ph659 Privacy Policy

1.1 This Privacy Policy ("Policy") describes how ph659 ("ph659," "we," "us," "Company") collects, processes, uses, shares, stores, and protects personal data provided by or obtained about users ("you," "Player," "Data Subject") of the ph659 Platform available at ph659.club.

1.2 This Policy applies to all personal data collected through:

• Account registration and the ph659 login process;
• Use of ph659 games, features, promotions, and services;
• Payment transactions including GCash, PayMaya, BPI, BDO, and Metrobank;
• KYC identity verification;
• Customer support interactions via live chat and email;
• Browsing and interaction with ph659.club, including cookies and similar technologies.

1.3 By registering a ph659 account or using the ph659 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein, to the extent such consent is the applicable legal basis for processing.

1.4 This Policy does not apply to third-party websites or services linked to or from the ph659 Platform. ph659 is not responsible for the privacy practices of any third-party operator.

2.1 ph659 acts as the Data Controller for personal data collected through the ph659 Platform. As Data Controller, ph659 determines the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

2.2 ph659 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and for responding to data subject requests and inquiries. Contact details for the ph659 DPO are provided in Section 17 of this Policy.

3.1 ph659 collects personal data in the following categories:

Identity Data

• Full legal name as appearing on a Philippine government-issued ID;
• Date of birth;
• Government ID type and ID number (PhilSys, UMID, passport, driver's license);
• Selfie photograph submitted for KYC verification;
• Copy of government-issued identification document.

Contact Data

• Philippine mobile telephone number (primary account identifier);
• Email address;
• Province and city of residence (general location — not precise GPS coordinates).

Financial Data

• GCash mobile number associated with your GCash wallet;
• PayMaya account number;
• Philippine bank account name and number (for bank transfer withdrawals);
• Transaction records including deposit amounts, dates, methods, and withdrawal records.

Gaming Data

• Game session history, including games played, bet amounts, win/loss records, and duration;
• Bonus and promotion claims and wagering activity;
• Account balance at transaction points;
• Responsible gaming settings including any limits, cool-offs, or self-exclusion requests.

Technical Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session login and logout timestamps;
• Cookie identifiers and similar tracking data (see Section 10).

Communications Data

• Content of live chat interactions with ph659 support;
• Content of emails sent to ph659 support addresses;
• Marketing communication preference settings.

4.1 Data You Provide Directly. ph659 collects personal data you actively provide during account registration, KYC verification, payment transactions, support interactions, and promotional form submissions.

4.2 Data Collected Automatically. When you access ph659.club, our servers and analytics systems automatically record technical data including your IP address, device characteristics, browser type, pages visited, time spent on each page, and interactions with the game lobby.

4.3 Data from Payment Providers. When you transact through GCash, PayMaya, or Philippine banking channels, ph659 receives transaction confirmation data from those providers, including the registered account name, mobile number, and transaction reference number. ph659 does not receive or store your GCash MPIN, PayMaya PIN, or online banking passwords.

4.4 Data from KYC Verification Partners. ph659 works with regulated KYC verification service providers to confirm the authenticity of identity documents submitted by players. These partners return a verification result (verified / not verified / requires review) along with the data points confirmed. KYC partner data practices are governed by their own PDPA-compliant privacy policies.

5.1 ph659 processes your personal data for the following specified purposes:

6.1 ph659 processes personal data on the following legal bases as provided under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted when registering your ph659 account, including account management, payment processing, and game service delivery;
• Legal Obligation: Processing required to comply with applicable Philippine law, including AML/CTF regulations, PAGCOR regulatory requirements, and tax reporting obligations;
• Consent: Processing for marketing communications and certain non-essential analytics, where your explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing;
• Legitimate Interests: Processing for fraud prevention, network security monitoring, and platform improvement analytics, where ph659's legitimate business interests are pursued in a manner that does not override your fundamental privacy rights.

7.1 ph659 does not sell, rent, or exchange your personal data with unaffiliated third parties for their independent commercial or marketing purposes.

7.2 ph659 shares personal data with the following categories of regulated third parties only to the extent necessary for the stated purpose:

• KYC/AML Verification Partners: Regulated identity verification service providers engaged to authenticate identity documents and perform AML screening in compliance with Philippine law;
• Payment Processors: GCash (Mynt/Globe Fintech Innovations), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and their respective payment infrastructure providers, solely to process your transactions;
• Game Content Providers: Licensed game studios whose titles are hosted on the ph659 Platform, receiving only technical session data necessary to render games and record outcomes. Game providers do not receive your name, payment details, or ID documents;
• Cloud Hosting and IT Infrastructure: Providers of server hosting, database management, and cybersecurity services used to operate ph659.club, operating under strict data processing agreements;
• Legal and Regulatory Authorities: Philippine law enforcement agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, courts, or other government authorities where disclosure is required by law, court order, or regulatory mandate.

7.3 All third-party service providers engaged by ph659 are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with ph659's written instructions and applicable Philippine data privacy law.

8.1 ph659 operates primarily within the Philippines and processes the majority of personal data on servers located in or serving the Philippine market. Some third-party service providers — particularly game content studios, cloud infrastructure providers, and KYC verification partners — may process data on servers located outside the Philippines.

8.2 Where personal data is transferred to or processed in jurisdictions outside the Philippines, ph659 ensures that appropriate safeguards are in place, including:

• Data processing agreements requiring the recipient to apply data protection standards equivalent to those required under Philippine law;
• Standard contractual clauses where required by the National Privacy Commission's cross-border transfer guidelines;
• Processing limited to jurisdictions the NPC has recognized as providing adequate data protection.

