ph689 Privacy Policy

ph689 ("we," "us," "our," or "the Platform") operates the online gaming platform accessible at ph689.org. We understand that Filipino players entrust ph689 with sensitive personal and financial information, and we take that responsibility seriously. This Privacy Policy sets out in clear terms what data ph689 collects from users, why we collect it, how we use and protect it, and what rights you have over your own data under Philippine law.

This policy applies to all personal data collected through the ph689 website, account registration process, KYC verification system, payment processing channels, customer support interactions, and any promotional or tournament participation activities. It applies to all registered ph689 players, prospective players, and visitors who browse ph689.org without a registered account.

This Privacy Policy should be read alongside the ph689 Terms & Conditions, which govern the overall use of the ph689 platform. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions with respect to personal data handling, this Privacy Policy shall prevail.

ph689 collects only the personal data that is necessary to operate the platform, comply with legal and regulatory obligations, and deliver a secure and personalised gaming experience to Filipino players. The categories of personal data ph689 collects are set out below:

ph689 does not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) except where directly relevant to a responsible gaming intervention or legally required.

ph689 collects personal data through the following means:

• Direct collection: Data you provide when registering a ph689 account, completing the KYC verification process, submitting a deposit or withdrawal request, contacting ph689 support, or participating in a promotion or tournament.
• Automated technical collection: Data collected automatically when you access ph689.org, including your IP address, device information, browser type, session data, and cookies. This data is collected even if you do not have a registered ph689 account.
• Third-party payment providers: When you deposit or withdraw via GCash, Maya, BPI, BDO, Metrobank, or other supported payment channels, ph689 receives transaction confirmation data from those providers. ph689 does not receive or store your full payment account credentials.
• KYC service providers: ph689 may use third-party identity verification services to assist with document verification and age confirmation during the KYC process. These providers process your identity data solely for verification purposes under data processing agreements with ph689.

ph689 uses the personal data it collects exclusively for the following purposes:

• Account operation: Creating and managing your ph689 account, authenticating your identity on login, maintaining your account balance and transaction records, and delivering the ph689 gaming experience.
• KYC and age verification: Confirming that all ph689 players are aged 21 or above and that account holders are who they say they are, in compliance with PAGCOR-aligned responsible gaming requirements and Philippine anti-money laundering obligations.
• Payment processing: Processing deposits, crediting winnings, and executing withdrawal requests to your verified Philippine payment method (GCash, Maya, bank account, etc.).
• Responsible gaming: Monitoring account activity for signs of problem gambling behaviour, enforcing player-set deposit and loss limits, processing self-exclusion requests, and reaching out to players who may need support.
• Security and fraud prevention: Detecting and preventing unauthorised account access, duplicate accounts, bonus abuse, money laundering activity, and other prohibited conduct outlined in the ph689 Terms & Conditions.
• Customer support: Responding to your inquiries, resolving disputes, processing complaints, and providing account assistance through ph689's live chat and email support channels.
• Legal and regulatory compliance: Fulfilling ph689's obligations under Philippine law, including record-keeping, reporting to PAGCOR or other applicable regulatory authorities where required, and cooperating with lawful law enforcement requests.
• Platform improvement: Analysing aggregate, anonymised usage data to improve the ph689 platform's performance, game library, and user experience for Filipino players.
• Marketing communications (with consent): Sending promotional offers, tournament announcements, and bonus notifications to players who have opted in to receiving marketing communications from ph689. You may withdraw marketing consent at any time through your account settings.

Under the Philippines' Data Privacy Act of 2012 (RA 10173), ph689 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to create and operate your ph689 account, process payments, and deliver the gaming services you have requested — this is the primary legal basis for most ph689 data processing activities.
• Legal obligation: Processing required to comply with Philippine laws and regulations, including KYC requirements, anti-money laundering reporting, and age verification obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where ph689's legitimate business interests do not override your rights and freedoms.
• Consent: Processing for optional marketing communications and certain non-essential cookie and tracking activities, which you may withdraw at any time.

ph689 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. ph689 shares personal data with third parties only in the following limited circumstances:

• Payment service providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other approved Philippine payment channels receive the minimum data necessary to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC service providers who verify your identity documents for age and identity confirmation purposes. These providers are bound by data processing agreements and may not use your data for any purpose other than verification.
• Game software providers: Some game providers may receive anonymised session data for game performance purposes. No personally identifiable information is shared with game software providers beyond what is technically necessary for game delivery.
• Regulatory and law enforcement authorities: ph689 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine authorities where legally required or where ph689 has a good-faith belief that disclosure is required to comply with a lawful order or to protect the rights and safety of players or the public.
• Professional advisors: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations, where disclosure is necessary for legal advice or audit purposes.

