ph856 Privacy Policy

ph856 operates an online casino and sports betting platform accessible at ph856.net, designed specifically for the Filipino market. We understand that when you share personal information with us — whether during registration, KYC verification, or everyday account use — you are placing your trust in us to handle that data responsibly.

This Privacy Policy has been prepared in accordance with the Data Privacy Act of the Philippines (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC). It sets out, in plain English, the categories of personal data we process, the purposes for which we process it, the legal grounds we rely on, and the rights available to you as a data subject.

By creating an account, making a deposit, or otherwise using the ph856 platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use ph856 services and should contact our Data Protection Officer to request account closure.

This Policy should be read alongside ph856's Terms and Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference.

For the purposes of the Data Privacy Act of the Philippines, ph856 is the personal information controller in respect of the personal data you provide when using the ph856 platform. This means ph856 determines the purposes and means of processing your personal data.

Where ph856 engages third-party service providers to process personal data on our behalf — such as payment processors, identity verification providers, and cloud hosting partners — those providers act as personal information processors and are contractually bound to process your data only on ph856's documented instructions and in compliance with R.A. 10173.

ph856 collects the following categories of personal data, depending on how you interact with our platform:

ph856 does not intentionally collect sensitive personal information as defined under R.A. 10173 (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where explicitly required by applicable gaming regulations or anti-money laundering compliance obligations. Where such data must be collected, we will seek your explicit consent and process it with the additional safeguards required by law.

ph856 collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically — when you access the ph856 platform, our servers and analytics tools automatically record technical and usage data such as your IP address, device identifiers, browser type, and navigation behaviour within the platform.
• Through cookies and similar technologies — as described in Section 8 of this Policy.
• From third-party identity verification providers — during the KYC process, ph856 may use accredited third-party services to verify the authenticity of documents you submit. These providers may confirm your identity data against government databases in accordance with applicable Philippine law.
• From payment service providers — GCash, Maya, BPI, BDO, and Metrobank may share transaction confirmation data with ph856 to facilitate deposit crediting and withdrawal processing.

ph856 processes your personal data for the following purposes:

1. Account creation and management — to register your account, verify your identity at sign-up, and manage your ongoing account profile and preferences.
2. KYC and age verification — to confirm that you are at least 21 years of age and that your identity matches the payment methods used on your account, as required by Philippine gaming regulations.
3. Payment processing — to facilitate deposits and withdrawals via GCash, Maya, BPI, BDO, and Metrobank, and to reconcile transaction records.
4. Regulatory compliance and anti-money laundering — to fulfil ph856's obligations under the Anti-Money Laundering Act of the Philippines (R.A. 9160, as amended), PAGCOR regulations, and other applicable legal requirements, including the reporting of suspicious transactions to the Anti-Money Laundering Council (AMLC).
5. Platform security and fraud prevention — to detect, investigate, and prevent unauthorised account access, bonus abuse, collusion, and other fraudulent or prohibited activities.
6. Customer support — to respond to your inquiries, resolve complaints, and provide assistance related to your account and gameplay.
7. Responsible gaming — to monitor gaming behaviour, enforce deposit and loss limits, process self-exclusion requests, and fulfil ph856's duty of care obligations toward players who may be at risk of gambling-related harm.
8. Platform improvement — to analyse aggregated usage data to improve the ph856 platform, fix technical issues, and enhance the player experience.
9. Marketing and promotions — where you have given your consent, to send you information about ph856 promotions, bonuses, and new game launches. You may withdraw consent for marketing communications at any time by contacting support.
10. Legal proceedings — to establish, exercise, or defend legal claims involving ph856 or its players.

Under the Data Privacy Act of the Philippines (R.A. 10173), ph856 processes your personal data on the following legal grounds:

• Contractual necessity — processing required to perform our contract with you, including account registration, payment processing, KYC verification, and customer support.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering regulations, PAGCOR compliance requirements, and court orders or regulatory directives.
• Legitimate interests — processing necessary for ph856's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where those interests are not overridden by your privacy rights.
• Consent — processing based on your freely given, specific, informed, and unambiguous consent, particularly for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where ph856 relies on legitimate interests as a legal basis, we conduct a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may request information about any such balancing assessment by contacting our DPO.

ph856 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, and Metrobank receive the minimum data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• Identity verification providers: Accredited KYC and age verification services that process your submitted documents to confirm your identity against Philippine government records.
• Cloud infrastructure providers: Hosting and data storage providers that process data on ph856's behalf under strict data processing agreements, which prohibit use of your data for any purpose other than providing services to ph856.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine courts, and other competent authorities, where disclosure is required by law, court order, or regulatory directive.
• Responsible gaming organisations: Where a player has been self-excluded, ph856 may share the minimum necessary data with recognised Philippine responsible gaming bodies to enforce cross-operator exclusion where such schemes are operational.
• Professional advisers: Lawyers, auditors, and insurers who require access to data in connection with the provision of professional services to ph856, subject to confidentiality obligations.

ph856 uses cookies and similar technologies (such as local storage and session tokens) on the ph856 platform. These are small data files stored on your device that help us deliver a functional and personalised experience.

