ph647 Privacy Policy

This Privacy Policy applies to all personal data processed by ph647 in connection with the registration, operation, and management of Member accounts on the ph647 online gaming platform. It applies regardless of the device used to access the platform — desktop browser, mobile browser, or any other access method — and covers all personal data collected from the time of initial registration through account closure and the applicable post-closure data retention period.

This Policy should be read together with ph647's Terms & Conditions and Responsible Gaming Policy. By registering a Member account on ph647, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein, to the extent that consent is the applicable legal basis for the relevant processing activity.

ph647 is the personal information controller responsible for the personal data of its Members collected and processed through the ph647 platform. As a PAGCOR-licensed online gaming operator, ph647 is subject to PAGCOR's data governance requirements in addition to RA 10173.

ph647 has designated a Data Protection Officer (DPO) in accordance with Section 21 of RA 10173 and NPC Circular 16-01. The DPO is responsible for overseeing ph647's compliance with RA 10173, handling data subject inquiries and complaints, and liaising with the National Privacy Commission on compliance matters.

ph647 collects and processes the following categories of personal data about its Members:

ph647 collects personal data through the following channels and interactions:

• Direct collection at registration: When you create a ph647 account, you provide your name, contact details, date of birth, and a password. This data is collected directly from you and is necessary to establish and identify your account.
• KYC document submission: When you submit identity documents and photographs through the ph647 KYC portal as required for account verification and withdrawal eligibility.
• Platform use: Data about your gaming activity, sessions, and wallet transactions is generated automatically as a consequence of your use of the ph647 platform. This data is collected to enable platform functionality, maintain accurate records, and support regulatory reporting.
• Payment channels: When you make a deposit or withdrawal, ph647 receives transaction reference data from GCash, Maya, or your bank. ph647 does not receive your full GCash or bank login credentials — only the transaction confirmation and the account reference necessary to match the payment to your ph647 wallet.
• Technical data collection: Certain technical data — IP address, device type, session duration — is collected automatically when you access ph647.club via server logs and, where applicable, cookies and similar technologies (see Section 9).
• Customer support interactions: Records of communications between you and ph647's support team are retained as part of the account history to ensure continuity of service and compliance with PAGCOR requirements for complaint handling records.

ph647 processes your personal data for the following purposes, each of which is grounded in one or more legal bases under RA 10173:

1. Account creation and management — Processing is necessary for the performance of the contract between you and ph647 (the Terms & Conditions). Without processing your identity and contact data, ph647 cannot establish or maintain your Member account.
2. Identity verification (KYC) — Processing is required by law and by ph647's PAGCOR license conditions. PAGCOR mandates that licensed online gaming operators verify the identity of all Members before permitting withdrawals and at defined transaction thresholds.
3. Payment processing — Processing is necessary for the performance of the contract (depositing and withdrawing funds from your ph647 wallet) and for compliance with applicable financial regulations.
4. Gaming activity recording — Processing is necessary for contract performance (recording bets placed and results) and for compliance with PAGCOR's audit and reporting requirements. Accurate game records are a licensing obligation.
5. Regulatory and AMLA compliance — Processing is required by law, specifically the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR regulations, and any other applicable Philippine law. This includes transaction monitoring, suspicious transaction identification, and mandatory reporting to the Anti-Money Laundering Council.
6. Platform security and fraud prevention — Processing is based on legitimate interests: maintaining the security of the ph647 platform, preventing fraudulent access, detecting multi-accounting, and protecting the interests of the broader Member community.
7. Customer support — Processing is necessary for the performance of the contract (providing you with the support services included in the ph647 platform) and based on legitimate interests in maintaining service quality records.
8. Responsible gaming monitoring — Processing is required by PAGCOR's responsible gaming framework and is in the vital interests of Members where problem gambling indicators are detected. This processing supports ph647's legal obligation to implement effective responsible gaming measures.
9. Marketing communications — Where you have given explicit consent, ph647 may send you promotional communications about bonuses, new games, and platform updates. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

ph647 is required by PAGCOR to verify the identity and age of all Members as a condition of its operating license. The minimum age for participation on ph647 is twenty-one (21) years, consistent with PAGCOR's requirements for online gaming operators in the Philippines. KYC verification is mandatory before any withdrawal is processed, and at certain transaction thresholds triggered by AMLA monitoring requirements.

