ph626 Privacy Policy

Introduction

ph626 (operating at ph626.club, hereinafter "ph626," "we," "us," or "our") is committed to safeguarding the personal data of all players and visitors who interact with the ph626 Platform. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with your use of the ph626 online gaming platform.

This Policy applies to all Filipino players and other users accessing ph626 from the Philippines, and is drafted in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC") of the Philippines.

By registering a ph626 account, depositing funds, or otherwise using the Platform, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. If you do not agree with any aspect of this Policy, please do not use the ph626 Platform.

Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, ph626 (ph626.club) is the Personal Information Controller ("PIC") in respect of the personal data collected and processed through the ph626 Platform.

ph626 operates as a PAGCOR-regulated online gaming platform serving Filipino players across the Philippines. As the PIC, ph626 determines the purposes and means of processing personal data collected from users of the Platform.

Where ph626 engages third-party service providers (such as payment processors, KYC verification providers, or game studios) to process personal data on its behalf, those parties act as Personal Information Processors ("PIP") under agreements that bind them to handle your data in a manner consistent with this Policy and applicable Philippine law.

Personal Data We Collect

ph626 collects the following categories of personal data from players and users of the Platform:

3.1 Registration and Identity Data

• Full legal name (as appearing on government-issued Philippine ID)
• Date of birth (for age verification — must be 21 years or older)
• Username chosen during registration
• Email address
• Philippine mobile number
• Password (stored in hashed, non-reversible format — ph626 cannot read your password)

3.2 KYC and Verification Documents

• Copies of government-issued Philippine identity documents (PhilSys, passport, driver's license, UMID, SSS ID, Voter's ID)
• Proof of address documents, where requested for enhanced due diligence
• Source of funds declarations, where required for large transactions
• Selfie or liveness verification images, where biometric KYC is required

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method identifiers
• GCash, Maya, bank account, or other payment method reference details (partial — ph626 does not store full payment account numbers)
• Wallet balance history and bonus credit records
• Cryptocurrency wallet addresses used for USDT TRC20 transactions

3.4 Gaming Activity Data

• Game sessions, wager amounts, win/loss records, and game history
• Sports betting selections, bet types, and outcomes
• Bonus uptake and wagering requirement progress
• Responsible gaming settings and self-exclusion records

3.5 Technical and Device Data

• IP address and approximate geolocation data
• Device type, operating system, and browser type
• Session duration, login timestamps, and access logs
• Cookie and tracking pixel data (see Section 10)

3.6 Communications Data

• Records of live chat support conversations
• Email correspondence with ph626 support or compliance teams
• Dispute and complaint records

How We Collect Personal Data

ph626 collects personal data through the following means:

• Direct submission: Information you provide during registration, KYC upload, payment processing, or when contacting support.
• Automated collection: Technical data collected automatically when you access or use the ph626 Platform, including via cookies, session logs, and server-side analytics.
• Third-party sources: Verification data received from KYC providers, fraud detection services, payment processors, and where legally permitted, from regulatory databases.
• Device and browser: Information your device or browser transmits when connecting to the ph626 Platform, including IP address, device fingerprint, and browser configuration.

Purposes of Processing Your Personal Data

ph626 processes your personal data for the following specific, legitimate purposes:

• Account creation and management: Registering, verifying, and maintaining your ph626 player account.
• Age and identity verification: Confirming that all players are 21 years of age or older, as required by PAGCOR regulations.
• KYC and AML compliance: Fulfilling Know Your Customer obligations and anti-money laundering requirements under the Philippine AMLA and PAGCOR licensing conditions.
• Payment processing: Facilitating deposits and withdrawals through GCash, Maya, bank transfers, and other supported payment methods.
• Platform operation and game provision: Delivering gaming services, maintaining game records, and ensuring fair play.
• Responsible gaming: Monitoring account activity for signs of problem gambling; implementing deposit limits, session controls, and self-exclusion tools.
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance.
• Fraud prevention and security: Detecting and preventing unauthorized account access, payment fraud, and Terms violations.
• Regulatory reporting: Providing mandatory disclosures to PAGCOR, AMLC, and other Philippine regulatory authorities as required by law.
• Marketing communications: Sending promotional offers and platform updates to players who have opted in to marketing communications (opt-out available at any time).
• Platform improvement: Analysing aggregated usage data to improve platform performance, game selection, and user experience.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ph626 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — account registration, payment processing, KYC, game delivery, and withdrawal facilitation.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine law. You cannot opt out of processing carried out on this basis.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and responsible gaming monitoring, where ph626's interests do not override your data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where your consent has been obtained. You may withdraw consent at any time by adjusting your account settings or contacting support.

Data Sharing and Third-Party Disclosure

ph626 does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers (Personal Information Processors)

ph626 engages trusted third-party processors to support platform operations, including payment processors (GCash, Maya, BPI, BDO, Metrobank), KYC and identity verification providers, fraud detection and risk management services, cloud infrastructure and hosting providers, and live chat support platforms. All such processors are bound by data processing agreements that require them to handle your data in accordance with the DPA and this Policy.