Any third party receiving ph689 player data in the circumstances above is subject to contractual data protection obligations consistent with the requirements of RA 10173.

ph689 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable Philippine legal and regulatory retention requirements. The following general retention periods apply:

• Account data and KYC documents: Retained for the lifetime of the active account and for a minimum of five (5) years following account closure, as required by Philippine anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with Philippine financial record-keeping requirements.
• Responsible gaming records: Retained for the lifetime of the active account and for three (3) years following account closure, to support ongoing responsible gaming obligations and potential dispute resolution.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless the communication relates to a formal dispute or legal proceeding, in which case it is retained until the matter is fully resolved.
• Technical and session data: Generally retained for 12 months from collection, after which it is anonymised or deleted unless retention is required for fraud investigation or legal proceedings.

When personal data is no longer required for any lawful purpose, ph689 will securely delete or anonymise it.

ph689 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks involved. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and ph689 servers, including the login page, deposit/withdrawal forms, and all account management pages.
• Bcrypt password hashing — ph689 never stores account passwords in plain text. All passwords are hashed with salt rounds before storage so that even a database breach does not expose actual passwords.
• OTP two-factor authentication for new device logins, protecting your account from unauthorised access even if your password is compromised.
• Access controls limiting ph689 staff access to personal data on a strict need-to-know basis, with all access logged and audited.
• Regular security audits and penetration testing of the ph689 platform infrastructure.
• Data breach response procedures — in the event of a personal data breach that is likely to result in harm to affected players, ph689 will notify the National Privacy Commission (NPC) and the affected players within the timeframes required by RA 10173.

While ph689 takes all reasonable and technically appropriate steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own ph689 account credentials.

ph689 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve your experience. The categories of cookies ph689 uses are:

• Strictly necessary cookies: Required for the platform to function — these include your login session cookie and security tokens. These cannot be disabled without disabling access to your ph689 account.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming settings. Disabling these may affect your platform experience.
• Analytical cookies: Collect anonymised data about how players use ph689 to help us improve platform performance and identify technical issues. ph689 uses server-side analytics rather than third-party tracking scripts where possible.
• Marketing cookies (with consent): Used to deliver relevant promotional messages on the ph689 platform to players who have opted in to marketing communications. These are not shared with third-party advertising networks.

You can manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging in to your ph689 account. For all other cookie categories, you can opt out through your account settings or browser controls without affecting basic platform access.

As a data subject under the Philippines' Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to the personal data ph689 holds about you:

• Right to be informed: You have the right to be informed of how ph689 collects, uses, and shares your personal data — this Privacy Policy fulfils that obligation.
• Right of access: You have the right to request a copy of the personal data ph689 holds about you. Requests may be submitted to ph689 support via live chat or email.
• Right to rectification: You have the right to correct inaccurate or incomplete personal data held by ph689. Contact support to update your registered details.
• Right to erasure / "right to be forgotten": You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ph689's legal retention obligations (e.g., AML record-keeping requirements may override erasure requests).
• Right to object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to other processing activities where ph689 is relying on legitimate interests as its legal basis.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used format and to transmit it to another data controller where technically feasible.
• Right to lodge a complaint: If you believe ph689 has mishandled your personal data, you have the right to lodge a complaint with the Philippines' National Privacy Commission (NPC).

To exercise any of your data rights, contact the ph689 Data Protection Officer (DPO) at [email protected] with the subject line "Data Rights Request." ph689 will respond to all verified data rights requests within 30 calendar days.

ph689 is strictly an adults-only platform. Access is limited to individuals aged 21 years and above, consistent with Philippine gaming law and PAGCOR-aligned responsible gaming standards. ph689 does not knowingly collect or process personal data from individuals under the age of 21.

If ph689 discovers or is notified that personal data has been collected from an individual under 21, the associated account will be immediately closed, any winnings will be forfeited, deposits will be returned, and all personal data collected will be deleted from ph689 systems within 30 days, subject only to any statutory reporting obligations relating to the underage access incident itself.

If you believe a minor has registered on ph689 or that ph689 holds personal data relating to a minor, please contact ph689 support or the DPO immediately at [email protected].

ph689 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable Philippine law. When we make material changes to this policy, we will update the "Last Reviewed" date displayed in the page header and post the revised policy on this page.

For significant changes — particularly changes that expand how we use your personal data or change your rights — ph689 will provide additional notice by sending an alert to your registered mobile number or email address where technically feasible. In some cases, we may also require you to actively re-acknowledge the updated policy before continuing to use the ph689 platform.

We encourage you to review this Privacy Policy periodically. Your continued use of ph689 following the posting of any update constitutes your acknowledgment of the revised policy.

ph689 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippines' Data Privacy Act of 2012 and this Privacy Policy. If you have any questions about this policy, wish to exercise your data rights, or have a data privacy concern, contact the ph689 DPO through the following channels:

• Email: [email protected] — use subject line "Privacy / Data Rights" for priority routing to the DPO team.
• Live Chat: Available 24/7 within your logged-in ph689 account. For data rights requests that require DPO review, live chat agents will escalate to the DPO team and confirm receipt within 24 hours.

ph689 is committed to responding to all data privacy inquiries and rights requests within 30 calendar days of verified receipt. Where a request is complex or involves multiple data categories, ph689 may extend this period by up to an additional 30 days and will notify you of the extension before the initial 30-day deadline expires.

If you are not satisfied with ph689's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent government body responsible for enforcing RA 10173.