ph3656 Privacy Policy

This Privacy Policy applies to all personal data processed by ph3656 in connection with your access to and use of the ph3656 online gaming platform, including the website at ph3656.cam, any mobile-optimised interface, and all associated customer support and payment interactions.

ph3656 is the data controller for personal data processed under this Policy. "Personal data" has the meaning given under the Philippine Data Privacy Act of 2012 (RA 10173) — that is, any information from which the identity of an individual can reasonably and directly be ascertained, or when put together with other information, would directly and certainly identify an individual.

This Privacy Policy should be read alongside the ph3656 Terms & Conditions, which are incorporated by reference. By registering an account on ph3656 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

The data controller responsible for your personal data on the ph3656 Platform is ph3656, the operator of the online gaming platform accessible at ph3656.cam, holding a valid PAGCOR online gaming licence and registered with the National Privacy Commission of the Philippines as required under RA 10173.

ph3656 has designated a Data Protection Officer (DPO) as required under NPC regulations. Contact details for the ph3656 DPO are provided in Section 15 of this Policy.

ph3656 collects the following categories of personal data in connection with the operation of the Platform:

• Full legal name as appearing on a valid government-issued Philippine ID.
• Date of birth (collected for age verification — players must be at least 21 years old per PAGCOR regulations).
• Philippine mobile number (used as primary account identifier and for OTP-based authentication).
• Username and hashed password.
• Email address (if provided).

• Government-issued photo ID (PhilSys ID, UMID, SSS, driver's licence, or Philippine passport) — collected as image/scan for identity verification.
• Selfie photograph submitted for facial matching against ID document.
• Proof of address documentation where required.
• Source of funds documentation for large deposits where required by AMLC regulations.

• GCash or Maya account number linked to your ph3656 account for deposit and withdrawal purposes.
• Bank account details (BPI, BDO, Metrobank) where provided as a withdrawal method.
• Deposit and withdrawal transaction records including amounts, timestamps, and payment method identifiers.
• Wagering history and game transaction logs.
• Account balance history.

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser type.
• Login timestamps, session duration, and pages visited on the Platform.
• Cookies and similar tracking technology data (see Section 11).

• Records of live chat support interactions.
• Email or in-platform message correspondence with ph3656 customer support.
• Dispute and complaint records.

• Self-imposed deposit limits, loss limits, and session time limits set by you in your account dashboard.
• Self-exclusion requests and exclusion period records.
• Responsible gaming assessment responses, where voluntarily provided.

ph3656 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or use responsible gaming tools on the Platform.
• Automatically — through cookies, server logs, and similar technologies when you access the ph3656 website or Platform. See Section 11 for full details on cookie use.
• From payment providers — ph3656 may receive confirmation data from GCash, Maya, and banking institutions when you transact on the Platform. This is limited to transaction confirmations and does not include your full payment account credentials.
• From KYC and identity verification service providers — where ph3656 uses third-party identity verification platforms to assist with document verification, those providers may share verification results and associated data with ph3656.
• From fraud prevention and AML screening services — ph3656 may receive data from third-party services used to screen for money laundering, fraud, or sanctions compliance.

ph3656 processes your personal data for the following specific purposes:

• Account registration and management — creating and maintaining your ph3656 account, authenticating your identity at login, and managing account settings.
• Age and identity verification (KYC) — verifying that you are at least 21 years old as required by PAGCOR, and confirming your identity to comply with AML obligations under the Philippine Anti-Money Laundering Act.
• Provision of gaming services — operating the games, processing wagers, crediting winnings, and maintaining accurate game transaction records.
• Payment processing — processing deposits and withdrawals via your registered payment methods (GCash, Maya, bank accounts).
• Regulatory compliance — fulfilling ph3656's obligations under PAGCOR licensing conditions, AMLC reporting requirements, NPC data privacy obligations, and other applicable Philippine laws and regulations.
• Responsible gaming — administering responsible gaming tools including deposit limits, loss limits, session timers, and self-exclusion; monitoring for patterns of play that may indicate problem gambling in accordance with ph3656's responsible gaming commitments.
• Fraud prevention and platform security — detecting and preventing fraud, money laundering, identity theft, multi-accounting, and other prohibited conduct under the ph3656 Terms & Conditions.
• Customer support — responding to your queries, resolving disputes, and maintaining records of support interactions.
• Platform improvement — analysing aggregated and anonymised usage data to improve Platform performance, user experience, and game offerings. Individual player data used for this purpose is pseudonymised or anonymised where practicable.
• Marketing communications — sending you promotions, bonus offers, and updates about ph3656 services, subject to your communication preferences and applicable opt-out rights.

