ph687 Privacy Policy

01 Introduction & Data Controller

ph687 ("ph687", "we", "us", or "our") operates the online gaming platform accessible at ph687.org, providing Filipino players with casino games, sports betting, bingo, and related entertainment services.

ph687 acts as the Personal Information Controller (PIC) in respect of all personal data collected from Members and visitors of the ph687 platform, as that term is defined under the Philippine Data Privacy Act of 2012 (RA 10173).

This Privacy Policy applies to all data processing activities conducted by ph687 in connection with the operation of the ph687 platform, including registration, KYC verification, gameplay, financial transactions, customer support, and marketing communications.

This Policy should be read in conjunction with ph687's Terms & Conditions, which govern the overall contractual relationship between ph687 and its Members.

02 Personal Data We Collect

ph687 collects the following categories of personal data from Members and platform visitors:

ph687 does not collect sensitive personal information beyond what is strictly necessary to satisfy KYC obligations, unless explicitly required by applicable law or regulation.

03 How We Collect Your Data

ph687 collects personal data through the following means:

• Directly from you: Information you provide during registration, KYC submission, deposit or withdrawal requests, customer support interactions, and survey participation;
• Automatically via the platform: Technical and usage data collected through cookies, session tracking, and server logs when you access ph687.org — regardless of whether you are logged in;
• From payment providers: Transaction confirmation and reference data from GCash, Maya, BPI, BDO, and other integrated payment providers, solely to verify deposit receipt and process withdrawals;
• From identity verification services: Confirmation of KYC document authenticity from third-party identity verification processors engaged by ph687 for compliance purposes;
• From fraud detection systems: Behavioural signals processed by ph687's fraud detection infrastructure to identify suspicious account activity.

04 Legal Basis for Processing

ph687 processes Member personal data on the following lawful bases under the Data Privacy Act of 2012:

• Contract performance: Processing necessary to fulfil ph687's obligations under the Terms & Conditions agreed to upon registration — including account management, game facilitation, and financial transactions;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AMLC (Anti-Money Laundering Council) reporting requirements and PAGCOR-related compliance obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where ph687's interests do not override the Member's privacy rights;
• Consent: Processing for marketing communications and promotional notifications, where ph687 has obtained a separate, freely-given, specific, and informed consent from the Member.

05 How We Use Your Personal Data

ph687 uses Member personal data for the following purposes:

• Creating, maintaining, and verifying Member accounts in compliance with KYC and age verification requirements;
• Processing deposits, withdrawals, and other financial transactions via GCash, Maya, and other integrated Philippine payment methods;
• Providing access to ph687 games, promotions, and account features in accordance with the Terms & Conditions;
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited conduct;
• Monitoring gaming activity to identify problematic gambling patterns and administering responsible gaming interventions including deposit limits, session controls, and self-exclusion;
• Responding to Member support queries via live chat, email, and other support channels;
• Sending transactional notifications including deposit confirmations, withdrawal updates, and security alerts;
• Sending promotional and marketing communications to Members who have consented to receive them — Members may withdraw consent at any time via account settings;
• Conducting internal analytics and platform improvement activities using aggregated and anonymised data;
• Fulfilling mandatory regulatory reporting obligations under Philippine law.

06 Data Sharing & Third-Party Disclosure

ph687 does not sell, rent, or otherwise commercially transfer Member personal data to third parties for their independent marketing purposes.

ph687 may share Member personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors: GCash, Maya/PayMaya, GrabPay, BPI, BDO, Metrobank, InstaPay, and PesoNet — for the purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party KYC service providers engaged by ph687 to process and verify government-issued identity documents;
• Game providers: Licensed third-party providers whose games are hosted on the ph687 platform — limited to session and gameplay data necessary to facilitate real-money game rounds;
• Fraud detection and security vendors: Third-party fraud prevention and security monitoring services engaged by ph687;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory order;
• Professional advisers: Legal counsel, auditors, and accountants where disclosure is necessary for the conduct of ph687's business operations, under binding confidentiality obligations.

