ph667 Privacy Policy

Welcome to ph667. This Privacy Policy ("Policy") describes how ph667 ("ph667," "we," "us," "our") collects, uses, stores, shares, and protects the personal data of registered players, visitors, and users ("you," "your") who access or use the ph667 online gaming platform, whether through our website at ph667.net or any associated mobile-optimised interface.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines ("DPA"), and the implementing rules and regulations issued by the National Privacy Commission ("NPC"). By registering an account or continuing to use ph667, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

ph667 takes data privacy seriously. Our platform is built for Filipino players and we understand the trust you place in us when you share your personal information. This Policy reflects our genuine commitment to protecting that information with the highest standards of technical and organisational security available.

ph667 collects personal data in several categories depending on how you interact with our platform. The table below summarises the categories of data collected, the source of that data, and the primary purpose for collection.

2.1 Sensitive Personal Information

Under the DPA, certain categories of personal data are classified as sensitive personal information ("SPI") and require additional protection. ph667 may collect SPI in limited circumstances, specifically government ID numbers and financial account details, solely for the purposes of mandatory KYC verification and payment processing. ph667 does not collect health data, religious beliefs, political affiliations, or other SPI categories beyond those directly necessary for lawful gaming operations.

ph667 processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without obtaining your separate consent.

• Account Management: To register, maintain, and administer your ph667 player account, including login authentication and account recovery.
• Age & Identity Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in compliance with PAGCOR regulations and the DPA.
• Payment Processing: To process deposits via GCash, PayMaya, BPI, BDO, and Metrobank, and to process withdrawal requests to your registered payment method.
• AML & Fraud Prevention: To detect and prevent money laundering, fraud, match-fixing, and other prohibited conduct in accordance with RA 9160 (Anti-Money Laundering Act) and PAGCOR directives.
• Customer Support: To respond to your inquiries, resolve disputes, and provide 24/7 live chat support.
• Responsible Gaming: To administer self-exclusion requests, deposit limits, session time controls, and cooling-off periods you have voluntarily activated.
• Platform Security: To monitor for unauthorised access, detect suspicious login activity, and protect the integrity of the ph667 platform.
• Regulatory Compliance: To fulfil ph667's reporting obligations to PAGCOR and other relevant Philippine regulatory authorities.
• Service Improvement: To analyse aggregated, anonymised usage data to improve game selection, platform performance, and the overall player experience for Filipino users.
• Promotional Communications: To send you information about ph667 bonuses, promotions, and new game launches — only if you have opted in to marketing communications. You may unsubscribe at any time.

ph667 processes your personal data on the following lawful bases as recognised under Republic Act No. 10173 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered ph667 player — including account management, payments, and game delivery.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine law.
• Legitimate Interests: Processing necessary for ph667's legitimate interests in fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as personalised marketing communications, where you have given explicit, freely withdrawable consent.

ph667 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the following limited and necessary circumstances:

5.1 Payment Processors

ph667 shares your payment-related personal data with our payment processing partners — including GCash (Mynt), PayMaya (Voyager Innovations), and Philippine banking partners (BPI, BDO, Metrobank) — solely to process your deposit and withdrawal transactions. These partners are bound by their own privacy and data security obligations under Philippine law.

5.2 Game Content Providers

ph667's slot, live casino, and sports betting content is provided by licensed third-party game suppliers. Minimal technical data (session tokens, bet amounts, game outcomes) is shared with these providers as required for game delivery and result certification. Game providers do not receive your identity or contact data.

5.3 Regulatory Authorities

ph667 is required to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other relevant Philippine government authorities when required by law, court order, or regulatory directive. ph667 will notify you of such disclosures unless prohibited from doing so by law.

5.4 Professional Advisors

ph667 may share personal data with our legal counsel, auditors, and compliance consultants on a strictly confidential basis where necessary for the conduct of their professional services to ph667.

