ph865 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal information by ph865 ("Company", "we", "us", or "our") through the website https://ph865.cam and all associated services, mobile applications, and platforms (collectively, the "Service"). This Policy applies to all users and visitors of the Service, including registered account holders, prospective customers, and casual browsers.

ph865 operates as a PAGCOR-licensed online gaming operator in the Philippines. We are committed to maintaining the highest standards of data protection and privacy in accordance with Republic Act No. 10173 (the Data Privacy Act of 2012), its implementing rules and regulations, and all circulars and issuances of the National Privacy Commission (NPC). By accessing or using the Service, you acknowledge that you have read, understood, and consented to the practices described in this Policy.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Service. If you do not agree with any aspect of this Policy, you must discontinue use of the Service immediately. We reserve the right to update or modify this Policy at any time, and material changes will be communicated to you via email and prominently displayed on the Service.

2. Information We Collect

2.1 Personal Information Provided Directly by You

When you register an account with ph865, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name as it appears on your government-issued identification documents, date of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, residential address including street, barangay, city/municipality, province, and postal code.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery.
• Financial Information: Payment method details including GCash mobile number, PayMaya account information, bank account numbers, and transaction history. We do not store full credit card numbers or CVV codes; these are processed securely by our third-party payment processors.
• Verification Documents: Copies of government-issued identification (passport, driver's license, UMID, PhilHealth ID, SSS ID), selfie photos holding your ID, proof of address documents (utility bills, bank statements), and source of funds declarations when required for enhanced due diligence.
• Communication Records: Content of your communications with our customer support team via live chat, email, or phone, including support tickets, complaints, inquiries, and feedback.

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain technical and usage information through cookies, web beacons, server logs, and similar technologies:

• Device Information: Device type, operating system and version, browser type and version, screen resolution, device identifiers (IP address, MAC address), and mobile network information.
• Usage Data: Pages visited, features accessed, games played, bets placed, deposit and withdrawal requests, time spent on the Service, click-through paths, search queries, and interaction patterns with the Service.
• Location Data: IP address-based geolocation data to verify that you are accessing the Service from within the Philippines, as required by PAGCOR regulations. We do not track precise GPS location unless you explicitly grant permission through your device settings.
• Cookie Data: Information stored in cookies and similar tracking technologies, including session identifiers, authentication tokens, language preferences, and functional settings. You can manage cookie preferences through your browser settings, though disabling certain cookies may limit functionality of the Service.

2.3 Information from Third-Party Sources

In certain circumstances, we may collect information about you from third-party sources to verify your identity, prevent fraud, or comply with legal obligations:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection data from GCash, PayMaya, and banking partners.
• Identity Verification Services: Data from third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) verification providers to authenticate your identity and assess risk.
• Credit Reference Agencies: Credit checks and financial background information when required for high-value transactions or enhanced due diligence procedures.
• Public Databases: Information from publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, and adverse media screening to comply with AML/CTF regulations.

3. How We Use Your Information

3.1 Primary Purposes

ph865 processes your personal information for the following primary purposes, all of which are necessary for the performance of our contract with you or for compliance with legal obligations:

• Account Management: Creating, maintaining, and securing your ph865 account; authenticating your identity during login; managing your account preferences and settings.
• Service Delivery: Processing deposits and withdrawals; enabling you to place bets and play games; maintaining accurate transaction records; calculating and crediting winnings; processing bonuses and promotions.
• Verification and Compliance: Verifying your age (21+ requirement); confirming your identity through KYC procedures; conducting AML/CTF checks; complying with PAGCOR regulations; detecting and preventing fraud, money laundering, and other illegal activities.
• Customer Support: Responding to your inquiries, complaints, and support requests; resolving disputes; providing technical assistance; investigating account issues.
• Security and Fraud Prevention: Protecting the Service from unauthorized access; detecting suspicious activity and potential security breaches; preventing cheating, collusion, and bonus abuse; maintaining the integrity of games and betting markets.

