ph689 Privacy Policy

This Privacy Policy ("Policy") is issued by ph689 ("ph689," "the Company," "we," "us," "our") and applies to all personal data collected through the ph689 platform at ph689.vip and any related subdomains, mobile interfaces, or associated services (collectively, the "Platform").

ph689 is committed to safeguarding the privacy of every Filipino player and visitor on the Platform. We process personal data lawfully, transparently, and only for the purposes described in this Policy. By registering a ph689 account or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read in conjunction with the ph689 Terms & Conditions, which govern your use of the Platform. Defined terms used but not defined herein have the meaning given to them in the Terms & Conditions.

1 Introduction & Data Controller

1.1 For the purposes of the Philippine Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations, ph689 is the Personal Information Controller in respect of personal data collected through the Platform.

1.2 ph689 operates under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR). Our data processing activities are subject to both the DPA and PAGCOR's applicable player data requirements.

1.3 ph689 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. The DPO may be contacted at the details set out in Section 13.

2 Personal Data We Collect

2.1 ph689 collects the following categories of personal data:

2.2 ph689 does not collect special categories of sensitive personal information (e.g., health data, biometric data) except where required for specific KYC or responsible gaming compliance purposes, in which case you will be separately informed.

3 How We Collect Your Data

3.1 Directly from you: When you register a ph689 account, complete KYC verification, make deposits or withdrawals, contact support, or interact with promotions and competitions on the Platform.

3.2 Automatically: When you use the Platform, ph689 automatically collects technical and gaming data through server logs, session tracking, and cookies. See Section 9 for details on cookies and tracking technologies.

3.3 From third parties: ph689 may receive identity and financial verification data from payment processors (GCash, Maya, BPI, BDO, Metrobank), KYC verification service providers, and PAGCOR where required for regulatory compliance.

4 Purposes & Legal Bases for Processing

4.1 ph689 processes your personal data for the following purposes and on the following legal bases under the DPA:

• Account registration and management — necessary for the performance of our contract with you as a registered player;
• Identity and age verification (KYC) — necessary for compliance with PAGCOR regulations and the DPA's legitimate regulatory processing basis; required to ensure the mandatory 21+ age restriction is enforced;
• Processing deposits and withdrawals — necessary for the performance of our contract and for compliance with anti-money laundering (AMLA) obligations;
• Providing gaming services — necessary for the performance of our contract;
• Fraud prevention and security — necessary for our legitimate interests in operating a secure licensed gaming platform;
• Regulatory compliance and reporting — necessary to comply with PAGCOR obligations, AMLA, and Philippine tax law;
• Customer support — necessary for the performance of our contract and our legitimate interest in resolving player issues;
• Responsible gaming monitoring — necessary for compliance with PAGCOR responsible gaming requirements and for the protection of players' vital interests;
• Marketing communications — based on your consent, where you have opted in to receive promotional communications from ph689. You may withdraw this consent at any time via your Account Settings.

5 Disclosure of Personal Data

5.1 ph689 may share your personal data with the following categories of recipients:

• Payment processors (GCash/GXI, Maya/Voyager, BPI, BDO, Metrobank, USDT custodians) — for the processing of deposits and withdrawals;
• KYC and identity verification providers — for identity and age verification purposes;
• Game software providers (e.g., JILI, PG Soft, Pragmatic Play) — limited technical data required to deliver game services;
• PAGCOR and Philippine regulatory authorities — as required by law, regulation, court order, or lawful authority request;
• Anti-money laundering authorities — as required under the Anti-Money Laundering Act (AMLA) of the Philippines;
• Professional advisors — lawyers, auditors, and compliance consultants bound by confidentiality obligations;
• Fraud prevention services — shared data is anonymized or pseudonymized where technically feasible.

5.2 ph689 will not disclose your personal data to any third party for their own marketing or commercial purposes without your explicit consent.

6 International Data Transfers

6.1 Some of ph689's service providers and game platform partners operate from outside the Philippines. Where personal data is transferred outside the Philippines, ph689 will ensure that appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards equivalent to those required under the Philippine DPA.

6.2 ph689 does not transfer personal data to jurisdictions that the National Privacy Commission (NPC) has determined do not provide adequate data protection standards, unless appropriate contractual safeguards are in place.

7 Data Retention

7.1 ph689 retains personal data for as long as necessary to fulfill the purposes outlined in this Policy, subject to the following minimum retention requirements:

• Account and KYC data: Retained for a minimum of 5 years after account closure, in compliance with PAGCOR and AMLA requirements;
• Financial transaction records: Retained for a minimum of 5 years in compliance with AMLA;
• Gaming records: Retained for a minimum of 3 years;
• Support communications: Retained for 2 years from the date of resolution;
• Marketing consent records: Retained until withdrawal of consent plus 1 year for compliance documentation.

7.2 Upon expiry of the applicable retention period, ph689 will securely delete or anonymize personal data in accordance with its internal data disposal procedures.

8 Security Measures

8.1 ph689 implements technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph689 Platform;
• Encryption of sensitive data fields (including passwords) at rest using industry-standard algorithms;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing conducted by independent third parties;
• Multi-factor authentication requirements for administrative system access;
• Incident response and breach notification procedures in compliance with the NPC's 72-hour breach notification requirement.

9 Cookies & Tracking Technologies

9.1 ph689 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management, login persistence, and security tokens. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to understand how players navigate the Platform, identify popular games, and improve user experience. Data collected is aggregated and does not identify individual players.
• Preference cookies: Store your language, display, and notification preferences to personalize your experience on ph689.
• Security cookies: Used to detect fraudulent activity, multiple account attempts, and suspicious login patterns.

9.2 You may control non-essential cookies through your browser settings. Disabling essential cookies may impair your ability to use the ph689 Platform. ph689 does not use third-party advertising or cross-site tracking cookies.

10 Your Rights as a Data Subject

10.1 Under the Philippine Data Privacy Act, you have the following rights in respect of your personal data held by ph689:

• Right to be informed — the right to know what personal data ph689 holds about you and how it is used;
• Right of access — the right to request a copy of your personal data;
• Right to rectification — the right to have inaccurate or incomplete personal data corrected;
• Right to erasure — the right to request deletion of your personal data, subject to ph689's legal retention obligations;
• Right to object — the right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to data portability — the right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10.2 To exercise any of the above rights, please contact ph689's Data Protection Officer at [email protected]. ph689 will respond to verifiable data subject requests within 15 calendar days of receipt.

10.3 Please note that certain rights are subject to limitations. For example, ph689 cannot delete account or transaction data that it is required to retain under AMLA or PAGCOR regulations, even upon your request.

11 Children & Minors

11.1 The ph689 Platform is strictly for persons aged 21 years and older. ph689 does not knowingly collect personal data from individuals under 21 years of age.

11.2 If ph689 discovers or is informed that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, the data will be deleted (subject to any regulatory reporting obligations), and the matter will be referred to PAGCOR as required.

11.3 If you believe that a minor has provided personal data to ph689, please contact [email protected] immediately.

12 Changes to This Policy

12.1 ph689 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or Platform notification. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

12.2 Your continued use of the ph689 Platform following notification of material changes to this Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must discontinue use of the Platform and may close your account.

13 Contact & Data Protection Officer

For all privacy-related inquiries, data subject requests, or complaints regarding ph689's handling of personal data, please contact:

• Data Protection Officer, ph689
• Email: [email protected]
• Live Chat: Available 24/7 via the ph689 Platform
• Response Time: Within 15 calendar days for written data subject requests

If you are not satisfied with ph689's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.