Privacy Policy — ph656

1. Scope & Data Controller

This Privacy Policy applies to all personal information collected by or on behalf of ph656 through the ph656 website at https://ph656.app, any associated mobile applications, and any related services, features, or communications (collectively, the "Platform").

ph656 is the data controller responsible for your personal information processed in connection with your use of the Platform. References to "ph656", "we", "us", or "our" throughout this Policy refer to the ph656 operating entity and its authorised data processors.

This Policy is issued in compliance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). By registering an account or using the ph656 Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

2. Data We Collect

ph656 collects the following categories of personal information:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify you meet the 21+ age requirement)
• Philippine mobile number (used as your primary account identifier)
• Email address (optional, used for account communications)
• Residential address in the Philippines

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine National ID, passport, driver's licence, UMID, SSS/GSIS ID)
• Selfie photographs taken during the verification process
• Additional supporting documents requested during enhanced due diligence (EDD)

2.3 Financial & Transaction Data

• GCash or Maya wallet numbers linked to your ph656 account
• BPI, BDO, or Metrobank account details used for withdrawals
• Deposit and withdrawal transaction histories
• Bonus credit history and wagering records

2.4 Technical & Usage Data

• IP address and approximate geolocation at the time of login
• Device identifiers, operating system, and browser type
• Game session logs including bet amounts, game titles, outcomes, and session duration
• Platform navigation patterns and feature usage frequency

2.5 Communications Data

• Records of customer support interactions via live chat or email
• Preferences indicated for SMS, email, or in-app notifications

3. How We Collect Your Data

ph656 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit, contact support, or update your profile settings.
• Automatically — through cookies, session tokens, and server logs when you interact with the ph656 Platform on any device.
• From payment processors — GCash, Maya, BPI, BDO, and other payment partners may transmit transaction confirmation data to ph656 to facilitate deposit and withdrawal processing.
• From identity verification providers — ph656 works with authorised third-party KYC service providers to verify identity documents. These providers process your ID data solely for verification purposes under data processing agreements with ph656.
• From fraud prevention services — device fingerprinting and IP reputation data may be obtained from third-party fraud prevention systems integrated into the Platform.

4. Legal Basis for Processing

ph656 processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual necessity — processing required to create and manage your ph656 Account, process transactions, and deliver the gaming services you have requested.
• Legal obligation — processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) requirements, and NPC data protection obligations.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights.
• Consent — processing for optional marketing communications, where we have obtained your explicit opt-in consent. You may withdraw this consent at any time by contacting [email protected].

5. How We Use Your Data

ph656 uses the personal data it collects for the following purposes:

• Creating, verifying, and managing your ph656 Account and associated Wallet
• Processing deposits and withdrawals via GCash, Maya, BPI, BDO, USDT, Coins.ph, and other supported payment channels
• Verifying your identity and age (21+ requirement) in compliance with PAGCOR and AMLA regulations
• Detecting and preventing fraud, money laundering, match-fixing, and other prohibited conduct on the Platform
• Providing customer support and responding to your enquiries
• Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts) via SMS or in-app notification
• Monitoring game session data to identify problem gambling patterns and proactively offer responsible gaming tools
• Improving the Platform's features, game selection, and user experience based on aggregated usage analytics
• Sending promotional communications to players who have opted in to receive such messages

6. Data Sharing & Disclosure

ph656 does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors — GCash, Maya, and banking partners receive the minimum data necessary to execute deposit and withdrawal transactions.
• KYC and identity verification providers — authorised third-party verification services process your ID documents solely for the purpose of confirming your identity. These providers are contractually bound to ph656's data protection standards.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) may receive data as required by applicable Philippine law or regulatory directive.
• Fraud prevention and security partners — anonymised or pseudonymised device and session data may be shared with fraud detection systems to protect the Platform and its players.
• Law enforcement — ph656 will disclose personal data to Philippine law enforcement agencies when required by a valid court order, subpoena, or lawful government request.
• Business successors — in the event of a merger, acquisition, or sale of substantially all of ph656's assets, player data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Cookies & Tracking Technologies

7.1 Types of Cookies Used. ph656 uses the following categories of cookies on the Platform:

• Essential cookies — required for login session management, security token validation, and basic Platform functionality. These cannot be disabled without impairing your ability to use the Platform.
• Analytics cookies — used to collect aggregated, anonymised data about how players navigate and interact with the ph656 Platform, helping us identify usability improvements.
• Preference cookies — store your language, notification, and display preferences so you don't need to re-enter them on each visit.