• Consent — Processing for marketing communications and voluntary responsible gaming assessments is based on your consent. You may withdraw consent for marketing communications at any time by updating your communication preferences in your account settings or contacting ph3656 support.
• Contractual necessity — Processing required to provide you with ph3656's gaming services under the Terms & Conditions — including account management, KYC verification, payment processing, and game operation — is necessary for the performance of the contract between you and ph3656.
• Legal obligation — Processing required to comply with ph3656's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws is carried out on the basis of legal obligation.
• Legitimate interests — Processing for fraud prevention, platform security, and anonymised platform analytics is carried out on the basis of ph3656's legitimate interests in operating a secure and compliant gaming platform, provided such interests are not overridden by your rights and freedoms.

ph3656 does not sell or trade your personal data to any third party for commercial purposes. ph3656 may share your personal data with the following categories of third parties, strictly as necessary for the purposes described in Section 5:

• Payment processors and e-wallet providers — GCash, Maya, and banking partners process transactions on ph3656's behalf and receive the minimum data necessary to process your deposit or withdrawal instructions.
• KYC and identity verification providers — third-party platforms used by ph3656 to assist in verifying your identity and age during the KYC process. These providers operate under binding data processing agreements with ph3656.
• Game technology providers — licensed and audited game studios (including JILI Games, Evolution Gaming, Pragmatic Play, PG Soft, and others) who provide the games accessed through ph3656 may receive pseudonymised player session data necessary for game operation and audit trail maintenance.
• Fraud prevention and AML screening services — third-party providers engaged by ph3656 to screen for money laundering risk, fraudulent activity, and sanctions compliance.
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities as required by applicable law, regulatory direction, or court order. ph3656 will cooperate fully with lawful requests from these bodies.
• Professional advisers — legal counsel, auditors, and compliance consultants engaged by ph3656, bound by professional confidentiality obligations.

All third parties with whom ph3656 shares personal data are contractually obligated to use that data only for the agreed purpose and to maintain appropriate security measures consistent with RA 10173 requirements.

Where ph3656 transfers personal data to processors or sub-processors located in jurisdictions outside the Philippines, ph3656 will ensure that such transfers are made only to countries or organisations that provide an adequate level of data protection, or where appropriate contractual safeguards — such as NPC-approved standard contractual clauses — have been put in place.

ph3656 will not transfer your personal data to a jurisdiction that does not provide adequate protection without first obtaining your consent or ensuring appropriate safeguards are contractually established with the receiving party.

ph3656 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

• Account and KYC data is retained for the duration of your active account plus a minimum of five (5) years from the date of account closure, in compliance with PAGCOR record-keeping requirements and AMLC obligations.
• Financial and transaction records are retained for a minimum of five (5) years from the date of each transaction, as required by AMLC regulations and PAGCOR licensing conditions.
• Technical and usage data (including IP address logs and session data) is retained for up to twelve (12) months from the date of collection, after which it is deleted or anonymised.
• Customer support communications are retained for three (3) years from the date of the last interaction.
• Responsible gaming records (including self-exclusion history) are retained for the duration of your account plus five (5) years to enable compliance verification and to honour self-exclusion commitments.

Upon expiry of the applicable retention period, ph3656 will securely delete or anonymise your personal data in accordance with NPC guidelines. Where anonymisation is not practicable, data will be deleted using secure deletion methods that render recovery infeasible.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ph3656:

• Right to be Informed — You have the right to be informed of the existence of processing, the nature of the data processed, the purposes of processing, and how to exercise your other rights. This Privacy Policy fulfils ph3656's obligation under this right.
• Right of Access — You have the right to request access to the personal data ph3656 holds about you, including information about the sources of that data and the purposes for which it is processed.
• Right to Rectification — You have the right to request correction of inaccurate or incomplete personal data held by ph3656. You may update basic account information directly in your account settings, or contact support for assistance with KYC data corrections.
• Right to Erasure — You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to ph3656's legal retention obligations described in Section 9.
• Right to Object — You have the right to object to the processing of your personal data where ph3656 processes it on the basis of legitimate interests. You also have the right to opt out of direct marketing communications at any time.
• Right to Data Portability — You have the right to receive a copy of the personal data you have provided to ph3656 in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint — You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that ph3656 has processed your personal data in violation of RA 10173.