KYC documents submitted to ph647 — including government ID scans, proof of address documents, and selfie photographs — are processed solely for the purposes of identity verification, age verification, and AMLA compliance. These documents are classified as sensitive personal information under RA 10173 and are subject to the heightened security and access controls described in Section 10.

ph647 may use third-party identity verification technology providers to assist with document authenticity checks and liveness verification. Any such provider is engaged under a data processing agreement that restricts them to processing your KYC data solely on ph647's instructions and prohibits independent use or sharing of the data.

ph647 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is shared only in the following specific circumstances, each with appropriate safeguards:

• PAGCOR and regulatory bodies: ph647 is required to provide member data, transaction records, and gaming activity data to PAGCOR upon request and through mandatory periodic reporting. This sharing is required by law and cannot be restricted by Member consent preferences.
• Anti-Money Laundering Council (AMLC): ph647 is a covered person under the AMLA and is required to report covered transactions (single cash transactions exceeding ₱500,000 or equivalent) and suspicious transactions to the AMLC. Reports filed with the AMLC are confidential under AMLA and may not be disclosed to the subject member.
• Payment processors: Transaction data is shared with GCash, Maya, BPI, BDO, and other payment service providers to the extent necessary to process deposits and withdrawals. These providers receive only the data needed to complete the specific transaction.
• Identity verification providers: KYC document data may be processed by third-party verification technology providers engaged by ph647 under data processing agreements, as described in Section 6.
• Game software providers: Technical session data (game ID, bet amount, result) is exchanged with licensed game software providers to enable gameplay and resolve disputes. No identity data is shared with game providers beyond what is necessary for session management.
• Law enforcement and courts: ph647 will disclose personal data to Philippine law enforcement agencies and courts where required by a valid legal process, court order, or legal obligation. Where legally permitted, ph647 will notify the affected Member of such a disclosure.
• Business transfers: In the event of a merger, acquisition, or transfer of ph647's business operations, Member personal data may be transferred to the acquiring entity subject to equivalent privacy protections and required regulatory approvals from PAGCOR and NPC.

ph647 retains personal data for the periods necessary to fulfill the purposes described in this Policy and to comply with applicable legal retention requirements. The following retention periods apply:

• Account data and gaming records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR's record-keeping obligations for licensed operators.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure, as required by AMLA and PAGCOR regulations.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, as required by AMLA.
• Customer support communications: Retained for three (3) years following the closure of the relevant support ticket or account, whichever is later, to support dispute resolution and service quality review.
• Technical and session data: Retained for twelve (12) months, after which it is aggregated or anonymized unless needed for an ongoing security investigation or regulatory inquiry.
• Marketing consent records: Retained for as long as the Member holds an active account and for two (2) years following account closure, to document the lawful basis for any marketing communications sent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph647's data disposal procedure. Anonymized data may be retained for statistical and analytical purposes indefinitely, as it no longer constitutes personal data under RA 10173.

ph647 uses cookies and similar browser-based technologies on ph647.club for the following purposes:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without preventing access to the platform.
• Functional cookies: Remember your preferences such as language settings, last-visited game category, and display preferences. These improve your experience but are not strictly necessary for platform access.
• Analytics cookies: Used to understand how Members navigate the platform — which pages are visited most, where Members encounter errors, and how long sessions typically last. This data is aggregated and used to improve platform performance. Where analytics cookies are used, only anonymized or pseudonymized data is processed.
• Security and fraud prevention: Device fingerprinting and behavioral analytics technologies are used to detect suspicious access patterns, identify potential multi-accounting, and protect Member accounts from unauthorized access. This processing is based on legitimate interests in platform security.