7.2 Managing Cookies. You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your core ph656 gaming experience, though some preference-related features may not persist between sessions.

8. Data Retention

8.1 Active Accounts. ph656 retains your personal data for as long as your Account remains active and for a period thereafter as required by law or legitimate business necessity.

8.2 Closed Accounts. Upon closure of your ph656 Account, we retain transaction records, KYC documents, and account history for a minimum of five (5) years from the date of closure, in compliance with AMLA record-keeping requirements and PAGCOR audit obligations.

8.3 Marketing Data. If you withdraw your consent for marketing communications, your contact details will be removed from our active marketing lists within thirty (30) days, though they may be retained in suppression lists to prevent future unsolicited contact.

8.4 Deletion Requests. Where ph656 is not required by law to retain specific data, we will action verified data deletion requests within thirty (30) days of receipt. Please send deletion requests to [email protected].

9. Security Measures

ph656 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph656's servers
• AES-256 encryption for sensitive data fields (including KYC document stores) at rest
• Multi-factor authentication (MFA) for all ph656 staff accessing systems containing player data
• Role-based access controls (RBAC) ensuring staff access only the data necessary for their specific role
• Regular penetration testing by independent cybersecurity firms
• 24/7 security monitoring with automated anomaly detection and incident response protocols

Despite these measures, no internet-based system is entirely immune to security risks. ph656 will notify affected players and the NPC of any personal data breach in accordance with the Data Privacy Act's 72-hour notification requirement.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by ph656:

• Right to be informed — you have the right to know what personal data ph656 holds about you and how it is used.
• Right of access — you may request a copy of the personal data ph656 holds about you, subject to identity verification.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking — you may request deletion or blocking of your personal data where retention is no longer legally required.
• Right to object — you may object to processing of your personal data for direct marketing purposes at any time.
• Right to data portability — you may request your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint — you may file a complaint with the National Privacy Commission if you believe ph656 has violated your data privacy rights.

To exercise any of these rights, contact ph656's Data Protection Officer at [email protected] with the subject line "Data Privacy Request". We will respond within fifteen (15) business days.

11. Children's Privacy

The ph656 Platform is strictly intended for individuals who are 21 years of age or older. ph656 does not knowingly collect personal data from persons under 21. If ph656 becomes aware that personal data has been collected from an individual below the minimum age, that Account will be suspended immediately and all associated data will be deleted, subject to any regulatory retention obligations. If you believe a minor may have registered an Account, please notify us immediately at [email protected].

12. Cross-Border Data Transfers

ph656's primary data processing infrastructure is located within the Philippines. Where data is processed by third-party service providers located outside the Philippines (for example, cloud infrastructure or fraud prevention services), ph656 ensures that such transfers comply with the cross-border data transfer requirements of the Data Privacy Act and are governed by appropriate contractual safeguards, including data processing agreements and standard contractual clauses equivalent to NPC-approved mechanisms.

13. Changes to This Privacy Policy

ph656 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. Material changes will be communicated to registered players via SMS to their registered Philippine mobile number or via in-Platform notification at least seven (7) days before the changes take effect. The date of the most recent revision is always displayed at the top of this Policy. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

14. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data at ph656, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Privacy Request" or "Privacy Policy Query"
• Response Time: Within fifteen (15) business days for formal data subject requests
• Support Hours: 24/7 for general enquiries; business days for formal DPO correspondence

You also have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information about the NPC complaint process is available through official Philippine government channels.