ph86 Privacy Policy

1. Overview

This Privacy Policy ("Policy") describes how ph86 ("ph86", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "User", "Player") who access or use the ph86 online gaming platform at https://ph86.net and all associated services (collectively, the "Platform").

ph86 is committed to handling your personal data responsibly, transparently, and in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). By registering for a ph86 account or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the ph86 Terms & Conditions, which govern your use of the Platform as a whole. Where this Policy conflicts with the Terms & Conditions on a privacy matter, this Policy shall prevail.

2. Data Controller

ph86 is the personal information controller responsible for your personal data collected through the Platform. ph86 has appointed a Data Protection Officer (DPO) who oversees compliance with RA 10173 and this Policy. Contact details for the DPO are provided in Section 14 of this Policy.

ph86 operates within the PAGCOR regulatory framework. As a PAGCOR-regulated platform, ph86 is subject to additional data handling obligations imposed by PAGCOR, including anti-money laundering (AML) reporting requirements under the Philippine Anti-Money Laundering Act (AMLA).

3. Personal Data We Collect

3.1 Registration Data

When you create a ph86 account, we collect the following information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify you are 21 years of age or older);
• Philippine mobile number;
• Email address;
• Username and encrypted password;
• City or municipality of residence (e.g., Manila, Cebu, Davao, Quezon City, Makati).

3.2 Identity Verification (KYC) Data

To comply with PAGCOR and AMLA requirements, ph86 may collect:

• Government-issued photo identification (Philippine passport, driver's licence, SSS/GSIS ID, PhilSys National ID, or Voter's ID);
• Proof of address (utility bill, bank statement, or barangay certificate);
• Source of funds documentation where required by AML regulations;
• Selfie or live photo for identity matching purposes.

3.3 Financial Data

When you make deposits or request withdrawals, ph86 collects:

• GCash or PayMaya mobile number;
• Bank account details (bank name, account number, account name) for bank transfer transactions via BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or other Philippine banks;
• Debit card details (card number, expiry, cardholder name) where applicable;
• Transaction history, deposit amounts, and withdrawal records.

3.4 Gaming Activity Data

ph86 records your gaming activity on the Platform, including:

• Games played, bet amounts, win/loss records, and session durations;
• Bonus claims and wagering activity;
• Responsible gaming tool usage (deposit limits, self-exclusion requests).

3.5 Technical and Device Data

ph86 automatically collects certain technical data when you access the Platform:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session timestamps and Platform navigation data;
• Cookie identifiers and similar tracking technologies (see Section 11).

3.6 Communications Data

If you contact ph86 customer support via live chat or email, we retain records of those communications, including the content of your messages and any attachments you provide.

4. How We Collect Your Data

ph86 collects your personal data through the following means:

• Directly from you — when you register, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings after ph86 login;
• Automatically — through cookies, server logs, and analytics tools when you browse or use the Platform;
• From third parties — from identity verification service providers, payment processors (GCash, PayMaya, Philippine banks), and fraud prevention services, where necessary to verify your identity or process transactions;
• From regulatory authorities — where ph86 is required by PAGCOR, the NPC, or other Philippine government agencies to obtain or share information about you.

5. Purposes of Processing

ph86 processes your personal data for the following purposes:

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ph86 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our contract with you (i.e., to operate your ph86 account and provide gaming services);
• Legal obligation — processing required to comply with PAGCOR regulations, AMLA obligations, NPC requirements, and other applicable Philippine laws;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights;
• Consent — processing for direct marketing communications, where you have given your explicit consent. You may withdraw this consent at any time via your account settings or by contacting our DPO.

7. Data Sharing and Disclosure

ph86 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

7.1 Service Providers

ph86 engages trusted third-party service providers to assist in operating the Platform, including identity verification providers, payment processors (GCash, PayMaya, Philippine banks), cloud hosting providers, and customer support platform providers. These providers are contractually bound to process your data only on ph86's instructions and in compliance with RA 10173.

7.2 Regulatory and Law Enforcement Authorities

ph86 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), or other Philippine government authorities where required by law, court order, or regulatory directive.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ph86's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

8. Data Retention

ph86 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, in accordance with PAGCOR and AMLA requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming activity data: Retained for three (3) years from the date of the activity;
• Customer support communications: Retained for two (2) years from the date of the communication;
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter.

After the applicable retention period, ph86 will securely delete or anonymise your personal data in accordance with NPC-approved data disposal procedures.

9. Data Security

ph86 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ph86 Platform;
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the Platform;
• Two-factor authentication (2FA) available for all ph86 accounts;
• Incident response procedures in accordance with NPC breach notification requirements.

While ph86 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph86 login credentials and for notifying ph86 immediately if you suspect any unauthorised access to your account.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph86:

• Right to be Informed — the right to know how your personal data is being collected and processed, as described in this Policy;
• Right to Access — the right to request a copy of the personal data ph86 holds about you;
• Right to Rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to Erasure or Blocking — the right to request deletion or blocking of your personal data where processing is no longer necessary or lawful, subject to ph86's legal retention obligations;
• Right to Object — the right to object to processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to Data Portability — the right to receive your personal data in a structured, commonly used format;
• Right to Lodge a Complaint — the right to file a complaint with the National Privacy Commission (NPC) if you believe ph86 has violated your data privacy rights.

To exercise any of these rights, please contact the ph86 Data Protection Officer using the details in Section 14. ph86 will respond to all verified requests within fifteen (15) days in accordance with NPC guidelines.

11. Cookies and Tracking Technologies

ph86 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies ph86 uses are:

• Strictly Necessary Cookies — essential for the Platform to function, including session management and ph86 login authentication. These cannot be disabled.
• Functional Cookies — remember your preferences such as language settings and responsible gaming limits.
• Analytics Cookies — help ph86 understand how players use the Platform so we can improve the gaming experience. Data collected is aggregated and anonymised where possible.
• Marketing Cookies — used to deliver relevant ph86 promotions and offers, only where you have given consent.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core ph86 gaming services, but may limit certain personalisation features.

12. Minors and Age Restriction

Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gaming platforms. If you believe a minor has registered on ph86, please contact our DPO immediately using the details in Section 14.

13. Changes to This Policy

ph86 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, ph86 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this Policy indicates when it was last revised. Your continued use of the ph86 Platform following the effective date of any update constitutes your acknowledgement of the revised Policy. We encourage you to review this Policy periodically.

14. Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or ph86's handling of your personal data, please contact the ph86 Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Privacy Request – [Your ph86 Username]"
• Response Time: ph86 aims to respond to all privacy requests within 15 days

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with ph86's response to your privacy concern.