ph638 Privacy Policy

1. Introduction

ph638 ("ph638," "we," "us," or "the Company") is committed to protecting the privacy and personal data of every player who registers for and uses the ph638 platform at ph638.vip. This Privacy Policy describes how we collect, process, store, share, and safeguard your personal information in connection with your use of ph638's online casino, sports betting, bingo, sabong, and related gaming services.

This Policy is prepared in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC) of the Philippines. By creating a ph638 account or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, ph638 acts as the personal information controller in respect of personal data collected through the ph638 platform. ph638 determines the purposes and means of processing your personal data and is responsible for compliance with applicable data protection legislation.

If you have questions, requests, or concerns about how your personal data is handled by ph638, you may contact our designated Data Protection Officer (DPO) at [email protected] with the subject line "Data Privacy Request."

3. Information We Collect

ph638 collects personal information from you in the following categories:

3.1 Registration Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (for mandatory 21+ age verification)
• Philippine mobile number (used for OTP/2FA verification)
• Email address
• Username and account password (stored in encrypted form)
• Residential address in the Philippines

3.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (PhilSys National ID, Passport, UMID, Driver's License, SSS ID, Voter's ID, GSIS e-Card)
• Proof of payment method ownership (e.g., screenshot of GCash account bearing your registered name)
• Selfie or facial photograph for identity matching purposes

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records, including amounts in PHP, timestamps, and payment channel (GCash, PayMaya, BDO, BPI, Metrobank)
• Account wallet balance history
• Bonus and promotional credit records

3.4 Gaming Activity Data

• Game session logs, including games played, bet amounts, outcomes, and session durations
• Sports betting history, including markets selected, odds accepted, and settlement results
• Responsible gaming settings, deposit/loss limit configurations, and self-exclusion status

3.5 Technical and Device Data

• IP address and geolocation data at the time of login
• Device type, operating system, and browser type
• Login timestamps and session duration
• Cookies and similar tracking technologies (see Section 7)

3.6 Communications Data

• Records of live chat conversations with ph638 support agents
• Email correspondence with ph638
• Feedback, complaints, or dispute submissions

4. How We Use Your Personal Data

ph638 processes your personal data for the following purposes:

• Account Management: To create, verify, maintain, and secure your ph638 player account.
• Age and Identity Verification: To confirm that you meet the mandatory 21-year minimum age requirement and to complete KYC verification as required by PAGCOR-aligned regulatory obligations.
• Payment Processing: To process deposits and withdrawals through GCash, PayMaya, and Philippine banking channels in your name.
• Gaming Services: To provide and improve the games, sports betting markets, and other products available on ph638, and to maintain accurate records of your gaming history.
• Anti-Fraud and AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the platform, in compliance with Philippine anti-money laundering laws (Republic Act No. 9160, as amended).
• Responsible Gaming: To monitor gaming patterns, enforce player-set limits, and identify players who may be showing signs of problem gambling in order to trigger responsible gaming interventions.
• Customer Support: To respond to your enquiries, complaints, and support requests, and to maintain records of such interactions.
• Legal Compliance: To comply with applicable Philippine laws, PAGCOR regulations, NPC data privacy requirements, and lawful orders from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the ph638 user experience, game performance, and platform reliability.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time via Account Settings or by contacting support.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph638 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform the contract between ph638 and you — including account creation, payment processing, and game provision.
• Legal Obligation: Processing required to comply with Philippine law — including AML/KYC obligations under Republic Act No. 9160 and PAGCOR regulatory requirements.
• Legitimate Interests: Processing for ph638's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed consent — including the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

ph638 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data in the following limited circumstances:

• Service Providers: Third-party vendors who provide services to ph638 on a data-processing basis, including payment processors (GCash/GXI, PayMaya/Voyager), KYC verification providers, IT hosting and security services, and customer support platforms. All such providers are contractually bound to process your data only as instructed by ph638 and in compliance with the DPA.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies when required by law, court order, or regulatory directive.
• Law Enforcement: Philippine law enforcement agencies when ph638 is legally compelled to disclose information or where disclosure is necessary to prevent fraud, protect public safety, or enforce our Terms & Conditions.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of ph638's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7. Cookies and Tracking Technologies

ph638 uses cookies and similar technologies — including web beacons, pixel tags, and local storage — to improve platform functionality, maintain your login session, and analyse usage patterns. The categories of cookies used by ph638 are:

• Strictly Necessary Cookies: Essential for the platform to function. These enable login session maintenance, account security, and core gaming functionality. They cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display preferences, and responsible gaming configurations.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate ph638, which games are most popular, and where technical errors occur. This data helps us improve platform performance.
• Security Cookies: Support fraud detection and account security functions, including login anomaly detection and device fingerprinting.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use ph638 core functions including login and game access.

8. Data Retention

ph638 retains your personal data for as long as your account remains active and for a minimum period thereafter as required by Philippine law and regulatory obligations. Specific retention periods include:

• Account and KYC records: Retained for a minimum of 5 years following account closure, as required under the Anti-Money Laundering Act of 2001 (RA 9160, as amended).
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for 3 years from the date of each gaming session.
• Customer support communications: Retained for 2 years from the date of the last communication.
• Marketing consent records: Retained for the duration of your account and 2 years thereafter.

Following the applicable retention period, ph638 will securely delete or anonymise your personal data in accordance with our data destruction procedures.

9. Data Security

ph638 implements technical, organisational, and administrative security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph638 servers
• Encrypted storage of passwords and sensitive authentication credentials
• Two-factor authentication (2FA) availability for all player accounts
• Regular security audits and penetration testing of the ph638 platform
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Real-time monitoring for suspicious login activity and data breach indicators

In the event of a personal data breach affecting your rights and freedoms, ph638 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03, and will notify affected players without undue delay.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph638:

• Right to be Informed: The right to know that ph638 is processing your personal data and to receive this Privacy Policy.
• Right to Access: The right to request a copy of the personal data ph638 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to ph638's legal retention obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes or on grounds of legitimate interest.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe ph638 has violated your data privacy rights.

To exercise any of the above rights, submit a written request to ph638's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." ph638 will respond within 30 calendar days of receiving a verifiable request.

11. Children's Privacy

ph638 does not knowingly collect personal data from individuals under 21 years of age. All ph638 registrations require confirmation of the player's age, and KYC verification is mandatory to confirm compliance with the 21+ age requirement. If ph638 discovers that personal data has been collected from a person under 21 years old, that account will be immediately closed, all personal data will be deleted, and any balance will be forfeited in accordance with ph638's Terms & Conditions and applicable PAGCOR regulations.

12. International Data Transfers

ph638 primarily stores and processes your personal data on servers located within, or accessible from, the Philippines or jurisdictions with equivalent data protection standards. Where ph638 transfers personal data to third-party service providers located outside the Philippines — for example, cloud infrastructure or security monitoring providers — ph638 ensures that such transfers are subject to contractual safeguards equivalent to those required under the Data Privacy Act of 2012, including data processing agreements that bind recipients to appropriate data protection obligations.

13. Amendments to This Policy

ph638 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable Philippine law. Material amendments will be communicated to registered players via email or an in-platform notification at least 7 days before the changes take effect. The "Last Updated" date at the top of this page will be revised accordingly. Your continued use of ph638 after the effective date of any update constitutes acceptance of the revised Privacy Policy.

14. Contact Us

For questions, concerns, data subject rights requests, or complaints relating to this Privacy Policy or ph638's data practices, please contact our Data Protection Officer through the following channels:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012 and can be reached through official Philippine government channels.