Privacy Policy – ph684 Casino

1 Introduction

ph684 ("we," "us," or "our") operates the online casino platform accessible at ph684.net. We are committed to protecting the privacy and personal data of every player who registers and uses the ph684 platform. This Privacy Policy has been prepared in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations.

This Privacy Policy applies to all personal data collected by ph684 through the ph684 website, mobile platform, customer support channels, and any other service we operate. It describes the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, and the rights available to you as a data subject under Philippine law.

By registering a ph684 account or continuing to use the ph684 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, please discontinue use of the ph684 platform and contact us to close your account.

2 Personal Data We Collect

ph684 collects the following categories of personal data from players and platform users:

ph684 does not collect sensitive personal information (as defined under the Data Privacy Act) unless it is strictly required for regulatory compliance purposes, in which case it will be collected only with your explicit consent.

3 How We Collect Your Data

ph684 collects personal data through the following means:

• Direct Collection: Information you provide when registering a ph684 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the ph684 platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 7 for more details on cookies.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, PayMaya, and banking partners when you initiate transactions.
• Publicly Available Sources: In limited circumstances, ph684 may verify information against publicly available records for fraud prevention or regulatory compliance purposes.

4 How We Use Your Personal Data

ph684 processes your personal data for the following purposes:

• Account Management: To create, maintain, and manage your ph684 player account, including processing your registration, verifying your identity and age (21+ requirement), and managing your account settings.
• Service Delivery: To provide access to ph684's games and features, process deposits and withdrawals, credit bonuses, and deliver the core gaming experience.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, Anti-Money Laundering (AML) obligations under Republic Act No. 9160, and other applicable Philippine laws and regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the ph684 platform and its players.
• Responsible Gaming: To monitor gaming behaviour, identify potential problem gambling patterns, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with your ph684 account.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the performance, features, and user experience of the ph684 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and ph684 news — but only where you have provided your consent to receive such communications. You may withdraw consent at any time.

5 Legal Basis for Processing

ph684 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our obligations under the ph684 Terms & Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AML obligations, and tax reporting requirements.
• Legitimate Interests: Processing necessary for ph684's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and certain optional data collection activities. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

ph684 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following limited circumstances:

• Service Providers: We engage trusted third-party service providers who process data on our behalf, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, IT infrastructure providers, and customer support platforms. All such providers are contractually bound to process your data only on ph684's instructions and in accordance with applicable data protection law.
• Regulatory Authorities: ph684 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive.
• Group Companies: ph684 may share data within its corporate group for internal administrative purposes, subject to the same data protection standards described in this Privacy Policy.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ph684's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
• Legal Protection: ph684 may disclose personal data where necessary to establish, exercise, or defend legal claims, or to protect the rights, property, or safety of ph684, its players, or the public.

7 Cookies & Tracking Technologies

The ph684 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and gather analytical data. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the ph684 platform to function correctly. These include session authentication cookies that keep you logged in to your ph684 account and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised ph684 experience.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players use the ph684 platform — such as pages visited, time spent, and navigation paths — to help us improve platform performance and user experience.
• Security & Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and protect the integrity of the ph684 platform.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph684 platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.

8 Data Retention

ph684 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account Data: Retained for the duration of your active ph684 account, and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and AML obligations under Philippine law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and its implementing regulations.
• KYC Documents: Retained for the duration of your ph684 account and for five (5) years after account closure, or longer if required by a regulatory authority or ongoing legal proceeding.
• Gaming History: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and responsible gaming monitoring purposes.
• Customer Support Records: Retained for two (2) years from the date of the last interaction, unless the matter relates to an ongoing dispute or legal claim.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, whichever occurs first.

Upon expiry of the applicable retention period, ph684 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9 Data Security

ph684 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ph684 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Secure Data Storage: Personal and financial data is stored on secure, access-controlled servers with restricted physical and logical access.
• Access Controls: Access to personal data within ph684 is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: ph684 supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of login security.
• Regular Security Audits: ph684 conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in its systems.
• Incident Response: ph684 maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, ph684 will notify the National Privacy Commission and affected players in accordance with the Data Privacy Act.

While ph684 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph684 login credentials and for notifying us immediately if you suspect unauthorised access to your account.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph684:

• Right to Be Informed: You have the right to be informed about how ph684 collects, uses, and processes your personal data — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data ph684 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data ph684 holds about you. You may update certain account details directly through your ph684 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph684's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph684 has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact ph684's Data Protection Officer using the contact details provided in Section 14. ph684 will respond to all verified data subject requests within fifteen (15) business days of receipt.

11 Children's Privacy

The ph684 platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. ph684 does not knowingly collect personal data from individuals under the age of 21.

If ph684 discovers or has reason to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all associated funds will be frozen pending investigation, and any personal data collected will be handled in accordance with applicable law, including notification to relevant authorities where required.

If you are a parent or guardian and believe that your child under the age of 21 has registered on the ph684 platform or provided personal data to us, please contact our support team immediately so that we can take appropriate action.

12 International Data Transfers

ph684 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where ph684 uses cloud infrastructure providers or technology partners with servers in other jurisdictions.

Where such international transfers occur, ph684 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses.
• Transfers to jurisdictions recognised by the National Privacy Commission as providing an adequate level of data protection.
• Other legally recognised transfer mechanisms as permitted under the Data Privacy Act and its Implementing Rules and Regulations.

You may request further information about the safeguards applicable to any international transfer of your personal data by contacting ph684's Data Protection Officer.

13 Updates to This Privacy Policy

ph684 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, ph684 will:

• Post the updated Privacy Policy on the ph684 platform with a revised "Last Updated" date.
• Where practicable, notify registered players of significant changes via their registered email address or through an in-platform notification.

Your continued use of the ph684 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you must cease using the ph684 platform and may request account closure as described in our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how ph684 protects your personal data.

14 Contact Us & Data Protection Officer

ph684 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us through the following channels:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Response Time: Within 15 business days for data subject requests; within 24 hours for general support enquiries.
• Support Hours: 24 hours a day, 7 days a week

When submitting a data subject request, please include your full name, registered ph684 email address, and a clear description of your request to help us process it efficiently. ph684 may request additional information to verify your identity before acting on any request.