ph3655 Privacy Policy

1. Who We Are

This Privacy Policy is issued by ph3655 ("ph3655", "we", "us", "our"), the operator of the online gaming platform at ph3655.co. ph3655 is a PAGCOR-regulated online gaming operator serving Filipino players in the Republic of the Philippines.

ph3655 acts as the Personal Information Controller (PIC) as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") with respect to personal data collected through the ph3655 platform, website, mobile interface, and customer support channels.

By registering a ph3655 account or using any ph3655 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein.

2. Personal Data We Collect

ph3655 collects the following categories of personal data:

3. How We Collect Your Data

ph3655 collects personal data through the following means:

• Directly from you: During account registration, KYC verification submission, customer support interactions, survey participation, and promotion enrolment;
• Automatically: Via cookies, session tracking, device fingerprinting, and server logs when you access the ph3655 platform;
• From third-party payment processors: GCash, Maya, BPI, BDO, and other payment partners may share transaction confirmation data with ph3655 to reconcile deposits and withdrawals;
• From KYC verification providers: Third-party identity verification services used to authenticate government-issued IDs and perform liveness checks;
• From PAGCOR and regulatory bodies: Where required by law or regulation, ph3655 may receive or be required to verify data against PAGCOR exclusion registers.

4. How We Use Your Personal Data

ph3655 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, verifying, and securing your ph3655 account;
• Identity verification (KYC/AML): Verifying your identity and age as required by PAGCOR and the Anti-Money Laundering Act (AMLA) of the Philippines;
• Payment processing: Facilitating deposits, processing withdrawal requests, and reconciling transaction records;
• Platform delivery: Providing access to games, sportsbook services, live casino, bonuses, and promotions;
• Customer support: Responding to queries, investigating complaints, and resolving disputes;
• Security and fraud prevention: Detecting and preventing unauthorized access, fraud, cheating, and money laundering;
• Legal and regulatory compliance: Meeting obligations under RA 10173, AMLA, PAGCOR licensing conditions, and other applicable Philippine law;
• Service improvement: Analyzing platform usage to improve game selection, site performance, and user experience;
• Responsible gaming: Monitoring for indicators of problem gambling behavior and applying responsible gaming tools where appropriate;
• Marketing and promotions: Sending you relevant offers and promotions via email or SMS, subject to your communication preferences and the right to opt out.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, ph3655 processes your personal data on the following legal bases:

• Consent: You provided informed consent at registration for processing related to account creation, marketing communications, and optional platform features;
• Contractual necessity: Processing is necessary to perform the contract between you and ph3655 (i.e., operating your account and delivering gaming services);
• Legal obligation: Processing is required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine law;
• Legitimate interest: Processing for fraud prevention, security, platform integrity, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.

6. Data Sharing & Third-Party Disclosure

ph3655 does not disclose your personal data to third parties except in the following circumstances:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, UnionBank, and other payment partners receive the minimum data necessary to process your transactions;
• KYC/Identity verification providers: Third-party providers that perform document authentication, OCR, and liveness detection as part of our KYC process;
• Game software providers: Game providers may receive a pseudonymous player identifier to facilitate game session delivery. They do not receive your full identity data;
• Regulatory and law enforcement: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine National Police, or other competent authorities as required by law or court order;
• Legal advisers and auditors: External legal counsel and compliance auditors engaged by ph3655, under confidentiality obligations;
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of ph3655's assets, player data may be transferred to the acquiring entity, subject to continued compliance with this Privacy Policy.

All third-party data processors engaged by ph3655 are contractually bound to process data only as instructed by ph3655, to implement appropriate security measures, and to comply with applicable Philippine data protection law.

