ph677 Privacy Policy

ph677.org (referred to in this Policy as "ph677," "the Company," "we," "us," or "our") is the data controller responsible for the personal data processed through the ph677 online gaming platform operated at ph677.org.

ph677 operates under a valid PAGCOR license and in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC). As data controller, ph677 determines the purposes and means of processing personal data collected from registered players and visitors to the Platform.

ph677 collects personal data that is necessary, adequate, and limited to what is required for the specific, legitimate purposes identified in Section 4 of this Policy. The categories of personal data collected are as follows:

2.1 Account Registration Data

When you register an Account on ph677, we collect your registered Philippine mobile number, a username (if selected), your date of birth (for age verification), and your account password in encrypted form. We do not store plaintext passwords.

2.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and the Anti-Money Laundering Act, ph677 collects KYC documentation from players requesting withdrawal access. This may include your full legal name, date of birth, government-issued ID type and number, a photograph of your ID document, and where required, a selfie photograph for liveness verification. Acceptable Philippine ID documents are listed in the ph677 Terms & Conditions.

2.3 Financial Transaction Data

ph677 records all deposit and withdrawal transactions associated with your Account, including transaction amounts, payment method identifiers (e.g., partial GCash number, bank account reference), transaction timestamps, and transaction status. Full payment credentials (e.g., complete bank account numbers, GCash PINs) are never stored by ph677; payment processing is handled by certified Philippine payment processors.

2.4 Gaming Activity Data

ph677 maintains server-side logs of all game sessions, including games played, wager amounts, outcomes, session start and end times, and responsible gaming tool usage. This data is used for dispute resolution, fraud prevention, and responsible gaming monitoring.

2.5 Technical and Device Data

When you access ph677, we automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, screen resolution, and session identifiers. This data is used for security, fraud detection, and platform optimization.

2.6 Communications Data

Records of your communications with ph677 customer support — including live chat transcripts, support tickets, and email correspondence — are retained to facilitate dispute resolution and service quality review.

ph677 collects personal data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotional activity.
• Automatically from platform use — through server logs, session tracking, and device data captured when you access ph677 via any browser or device.
• From payment processors — ph677 receives transaction confirmation data from GCash, Maya, BPI, BDO, Metrobank, and other payment providers. This data is limited to what is necessary to reconcile your Account balance and process your payments.
• From identity verification services — where automated ID verification is used as part of the KYC process, ph677 works with certified Philippine identity verification providers. Data received from these services is limited to the outcome of the verification check and the minimum data required to match your submitted documents.
• From PAGCOR and law enforcement — ph677 may receive information about a Player from PAGCOR or Philippine law enforcement in the context of an ongoing investigation. Such data is handled in accordance with applicable legal obligations.

ph677 processes personal data only for specific, declared, and legitimate purposes. The purposes for which we process personal data are:

• Account creation and management — creating your ph677 Account, maintaining accurate Account records, enabling login authentication, and providing access to the Platform's gaming services.
• Identity and age verification (KYC) — verifying that you meet the 21+ age requirement, confirming your identity before withdrawal processing, and satisfying ph677's PAGCOR-mandated KYC obligations.
• Payment processing — processing deposits and withdrawals, reconciling Account balances, and detecting and preventing payment fraud.
• Game provision and dispute resolution — maintaining game session logs necessary for the resolution of disputed game outcomes, technical malfunction claims, and Account balance discrepancies.
• Fraud prevention and security — detecting, investigating, and preventing unauthorized Account access, multi-accounting, bonus abuse, collusion, money laundering, and other forms of fraud or prohibited conduct.
• Anti-money laundering compliance — fulfilling ph677's obligations under the Anti-Money Laundering Act (RA 9160 as amended) and PAGCOR regulations, including transaction monitoring and mandatory reporting to the Anti-Money Laundering Council (AMLC).
• Responsible gaming — monitoring gaming patterns for indicators of problem gambling, applying responsible gaming tools activated by players, and fulfilling ph677's obligations under PAGCOR's responsible gaming framework.
• Customer support — responding to Account inquiries, resolving disputes, and maintaining support records.
• Platform improvement and analytics — analyzing aggregated, anonymized usage data to improve the Platform's functionality, game selection, and user experience. Individual player data is not used for profiling for commercial purposes without your consent.
• Legal compliance and regulatory reporting — complying with PAGCOR reporting requirements, court orders, and other applicable Philippine legal obligations.

Under the Data Privacy Act, ph677 must have a lawful basis for processing personal data. The legal bases applicable to ph677's processing activities are:

• Contractual necessity — Processing is necessary for the performance of the Player Agreement (ph677's Terms & Conditions) to which you are a party. This covers Account management, payment processing, and game provision.
• Legal obligation — Processing is required to comply with ph677's obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine law.
• Legitimate interests — Processing is necessary for ph677's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent — Where processing is not covered by the above bases (e.g., optional marketing communications), ph677 will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ph677 does not sell, rent, or trade personal data to third parties for their own commercial use. Personal data is shared only in the following circumstances:

6.1 Service Providers

ph677 works with third-party service providers who process personal data on ph677's behalf under written data processing agreements that limit use to the specified service and require equivalent data protection standards. These include payment processors (GCash / Maya / banks), identity verification providers, cloud infrastructure providers, fraud detection services, and customer support platforms.

6.2 PAGCOR and Philippine Government Authorities

As a PAGCOR-licensed operator, ph677 is required to provide certain player data and transaction records to PAGCOR upon lawful request. ph677 is also legally obligated to report suspicious transactions to the Anti-Money Laundering Council (AMLC) in accordance with RA 9160. These disclosures are mandatory and cannot be withheld by ph677 once a lawful order or regulatory requirement triggers them.

