Privacy Policy

ph654 ("ph654," "we," "us," "our") operates the online gaming platform at ph654.vip and is committed to protecting the personal data of every Filipino player who uses our services. This Privacy Policy ("Policy") describes in detail how ph654 collects, uses, stores, shares, and safeguards your personal information in connection with the ph654 platform.

This Policy applies to all information ph654 collects through ph654.vip, including information provided during registration, KYC verification, deposits and withdrawals, customer support interactions, promotional opt-ins, and technical data generated by your use of the platform.

By registering an account at ph654 or continuing to use the ph654 platform, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Policy, you must discontinue use of the ph654 platform.

ph654 processes personal data in compliance with the following applicable Philippine legislation and regulatory frameworks:

• Republic Act No. 10173 — Data Privacy Act of 2012 and its Implementing Rules and Regulations;
• National Privacy Commission (NPC) issuances, advisories, and circulars;
• Republic Act No. 9160 — Anti-Money Laundering Act of 2001 (as amended), which imposes mandatory data collection and retention obligations on gaming operators;
• PAGCOR regulatory requirements governing licensed online gaming operators in the Philippines;
• Republic Act No. 8792 — Electronic Commerce Act of 2000.

Where ph654 processes personal data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The categories of personal data ph654 collects depend on your level of account activity and the services you use. The following table summarizes data categories, specific data points, and the context in which each is collected:

Data you are not required to provide. Providing marketing communication preferences is voluntary. However, Identity Data, Contact Data, and Financial Data are mandatory for account registration, KYC completion, and financial transaction processing. Failure to provide mandatory data will prevent full account activation or the processing of withdrawal requests.

ph654 uses the personal data described in Section 3 for the following purposes:

1. Account Creation and Management: To register your ph654 account, verify your identity and age (21+ requirement), and manage your account settings and preferences;
2. Transaction Processing: To process GCash, Maya, BPI, BDO, and other payment method deposits and withdrawals in PHP, and to maintain accurate transaction records;
3. Legal and Regulatory Compliance: To fulfill ph654's obligations under the Anti-Money Laundering Act, PAGCOR regulatory requirements, NPC data processing standards, and all other applicable Philippine law;
4. Security and Fraud Prevention: To detect, investigate, and prevent unauthorized account access, bonus abuse, multi-accounting, collusion, and other fraudulent or prohibited activities on the ph654 platform;
5. Responsible Gaming: To monitor account activity for patterns associated with problem gambling, to apply self-imposed player limits, and to enforce responsible gaming restrictions;
6. Customer Support: To respond to and resolve your inquiries, complaints, and account-related requests efficiently and accurately;
7. Platform Improvement: To analyze aggregated, anonymized usage data to improve ph654's platform performance, game library, user interface, and technical infrastructure;
8. Marketing Communications (consent-based only): To send promotional offers, bonus notifications, and platform updates via SMS or email to Players who have explicitly opted in to marketing communications.

Under the Data Privacy Act of 2012, ph654 processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under the ph654 Terms and Conditions — including account management, game access, and payment processing;
• Legal Obligation: Processing required to comply with Philippine law, including AML obligations, PAGCOR reporting requirements, and NPC data processing standards;
• Legitimate Interest: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data privacy rights;
• Consent: Processing for marketing communications, where you have provided explicit and documented consent at registration or subsequently through account settings. Consent is freely given, specific, informed, and withdrawable at any time.

ph654 does not sell your personal data. ph654 may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Game Software Providers: Limited technical data (anonymized session identifiers) is shared with licensed game providers for game delivery and dispute resolution purposes only. Game providers do not receive your full identity data, financial details, or contact information;
• Payment Service Providers: Financial data necessary to process your GCash, Maya, bank transfer, or other payment channel transactions is shared with the relevant payment service providers under their own data protection policies and applicable Philippine financial regulations;
• Identity Verification Partners: KYC document data may be processed by ph654's licensed identity verification technology partner solely for the purpose of age and identity confirmation;
• Regulatory and Law Enforcement Authorities: ph654 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Philippine National Police, and other competent authorities when required by law, regulation, court order, or valid legal process;
• Fraud Prevention Services: Technical data including IP addresses and device fingerprints may be shared with anti-fraud service providers to identify and prevent abuse of the ph654 platform.

Some of ph654's Game Providers and technology service partners maintain servers or processing infrastructure outside the Philippines. When personal data is transferred to a jurisdiction outside the Philippines, ph654 ensures that such transfer is subject to appropriate safeguards including:

• Contractual data processing agreements incorporating the NPC's standard data protection clauses;
• Transfer only to jurisdictions that the NPC has determined provide adequate protection for personal data;
• Strict purpose limitation — data transferred internationally is limited to what is technically necessary for game delivery or platform security.

