ph653
Privacy Policy

This Privacy Policy ("Policy") governs the collection, processing, storage, disclosure, and protection of personal data by ph653 ("we," "us," "our") in connection with the operation of the ph653 online casino and gaming platform accessible at ph653.org ("the Platform").

ph653 processes personal data because we operate a regulated gambling service. Account management, identity verification, payment processing, fraud prevention, responsible gaming compliance, and customer support all necessarily involve the handling of player personal data. We collect only the data we need for these specified purposes and retain it only for as long as legally required or operationally necessary.

This Policy should be read in conjunction with the ph653 Terms and Conditions available at ph653.org/terms-conditions, which form part of the overall agreement between you and ph653 as a registered player or visitor to the Platform.

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), ph653 is the Data Controller responsible for the personal data processed through the ph653 Platform. As Data Controller, ph653 determines the purposes for which personal data is collected and the manner in which that data is processed.

ph653 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. Contact details for the DPO are provided in Section 16 of this Policy.

The following table describes the categories of personal data ph653 collects and the contexts in which they are gathered:

4.1 Data You Provide Directly

You provide personal data to ph653 directly when you: register for an account; complete KYC identity verification; make deposits or withdrawal requests; contact customer support via live chat, email, Messenger, or Viber; respond to surveys or promotions; or adjust your account settings including responsible gaming preferences.

4.2 Data Collected Automatically

When you access the ph653 Platform, we automatically collect technical data including your IP address, device identifiers, browser information, and session metadata. This data is collected using standard web server logs, session tracking, and analytics technologies that are integral to platform operation.

4.3 Data from Third Parties

ph653 may receive personal data from third parties in the following circumstances:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank) confirming transaction completion;
• Identity verification service providers used in our KYC process;
• Fraud prevention partners sharing indicators of fraudulent activity;
• Philippine regulatory bodies where required by law.

ph653 processes personal data on the following legal bases as established under RA 10173:

• Contractual Necessity: Processing required to provide the Platform services you have requested, including account management, game access, payment processing, and customer support;
• Legal Obligation: Processing required to comply with Philippine laws and regulations, including AMLA record-keeping, PAGCOR reporting requirements, and KYC obligations;
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing and promotional communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

ph653 uses personal data for the following specific purposes:

• Account creation and management: Registering your account, authenticating your identity at login, and maintaining your account records;
• Payment processing: Processing deposits, verifying withdrawal requests, confirming payment method ownership, and maintaining transaction records;
• Identity verification (KYC): Verifying your age (21+), identity, and Philippine residency as required by regulatory obligations;
• Fraud and security monitoring: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, and violations of our Terms and Conditions;
• AMLA compliance: Monitoring transactions for indicators of money laundering or financial crime as required under the Philippine Anti-Money Laundering Act;
• Responsible gaming: Administering deposit limits, self-exclusion lists, session time limits, and other responsible gaming tools; monitoring for indicators of problem gambling behaviour;
• Customer support: Responding to support requests, resolving disputes, and maintaining support interaction records;
• Platform improvement: Analysing aggregated usage data to improve game selection, interface design, and platform performance;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications.

7.1 Service Providers

ph653 shares personal data with carefully selected third-party service providers who perform functions on our behalf, under contractual data protection obligations. These include: payment processors (GCash, PayMaya, major Philippine banks), KYC and identity verification providers, cloud hosting and infrastructure providers, fraud prevention technology providers, and customer support platform providers.

7.2 Game Providers

ph653 shares limited technical and transaction data with third-party game providers (including JILI, Pragmatic Play, and PG Soft) as necessary for game operation, dispute resolution, and RTP verification. Game providers do not receive players' KYC documents, government ID information, or payment account details.

7.3 Regulatory and Legal Disclosure

ph653 will disclose personal data to Philippine government authorities, regulatory bodies (including PAGCOR and the AMLC), law enforcement agencies, and courts where required by Philippine law or court order. We will notify affected players of such disclosures where legally permissible to do so.

7.4 What We Do Not Do

ph653 does not sell, rent, or commercially trade your personal data to third parties. We do not share personal data with advertising networks for targeted advertising outside of the ph653 Platform.

Some of ph653's service providers and game technology partners operate data infrastructure outside of the Philippines. Where personal data is transferred internationally, ph653 ensures that such transfers are made in compliance with RA 10173 and only to countries or organisations that provide an adequate level of personal data protection.

Safeguards for international transfers include: contractual data protection clauses binding the receiving party to RA 10173-equivalent standards; limiting transferred data to the minimum necessary for the service provider's specific function; and ongoing monitoring of third-party compliance with their contractual data protection obligations.

ph653 retains personal data only for as long as necessary for the purposes described in this Policy and to comply with applicable legal obligations. The following retention periods apply:

• Active account data: Retained for the duration of the account and a minimum of 5 years following account closure, in compliance with AMLA record-keeping requirements;
• KYC documentation: Retained for a minimum of 5 years from the date of verification, as required by Philippine anti-money laundering regulations;
• Transaction records: Retained for a minimum of 5 years from the date of the transaction;
• Support interaction records: Retained for 3 years from the date of the interaction;
• Technical and session data: Retained for up to 12 months from collection;
• Marketing consent records: Retained for 3 years from the date consent was given or withdrawn.