3.2 Secondary Purposes

With your consent, which you may withdraw at any time, we may also use your personal information for the following secondary purposes:

• Marketing Communications: Sending promotional emails, SMS messages, and push notifications about new games, special offers, bonuses, and tournaments. You can opt out of marketing communications at any time by clicking "unsubscribe" in emails or updating your communication preferences in your account settings.
• Personalization: Tailoring the Service to your preferences; recommending games and betting markets based on your interests; customizing promotional offers based on your activity patterns.
• Analytics and Improvement: Analyzing user behavior to improve the Service; conducting statistical analysis; developing new features; optimizing user experience; troubleshooting technical issues.
• Market Research: Conducting surveys and research to understand user preferences; testing new products and features; gathering feedback on service quality.

3.3 Legal Basis for Processing

Under the Data Privacy Act of 2012, ph865 processes your personal information based on the following legal grounds:

• Consent: You have given explicit consent for specific processing activities, particularly for marketing communications and non-essential cookies.
• Contract Performance: Processing is necessary for the performance of our contract with you (the Terms & Conditions), including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with Philippine law, PAGCOR regulations, AML/CTF requirements, tax reporting obligations, and court orders or regulatory directives.
• Legitimate Interests: Processing is necessary for our legitimate business interests in fraud prevention, security enhancement, service improvement, and direct marketing, provided these interests do not override your fundamental rights and freedoms.

4. How We Share Your Information

4.1 Service Providers and Business Partners

ph865 engages trusted third-party service providers to assist in delivering the Service. These providers have access to your personal information only to the extent necessary to perform their specific functions and are contractually obligated to maintain confidentiality and security:

• Payment Processors: GCash, PayMaya, and banking partners process deposits and withdrawals on our behalf. They receive your financial information necessary to complete transactions but do not receive your full account details or gaming history.
• Game Providers: Evolution Gaming, Pragmatic Play, NetEnt, and other software providers power our casino games and sports betting platforms. They receive limited session data and betting information necessary to operate their games but do not have access to your identity or financial information.
• Identity Verification Services: Third-party KYC and AML providers verify your identity documents and conduct background checks. They receive your name, date of birth, address, and identification documents for verification purposes.
• Customer Support Tools: Live chat, email management, and ticketing systems operated by third-party providers store your communications and support requests to enable our customer service team to assist you effectively.
• Cloud Infrastructure: Secure cloud hosting providers store your data on servers located in jurisdictions with adequate data protection laws. All data is encrypted in transit and at rest.
• Analytics Services: Web analytics tools collect anonymized or pseudonymized usage data to help us understand how users interact with the Service and identify areas for improvement.

4.2 Legal and Regulatory Disclosures

ph865 may disclose your personal information when required by law or when necessary to protect our legal rights:

• PAGCOR and Regulatory Authorities: We share information with PAGCOR and other gaming regulators as required for licensing compliance, audit purposes, and investigation of regulatory violations.
• Law Enforcement: We disclose information to police, prosecutors, and other law enforcement agencies in response to valid legal process such as court orders, subpoenas, or search warrants, or when necessary to prevent or investigate suspected criminal activity.
• Tax Authorities: We report winnings and financial transactions to the Bureau of Internal Revenue (BIR) as required by Philippine tax law.
• Anti-Money Laundering Authorities: We file suspicious transaction reports (STRs) and covered transaction reports (CTRs) with the Anti-Money Laundering Council (AMLC) when required by the Anti-Money Laundering Act.
• National Privacy Commission: We cooperate with NPC investigations and provide information requested in the course of privacy complaint proceedings or compliance audits.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of ph865's assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent notice on the Service at least 30 days before any such transfer, and the acquiring entity will be required to honor this Privacy Policy.

4.4 What We Never Do

ph865 will never sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your personal information with advertisers, data brokers, or other companies seeking to market unrelated products or services to you. Your information is used solely for the purposes described in this Policy.

