receive your financial or identity data.
• KYC and Identity Verification Services: Identity documents and verification data may be processed by a licensed third-party KYC service provider to facilitate document authentication. Such providers operate under strict data processing agreements and are prohibited from using your data for any purpose beyond identity verification for ph656.
• Regulatory and Law Enforcement Authorities: ph656 is required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies where required by applicable Philippine law, court order, or regulatory direction. ph656 will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisers: ph656's legal advisers, auditors, and compliance consultants may access personal data on a strictly need-to-know basis in connection with their professional services to ph656, subject to professional confidentiality obligations.

All third parties with whom ph656 shares personal data are required to implement appropriate data security measures and to process your data only for the specified purpose and in accordance with applicable Philippine law.

ph656 uses cookies and similar tracking technologies on the Platform to support essential platform functionality, remember your preferences, and analyse aggregate usage patterns. The types of cookies ph656 uses are:

• Strictly Necessary Cookies: Required for core platform functions including authentication session management, login state, and security token validation. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings, game view preferences, and responsible gaming limit configurations — across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the ph656 Platform — which game categories are most visited, how long sessions last, and where users navigate from. This data helps ph656 improve the platform experience. Analytics data is not linked to your identity.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and session hijacking. These cookies are a component of the platform's security infrastructure and cannot be disabled.

You may configure your browser to refuse non-essential cookies. Note that disabling functional cookies may affect your experience on the ph656 Platform — saved preferences may not persist between sessions. ph656 does not use third-party advertising cookies or cross-site tracking technologies.

ph656 retains your personal data for as long as is necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. The following minimum retention periods apply:

• Account and KYC Data: Retained for a minimum of 5 years from the date of account closure, as required by PAGCOR online gaming regulations and the Anti-Money Laundering Act (AMLA) of the Philippines.
• Financial and Transaction Records: Retained for a minimum of 5 years from the date of the relevant transaction in compliance with AMLA and BSP (Bangko Sentral ng Pilipinas) record-keeping requirements applicable to payment services.
• Gaming Activity Records: Retained for a minimum of 3 years from the date of the session for regulatory reporting, dispute resolution, and responsible gaming purposes.
• Customer Support Communications: Retained for 2 years from the date of the last interaction for quality assurance, training, and dispute resolution purposes.
• Marketing Preference Records: Retained until you withdraw consent or close your account, plus a 12-month archive period for compliance audit purposes.

At the end of the applicable retention period, ph656 will securely delete or anonymise personal data that is no longer required. Data that has been fully anonymised — such that it can no longer be linked to an individual — may be retained indefinitely for aggregated statistical and analytics purposes.

ph656 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ph656 servers is encrypted using industry-standard 256-bit SSL/TLS — the same encryption standard used by Philippine banks and financial institutions.
• Access Controls: Access to personal data is restricted to ph656 staff and systems on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Secure Server Infrastructure: ph656 personal data is stored on secured, access-controlled servers with regular security patching, intrusion detection systems, and security event logging.
• Payment Tokenization: Payment credentials are never stored directly by ph656. GCash, Maya, and bank payment data is processed through tokenized payment gateways — ph656 retains only a non-reversible transaction reference.
• Security Monitoring: ph656 operates 24/7 security monitoring on platform infrastructure to detect unusual access patterns, potential data breaches, and unauthorized system activity.
• Two-Factor Verification: OTP-based two-factor verification is used for sensitive account actions including password resets, first withdrawals, and account detail changes.

In the event of a personal data breach that poses a risk to your rights and freedoms, ph656 will notify the National Privacy Commission (NPC) and affected data subjects in accordance with the notification requirements of the Philippine Data Privacy Act.

Under the Philippine Data Privacy Act of 2012 (Republic Act 10173), you have the following rights in respect of your personal data held by ph656:

To exercise any of these rights, please contact the ph656 Data Protection Officer using the contact details in Section 14. ph656 will respond to data subject requests within 30 calendar days of receipt. In complex or high-volume cases, this period may be extended by a further 30 days with notice to you.

Please note that certain rights — particularly erasure and portability — may be limited where ph656 has a legal obligation to retain your data under PAGCOR regulations, AMLA requirements, or other applicable Philippine law.

ph656 services are strictly for individuals aged 21 years and above, consistent with the minimum legal age for casino-style gambling in the Philippines. ph656 does not knowingly collect personal data from anyone under 21 years of age.

If ph656 discovers that personal data has been collected from an individual under 21 — whether through misrepresentation during registration or otherwise — ph656 will immediately suspend the associated account, delete all collected personal data to the extent not required for regulatory reporting purposes, and where appropriate, report the incident to relevant authorities.

If you believe that ph656 holds personal data about an individual under 21, please contact our Data Protection Officer immediately using the contact details provided in Section 14 of this Policy.

ph656 is primarily operated as a Philippine-market platform, and the majority of personal data processing occurs within the Philippines. However, certain third-party service providers engaged by ph656 — including game content providers and technology infrastructure partners — may be located outside the Philippines.

Where personal data is transferred outside the Philippines, ph656 ensures that such transfers are subject to appropriate safeguards consistent with the Philippine Data Privacy Act, including:

• Contractual provisions requiring the recipient to implement data protection standards equivalent to those required under Philippine law;
• Transfer only to jurisdictions that the National Privacy Commission has determined to provide adequate data protection;
• Prior assessment by ph656 of the recipient's data security practices and compliance capabilities.

Personal data is never transferred cross-border for marketing or commercial purposes without your explicit consent. Cross-border transfers occur only where operationally necessary for game delivery, payment processing, or platform security functions, and are strictly governed by data processing agreements.

ph656 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or platform features. Material changes to this Policy — particularly those affecting the basis on which personal data is processed or the rights available to you — will be communicated to registered Players by email to the registered address and/or by prominent notice on the ph656 Platform.

The date of the most recent update is displayed at the top of this Policy. Continued use of the ph656 Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. Where changes require your consent as a legal basis, ph656 will obtain that consent before the changes take effect.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ph656, please contact:

• Data Protection Officer (DPO): ph656 Data Protection Office
• Email: [email protected] (subject line: "Privacy / DPO Request") — plain text, not a clickable link
• Live Chat: Available 24/7 through your ph656 account dashboard after login
• Response Commitment: ph656 will acknowledge all privacy-related inquiries within 5 business days and provide a substantive response within 30 calendar days

If you are not satisfied with ph656's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent regulatory body responsible for enforcing RA 10173 and protecting the data privacy rights of Philippine citizens and residents.