Upon expiry of retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified individual.

ph653 implements a multi-layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport Encryption: All data transmitted between your browser and ph653 servers is protected by 256-bit SSL/TLS encryption. Connections using outdated protocols are rejected;
• Data at Rest Encryption: Sensitive personal data including government ID information and financial account details is encrypted at rest using AES-256 or equivalent standards;
• Access Controls: Personal data access is restricted to ph653 staff who require it for their specific job functions, under role-based access control policies;
• Two-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication;
• Security Monitoring: Platform infrastructure is monitored 24/7 for security anomalies, intrusion attempts, and unusual data access patterns;
• Third-Party Security Reviews: ph653 conducts periodic security reviews of third-party service providers with access to player data.

11.1 Essential Cookies

ph653 uses essential cookies that are strictly necessary for Platform operation. These include session cookies that maintain your logged-in state, security cookies that support CSRF protection and fraud prevention, and load-balancing cookies that ensure platform stability. Essential cookies cannot be disabled without impeding core Platform functionality.

11.2 Analytics Cookies

With your consent, ph653 uses analytics cookies to collect aggregated data about how players navigate the Platform. This data helps us understand which games are most popular, where navigation bottlenecks occur, and how the mobile experience can be improved. Analytics cookies do not identify individual players — data is processed only in aggregate.

11.3 Preference Cookies

Preference cookies remember your Platform settings such as language preference, interface theme, and responsible gaming tool configurations between sessions. These cookies improve your experience but are not strictly necessary and can be declined.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use the ph653 Platform.

The ph653 Platform is strictly restricted to individuals aged 21 and above. ph653 does not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from an underage individual, that data will be deleted and the associated account will be permanently closed.

ph653 implements age verification as part of the KYC process specifically to prevent underage gambling. If you become aware that a person under 21 has registered with or is using the ph653 Platform, please notify us immediately via live chat or the support email address provided in Section 16. Age-related account closures are processed as a matter of priority.

To exercise any of the data rights described in this Policy (access, correction, erasure, objection, portability, or complaint), please contact ph653's Data Protection Officer using the contact details in Section 16. All data rights requests should be submitted in writing and will be acknowledged within 5 business days.

ph653 will respond to valid rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by an additional 30 days, in which case you will be notified of the extension and the reason for it.

ph653 may require verification of your identity before processing a rights request. This is to prevent unauthorised disclosure of personal data to third parties and is not a mechanism to obstruct legitimate rights requests.

If you are dissatisfied with ph653's response to a rights request, or if you believe your rights under RA 10173 have not been respected, you may file a complaint directly with the National Privacy Commission of the Philippines.

ph653 may send you promotional communications about bonuses, game launches, special events, and other platform news where you have opted in to receive such communications at account registration or subsequently through account settings.

Transactional communications — including deposit confirmations, withdrawal notifications, OTP messages, security alerts, and KYC-related communications — do not require marketing consent and will be sent regardless of your marketing preferences. These are necessary for account operation and cannot be fully opted out of while maintaining an active account.

You may withdraw marketing consent at any time by: updating your communication preferences in account settings; contacting ph653 support via live chat; or sending an opt-out request to the support email in Section 16. Opt-outs are processed within 5 business days and will not affect your access to the Platform or any other account features.

ph653 reserves the right to update this Privacy Policy to reflect changes in our data practices, Platform features, or applicable Philippine legal requirements. Where changes are material — meaning they substantively affect your rights or how we process your data — ph653 will provide at least 14 days' advance notice via in-platform notification or email to your registered address before the revised Policy takes effect.

Continued use of the ph653 Platform following the effective date of any Policy amendment constitutes acceptance of the revised Policy. The current effective version of this Policy is always available at ph653.org/privacy-policy. The "Effective Date" and "Last Updated" fields at the top of this document will reflect the most recent revision.

For all privacy-related inquiries, data rights requests, or data protection concerns, please contact ph653 through the following channels:

• Data Protection Officer (DPO): Available via support channels below; all DPO correspondence is flagged for priority handling
• Live Chat: Available 24/7 at ph653.org — type "Privacy" or "Data Request" to be routed to the appropriate team
• Support Email (plain text — not a link): [email protected] — Subject: "Privacy Policy Inquiry" or "Data Rights Request"
• Messenger & Viber: Staffed 6AM–2AM Philippine Time

When submitting a data rights request, please include: your registered ph653 username or mobile number, a clear description of the right you wish to exercise, and any relevant reference information. Identity verification may be required before your request is actioned.