9.1 ph659 retains personal data for the minimum period necessary for the stated processing purpose, as follows:

9.2 Retention periods may be extended where ph659 is subject to an ongoing legal proceeding, regulatory investigation, or regulatory reporting obligation that requires retention beyond the standard period.

9.3 At the end of the applicable retention period, personal data is securely deleted using irreversible deletion methods, or irreversibly anonymized such that the data can no longer be attributed to an identifiable individual.

10.1 ph659.club uses cookies and similar tracking technologies to operate the Platform, personalize your experience, and, where consented to, analyze Platform usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function — including session management, authentication, security tokens, and fraud prevention signals. These cannot be disabled without rendering the Platform non-functional;
• Functional Cookies: Remember your preferences such as language settings, game filter preferences, and "stay signed in" selections. Disabling these may reduce personalization but will not prevent basic Platform use;
• Analytics Cookies: Collect anonymized or pseudonymized data about how pages are used, which features are most accessed, and where users encounter difficulties. Used to improve the ph659 Platform. Require your consent;
• Marketing Cookies: Used to present relevant ph659 promotional content. Require your explicit opt-in consent and can be declined or withdrawn at any time through your browser cookie settings.

10.2 You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies on a per-site basis. Note that blocking strictly necessary cookies will prevent access to your ph659 account.

11.1 ph659 implements the following technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between user devices and ph659 servers;
• Encryption of sensitive stored data including financial records and identity documents;
• Role-based access control — ph659 staff access personal data only to the extent required for their specific job function;
• Multi-factor authentication for all ph659 internal systems accessing personal data;
• Regular security vulnerability assessments and penetration testing;
• Intrusion detection systems and real-time security monitoring;
• Incident response procedures in accordance with NPC breach notification requirements.

11.2 No data security system is impenetrable. While ph659 takes all reasonable precautions, we cannot guarantee absolute security against all threats. In the event of a personal data breach that poses a real risk of harm to data subjects, ph659 will notify the National Privacy Commission and affected players within 72 hours of becoming aware of the breach, as required under RA 10173.

12.1 The ph659 Platform is strictly prohibited to individuals under 21 years of age. ph659 does not knowingly collect or process personal data of persons under 21 years old.

12.2 If ph659 becomes aware that personal data of an underage individual has been collected — whether through a circumvented age verification process or any other means — that account will be immediately suspended, all personal data associated with the account will be deleted as promptly as permitted by applicable law, and the matter will be reported as appropriate.

12.3 If you believe that a person under 21 years of age has registered or is accessing a ph659 account, please contact ph659 support immediately via on-site live chat.

13.1 To exercise any of the data subject rights described in this Policy, you may:

• Contact ph659 support via on-site live chat (24/7) for immediate assistance with straightforward requests such as data access or preference updates;
• Send a written request to [email protected] with the subject line "Data Subject Rights Request" — include your registered mobile number and the specific right(s) you wish to exercise.

13.2 ph659 will acknowledge your request within 3 business days and provide a substantive response within 15 business days. Complex requests may require up to 30 business days — ph659 will communicate any extension and the reason for it.

13.3 ph659 may require verification of your identity before processing a data subject rights request to prevent unauthorized access to or modification of another person's data. Verification is proportionate to the sensitivity and scope of the request.

13.4 Where a request is refused, ph659 will provide a written explanation of the reason for refusal and inform you of your right to escalate the matter to the National Privacy Commission of the Philippines.

14.1 ph659 sends promotional communications — including bonus offers, game release announcements, tournament invitations, and seasonal promotions — via SMS to Philippine mobile numbers, email, and in-platform notifications, where you have consented to receive such communications at registration or in your account settings.

14.2 You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences in your ph659 account settings dashboard;
• Replying STOP to any ph659 SMS message;
• Clicking the unsubscribe link in any ph659 marketing email;
• Contacting ph659 support via live chat or email with a written opt-out request.

14.3 Opt-out requests for marketing communications are processed within 5 business days. You will continue to receive transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts, and account notifications) regardless of marketing preferences, as these are required for the operation of your account.

15.1 The ph659 Platform may contain references to or integrations with third-party services, including payment providers (GCash, PayMaya), game studios, and banking platforms. These third parties operate under their own privacy policies and terms of service, which ph659 does not control.

15.2 ph659 is not responsible for the data practices of third-party services you access in connection with ph659 transactions. We recommend reviewing the privacy policies of GCash, PayMaya, and your Philippine bank before initiating transactions.

16.1 ph659 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform features. The updated effective date will always be displayed at the top of this page.

16.2 For material changes to this Policy — particularly changes that expand the scope of data collection, introduce new sharing arrangements, or meaningfully affect your rights — ph659 will provide prior notice to registered players via the contact information on file, or via a prominent in-platform notification, at least 14 days before the changes take effect.

16.3 Your continued use of the ph659 Platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you may request account closure in accordance with the Terms & Conditions.

17.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph659, please contact us through the following channels:

• Live Chat: 24/7 on-site live chat at ph659.club — fastest channel for urgent privacy or account security concerns;
• Privacy Email: [email protected] — please use subject line "Privacy Policy Inquiry" or "Data Subject Rights Request";
• Support Language: Tagalog and English;
• Response Time: Live chat under 5 minutes; email within 2 business days for general inquiries, 15 business days for formal data subject rights requests.

17.2 National Privacy Commission. If you believe ph659 has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission of the Philippines. Details on how to file a complaint are available on the NPC's official government website.