You can manage cookie preferences through your browser's cookie settings. Note that disabling essential cookies will prevent you from logging in to ph647. ph647 does not use third-party advertising cookies or share cookie data with advertising networks.

ph647 implements appropriate technical and organizational security measures to protect Member personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and ph647's servers is encrypted using Transport Layer Security (TLS 1.2 or higher) with 256-bit encryption. This applies to login, gameplay, payment transactions, and all other data exchanges.
• Encryption at rest: Sensitive personal data — including KYC documents, password hashes, and financial data — is encrypted at rest using AES-256 encryption on ph647's servers.
• Access controls: Access to Member personal data within ph647's systems is restricted to employees with a demonstrated need to access that data for their job function. Access is granted on the principle of least privilege and is logged and audited.
• Password security: Member account passwords are stored as salted cryptographic hashes. ph647's systems do not store or have access to plain-text passwords. In the event of a system compromise, stored password hashes do not expose original passwords.
• Two-factor authentication: ph647 offers and recommends 2FA for all Member accounts. Administrative access to ph647's internal systems requires 2FA as a mandatory security control.
• Security audits: ph647 conducts regular security assessments, including vulnerability scanning and penetration testing, in accordance with PAGCOR's technical security requirements for licensed online gaming operators.
• Incident response: ph647 maintains a documented personal data breach response procedure including breach containment, impact assessment, NPC notification (within 72 hours of discovery where required), and Member notification procedures.

Under Republic Act No. 10173, you hold the following rights regarding your personal data processed by ph647. These rights are enforceable and ph647 will respond to verified requests within fifteen (15) business days:

To exercise any of the above rights, contact ph647's Data Protection Officer via live chat on ph647.club (request DPO escalation) or by emailing [email protected] with "Data Subject Request" in the subject line. ph647 may require identity verification before processing a data subject request to protect against unauthorized access to personal data.

As a licensed online gaming operator under PAGCOR, ph647's data processing activities are subject to PAGCOR's regulatory oversight in addition to RA 10173. PAGCOR has the right to audit ph647's data handling practices and to require production of Member records and transaction data in the exercise of its regulatory functions. Processing of Member data for PAGCOR compliance purposes is required by law and is not subject to Member consent or objection.

ph647 is a "covered person" under the Anti-Money Laundering Act of 2001 (RA 9160, as amended by RA 10365 and RA 11521). This means ph647 is legally required to:

• Conduct Customer Due Diligence (CDD) on all Members, including enhanced due diligence for high-risk profiles;
• Monitor transactions for patterns consistent with money laundering, terrorist financing, or other financial crimes;
• File Covered Transaction Reports (CTRs) with the AMLC for single cash transactions exceeding the applicable threshold;
• File Suspicious Transaction Reports (STRs) with the AMLC for transactions that raise red flags regardless of amount;
• Maintain transaction and KYC records for the retention periods specified by AMLA regulations;
• Freeze and withhold funds pending AMLC investigation where a freeze order or restraining order is issued by a competent authority.

AMLA compliance activities are conducted under a legal obligation. ph647 cannot notify Members of STRs filed with the AMLC, as disclosure of such reports is prohibited by AMLA.

The ph647 platform is strictly restricted to individuals who are twenty-one (21) years of age or older. ph647 does not knowingly collect personal data from persons under the age of 21. As part of the registration and KYC process, ph647 verifies the age of all Members and will immediately close any account found to have been registered by a person who does not meet the minimum age requirement.

If ph647 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will promptly delete that data and close the associated account, with any Real Money Funds handled in accordance with applicable PAGCOR guidelines.

If you believe a minor has registered an account on ph647, please contact our support team immediately via live chat so that the matter can be investigated and addressed promptly.

ph647 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidance, or ph647's data processing practices. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Material changes to this Policy that affect Members' rights or expand the purposes for which personal data is processed will be communicated to registered Members via email to their registered address and/or via a prominent notice on ph647.club, at least fifteen (15) days before taking effect. Continued use of the ph647 platform after the effective date of a revised Policy constitutes acceptance of the updated terms.

ph647 encourages Members to review this Privacy Policy periodically. The current version is always available at ph647.club/privacy-policy.

For any privacy-related inquiries, data subject requests, or complaints regarding ph647's processing of your personal data, you may contact us through the following channels:

If you are not satisfied with ph647's response to a data privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines through its official complaint process. ph647 will cooperate fully with any NPC investigation or compliance review.