To exercise any of the above rights, please contact the ph3656 Data Protection Officer using the contact details set out in Section 15. ph3656 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days, or such longer period as permitted under NPC guidelines for complex requests.

ph3656 may require you to verify your identity before processing data subject rights requests to ensure that your data is not disclosed to unauthorised parties.

ph3656 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device when you access a website. ph3656 uses the following categories of cookies:

• Strictly Necessary Cookies — These cookies are required for the Platform to function correctly. They enable session management, authentication, and security features. These cookies cannot be disabled without impairing your ability to use the Platform.
• Performance and Analytics Cookies — These cookies collect anonymised or pseudonymised data about how visitors use the Platform, which pages are visited most frequently, and whether visitors encounter error messages. This data helps ph3656 improve Platform performance. These cookies do not identify you personally.
• Functional Cookies — These cookies remember your preferences (such as language settings and responsible gaming tool configurations) to improve your experience on return visits.

ph3656 does not use third-party advertising or behavioural targeting cookies. No cookies are used to build advertising profiles or to track your behaviour across third-party websites.

You may control cookie settings through your browser preferences. Disabling strictly necessary cookies will impair Platform functionality, including your ability to log in. Disabling other categories of cookies will not prevent you from using the Platform but may affect personalisation features.

ph3656 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ph3656 Platform.
• Hashed password storage — ph3656 stores passwords using strong cryptographic hashing algorithms. Plaintext passwords are never stored or transmitted.
• Two-factor authentication (2FA) — ph3656 offers OTP-based 2FA for player accounts. Enabling 2FA is strongly recommended and can be activated in your account security settings.
• Access controls — ph3656 staff access to personal data is restricted on a need-to-know basis, with role-based access controls and audit logging of all internal data access.
• Regular security assessments — ph3656's Platform and infrastructure undergo periodic vulnerability assessments and penetration testing.
• Data breach response procedures — ph3656 maintains documented procedures for identifying, containing, and reporting personal data breaches to the NPC within the timeframes required by RA 10173 and NPC Circular 16-03.

While ph3656 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You play an important role in keeping your account secure by maintaining strong, unique passwords and enabling 2FA.

If ph3656 discovers or has reasonable cause to believe that personal data has been submitted by an individual under 21 years of age, that account will be immediately suspended, identity verification will be required, and the account will be closed if the age restriction is confirmed to have been violated. Any funds in the account will be handled in accordance with applicable PAGCOR procedures.

If you believe that ph3656 has inadvertently collected personal data from a person under 21, please notify ph3656 immediately at the contact details provided in Section 15 so that appropriate action can be taken without delay.

ph3656 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or ph3656's data processing practices. The "Last Updated" date at the top of this document will be revised whenever material amendments are made.

Where amendments are material — for example, changes to the categories of data collected, new purposes for processing, or changes to third-party sharing arrangements — ph3656 will notify registered players by email or through in-platform notification with reasonable advance notice before the changes take effect.

Continued use of the ph3656 Platform following the effective date of any amendment to this Privacy Policy constitutes your acknowledgement of the amended Policy. If you do not agree with the amended Policy, you may request account closure in accordance with the ph3656 Terms & Conditions.

The current effective version of this Privacy Policy is published at ph3656.cam/privacy-policy and supersedes all prior versions.

For any queries, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights under RA 10173, please contact ph3656's Data Protection Officer:

• Role: Data Protection Officer, ph3656
• Email (plain text): [email protected]
• Live Chat: Available 24/7 via the ph3656 Platform (log in to access).
• Response Commitment: ph3656 will acknowledge all data privacy queries within five (5) Philippine Standard Time business days.

If you are not satisfied with ph3656's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available through the NPC's official government channels.

ph3656 is committed to cooperating fully with the NPC and to resolving data privacy concerns in a timely and transparent manner.