ph638 Privacy Policy

This Privacy Policy ("Policy") describes how ph638 ("ph638," "we," "us," or "our") collects, uses, stores, and protects the personal information of players and visitors who access the ph638 online gaming platform at ph638.net ("Platform").

ph638 is committed to protecting the privacy and personal data of all users in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as well as the requirements of the Philippine Amusement and Gaming Corporation (PAGCOR).

By registering an account on ph638 or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with this Policy, you must not use the ph638 Platform.

This Policy applies to all personal information collected through the ph638 Platform, including information collected during account registration, identity verification, financial transactions, customer support interactions, and general use of the Platform.

When you register an account, use the Platform, or contact ph638 support, we collect personal information that you provide directly, including:

• Identity Information: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine National ID, passport, driver's license, SSS/GSIS number).
• Contact Information: Philippine mobile number, email address, and residential address (city/municipality, province, region).
• Financial Information: GCash account number, PayMaya/Maya account details, bank account details (for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or other supported banks), and transaction history on the ph638 Platform.
• Account Credentials: Username and encrypted password. ph638 does not store your password in plain text.
• Support Communications: Records of your communications with ph638 customer support, including chat logs and email correspondence.

When you access the ph638 Platform, we automatically collect certain technical information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Network Information: IP address, internet service provider, and approximate geographic location derived from your IP address.
• Usage Data: Pages visited, games played, session duration, betting history, login timestamps, and navigation patterns within the Platform.
• Cookie Data: Information stored in cookies and similar tracking technologies as described in Section 6 of this Policy.

ph638 may receive personal information about you from third parties in the following circumstances:

• Identity Verification Providers: ph638 uses third-party identity verification services to confirm the authenticity of identification documents submitted during account registration or withdrawal processing.
• Payment Processors: ph638 receives transaction confirmation data from GCash, PayMaya, and banking partners to verify deposits and process withdrawals.
• Fraud Prevention Services: ph638 may receive risk signals from fraud detection partners to protect the integrity of the Platform and its players.

ph638 uses the personal information we collect for the following purposes:

ph638 does not use your personal information for purposes beyond those listed above without first obtaining your explicit consent or as otherwise required by Philippine law.

Under the Data Privacy Act of 2012, ph638 processes your personal information on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and ph638 — specifically, to operate your account, process transactions, and provide gaming services.
• Legal Obligation: Processing is required to comply with PAGCOR regulations, Philippine anti-money laundering laws, tax obligations, and other applicable legal requirements.
• Legitimate Interests: Processing is necessary for ph638's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending promotional communications — ph638 relies on your explicit consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting ph638 support.

ph638 does not sell, rent, or trade your personal information to third parties. We share your personal information only in the following limited circumstances:

ph638 engages trusted third-party service providers to assist in operating the Platform, including identity verification providers, payment processors, fraud detection services, and cloud infrastructure providers. These service providers are contractually bound to process your personal information only on ph638's instructions and in accordance with applicable Philippine data protection law.

ph638 may disclose your personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts where required to do so by Philippine law, a valid court order, or a lawful regulatory request. ph638 will notify you of such disclosures where legally permitted to do so.

In the event of a merger, acquisition, or sale of all or substantially all of ph638's assets, your personal information may be transferred to the acquiring entity. ph638 will notify you of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

ph638 may share your personal information with third parties for purposes not described in this Policy only with your explicit prior consent. You may withdraw such consent at any time by contacting ph638 support.

Cookies are small text files placed on your device when you visit the ph638 Platform. They allow the Platform to recognize your device, maintain your session, and remember your preferences across visits. ph638 also uses similar technologies such as local storage and session storage for equivalent purposes.

• Essential Cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and responsible gaming limits. These improve your experience but are not strictly necessary.
• Analytics Cookies: Used to collect anonymized data about how players use the Platform — such as which games are most popular and where players encounter difficulties. This data helps ph638 improve the Platform. Analytics data is aggregated and does not identify individual players.

ph638 does not use third-party advertising cookies or behavioral tracking cookies that profile you for marketing purposes.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use the ph638 Platform. Instructions for managing cookies are available in the help documentation of your browser.

ph638 implements a range of technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and ph638 servers is encrypted using TLS (Transport Layer Security) protocols.
• Encryption at Rest: Sensitive personal data, including financial information and identity documents, is encrypted when stored on ph638 servers.
• Access Controls: Access to personal data is restricted to ph638 personnel and service providers who require it to perform their functions. All access is logged and audited.
• Password Security: Account passwords are stored using industry-standard one-way hashing algorithms. ph638 staff cannot view your password in plain text.
• Regular Security Assessments: ph638 conducts regular security assessments and vulnerability testing to identify and address potential weaknesses in our systems.
• Incident Response: ph638 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights, ph638 will notify the National Privacy Commission and affected players in accordance with the Data Privacy Act of 2012.

While ph638 takes all reasonable steps to protect your personal information, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying ph638 immediately if you suspect unauthorized access to your account.

ph638 retains your personal information for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR and anti-money laundering regulations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act and PAGCOR requirements.
• Identity Verification Documents: Retained for the duration of your account and for five (5) years following account closure.
• Support Communications: Retained for three (3) years following the resolution of the relevant support interaction.
• Analytics Data: Anonymized analytics data may be retained indefinitely as it cannot be used to identify individual players.
• Self-Exclusion Records: Retained for a minimum of seven (7) years to prevent re-registration by self-excluded players.

Upon expiry of the applicable retention period, ph638 will securely delete or anonymize your personal information in accordance with our data disposal procedures.

As a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal information held by ph638:

• Right to Be Informed: You have the right to be informed about how ph638 collects and processes your personal information. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal information ph638 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal information ph638 holds about you. You may update basic account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, subject to ph638's legal retention obligations under PAGCOR regulations and Philippine law.
• Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes. You may opt out of promotional communications at any time through your account settings.
• Right to Data Portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph638 has violated your data privacy rights.

To exercise any of these rights, please contact ph638's Data Protection Officer using the contact details provided in Section 12 of this Policy. ph638 will respond to all data rights requests within thirty (30) days of receipt, as required by the Data Privacy Act.

Please note that certain rights may be limited where ph638 is required to retain or process your data to comply with PAGCOR regulations, anti-money laundering laws, or other applicable Philippine legal obligations.

The ph638 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. ph638 does not knowingly collect personal information from individuals under the age of 21.

During account registration, ph638 requires all applicants to confirm that they are 21 years of age or older and to provide a date of birth. ph638 reserves the right to request documentary proof of age at any time and will permanently close any account found to belong to a person under 21 years of age.

If you are a parent or guardian and believe that a minor has registered an account on ph638 or provided personal information to ph638 without your consent, please contact ph638 support immediately. ph638 will take prompt action to close the account and delete the associated personal information.

ph638 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When material changes are made, ph638 will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Your continued use of the ph638 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Policy periodically to stay informed about how ph638 protects your personal information. If you have any questions about changes to this Policy, please contact our Data Protection Officer.

ph638 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal information or this Policy, please contact our DPO:

• Data Protection Officer: ph638 Data Privacy Team
• Email: [email protected]
• General Support: [email protected]
• Response Time: ph638 aims to acknowledge all privacy-related inquiries within 48 hours and to provide a full response within 30 days.

If you are not satisfied with ph638's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012.