7. Cookies & Tracking Technologies

ph3655 uses cookies and similar technologies (web beacons, local storage, session tokens) to operate and improve the platform. The categories of cookies used are:

• Strictly necessary cookies: Required for the platform to function — authentication tokens, session management, CSRF protection. These cannot be disabled without breaking core functionality;
• Performance cookies: Collect anonymized data on how players navigate ph3655, which games are most popular, and where errors occur — used to improve the platform;
• Functional cookies: Remember your preferences such as language setting, display mode, and last-visited game category;
• Analytics cookies: Used to measure aggregate platform usage. Data is processed in anonymized or pseudonymized form and is not used to identify individual players for marketing purposes.

8. Data Retention

ph3655 retains personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

• Active account data: Retained for the duration of your account registration plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLA record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA and BIR requirements;
• KYC documents: Retained for a minimum of five (5) years from account closure or the last transaction, whichever is later;
• Customer support records: Retained for three (3) years from the date of the support interaction;
• Marketing preference data: Retained until you withdraw consent or the account is closed;
• Technical and log data: Typically retained for 12 months unless retained longer for security investigation purposes.

Data that is no longer required is securely deleted or anonymized in accordance with ph3655's data retention procedures.

9. Data Security

ph3655 implements technical and organizational security measures appropriate to the risk level of the data processed, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph3655 servers;
• Encryption of sensitive data fields (including government ID numbers and payment credentials) at rest;
• Access controls ensuring only authorized ph3655 personnel can access personal data, on a need-to-know basis;
• Multi-factor authentication requirements for internal administrative systems;
• Regular penetration testing and security audits by independent cybersecurity firms;
• Incident response procedures for detecting, investigating, and notifying affected players and the National Privacy Commission (NPC) of any personal data breach within 72 hours of confirmation, as required by NPC Circular 16-03.

While ph3655 takes all reasonable steps to protect your data, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph3655 account credentials and for taking reasonable precautions on your own devices.

10. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by ph3655:

• Right to be Informed: The right to know what personal data ph3655 collects, how it is used, and how long it is retained (fulfilled by this Privacy Policy);
• Right of Access: The right to request a copy of the personal data ph3655 holds about you;
• Right to Rectification: The right to correct inaccurate or incomplete personal data. Most data can be updated directly in your ph3655 account settings; others require a formal request;
• Right to Erasure or Blocking: The right to request deletion or restriction of processing of your personal data where it is no longer necessary, where consent has been withdrawn, or where processing is unlawful — subject to retention obligations described in Section 8;
• Right to Object: The right to object to processing based on legitimate interest, including direct marketing;
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph3655 has violated your data privacy rights.

11. Children's Privacy

ph3655 is strictly an adult platform. Access to ph3655 is limited to persons who are 21 years of age or older as required by PAGCOR regulations. ph3655 does not knowingly collect personal data from persons under the age of 21.

If ph3655 discovers that personal data from a person under 21 has been collected, such data will be immediately deleted and the associated account will be permanently closed. If you believe a person under 21 has registered a ph3655 account, please contact support immediately at [email protected].

12. Cross-Border Data Transfers

ph3655 may transfer your personal data outside the Philippines to the extent necessary to deliver platform services — for example, to game software providers, cloud hosting providers, or KYC verification vendors whose infrastructure is located in other jurisdictions.

Any cross-border transfer of personal data by ph3655 is conducted only where the recipient country or organization provides an adequate level of data protection, or where ph3655 has implemented appropriate contractual safeguards (such as standard data transfer agreements) consistent with NPC requirements for cross-border data transfer under RA 10173.

ph3655 does not transfer player personal data to jurisdictions that do not provide equivalent data protection standards without implementing compensating contractual or technical controls.

13. Changes to This Privacy Policy

ph3655 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or PAGCOR regulatory requirements. Material changes — those that significantly affect your rights or the way we use your personal data — will be communicated to registered players via email at least seven (7) days before the changes take effect.

The date of the most recent revision is always indicated at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of ph3655 following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

14. Contact & Data Protection Officer

ph3655 has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. The DPO is responsible for overseeing compliance with RA 10173 and for handling data subject rights requests and complaints.