6.3 Law Enforcement

ph677 may disclose personal data to Philippine law enforcement agencies, courts, or other government authorities where required by a valid court order, subpoena, or other lawful legal process. ph677 will, to the extent permitted by law, notify affected Players of such disclosure where feasible.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ph677's assets, personal data held by ph677 may be transferred to the successor entity. Such a transfer will be subject to the same privacy protections described in this Policy, and Players will be notified of any material change to the data controller's identity.

ph677 retains personal data only for as long as necessary to fulfill the purposes identified in Section 4, subject to the following minimum retention periods required by Philippine law:

• Account and KYC records — Retained for a minimum of five (5) years following Account closure, as required by PAGCOR licensing conditions and AML regulations.
• Financial transaction records — Retained for a minimum of five (5) years following the date of the transaction, as required by the Anti-Money Laundering Act.
• Game session logs — Retained for a minimum of two (2) years for dispute resolution purposes, and thereafter in aggregated, anonymized form for analytics.
• Customer support records — Retained for two (2) years following the resolution of the relevant support inquiry.
• Technical / device logs — Retained for up to twelve (12) months for security and fraud detection purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents re-identification. Data that is the subject of an ongoing legal proceeding, regulatory inquiry, or unresolved dispute will be retained until the matter is finally resolved.

The Data Privacy Act of 2012 grants Filipino data subjects specific rights with respect to their personal data. The following rights apply to your ph677 Account data:

To exercise any of the above rights, submit a written request to ph677's Data Protection Officer at support@ph677.org with the subject line "Data Privacy Request." ph677 will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days. Identity verification will be required before processing any data rights request to prevent unauthorized access to another person's data.

If you are not satisfied with ph677's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority for data privacy matters in the country.

ph677 uses cookies and similar tracking technologies to enable core platform functionality, maintain session continuity, and detect fraudulent or abusive behavior. The types of cookies used are:

• Strictly necessary cookies — Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies — Remember your preferences (e.g., game lobby filter settings, preferred lobby layout). These can be disabled; doing so will not prevent access to the Platform but may affect personalization features.
• Analytics cookies — Used to collect anonymized, aggregated data on how players navigate the Platform, which pages are most visited, and where errors occur. This data is used internally to improve the Platform and does not identify individual users.
• Security and fraud detection cookies — Used to detect suspicious behavior patterns, multi-account activity, and automated bot interactions. These are processed as part of ph677's legitimate interest in Platform security.

ph677 does not use third-party advertising or behavioural tracking cookies that would share your browsing activity with external advertising networks or data brokers.

Most browsers allow you to control cookies through their settings. Instructions for managing cookies in Chrome, Safari, Firefox, and Samsung Internet (the most common browsers among Filipino mobile users) are available in each browser's help documentation.

ph677 implements technical and organizational security measures commensurate with the sensitivity of the personal data processed and the risks posed by unauthorized access, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and ph677's servers.
• Encryption at rest for all stored personal data, including KYC documents and Account credentials.
• Role-based access controls restricting employee access to personal data to those with a documented legitimate business need.
• Multi-factor authentication for all staff accounts with administrative access to systems containing personal data.
• Regular security audits and penetration testing by qualified security professionals.
• Incident response procedures including a data breach notification process that complies with the NPC's mandatory 72-hour breach reporting requirement where a breach is likely to result in harm to data subjects.

ph677 is a real-money online gaming platform strictly limited to individuals who are twenty-one (21) years of age or older. The Platform does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the Account registration and withdrawal process.

If ph677 becomes aware that an Account has been registered by or on behalf of an individual under 21 years of age, the Account will be immediately suspended, all associated funds will be held pending investigation and refund, and the personal data collected in connection with the underage Account will be deleted following the completion of the investigation process.

Parents and guardians who believe that a minor may have accessed ph677 are encouraged to contact ph677's Data Protection Officer immediately at support@ph677.org so that the matter can be investigated and resolved promptly.

ph677's primary data infrastructure is located within the Republic of the Philippines. Certain service providers used by ph677 — including cloud infrastructure providers and gaming software providers — may be located outside the Philippines and may process personal data on servers outside Philippine jurisdiction.

Where personal data is transferred outside the Philippines, ph677 ensures that such transfers are made only to recipients who provide an adequate level of data protection, either through applicable data transfer agreements incorporating the NPC's standard contractual clauses, or through other lawful transfer mechanisms recognized under the Data Privacy Act and its implementing rules.

ph677 does not transfer personal data to jurisdictions that do not provide an adequate level of protection for personal data without implementing appropriate safeguards as required by the Data Privacy Act.

ph677 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material changes to this Policy will be communicated to registered Players via SMS to their registered mobile number and/or in-platform notification, no less than seven (7) days before the amended Policy takes effect — unless an earlier effective date is required by law.

The "Last Updated" date at the top of this page reflects the date on which the current version of this Policy became effective. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy.

For all matters relating to this Privacy Policy, the exercise of your data rights, or any privacy-related concern about ph677's data practices, you may contact ph677's Data Protection Officer through the following channels:

• Email: support@ph677.org — Subject line: "Data Privacy Request"
• Live Chat: Available 24 hours a day, 7 days a week via the in-platform support chat
• Messenger / Viber: Available 8 AM to 11 PM Philippine Time (PHT)

ph677 will acknowledge all data privacy requests within three (3) business days and provide a full response within fifteen (15) business days. Identity verification will be required before processing data access or erasure requests.

If you are not satisfied with ph677's handling of your data privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, the independent government authority that enforces the Data Privacy Act. Information about filing a complaint with the NPC is available through official Philippine government resources.