ph687 Privacy Policy

1.1 This Privacy Policy is issued by ph687 (the "Company", "we", "us", or "our"), the operator of the ph687 online casino and gaming platform at ph687.club, licensed by the Philippine Amusement and Gaming Corporation ("PAGCOR"). It applies to all personal data collected through the ph687 website, mobile browser interface, live chat, customer support channels, and any other point of contact between ph687 and individuals ("Data Subjects", "you", "Players").

1.2 ph687 acts as the Data Controller for personal data collected directly from Players and users of the ph687 platform. Where ph687 engages third-party service providers to process data on its behalf, those providers act as Data Processors under written agreements that impose data protection obligations consistent with this Privacy Policy and applicable Philippine law.

1.3 This Privacy Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission. It is to be read alongside the ph687 Terms & Conditions and Responsible Gaming Policy.

2.1 ph687 collects personal data that you provide directly, data generated automatically through your use of the platform, and data received from third parties in connection with payment processing and regulatory compliance.

2.2 Data Provided Directly by You

2.3 Automatically Collected Data

When you access ph687, certain technical data is collected automatically, including: IP address, device type and operating system, browser type and version, session start and end times, pages visited and game sessions initiated, geolocation data (country and region level), and referral source data. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

2.4 Data from Third Parties

ph687 may receive personal data from third-party payment processors (GCash, Maya, BPI, BDO, and others) in connection with verifying deposit and withdrawal transactions, and from identity verification service providers engaged to assist with KYC compliance. Such data is processed in accordance with this Privacy Policy.

3.1 ph687 uses personal data collected from Players for the following purposes:

• Account Management: Creation, maintenance, and security of your ph687 player account, including password recovery and two-factor authentication;
• Identity Verification (KYC): Verification of your identity and age (21+) as required by PAGCOR licensing conditions and Philippine AML law;
• Payment Processing: Processing deposits via GCash, Maya, BPI, BDO, and other accepted methods, and processing withdrawal requests to your registered payment method;
• Regulatory Compliance: Meeting PAGCOR regulatory obligations, AMLC reporting requirements, and compliance with any lawful order from Philippine authorities;
• Fraud and Security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and unauthorised account access;
• Responsible Gaming: Administering self-exclusion records, deposit limits, cooling-off periods, and other responsible gaming controls applied by or for Players;
• Customer Support: Responding to account queries, payment issues, technical support requests, and complaints submitted through ph687 support channels;
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience;
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates to Players who have not opted out of marketing communications. Players may opt out at any time through account settings or by contacting support.

3.2 ph687 does not use personal data for automated decision-making or profiling that produces legal effects concerning Players, other than in connection with account security and fraud prevention systems where such processing is necessary to protect platform integrity.

4.1 ph687 processes personal data on the following legal bases as recognised under the Philippine Data Privacy Act and its Implementing Rules:

• Contractual Necessity: Processing is necessary for the performance of the contract between ph687 and the Player, including account registration, gameplay, payment processing, and withdrawal. Without this processing, ph687 cannot provide its services.
• Legal Obligation: Processing is required for compliance with PAGCOR licensing requirements, Philippine AML obligations under Republic Act No. 9160 (as amended), the Philippine Data Privacy Act, and any other applicable law or regulatory directive.
• Legitimate Interest: Processing for fraud prevention, security monitoring, platform abuse detection, and aggregated analytics represents a legitimate interest of ph687 that does not override the fundamental rights and freedoms of data subjects.
• Consent: Where processing is based on consent — for example, for direct marketing communications — ph687 will obtain clear and informed consent and will respect any withdrawal of consent made by the Player.

5.1 ph687 does not sell, rent, or trade personal data to unaffiliated third parties for their own commercial purposes. Personal data may be shared in the following limited circumstances:

• Payment Service Providers: GCash, Maya, BPI, BDO, Metrobank, and other payment processors receive transaction data necessary to process deposits and withdrawals. These providers are bound by their own privacy obligations and relevant financial regulations.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged by ph687 receive identification documents and biometric data strictly for the purpose of verifying Player identity as required by PAGCOR and AML regulations.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities may receive personal data where required by law, regulation, or lawful order.
• Law Enforcement: ph687 will disclose personal data to Philippine law enforcement agencies where legally required or where disclosure is necessary to prevent, detect, or prosecute criminal offences including fraud and money laundering.
• Group Companies: Personal data may be shared within the ph687 corporate group for internal administrative purposes and to support platform operations, subject to equivalent data protection safeguards.

5.2 All third-party processors engaged by ph687 are required to process personal data only on ph687's documented instructions and to implement appropriate technical and organisational security measures consistent with the requirements of the Philippine Data Privacy Act.

