Privacy Policy

This Privacy Policy ("Policy") is published by ph655 ("ph655," "we," "us," "our") and applies to all personal data collected from individuals ("you," "Player," "User") who access, register on, or interact with the ph655 online gaming platform accessible at https://ph655.club (the "Platform"), including all associated services, features, games, promotions, and customer support channels.

ph655 is committed to handling personal data responsibly and in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Republic of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). Where applicable, ph655 also observes internationally recognised data protection standards.

By registering an account on ph655, accessing the Platform, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree to the terms of this Policy, you should not use the ph655 Platform.

For the purposes of Philippine data protection law, ph655 acts as the Personal Information Controller (PIC) in respect of personal data collected through the Platform. As PIC, ph655 determines the purposes and means of processing your personal information.

ph655 has designated a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy and compliance across the Platform. You may contact the ph655 DPO for data privacy matters at the contact details provided in Section 15 of this Policy.

ph655 collects the following categories of personal data, which may vary depending on the services you use and your level of account verification:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify you are 21 years of age or older as required by PAGCOR);
• Gender;
• Nationality and country of residence;
• Residential address including barangay, city, province, and postal code.

3.2 Contact Data

• Mobile number registered with your ph655 account;
• Email address;
• Preferred language for communications.

3.3 Identity Verification (KYC) Data

• Copies of government-issued identification documents (passport, driver's license, UMID, SSS card, PhilHealth ID, or equivalent);
• Selfie or live photo for biometric matching during KYC;
• Proof of address documents such as utility bills, bank statements, or barangay certification;
• Source of funds declarations where required by AML compliance thresholds.

3.4 Financial & Transaction Data

• GCash mobile number and transaction reference numbers;
• PayMaya account identifiers;
• Bank account names and last-four digits for BPI, BDO, Metrobank, and Instapay transfers;
• Visa/Mastercard last-four digits and billing postal code (no full card numbers are stored);
• Deposit and withdrawal transaction history, amounts, timestamps, and statuses;
• Account wallet balances.

3.5 Gaming Activity Data

• Game session records, bet history, win/loss records, and RNG outcome logs;
• Bonus activation and wagering progress records;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

3.6 Technical & Usage Data

• IP address and geolocation data at time of registration and login;
• Device type, operating system, browser version, and screen resolution;
• Device fingerprint identifiers for fraud and multi-account detection;
• Platform usage logs, pages visited, session duration, and click behaviour;
• Cookie identifiers and session tokens.

3.7 Communications Data

• Records of support interactions via live chat, email, or telephone;
• Marketing communication preferences and opt-in/opt-out records;
• Survey and feedback responses where voluntarily submitted.

ph655 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, respond to a survey, or participate in a promotion;
• Automatically through technology — when you access the Platform, our servers automatically record IP addresses, device data, and session behaviour through cookies, server logs, and similar tracking technologies;
• From payment processors — GCash, PayMaya, and banking partners transmit transaction confirmation data, reference numbers, and account identifiers to ph655 to reconcile deposits and withdrawals;
• From identity verification providers — third-party KYC and AML compliance services may transmit verification outcomes, document authentication results, and risk assessment scores to ph655;
• From regulatory authorities — PAGCOR and other Philippine government agencies may share information relevant to regulatory compliance, fraud prevention, or law enforcement;
• From fraud prevention partners — device fingerprinting and fraud intelligence services may provide risk signals associated with your device or IP address.

ph655 processes your personal data for the following purposes, each of which is supported by a lawful basis under the Philippine Data Privacy Act of 2012:

Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time by updating your communication preferences in your ph655 account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing conducted before the withdrawal.

ph655 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your data with the following categories of recipients only where necessary and for the specific purposes described:

• Payment Processors: GCash (Mynt – Globe Fintech Innovations, Inc.), PayMaya (Voyager Innovations, Inc.), and partner banks including BPI, BDO, and Metrobank receive the minimum data necessary to execute deposit and withdrawal transactions, including account identifiers and transaction reference numbers.
• KYC & Identity Verification Providers: Third-party identity verification services process your KYC documents and biometric data solely to verify your identity and age on behalf of ph655. These providers operate under strict data processing agreements.
• Game Content Providers: PG Soft, Pragmatic Play, Jili, and other licensed game studios receive anonymised session data necessary to deliver and maintain game functionality. No directly identifying data is shared with game providers beyond what is technically required to authenticate your session.
• Fraud Prevention Services: Device fingerprinting and fraud intelligence partners receive technical identifiers to help ph655 detect duplicate accounts, bonus abuse, and payment fraud.
• Regulatory Authorities: ph655 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where required by law, regulation, court order, or lawful demand.
• Professional Advisers: Legal counsel, auditors, and compliance consultants may access personal data under confidentiality obligations where required for the provision of professional services to ph655.