5. Data Security Measures

5.1 Technical Security

ph865 implements industry-standard technical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 or higher. Sensitive data stored in our databases, including passwords and financial information, is encrypted using AES-256 encryption.
• Secure Access Controls: Access to personal information is restricted to authorized employees and contractors who require access to perform their job functions. Multi-factor authentication is required for administrative access to our systems.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services. Regular vulnerability scans and penetration testing are conducted by independent security firms.
• Secure Data Centers: Your data is stored in ISO 27001-certified data centers with 24/7 physical security, biometric access controls, and redundant power and cooling systems.
• Security Monitoring: Real-time monitoring systems detect and alert us to suspicious activity, unauthorized access attempts, and potential security incidents.

5.2 Organizational Security

Beyond technical measures, ph865 maintains robust organizational policies and procedures:

• Employee Training: All employees and contractors receive mandatory data privacy and security training upon hire and annual refresher training. Employees handling personal information sign confidentiality agreements.
• Vendor Management: Third-party service providers are carefully vetted and required to maintain security standards equivalent to our own. We conduct periodic audits of vendor compliance.
• Incident Response: We maintain a documented incident response plan for data breaches and security incidents. In the event of a breach affecting your personal information, we will notify you and the National Privacy Commission within 72 hours as required by law.
• Data Minimization: We collect and retain only the personal information necessary for our stated purposes. Data is automatically purged when no longer needed for legal, regulatory, or business purposes.

5.3 Your Role in Security

While we implement comprehensive security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone.
• Enable two-factor authentication (2FA) via SMS for additional security.
• Log out of your account when using shared or public devices.
• Be cautious of phishing emails or messages claiming to be from ph865. We will never ask for your password via email or SMS.
• Review your account activity regularly and report any suspicious transactions immediately.

6. Data Retention and Deletion

6.1 Retention Periods

ph865 retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Information for active accounts is retained indefinitely while your account remains open and for a reasonable period after closure to address potential disputes or chargebacks.
• Transaction Records: Financial transaction records are retained for a minimum of 7 years from the date of the transaction as required by Philippine tax law and AML regulations.
• Verification Documents: Copies of government-issued IDs and proof of address documents are retained for 7 years after account closure as required by PAGCOR and AML regulations.
• Communication Records: Customer support communications are retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Records of your marketing consents and opt-outs are retained for 5 years to demonstrate compliance with data protection laws.
• Closed Accounts: When you close your account, most personal information is deleted within 30 days, except for data we are legally required to retain as specified above.

6.2 Data Deletion Requests

You have the right to request deletion of your personal information, subject to certain legal limitations. To request deletion, contact our Data Protection Officer at [email protected]. We will process your request within 30 days. Please note that we may be unable to delete information that we are legally required to retain for regulatory compliance, tax purposes, or ongoing legal proceedings.

7. Your Privacy Rights

7.1 Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal information:

• Right to be Informed: You have the right to be informed about the collection and processing of your personal information, including the purposes of processing, the legal basis, and the recipients of your data. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to obtain confirmation of whether ph865 is processing your personal information and, if so, to access that information and request a copy. You can access most of your personal information directly through your account settings.
• Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time through your account settings or by clicking "unsubscribe" in promotional emails.
• Right to Rectification: You have the right to correct inaccurate or incomplete personal information. You can update most information directly in your account settings or by contacting customer support.
• Right to Erasure or Blocking: You have the right to request deletion or blocking of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when processing is unlawful.
• Right to Data Portability: You have the right to obtain your personal information in a structured, commonly used, and machine-readable format and to transmit that information to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe your privacy rights have been violated. NPC contact information: email: [email protected], hotline: (+632) 8234-2228.

7.2 How to Exercise Your Rights

To exercise any of the rights described above, contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Rights Request - [Your Account Username]"
• Include: Your full name, account username, contact email, specific right you wish to exercise, and any supporting information relevant to your request.