6.1 ph687 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements.

6.2 The following general retention periods apply at ph687:

6.3 On expiry of the applicable retention period, ph687 will securely delete or anonymise personal data. Where anonymisation is technically feasible, ph687 may retain anonymised data for analytical and statistical purposes without limitation.

7.1 ph687 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between Player devices and ph687 servers;
• Encryption of sensitive data at rest, including identity documents and financial data;
• Role-based access controls limiting access to personal data to authorised personnel only;
• Regular security audits and penetration testing of the ph687 platform and infrastructure;
• Two-factor authentication requirements for administrative access to systems containing personal data;
• Automated intrusion detection systems monitoring for unauthorised access attempts;
• Staff data protection training and confidentiality obligations.

7.2 While ph687 takes all reasonable measures to protect your personal data, no electronic transmission or storage system is entirely secure. ph687 cannot guarantee absolute security and is not liable for losses arising from security breaches that are attributable to factors beyond ph687's reasonable control.

7.3 Players are responsible for maintaining the security of their own devices, login credentials, and GCash or Maya accounts. ph687 recommends enabling two-factor authentication on your ph687 account and using a unique, strong password not shared with other platforms.

8.1 Under the Philippine Data Privacy Act (RA 10173), you hold the following rights with respect to your personal data held by ph687:

8.2 To exercise any of the rights listed above, please contact ph687's Data Protection Officer using the contact details in Section 12 of this Privacy Policy. ph687 will respond to all valid data subject requests within thirty (30) calendar days of receipt. For complex requests, ph687 may extend this period by an additional thirty (30) days with prior notification to the data subject.

9.1 ph687 uses cookies and similar tracking technologies on the ph687.club website and platform. Cookies are small text files stored on your device that allow ph687 to recognise returning visitors, maintain session state, and analyse platform usage patterns.

9.2 ph687 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the ph687 platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Performance Cookies: Used to collect anonymised information about how Players use the ph687 platform — which games are accessed most frequently, page load times, and error occurrences. This data helps ph687 improve platform performance.
• Functional Cookies: Store Player preferences such as language settings, preferred game view, and interface configuration to personalise the ph687 experience on returning visits.
• Marketing Cookies: Used to track the effectiveness of ph687 marketing campaigns and to limit the frequency of promotional messages shown to any individual Player. These are only placed where you have consented to marketing communications.

9.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of your ph687 account and may prevent login. ph687 does not respond to browser-based "Do Not Track" signals at this time.

10.1 The ph687 platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with PAGCOR regulatory requirements and Philippine gambling law. ph687 does not knowingly collect personal data from individuals under the age of 21.

10.2 Age verification is conducted at registration and confirmed through the KYC process. If ph687 discovers that personal data has been collected from an individual under 21, that data will be deleted immediately and the associated account will be permanently closed.

10.3 Parents and guardians who believe that a minor may have registered at ph687 are encouraged to contact ph687 support immediately. ph687 will investigate and take appropriate action, including account closure and return of any deposited funds to the depositing payment method, within two (2) business days of a substantiated report.

11.1 ph687 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, ph687's data processing practices, or the introduction of new platform features.

11.2 Material changes to this Privacy Policy will be communicated to registered ph687 Players via email notification to their registered email address and/or via a prominent in-platform notice, at least seven (7) days prior to the effective date of the change. Non-material changes (such as typographical corrections or clarifying edits that do not affect data subject rights) may be made without advance notice.

11.3 Your continued use of the ph687 platform following the effective date of any Privacy Policy amendment constitutes your acknowledgement of the updated policy. If you do not agree with any amendment, you may close your account in accordance with the ph687 Terms & Conditions and request deletion of your data subject to ph687's legal retention obligations.

11.4 The version number and effective date of the current Privacy Policy are displayed at the top of this page. Prior versions of this Privacy Policy are available on request from ph687's Data Protection Officer.

12.1 ph687 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. The DPO serves as the primary point of contact for all data privacy matters, including data subject rights requests, privacy complaints, and regulatory enquiries.

12.2 To exercise your data subject rights, raise a data privacy concern, or contact ph687's Data Protection Officer, please use the following channels:

• Customer Support (24/7): Live chat available on the ph687 platform
• Email: [email protected] (plain text — not a link)
• Subject Line: Include "Privacy Request" or "DPO Enquiry" for priority routing

12.3 ph687 will acknowledge receipt of all data subject requests within five (5) business days and will aim to resolve requests within thirty (30) calendar days in accordance with NPC guidelines.

12.4 If you are not satisfied with ph687's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). The NPC's contact information is available on the NPC official website.