ph5661 Privacy Policy

ph5661 ("we," "us," or "our") operates the ph5661 online gaming platform accessible at ph5661.net (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers with, or uses our Platform, including players based in Manila, Cebu, Davao, Quezon City, Makati, and across the Philippines.

This Privacy Policy describes how ph5661 collects, uses, stores, shares, and protects personal data in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR) as administered by the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all personal data collected through the ph5661 Platform, including data collected via account registration, gameplay, payment transactions, customer support interactions, and any other use of ph5661 services. It applies to all players and visitors regardless of their location within the Philippines.

This Privacy Policy should be read together with the ph5661 Terms & Conditions, which govern your use of the Platform. Terms defined in the Terms & Conditions carry the same meaning in this Privacy Policy unless otherwise stated.

For the purposes of the Data Privacy Act of 2012, ph5661 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes through the Platform. As PIC, ph5661 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

ph5661 has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection compliance within the organization, serving as the primary point of contact for data subjects exercising their rights, and liaising with the National Privacy Commission on data protection matters.

Contact details for the ph5661 Data Protection Officer are provided in Section 15 of this Privacy Policy.

ph5661 collects the following categories of personal data, depending on how you interact with the Platform:

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Government-issued identification number (e.g., PhilSys ID, passport, driver's license)
• Nationality and country of residence
• Username and account credentials (password stored in hashed form only)

• Email address
• Mobile phone number
• Residential address (province, city/municipality)

• GCash or PayMaya / Maya account reference (partial, for verification purposes)
• Bank account details (bank name, account holder name — not full account numbers)
• Debit card details (card type, last four digits only)
• Deposit and withdrawal transaction history
• Wallet balance and transaction timestamps

• Game session history, including games played, wagers placed, and outcomes
• Bonus and promotion participation records
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction records

• IP address and approximate geolocation (country/region level)
• Device type, operating system, and browser type
• Session timestamps and login history
• Cookie identifiers and similar tracking data (see Section 7)

ph5661 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the Platform, including through cookies, web beacons, and server logs (see Section 7).
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; age verification data from document verification services. All third-party data sources are contractually bound to comply with the DPA.
• Regulatory sources: Information received from PAGCOR or other Philippine government agencies in connection with regulatory compliance, AML obligations, or legal proceedings.

ph5661 does not purchase personal data from data brokers or any other commercial data sources. All personal data collected by ph5661 originates from the data subject directly or from regulated, contractually bound service providers.

ph5661 processes your personal data for the following specific, legitimate purposes:

ph5661 does not process your personal data for any purpose not listed above without first obtaining your explicit consent or as otherwise required by applicable Philippine law.

Under the Data Privacy Act of 2012, ph5661 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and ph5661 — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for ph5661's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where your freely given, specific, informed, and unambiguous consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ph5661 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Help ph5661 understand how players use the Platform — which pages are visited most, where players encounter difficulties, and how to improve the overall experience. Analytics data is aggregated and anonymized where possible.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content about ph5661 services. You may opt out of marketing cookies at any time through your account settings.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the ph5661 Platform. ph5661 does not use third-party advertising networks or cross-site tracking technologies.

ph5661 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors: GCash, PayMaya / Maya, and Philippine banking partners receive the minimum data necessary to process your deposit and withdrawal transactions. All payment partners are subject to data processing agreements and Philippine financial regulations.
• KYC & identity verification providers: Third-party document verification services that assist ph5661 in meeting its PAGCOR-mandated KYC obligations. These providers process identity documents under strict confidentiality obligations.
• Game content providers: Software providers whose games are hosted on the ph5661 Platform may receive anonymized session data for game performance and fairness auditing purposes. No personally identifiable information is shared with game providers beyond what is technically necessary.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies, where disclosure is required by law, regulation, or court order.
• IT & security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on ph5661's behalf under data processing agreements that require compliance with the DPA.

ph5661's primary data processing infrastructure is located within the Philippines. Where personal data is transferred to service providers or infrastructure located outside the Philippines — for example, cloud hosting services with data centers in the Asia-Pacific region — ph5661 ensures that such transfers comply with the cross-border data transfer requirements of the Data Privacy Act of 2012 and the NPC's implementing rules.

Specifically, ph5661 ensures that international data transfers are protected by one or more of the following safeguards:

• Contractual clauses that impose data protection obligations equivalent to those under Philippine law on the receiving party.
• Transfers to jurisdictions that the NPC has recognized as providing an adequate level of data protection.
• Binding corporate rules where data is transferred within a group of companies subject to ph5661's data governance framework.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting the ph5661 Data Protection Officer (see Section 15).

ph5661 retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, as required by PAGCOR and AMLA regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and Bureau of Internal Revenue (BIR) requirements.
• Customer support records: Retained for three (3) years from the date of the last interaction, or longer if the interaction relates to an ongoing dispute or regulatory matter.
• Marketing consent records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.
• Technical and device logs: Retained for twelve (12) months from the date of collection, unless required for longer retention in connection with a security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with ph5661's data disposal procedures. Anonymized data may be retained indefinitely for statistical and analytical purposes.

ph5661 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data in transit is protected by TLS 1.2 or higher (256-bit SSL). Sensitive data at rest, including passwords and government ID numbers, is encrypted using industry-standard algorithms.
• Access controls: Personal data is accessible only to ph5661 personnel and authorized service providers who have a legitimate need to access it. Role-based access controls and the principle of least privilege are enforced throughout ph5661's systems.
• Two-factor authentication: Available to all players and mandatory for ph5661 administrative staff accessing player data systems.
• Regular security audits: ph5661 conducts periodic penetration testing, vulnerability assessments, and security audits of its Platform and data processing systems.
• Incident response: ph5661 maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk of serious harm, ph5661 will notify the NPC within 72 hours and affected data subjects without undue delay, in accordance with NPC Circular 16-03.
• Staff training: All ph5661 personnel with access to personal data receive regular data protection training and are bound by confidentiality obligations.

While ph5661 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your ph5661 Account and to enable two-factor authentication to maximize the security of your account.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph5661:

To exercise any of these rights, please contact the ph5661 Data Protection Officer using the contact details in Section 15. ph5661 will respond to all data subject requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, ph5661 may extend this period by a further thirty (30) days, with prior notification to you.

ph5661 will not charge a fee for processing data subject requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. ph5661 may request proof of identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties.

If you are not satisfied with ph5661's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The ph5661 Platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. ph5661 does not knowingly collect personal data from individuals under the age of 21.

ph5661 employs age verification technology and document-based KYC checks to prevent underage access to the Platform. If ph5661 becomes aware that personal data has been collected from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account.

ph5661 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The effective date at the top of this document indicates when the current version came into force.

When material changes are made to this Privacy Policy, ph5661 will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect. For changes required by law or regulatory directive, ph5661 may implement updates with immediate effect and notify players as soon as practicable thereafter.

The most current version of this Privacy Policy will always be available on the ph5661 Platform. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with any amendment, you may request account closure in accordance with the ph5661 Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph5661, please contact our Data Protection Officer:

• Data Protection Officer: ph5661 Data Protection Office
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the ph5661 Platform
• Response Time: Within 30 calendar days of receipt of your request
• Languages: English and Filipino

If you wish to lodge a complaint about ph5661's data processing practices with the Philippine data protection authority, you may contact the National Privacy Commission (NPC) through its official government channels. ph5661 will cooperate fully with any NPC investigation or inquiry.