ph655 Privacy Policy

1Introduction & Data Controller

This Privacy Policy ("Policy") describes how ph655 ("ph655," "we," "us," "our") collects, processes, stores, and protects the personal data of users ("Player," "you") who access and use the ph655 online gaming platform at ph655.app and all associated services.

ph655 acts as the Personal Information Controller (PIC) as defined under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations. ph655 operates in compliance with the National Privacy Commission (NPC) of the Philippines, PAGCOR's data governance requirements, and applicable Anti-Money Laundering regulations administered by the AMLC.

By registering for or using ph655, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not register for or use the ph655 platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2Personal Data We Collect

ph655 collects personal data across several categories, depending on how you interact with the platform. The table below summarizes the main categories:

2.1 Data We Do Not Collect

ph655 does not collect sensitive personal information beyond what is strictly necessary for legal identity verification and responsible gaming compliance. We do not collect information about your religion, political affiliation, health records (except where voluntarily provided in a responsible gaming context), or biometric data beyond what is required for identity document verification.

3How We Use Your Personal Data

ph655 uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the purposes for which it was collected without first obtaining your consent.

• Account Management: Creating and maintaining your ph655 account, verifying your identity, processing deposits and withdrawals, and managing your account settings.
• PAGCOR Compliance: Satisfying PAGCOR's player registration, identity verification, and gaming activity reporting requirements as a condition of our operating license.
• Anti-Money Laundering (AML): Monitoring transactions for suspicious activity and reporting to the AMLC as required under Republic Act No. 9160 (AMLA) and its amendments.
• Responsible Gaming: Monitoring gaming behavior to identify indicators of problem gambling and applying responsible gaming measures including deposit limits and self-exclusion flags.
• Customer Support: Responding to your support requests, processing complaints, and resolving disputes.
• Platform Security: Detecting and preventing fraud, account takeovers, technical abuse, and other unauthorized activity.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time via your account settings.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve the ph655 platform, game lobby, and user experience.

4Legal Basis for Processing

ph655 processes your personal data under the following lawful bases as recognized by the Data Privacy Act of 2012:

• Consent: Where you have given specific, informed consent — for example, opting in to marketing communications.
• Contractual Necessity: Processing necessary to perform our obligations under the ph655 Terms & Conditions, including account management and financial transactions.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLC reporting obligations, NPC data governance rules, and other applicable Philippine laws.
• Legitimate Interest: Processing necessary for ph655's legitimate business interests including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data privacy rights.

5Sharing Your Personal Data

ph655 does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data may be shared only in the following limited circumstances:

5.1 Regulatory Authorities

ph655 is legally required to disclose player data to PAGCOR, the AMLC, the National Privacy Commission, the Bureau of Internal Revenue (BIR), and other government agencies when required by law, court order, or regulatory direction.

5.2 Game and Technology Providers

Third-party game studios and technology providers who power ph655's platform (including live dealer operators, payment processors, and identity verification services) receive only the minimum data necessary to provide their services. All such providers are bound by data processing agreements that prohibit independent use of your data.

5.3 Payment Processors

Financial institutions and e-wallet providers (including GCash, Maya, BPI, BDO, Metrobank, and Visa/Mastercard networks) receive the minimum financial data required to process your deposit or withdrawal transaction. ph655 does not store full payment credentials on its servers.

5.4 Professional Advisors

Legal counsel, auditors, and compliance consultants engaged by ph655 may access player data to the extent strictly necessary to perform their professional services, subject to confidentiality obligations.

6Cookies & Tracking Technologies

ph655 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and analyze site usage. The following cookie categories are used:

• Essential Cookies: Required for the platform to function. These include session tokens, authentication cookies, and security cookies. These cannot be disabled without preventing platform access.
• Functional Cookies: Store your preferences (e.g., language, game lobby filters, notification settings) to personalize your experience. Disabling these may reduce platform functionality.
• Analytics Cookies: Collect anonymized data about how players navigate ph655 to help us improve the platform. No personally identifiable information is stored in analytics cookies.
• Security Cookies: Used for fraud detection, device fingerprinting, and login anomaly monitoring. These are essential for account security.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent ph655 from functioning correctly.

7Data Retention

ph655 retains your personal data for as long as your account is active and for the minimum additional period required by Philippine law. The following retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years in accordance with AMLC requirements and BIR regulations.
• Gaming activity logs: Retained for three (3) years following account closure for responsible gaming monitoring and dispute resolution purposes.
• Support communications: Retained for three (3) years following resolution of the relevant matter.
• Marketing data: Retained until you withdraw marketing consent or for one (1) year following your last platform interaction, whichever is earlier.

After the applicable retention period expires, your personal data will be securely deleted or anonymized such that it can no longer be used to identify you.

8Data Security

ph655 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and ph655 servers;
• AES-256 encryption for sensitive data stored in ph655 databases;
• Multi-factor authentication for all ph655 administrative systems;
• Strict role-based access controls limiting employee access to player data to those with a legitimate operational need;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Segregated network architecture isolating player data from other operational systems;
• 24/7 security monitoring with automated anomaly detection and incident response protocols.

While ph655 takes every reasonable measure to protect your data, no system is entirely immune to security risks. In the event of a personal data breach that is likely to pose a serious risk to your rights and freedoms, ph655 will notify the National Privacy Commission and affected players in accordance with NPC Circular 16-03 requirements.

9Your Data Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ph655:

• Right to be Informed: The right to know what personal data ph655 holds about you and how it is used (satisfied by this Policy).
• Right of Access: The right to request a copy of your personal data held by ph655.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to processing based on legitimate interest, including direct marketing.
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (privacy.gov.ph) if you believe ph655 has violated your data privacy rights.

To exercise any of these rights, contact ph655's Data Protection Officer (DPO) using the details in Section 12.

10Children & Minors

If you are a parent or guardian and believe that a minor under your care has registered on ph655, please contact our DPO immediately at the address provided in Section 12.

11Changes to This Privacy Policy

ph655 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect. The date of the most recent revision is displayed at the top of this Policy.

Your continued use of ph655 following notification of changes constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

12Contact the Data Protection Officer

For all data privacy inquiries, access requests, rectification requests, erasure requests, or complaints, please contact the ph655 Data Protection Officer:

You also have the right to file a complaint directly with the National Privacy Commission of the Philippines. The NPC can be reached through their official government website (NPC Philippines). ph655 fully cooperates with NPC investigations.