Your core identity data, financial transaction records, and KYC documents are stored on ph654's primary infrastructure located within the Philippines and are not routinely transferred internationally.

ph654 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, and thereafter only as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be associated with any individual player. Anonymized, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

ph654 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies ph654 uses are:

• Essential Cookies: Strictly necessary for platform operation — maintaining your login session, keeping your game state active, and processing transactions. These cannot be disabled without impairing platform functionality;
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and account compromise attempts. These are non-optional components of ph654's security infrastructure;
• Performance Cookies: Used to collect anonymized data on platform usage patterns — which games are most visited, typical session lengths, and page load performance metrics — to improve ph654's services. No personally identifiable information is included in performance analytics;
• Preference Cookies: Store your account preferences including game lobby display settings, language preferences, and responsible gaming notification timing.

ph654 does not use third-party advertising or retargeting cookies. Cookies set by ph654 are used solely for platform operation and improvement. You may manage non-essential cookie preferences through your browser settings; however, disabling essential cookies will prevent platform functionality.

ph654 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:

• Transport Encryption: All data transmitted between your device and ph654 is encrypted using TLS 1.3 with 256-bit AES encryption;
• Data-at-Rest Encryption: All databases containing personal data and financial records are encrypted at rest using AES-256;
• Access Controls: Access to systems containing personal data is restricted using role-based access control (RBAC). Only personnel with a verified operational need may access specific data categories;
• Multi-Factor Authentication: Internal ph654 systems containing player data require multi-factor authentication for all staff access;
• Penetration Testing: ph654's security infrastructure undergoes regular third-party penetration testing and vulnerability assessments;
• Segregated Storage: Financial data, identity documents, and operational data are stored in logically and physically segregated systems to limit breach impact;
• Staff Training: All ph654 personnel with access to personal data complete data privacy and security training as a condition of employment and on an annual basis thereafter.

Notwithstanding the above, no data security system is impenetrable. ph654 cannot guarantee absolute security against all possible threats. Players are also responsible for maintaining the security of their own account credentials — use of a strong unique password and two-factor authentication is strongly recommended for all ph654 accounts.

Under the Data Privacy Act of 2012 and applicable NPC regulations, ph654 players have the following enforceable rights with respect to their personal data:

How to exercise your rights. Submit a data subject request to ph654's Data Protection Officer at [email protected] with the subject line "Data Privacy Request" and include your registered name, registered mobile number, and a description of your request. ph654 will respond within fifteen (15) calendar days. Complex requests may require an extension of up to thirty (30) additional days, and you will be notified if an extension is required.

ph654 is a platform strictly for adults aged twenty-one (21) years and above. ph654 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the ph654 account activation process, and government-issued Philippine ID is required to confirm eligibility.

If ph654 discovers that an account has been registered by or on behalf of a person under 21 years of age, the account will be immediately suspended, the minor's data will be deleted from ph654's systems to the extent legally permissible, and any funds in the account will be returned to the depositing payment method after deducting any promotional credits received.

Parents and guardians who believe their child has created a ph654 account should contact ph654 support at [email protected] immediately. ph654 treats all such reports as urgent and processes them as a priority.

The ph654 platform integrates with third-party game software and payment processing services. These integrations are necessary for platform operation and are governed by the third-party providers' own data protection practices in addition to their contractual obligations to ph654.

ph654 is not responsible for the privacy practices of third-party service providers operating independently outside of their contracted relationship with ph654. Players who interact directly with third-party payment providers (such as GCash, Maya, or BPI online banking portals) do so under those providers' own privacy policies.

ph654.vip does not contain links to external third-party websites in its main navigation or content pages. Any informational references to third-party organizations (e.g., PAGCOR, NPC) are for compliance and player information purposes only and do not constitute an endorsement of those organizations' data practices.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected ph654 players, ph654 will:

1. Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03;
2. Notify affected Players without undue delay via their registered email address and/or mobile number, providing a clear description of the nature of the breach, the categories and approximate number of data subjects affected, likely consequences of the breach, and measures taken or proposed to address the breach;
3. Implement immediate containment and remediation measures to limit the scope of the breach and prevent recurrence;
4. Document the breach in ph654's internal security incident register as required by applicable NPC regulations.

Where a breach is unlikely to result in significant risk to affected players (for example, a technical incident affecting only anonymized data), ph654 may determine that individual notification is not required, consistent with NPC guidance on proportionate breach response.

ph654 reserves the right to update this Privacy Policy to reflect changes in our data practices, platform services, or applicable Philippine law. Material changes — those that materially affect your data rights or the categories of data we collect — will be communicated to registered Players via SMS to the registered mobile number or email to the registered email address at least seven (7) days before the change takes effect.

Minor updates, such as clarifications of existing practices or corrections of typographic errors that do not alter player data rights, may be made without prior notice. The effective date of the current version is always shown at the top of this page.

Continued use of the ph654 platform after any updated Privacy Policy takes effect constitutes acceptance of the revised Policy. Players who do not accept a material change may request account closure under Section 14 of the ph654 Terms and Conditions.

ph654 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and all applicable Philippine data privacy obligations. For all data privacy inquiries, data subject requests, and privacy-related complaints, contact the ph654 DPO as follows:

• Email: [email protected] — use subject line "Data Privacy Request" or "DPO Inquiry"
• Live Chat: Available 24/7 from your ph654 account dashboard — request escalation to the Data Protection team

ph654 aims to acknowledge all data privacy inquiries within two (2) business days and to provide a substantive response within fifteen (15) calendar days of receipt of a complete and verified data subject request.