• ph667 does NOT share your data with advertising networks.
• ph667 does NOT sell your data to data brokers or analytics companies.
• ph667 does NOT share your data with other online gambling operators.

ph667 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, ph667 will securely delete or anonymise your personal data. Anonymised, aggregated data (from which you cannot be individually identified) may be retained indefinitely for statistical and platform improvement purposes.

ph667 implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. Our security infrastructure is designed to protect against unauthorised access, accidental loss, destruction, or disclosure of your personal data.

• Encryption at Rest: All personal data stored on ph667 servers is encrypted using AES-256 encryption.
• Encryption in Transit: All data transmitted between your browser and ph667's servers is protected using TLS 1.3.
• Access Controls: Player data is accessible only to ph667 personnel with a verified business need. Access is logged and audited regularly.
• Two-Factor Authentication: ph667 supports and strongly recommends SMS OTP two-factor authentication on all player accounts.
• Penetration Testing: ph667's systems undergo regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Staff Training: All ph667 personnel with access to personal data receive regular training on data privacy obligations under the DPA.

ph667 uses cookies and similar tracking technologies on the ph667.net website to enhance your experience, maintain your login session, and collect anonymised analytics data about how Filipino players interact with our platform.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for core platform functionality including login sessions, CSRF protection, and load balancing. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming limits you have set.
• Analytics Cookies: Collect anonymised data about pages visited, session duration, and feature usage to help ph667 improve the platform. No personally identifiable information is included in analytics reports.

8.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in to your ph667 account. ph667 does not use cookies to serve third-party advertising or to track your activity on other websites.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph667. These rights may be exercised by contacting our Data Protection Officer at the details provided in Section 14.

ph667 requires all registrants to provide a valid government-issued Philippine ID and date of birth during the account registration process. All new accounts are subject to KYC age verification before deposits or gameplay are permitted. ph667 reserves the right to suspend or permanently close any account where the player is found to be under 21 years of age, and any funds in such accounts will be handled in accordance with PAGCOR guidelines.

If you believe that a minor has registered on ph667 using false information, please contact our support team immediately at [email protected] so that appropriate action can be taken without delay.

In the event of a personal data breach that poses a real risk of serious harm to the rights and freedoms of affected players, ph667 will take the following actions in accordance with the requirements of the Data Privacy Act and the NPC's breach notification rules:

• Within 72 hours of discovery: ph667 will notify the National Privacy Commission of the breach, the nature of the affected data, the estimated number of affected individuals, and the measures taken to contain the breach.
• Within 24 hours of NPC notification: ph667 will notify affected players directly via their registered email address, describing the nature of the breach, the data affected, the potential consequences, and the steps ph667 has taken or will take to address the breach.
• Ongoing: ph667 will conduct a root cause analysis and implement remediation measures to prevent recurrence. A full incident report will be provided to the NPC within the timeframes prescribed by law.

ph667 maintains a documented incident response plan that is reviewed and tested annually. All staff are trained to identify and escalate suspected data security incidents to our Data Protection Officer immediately upon discovery.

ph667's primary data infrastructure is located within the Philippines. In limited circumstances, personal data may be transferred to or processed in jurisdictions outside the Philippines — for example, where ph667 uses internationally hosted game content delivery infrastructure or cloud services.

Where such transfers occur, ph667 ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act, including contractual data processing agreements that require the receiving party to maintain data protection standards at least equivalent to those under Philippine law.

ph667 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When we make material changes to this Policy, we will notify you by:

• Posting a prominent notice on the ph667.net homepage and in the platform dashboard for a minimum of 30 days prior to the changes taking effect.
• Sending a notification to your registered email address describing the nature of the changes and the new effective date.

Your continued use of ph667 after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using ph667 and may request account closure and data erasure in accordance with Section 09 of this Policy.

The current version of this Privacy Policy is always accessible at ph667.net/privacy-policy. Previous versions are available upon request from our Data Protection Officer.

ph667 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact our DPO using the details below.

If you are not satisfied with ph667's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about the NPC and its complaint procedures is available through Philippine government channels.