ph687 Privacy Policy

1. Data Controller

1.1 ph687 is the data controller responsible for the personal data of players who use the ph687 Platform. "Data controller" means the entity that determines the purposes and means of processing personal data, as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

1.2 ph687 has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy and implementation, and for ensuring compliance with applicable Philippine data privacy regulations and the requirements of the National Privacy Commission (NPC).

2. Personal Data We Collect

2.1 ph687 collects the following categories of personal data, depending on how you interact with the Platform:

2.2 ph687 does not intentionally collect sensitive personal information as defined under the DPA (such as health information, political affiliations, or religious beliefs) unless specifically required by law or for responsible gaming purposes (such as problem gambling indicators).

3. How We Collect Personal Data

3.1 ph687 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC, making deposits or withdrawals, contacting customer support, or filling in any form on the Platform.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, session data, and cookie data.
• Third-party sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, BPI, BDO, and Metrobank during transaction processing; fraud prevention data from third-party screening services.
• Publicly available sources: Publicly accessible records used to verify identity or screen against anti-money laundering watchlists as required by Philippine law.

4. Purposes of Processing

4.1 ph687 processes your personal data for the following purposes:

• Creating and managing your ph687 player account;
• Verifying your identity and age (21+) as required by Philippine gaming regulations;
• Processing deposits and withdrawals in Philippine Pesos via GCash, PayMaya, and Philippine bank accounts;
• Complying with anti-money laundering (AML) obligations under the Anti-Money Laundering Act of 2001 (Republic Act 9160) and its amendments;
• Detecting and preventing fraud, collusion, and prohibited conduct;
• Providing customer support in English and Filipino;
• Personalising your gaming experience and delivering relevant promotions (with your consent where required);
• Implementing responsible gaming measures, including deposit limits and self-exclusion;
• Complying with requests from Philippine regulatory authorities, courts, and law enforcement;
• Improving the ph687 Platform through aggregated, anonymised analytics.

5. Legal Basis for Processing

5.1 ph687 processes personal data on the following legal bases as recognised under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to fulfil the ph687 Terms & Conditions and operate your player account;
• Legal obligation: Processing required to comply with Philippine law, including KYC, AML, and PAGCOR reporting obligations;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, where you have provided explicit consent and may withdraw it at any time.

6. Data Sharing and Disclosure

6.1 ph687 does not sell your personal data. ph687 may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment service providers: GCash (Mynt – Globe Fintech Innovations), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank, solely for transaction processing;
• KYC and identity verification providers: Third-party services that assist with document verification and biometric matching;
• Game content providers: Game providers such as Pragmatic Play and Evolution receive anonymised player data required to operate their games on the ph687 Platform;
• IT infrastructure providers: Cloud hosting, security, and CDN providers who process data solely on ph687's behalf;
• Legal and regulatory authorities: The National Privacy Commission, PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies when required by law;
• Professional advisers: Lawyers, auditors, and compliance consultants under obligations of confidentiality.

6.2 All third-party data processors are contractually bound to handle personal data in accordance with applicable Philippine law and to implement adequate technical and organisational security measures.

7. International Data Transfers

7.1 Some of ph687's service providers may process personal data outside of the Philippines. Where such transfers occur, ph687 ensures that appropriate safeguards are in place, including data processing agreements that incorporate standard contractual protections consistent with the requirements of the Philippine National Privacy Commission.

7.2 ph687 will not transfer your personal data to a country or territory that does not provide an adequate level of data protection without your explicit consent or without implementing appropriate contractual safeguards.

8. Data Retention

8.1 ph687 retains personal data for as long as your account remains active and for such additional period as is required by Philippine law. Specific retention periods include:

• Account and KYC records: Retained for a minimum of five (5) years from account closure, as required by Philippine AML regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming history: Retained for three (3) years from the date of each gaming session;
• Customer support records: Retained for two (2) years from the date of the final interaction.

8.2 Upon expiry of the applicable retention period, ph687 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9. Cookies and Tracking Technologies

9.1 ph687 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and improve your experience.

Types of cookies used by ph687:

• Essential cookies: Necessary for the Platform to operate. These include session authentication cookies and security cookies. They cannot be disabled.
• Performance cookies: Used to collect anonymised analytics data about how players use the ph687 Platform, helping us improve performance and usability.
• Functionality cookies: Used to remember your preferences (such as language settings and game lobby layout) across sessions.
• Marketing cookies: Used, with your consent, to deliver relevant promotional communications. You may opt out at any time via your account communication preferences.

9.2 You may manage cookie settings through your browser. Note that disabling essential cookies may affect the functionality of the ph687 Platform.

10. Security Measures

10.1 ph687 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph687 Platform;
• Encryption of stored sensitive data, including financial account information and identity documents;
• Access controls limiting data access to authorised ph687 personnel on a need-to-know basis;
• Two-factor authentication options for player accounts;
• Regular security assessments and penetration testing by third-party security specialists;
• Anomaly detection and account monitoring to identify suspicious login and transaction activity.

10.2 In the event of a personal data breach that poses a risk to your rights and freedoms, ph687 will notify affected players and the National Privacy Commission in accordance with the timeframes prescribed under NPC Circular 16-03.

11. Protection of Minors

11.1 The ph687 Platform is strictly for persons aged 21 years and above. ph687 does not knowingly collect personal data from individuals under the age of 21. If ph687 discovers that personal data has been collected from a person under 21 years of age, that data will be immediately deleted and the associated account permanently closed.

11.2 If you are a parent or guardian and believe that a person under 21 has used the ph687 Platform, please contact the ph687 Data Protection Officer immediately.

12. Your Data Subject Rights

12.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph687:

• Right to be informed: The right to know how your personal data is being processed;
• Right of access: The right to request a copy of the personal data ph687 holds about you;
• Right to rectification: The right to have inaccurate or incomplete data corrected;
• Right to erasure: The right to request deletion of your personal data, subject to ph687's legal retention obligations;
• Right to object: The right to object to processing based on legitimate interests or direct marketing;
• Right to data portability: The right to receive a structured, machine-readable copy of your personal data;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission if you believe your data rights have been violated.

12.2 To exercise any of the above rights, please contact the ph687 Data Protection Officer at the contact details provided in Section 15 of this Policy. ph687 will respond to all valid data subject requests within thirty (30) days of receipt, as required by the DPA.

13. Complaints

13.1 If you have concerns about how ph687 handles your personal data, you are encouraged to contact the ph687 Data Protection Officer in the first instance. ph687 is committed to resolving all privacy complaints fairly and promptly.

13.2 If you are not satisfied with ph687's response, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the government agency responsible for administering and implementing the Data Privacy Act and ensuring compliance with its provisions.

14. Updates to This Privacy Policy

14.1 ph687 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to active players via email notification or prominent in-platform notice prior to the changes taking effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

14.2 Your continued use of the ph687 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised Policy, you must cease using the Platform and contact support to close your account.

15. Contact the ph687 Data Protection Officer

For data privacy enquiries, data subject rights requests, or privacy complaints, please contact the ph687 Data Protection Officer through the following channels:

• Email: [email protected] (subject: "Data Privacy Request")
• Live Chat: Available 24/7 on the ph687 Platform after login
• Response time: ph687 aims to acknowledge all DPO requests within 3 business days and resolve them within 30 days
• Business hours: Philippine Standard Time (PST), 24/7 support availability