ph655 uses cookies and similar tracking technologies on the Platform to ensure correct functionality, improve user experience, prevent fraud, and analyse Platform usage. The following categories of cookies are employed:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security identifiers, and load-balancing cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language, last-played game, and responsible gaming settings to personalise your ph655 experience.
• Analytics Cookies: Collect aggregated, anonymised data about how Players navigate the Platform — pages visited, session duration, error encounters — to help ph655 improve the product.
• Security & Fraud Detection Cookies: Store device fingerprint components used to detect duplicate accounts, automated bots, and suspicious access patterns.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent access to account features and game functionality. ph655 does not use third-party advertising or retargeting cookies that track you across other websites.

ph655 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention guidelines apply:

• Account and KYC Records: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and Anti-Money Laundering Act (AMLA) obligations. In certain cases, regulators may require retention beyond this period.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of the transaction in compliance with AMLA reporting obligations.
• Support Communications: Customer support records are retained for three (3) years from the date of the interaction, or longer where a related dispute or regulatory matter remains outstanding.
• Marketing Data: Where you have opted into marketing communications, your contact details are retained until you withdraw consent or request deletion, whichever occurs first.
• Technical Logs: Server access logs and security event logs are retained for up to twelve (12) months unless required longer for ongoing security investigations.

Upon expiry of the applicable retention period, ph655 securely deletes or irreversibly anonymises personal data in accordance with industry-standard data disposal procedures.

ph655 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Encryption: All data transmitted between your device and ph655 servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across all Platform pages without exception.
• Data Encryption at Rest: Sensitive data including KYC documents, financial identifiers, and authentication credentials are encrypted at rest using AES-256 or equivalent standard encryption algorithms.
• Access Controls: Personal data is accessible only to ph655 employees and contractors who require it for their specific job functions. Access is granted on a least-privilege basis and is logged and audited.
• Multi-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication. Players are strongly encouraged to enable MFA on their ph655 accounts.
• Penetration Testing: ph655 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in Platform infrastructure.
• Incident Response: ph655 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, ph655 will notify the NPC and affected players within the timeframes mandated by the DPA.

Under the Data Privacy Act of 2012 of the Philippines and its Implementing Rules, you have the following rights regarding your personal data held by ph655:

To exercise any of the above rights, submit a written request to ph655 at [email protected] with the subject line "Data Privacy Request." ph655 will acknowledge your request within seventy-two (72) hours and respond substantively within fifteen (15) business days. Identity verification will be required before any request is actioned.

If you believe ph655 has not adequately addressed your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).

The ph655 Platform is strictly intended for persons aged 21 years and above in accordance with PAGCOR regulations governing online gambling in the Philippines. ph655 does not knowingly collect, process, or retain personal data from any individual under the age of 21.

ph655 employs age verification procedures at registration and during KYC to enforce this restriction. If ph655 becomes aware that personal data has been collected from a player who is under 21 years of age, the account will be immediately suspended, all associated data will be deleted except where retention is required by law, and the matter may be referred to PAGCOR and relevant Philippine authorities.

ph655 primarily processes personal data within the Republic of the Philippines. However, certain service providers — including game content providers, cloud infrastructure operators, and KYC verification services — may be located or operate servers in other jurisdictions.

Where personal data is transferred outside the Philippines, ph655 ensures that such transfers are subject to appropriate safeguards, which may include:

• Contractual clauses that impose data protection obligations on the recipient equivalent to those required under Philippine law;
• Transfer to jurisdictions recognised by the NPC as providing an adequate level of data protection;
• Binding corporate rules or equivalent internal policies where the recipient is part of a corporate group.

Game content providers who receive technical session data operate under standard contractual protections. No KYC documents or financial account details are transferred internationally without contractual data protection controls in place.

The ph655 Platform may contain references to third-party services, including payment providers and game studios. ph655 is not responsible for the privacy practices of any third-party service. This Policy applies solely to data collected and processed by ph655 through the Platform.

When you interact with third-party payment services such as GCash or PayMaya to fund your ph655 account, you do so under those providers' own terms and privacy policies. ph655 recommends reviewing the privacy practices of any third-party service you use in connection with your ph655 account.

ph655 may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or Platform developments. The updated Policy will be published at https://ph655.club/privacy-policy with a revised effective date.

Where material changes are made that affect your rights or how your data is processed, ph655 will notify registered players via their registered email address and/or by displaying a prominent notice on the Platform. Your continued use of ph655 following notification of material changes constitutes acceptance of the updated Policy.

We recommend reviewing this Policy periodically. For significant changes, we will provide at least seven (7) days' advance notice where practically feasible.

For all data privacy enquiries, access requests, rectification requests, erasure requests, or concerns about how ph655 processes your personal data, please contact us using the following details:

ph655 takes all data privacy complaints seriously. We are committed to resolving concerns fairly, transparently, and within the timeframes required by the Data Privacy Act of 2012. If you are not satisfied with our response, you have the right to escalate your concern to the National Privacy Commission without prejudice to other legal remedies available to you under Philippine law.