7.2 Regulatory and Law Enforcement Authorities

ph626 is required to disclose personal and transactional data to Philippine regulatory authorities including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission where required by law. ph626 may also disclose data to law enforcement agencies in response to lawful orders or subpoenas.

7.3 Game Providers

Game studios providing content to ph626 may receive limited session and account identifiers necessary to deliver and record game results. Game providers do not receive your full identity or payment data unless specifically required for their certified live dealer or progressive jackpot systems.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of ph626's business, your personal data may be transferred to the successor entity as part of that transaction, subject to the acquiring entity's commitment to honour the protections in this Policy.

Data Retention

ph626 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR licensing conditions and the Philippine AMLA.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AML record-keeping requirements.
• Game history and betting records: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support communications: Retained for three (3) years from the date of the last communication in a support thread.
• Marketing consent records: Retained for as long as the consent remains relevant and for three (3) years after withdrawal of consent, to demonstrate compliance.
• Access logs and technical data: Retained for ninety (90) days for security monitoring, and up to three (3) years for fraud investigation purposes where a specific incident has been flagged.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-approved disposal procedures.

Security Measures

ph626 implements technical and organisational security measures appropriate to the risks associated with processing player personal data, including:

• 256-bit SSL/TLS encryption for all data transmissions between your browser and the ph626 Platform
• Encrypted storage of sensitive personal and financial data at rest
• Hashed password storage using industry-standard one-way hashing algorithms — ph626 personnel cannot view your password
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Two-factor authentication available to all player accounts and mandatory for platform administrative access
• Regular security audits and penetration testing by independent security specialists
• Intrusion detection and monitoring systems on all platform infrastructure
• Data breach response procedures in accordance with NPC notification requirements

While ph626 applies rigorous security standards, no system can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and device. ph626 will never contact you to request your password.

Cookies and Tracking Technologies

ph626 uses cookies and similar tracking technologies on the ph626.club website. Cookies are small text files stored on your device that help the Platform function correctly, remember your preferences, and provide analytics data to improve the user experience.

10.1 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without preventing Platform access.
• Functional cookies: Remember your preferences such as language settings, saved login details (if you opt in), and UI customisations.
• Analytics cookies: Collect anonymised data about how players use the Platform to help ph626 improve navigation, game placement, and overall user experience. Data collected is aggregated and does not identify individual players.
• Marketing cookies: Used where you have consented to receive targeted promotional content from ph626. You may opt out via your account settings or by contacting support.

10.2 Managing Cookies

You may configure your browser settings to block or delete cookies. Note that disabling strictly necessary cookies will impair or prevent your ability to use the ph626 Platform. For analytics and marketing cookies, you may manage your preferences through your ph626 account settings.

Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph626:

• Right to be Informed: You have the right to know what personal data ph626 collects, how it is used, and with whom it is shared — as set out in this Policy.
• Right to Access: You may request a copy of the personal data ph626 holds about you, including your KYC records, transaction history, and account information.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data in your ph626 account.
• Right to Erasure or Blocking: You may request deletion or blocking of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations that may override this right.
• Right to Object: You may object to processing of your personal data where ph626 relies on legitimate interests as the legal basis, unless ph626 can demonstrate compelling grounds that override your interests.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Damages: You have the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal data.
• Right to File a Complaint: If you believe ph626 has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact ph626's Data Protection Officer via the contact details in Section 14. ph626 will respond to verified requests within fifteen (15) business days.

Children and Minors

The ph626 Platform is strictly prohibited for persons under the age of twenty-one (21) years, in accordance with PAGCOR regulations governing casino-style online gaming in the Philippines. ph626 does not knowingly collect personal data from anyone under 21 years of age.

Age verification is a mandatory step in the ph626 account registration and KYC process. Any account found to be held by a person under 21 will be immediately closed, all funds voided, and the matter reported to the relevant authorities where required by law.

If you believe that a minor has accessed or registered on the ph626 Platform, please notify ph626 support immediately so that appropriate action can be taken.

Updates to This Privacy Policy

ph626 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via email to their registered address and/or through a prominent notice on the ph626 Platform prior to the changes taking effect.

The current version of this Policy, along with its effective date, is always accessible on this page at ph626.club/privacy-policy. Your continued use of the ph626 Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

We encourage you to review this Policy periodically. If you have concerns about any update, please contact ph626 support before continuing to use the Platform.

Contact — Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights under the Philippine Data Privacy Act, please contact ph626 through the following channels:

• Live Chat: Available 24/7 via your ph626 account dashboard. The fastest way to reach our team in English or Filipino.
• Email (Data Protection): [email protected] — please include "Data Privacy Request" in the subject line.
• Response Time: ph626 aims to acknowledge data subject requests within three (3) business days and to substantively respond within fifteen (15) business days of identity verification.

ph626 serves Filipino players across the Philippines — from Manila, Quezon City, and Makati, to Cebu, Davao, Cagayan de Oro, and beyond. Our support team is available in both English and Filipino to assist with any privacy-related concern.

If you are not satisfied with ph626's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.