ph686 Privacy Policy

1.1 ph686 ("ph686," "we," "us," "our") is committed to protecting the privacy and personal data of all players, visitors, and users of the ph686 online gaming platform (the "Platform"). This Privacy Policy describes how we collect, use, store, share, and protect your personal information in connection with your use of the Platform.

1.2 This Privacy Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, this Policy also reflects internationally recognized data protection principles.

1.3 This Policy should be read together with the ph686 Terms & Conditions. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

1.4 We may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of this page. We encourage you to review this Policy periodically to stay informed about how ph686 handles your personal data.

2.1 For the purposes of the Philippine Data Privacy Act of 2012, ph686 is the Personal Information Controller in respect of the personal data collected through the Platform. This means ph686 determines the purposes and means of processing your personal data.

2.2 ph686 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data privacy laws. Contact details for the DPO are provided in Section 14 of this Policy.

2.3 Where ph686 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors and are bound by data processing agreements that restrict their use of your data to the specific purposes authorized by ph686.

3.1 ph686 collects personal data in the following categories:

3.2 ph686 does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for legal compliance purposes, such as collecting information about a player's self-exclusion status for responsible gaming purposes. Where sensitive personal information is collected, ph686 will obtain your explicit consent and apply heightened security measures.

3.3 You are not required to provide all personal data requested; however, failure to provide certain mandatory data (such as identity verification documents) may prevent ph686 from opening or maintaining your account or processing withdrawal requests.

4.1 ph686 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your ph686 player account, including verifying your identity and age (21+) as required by PAGCOR regulations;
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver the core functionality of the ph686 Platform;
• Payment processing: To facilitate transactions via GCash, PayMaya, bank transfer, and other approved Philippine payment methods;
• Legal compliance: To comply with obligations under the Data Privacy Act, Anti-Money Laundering Act (AMLA), PAGCOR regulations, and other applicable Philippine laws, including filing reports with the Anti-Money Laundering Council (AMLC) where required;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform;
• Responsible gaming: To monitor gaming behavior, enforce responsible gaming tools (deposit limits, self-exclusion), and identify players who may be at risk of problem gambling;
• Customer support: To respond to your inquiries, complaints, and support requests;
• Marketing communications: To send you promotional offers, bonuses, and updates about ph686 — but only where you have opted in to receive such communications. You may opt out at any time;
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the ph686 Platform.

4.2 ph686 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

5.1 ph686 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform the contract between you and ph686 (i.e., the Terms & Conditions), including account management, game access, and payment processing;
• Legal obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA reporting obligations, and tax requirements;
• Legitimate interests: Processing is necessary for ph686's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your data protection rights;
• Consent: For marketing communications and certain non-essential data processing activities, ph686 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6.1 ph686 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank, and others) to facilitate deposits and withdrawals;
• Identity verification providers: Third-party KYC (Know Your Customer) service providers engaged to verify your identity and age;
• Game software providers: Licensed game studios and live dealer platform providers whose games are available on ph686, to the extent necessary to deliver game services;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory directive;
• Law enforcement: Philippine law enforcement agencies, where ph686 is legally required or permitted to disclose information in connection with the investigation or prosecution of criminal activity;
• Professional advisers: Lawyers, auditors, and accountants engaged by ph686, subject to professional confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ph686's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.2 All third-party processors engaged by ph686 are required to process your personal data only in accordance with ph686's instructions and applicable data privacy law, and to implement appropriate technical and organizational security measures.

7.1 ph686 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the ph686 website.

7.2 ph686 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your ph686 account. These cannot be disabled without breaking core Platform functionality;
• Performance cookies: Used to collect anonymized data about how players use the Platform (e.g., which pages are visited most frequently, error reports). This data helps ph686 improve Platform performance;
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits you have set;
• Analytics cookies: Used by ph686's internal analytics tools to understand aggregate usage patterns. ph686 does not use third-party advertising cookies.

7.3 You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of the ph686 Platform, including your ability to stay logged in or access certain features.

8.1 ph686 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years from the date of account closure, as required under PAGCOR regulations and the Anti-Money Laundering Act;
• Identity verification documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by law;
• Customer support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution;
• Marketing preferences and consent records: Retained for the duration of your account and for three (3) years after account closure;
• Technical and usage logs: Retained for twelve (12) months on a rolling basis, unless required for longer periods for security or legal purposes.

8.2 When personal data is no longer required and no legal obligation mandates its retention, ph686 will securely delete or anonymize the data in accordance with industry-standard data destruction practices.

9.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph686:

• Right to be informed: The right to be informed of how your personal data is being collected and processed — which this Privacy Policy fulfills;
• Right of access: The right to request a copy of the personal data ph686 holds about you, along with information about how it is being processed;
• Right to correction: The right to request correction of any inaccurate, incomplete, or outdated personal data ph686 holds about you;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph686's legal retention obligations;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph686 has violated your data privacy rights.

9.2 To exercise any of the above rights, please contact ph686's Data Protection Officer using the contact details in Section 14. ph686 will respond to all verified data subject requests within fifteen (15) business days of receipt, as required under NPC regulations. Complex requests may require additional time, and ph686 will notify you of any extension.

10.1 ph686 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph686 Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls ensuring that ph686 staff can only access personal data necessary for their specific job functions;
• Regular security audits, vulnerability assessments, and penetration testing of the Platform;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Secure data centers with physical access controls, environmental monitoring, and redundant infrastructure;
• Staff training on data privacy obligations and security best practices.

10.2 While ph686 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. ph686 cannot guarantee absolute security but commits to promptly investigating and responding to any suspected data breach.

10.3 You also play an important role in keeping your data secure. Please use a strong, unique password for your ph686 account, enable any available two-factor authentication, and never share your login credentials with anyone. ph686 will never ask for your password.

11.1 The ph686 Platform is strictly intended for individuals aged 21 years and above, in compliance with PAGCOR regulations governing online gambling in the Philippines. ph686 does not knowingly collect personal data from individuals under the age of 21.

11.2 If ph686 becomes aware that personal data has been collected from a person under 21 years of age, ph686 will immediately close the associated account, delete the personal data, and — where applicable — report the matter to the relevant Philippine authorities.

11.3 Parents and guardians are encouraged to use parental control software and to monitor their children's online activity to prevent access to online gambling platforms. If you believe a minor has registered on ph686, please contact ph686 support immediately.

12.1 In some cases, ph686 may transfer your personal data to recipients located outside the Philippines — for example, where ph686 uses internationally hosted cloud infrastructure or engages game software providers based in other jurisdictions.

12.2 Where personal data is transferred outside the Philippines, ph686 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. Such safeguards may include:

• Contractual clauses approved by the National Privacy Commission;
• Transfers to countries recognized by the NPC as providing an adequate level of data protection;
• Binding corporate rules or equivalent data transfer mechanisms.

12.3 You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting ph686's Data Protection Officer.

13.1 ph686 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

13.2 Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how ph686 processes your personal data — ph686 will notify registered players via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

13.3 Your continued use of the ph686 Platform after any changes to this Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with any changes, you may close your account in accordance with the Terms & Conditions.

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or ph686's handling of your personal data, please contact ph686's Data Protection Officer:

14.2 If you are not satisfied with ph686's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

14.3 For general customer support inquiries unrelated to data privacy, please contact ph686 support at [email protected] or via live chat on the Platform.