07 Cookies & Tracking Technologies

ph687 uses cookies and similar tracking technologies on the ph687.org platform. Cookies are small text files placed on your device by the ph687 platform to enable core site functionality and improve the Member experience.

ph687 uses the following categories of cookies:

• Strictly necessary cookies: Required for core platform functionality including session management, login state persistence, and security. These cannot be disabled without affecting platform usability;
• Functional cookies: Remember Member preferences such as language, layout, and recently played games to improve the platform experience;
• Analytical cookies: Collect anonymised data about how Members use the ph687 platform — page visits, game selections, session duration — to improve platform design and performance;
• Security cookies: Support fraud detection and account protection measures by identifying unusual device or behaviour patterns during ph687 sessions.

ph687 does not use third-party advertising cookies or tracking pixels to serve targeted advertising to Members across external websites. Members may manage cookie preferences through their browser settings; however, disabling strictly necessary cookies will impair platform functionality including the ability to log in to ph687.

08 Data Retention

ph687 retains Member personal data for the following periods:

• Active accounts: For the duration of the Member's active relationship with ph687, plus a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements;
• KYC documents: For a minimum of five (5) years following the last transaction on the account, as required by AMLC regulations;
• Transaction records: For a minimum of five (5) years from the date of the relevant transaction;
• Support communications: For three (3) years from the date of the interaction, or longer if the communication is relevant to a pending dispute or investigation;
• Marketing consent records: For the period of consent plus two (2) years following withdrawal of consent, as evidence of lawful processing.

Upon expiry of the applicable retention period, ph687 will securely delete or anonymise Member personal data in accordance with NPC-recognised data disposal standards.

09 Data Security

ph687 implements technical and organisational security measures appropriate to the sensitivity of the personal data it processes. These include:

• 256-bit SSL/TLS encryption for all data transmitted between Member devices and the ph687 platform;
• Hashed and salted storage of Member passwords — plaintext passwords are never stored by ph687;
• Role-based access controls restricting ph687 staff access to Member data to the minimum necessary for their function;
• Regular security audits and penetration testing of the ph687 platform;
• Automated anomaly detection to identify and respond to potential data security incidents;
• Two-factor authentication (2FA) available for all Member accounts to protect against unauthorised access.

10 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, ph687 Members have the following rights in relation to their personal data:

• Right to be informed: The right to know what personal data ph687 collects, why it is processed, and how it is used — as provided in this Privacy Policy;
• Right of access: The right to request a copy of the personal data ph687 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by ph687;
• Right to erasure: The right to request deletion of personal data where retention is no longer justified — subject to ph687's legal retention obligations under Philippine law;
• Right to object: The right to object to ph687's processing of your personal data for direct marketing purposes at any time;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph687 has violated your data privacy rights.

To exercise any of the above rights, please contact ph687's Data Protection Officer (DPO) as described in Section 14 of this Policy. ph687 will respond to all verified data subject requests within thirty (30) calendar days, in accordance with NPC requirements.

11 Children & Minors

If ph687 becomes aware that personal data has been collected from an individual below the required age, the relevant account will be immediately suspended, all funds will be held pending investigation, and the personal data will be deleted in accordance with ph687's data deletion procedures.

If you believe that a minor has registered on the ph687 platform, please contact ph687 support immediately via live chat or the DPO contact below.

12 Cross-Border Data Transfers

Certain third-party service providers engaged by ph687 — including game content providers and KYC verification processors — may be located outside the Philippines. Where personal data is transferred outside the Philippines, ph687 ensures that appropriate safeguards are in place to protect transferred data, including contractual clauses equivalent to the protections required by RA 10173.

ph687 does not transfer Member personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual safeguards as recognised by the National Privacy Commission.

13 Changes to This Privacy Policy

ph687 reserves the right to update this Privacy Policy at any time to reflect changes in law, regulatory guidance, or ph687's data processing practices. Material changes will be communicated to Members via their registered contact details or via a prominent notice on the ph687 platform, with a minimum of seven (7) days' advance notice where practicable.

The date at the top of this page reflects the effective date of the current version. Continued use of the ph687 platform following notification of changes constitutes acceptance of the updated Privacy Policy. Members who do not accept the revised Policy may close their account by contacting ph687 support.

14 Contact the Data Protection Officer

ph687 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy.

If you are not satisfied with ph687's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at www.privacy.gov.ph (external government body — not a ph687 link).