We will respond to your request within 30 days. If we require additional time, we will notify you of the reason for the delay and the expected completion date. In some cases, we may require additional information to verify your identity before processing your request.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit the Service. They enable the Service to remember your preferences, authenticate your login session, and collect information about how you use the Service. We use both first-party cookies (set by ph865) and third-party cookies (set by our service providers).

8.2 Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly. These cookies enable core functionality such as user authentication, account security, and transaction processing. You cannot opt out of essential cookies without disabling functionality of the Service.
• Functional Cookies: Enhance functionality and personalization, such as remembering your language preference, favorite games, and account settings. These cookies are not strictly necessary but improve your user experience.
• Analytics Cookies: Collect information about how you use the Service, including pages visited, features accessed, and error messages encountered. This data helps us identify and fix issues and improve the Service. We use Google Analytics and similar tools for analytics purposes.
• Marketing Cookies: Track your activity across websites to deliver personalized advertising and measure the effectiveness of our marketing campaigns. These cookies require your explicit consent and can be disabled through your cookie preferences.

8.3 Managing Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to block all cookies, accept only first-party cookies, or receive a notification before a cookie is set. Please note that blocking certain cookies may limit functionality of the Service. To learn more about cookies and how to manage them, visit www.allaboutcookies.org.

9. International Data Transfers

ph865 primarily operates within the Philippines, and your personal information is stored on servers located in the Philippines or in jurisdictions with adequate data protection standards as recognized by the National Privacy Commission. In certain circumstances, your information may be transferred to service providers located outside the Philippines for technical support, cloud storage, or specialized processing.

When we transfer personal information outside the Philippines, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the National Privacy Commission, adequacy decisions, or binding corporate rules. You have the right to request information about the safeguards we use for international transfers by contacting our Data Protection Officer.

10. Children's Privacy

The Service is intended solely for individuals aged 21 years and older. ph865 does not knowingly collect personal information from individuals under the age of 21. If you believe that a minor has created an account or provided personal information to ph865, please contact us immediately at [email protected], and we will investigate and delete the information as required by law.

We employ age verification measures during account registration and may request additional proof of age at any time. Accounts found to be operated by individuals under 21 years of age will be immediately closed, deposits returned, and winnings forfeited as specified in our Terms & Conditions.

11. Changes to This Privacy Policy

ph865 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes via email to your registered email address and by displaying a prominent notice on the Service homepage for at least 30 days.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of the Service after the effective date of any changes constitutes acceptance of the revised Policy.

12. Contact Information and Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or ph865's data protection practices, please contact our Data Protection Officer:

• Data Protection Officer: ph865 Privacy Team
• Email: [email protected]
• General Customer Support: [email protected]
• 24/7 Live Chat: Available through the Service website
• Phone Support: Available 9:00 AM - 11:00 PM Philippine Time

We are committed to resolving privacy concerns promptly and fairly. If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission:

• National Privacy Commission
• Address: 5th Floor, Philippine International Convention Center, Vicente Sotto St., Pasay City 1307, Philippines
• Email: [email protected]
• Hotline: (+632) 8234-2228
• Website: www.privacy.gov.ph

13. Compliance with Philippine Data Privacy Act

ph865 is committed to full compliance with Republic Act No. 10173 (the Data Privacy Act of 2012), its Implementing Rules and Regulations (IRR), and all circulars, advisories, and orders issued by the National Privacy Commission. We have appointed a Data Protection Officer as required by law, implemented appropriate organizational, physical, and technical security measures, and established procedures for responding to data subject rights requests and security incidents.

Our data processing activities are documented and regularly reviewed to ensure ongoing compliance. We conduct annual privacy impact assessments for high-risk processing activities and maintain records of processing activities as required by the NPC. ph865 employees and contractors receive regular training on data privacy principles and obligations under Philippine law.