The types of cookies used on the ph856 platform are as follows:

• Strictly necessary cookies: Essential for the platform to function correctly — for example, session authentication tokens that keep you logged in during your visit. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Collect anonymised, aggregated data about how players use the platform — for example, which game categories are most visited, or which pages generate the most support requests. This data is used solely to improve platform performance.
• Functional cookies: Remember your preferences, such as language settings and display options, to provide a more personalised experience on return visits.
• Analytics cookies: Used by ph856's internal analytics systems to understand player behaviour patterns in aggregate. ph856 does not use third-party advertising or cross-site tracking cookies.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the ph856 platform. ph856 does not use cookies to collect sensitive personal information or to track your activity on websites outside the ph856 platform.

ph856 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, ph856 will securely delete or anonymise your personal data in accordance with the Data Privacy Act of the Philippines. Where data cannot be immediately deleted due to technical constraints (for example, in backup systems), it will be isolated from further processing until deletion is possible.

ph856 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All personal data stored on ph856 systems is encrypted at rest using AES-256. All data transmitted between your device and the ph856 platform is encrypted in transit using TLS 1.2 or higher.
• Access controls: Personal data is accessible only to ph856 personnel who require it for their specific job function. Role-based access controls and the principle of least privilege are applied across all internal systems.
• Two-factor authentication: ph856 offers two-factor authentication (2FA) for player accounts and requires it for all internal staff accounts with access to personal data systems.
• Penetration testing: ph856 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in the platform and its data infrastructure.
• Incident response: ph856 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, ph856 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay.
• Staff training: All ph856 personnel who handle personal data receive regular data privacy and security training.

Under the Data Privacy Act of the Philippines (R.A. 10173), you have the following rights in relation to your personal data held by ph856:

• Right to be informed: The right to know what personal data ph856 collects, how it is used, and with whom it is shared. This Privacy Policy is ph856's fulfilment of that right.
• Right of access: The right to request a copy of the personal data ph856 holds about you, together with information about how it is being processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by ph856. You may update basic account information directly in your account settings, or contact support for assistance with KYC-related data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Note that ph856 may be required to retain certain data for regulatory compliance purposes as outlined in Section 9.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another personal information controller where technically feasible.
• Right to object: The right to object to the processing of your personal data where ph856 relies on legitimate interests as a legal basis, including for direct marketing purposes. Where you object to marketing processing, ph856 will cease such processing immediately upon receipt of your objection.
• Right to restriction: The right to request that ph856 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph856 has processed your personal data in breach of R.A. 10173. Information on how to lodge an NPC complaint is available at the NPC's official website.

To exercise any of the above rights, please contact the ph856 Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." ph856 will acknowledge your request within five business days and will provide a substantive response within 30 days. Where requests are complex or numerous, ph856 may extend this period by a further 30 days, with prior notice to you.

The ph856 platform is strictly intended for users who are 21 years of age or older, in accordance with the minimum age requirements applicable to casino-style gambling under Philippine gaming regulations. ph856 does not knowingly collect personal data from individuals under the age of 21.

If ph856 becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, all funds will be returned to the verified payment source, and all personal data associated with the account will be deleted to the extent permitted by applicable law.

ph856 employs age verification during the registration process and as part of KYC. Any person who misrepresents their age to gain access to the ph856 platform does so in breach of our Terms and Conditions and in potential violation of Philippine law. ph856 will cooperate fully with relevant authorities in any investigation relating to underage gambling on its platform.

If you are a parent or guardian and have reason to believe that your child under 21 has created an account on ph856, please contact our Data Protection Officer immediately at [email protected].

ph856 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When we make material changes — that is, changes that significantly affect how we process your personal data or that reduce your rights — we will notify registered players via the email address or mobile number on their account, or via a prominent notice on the ph856 platform, at least 14 days before the change takes effect.

Non-material changes, such as typographical corrections, clarifications of existing provisions, or updates to reflect the addition of a new payment processor with equivalent data protections, may take effect immediately upon publication without prior notice.

The "Effective Date" shown at the top of this Policy indicates when the current version came into force. We recommend that you review this Policy periodically to stay informed about how ph856 protects your personal data. Continued use of the ph856 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ph856's processing of your personal data, please contact our Data Protection Officer using the details below. All privacy-related correspondence will be handled with strict confidentiality.

If you are not satisfied with ph856's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), the independent authority responsible for administering and enforcing R.A. 10173.

ph856 is committed to working constructively with the NPC and with all data subjects to resolve privacy concerns in a fair, transparent, and timely manner. We take every privacy inquiry seriously and will never penalise a player for exercising their data subject rights.