Privacy Policy

1. Introduction

ph677 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every player and visitor who interacts with our online casino platform at https://ph677.app. This Privacy Policy describes what personal information ph677 collects, the purposes for which it is processed, how it is stored and protected, and the rights available to you as a data subject under Philippine law.

This Privacy Policy forms part of the ph677 Terms & Conditions. By registering an account, making a deposit, or otherwise using ph677, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the ph677 Platform.

ph677 operates in compliance with Republic Act No. 10173 (the Data Privacy Act of 2012, or "DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission of the Philippines.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, ph677 is the Personal Information Controller (PIC) in respect of the personal data you provide when using the Platform. ph677 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

Where ph677 engages third-party service providers (such as payment processors, game providers, or fraud detection services) to process personal data on ph677's behalf, those parties act as Personal Information Processors (PIPs) and are contractually required to process data only in accordance with ph677's instructions and this Privacy Policy.

3. Personal Data We Collect

3.1 Information You Provide Directly

• Registration data: Mobile number, username, date of birth, and password (stored in hashed form).
• KYC / Identity Verification data: Full legal name, government-issued ID number and document image (e.g., PhilSys ID, passport, UMID, driver's licence), selfie or liveness verification image, proof of address documents.
• Payment data: GCash number, PayMaya (Maya) account details, bank account details (BPI, BDO, Metrobank), or card details (Visa/Mastercard) as applicable to your chosen payment methods. Card numbers are processed by PCI-DSS compliant payment processors and are not stored in full by ph677.
• Communications: Content of messages sent to ph677 customer support via live chat or email.
• Responsible gaming preferences: Deposit limits, session reminders, cooling-off periods, and self-exclusion elections.

3.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution.
• Usage data: Pages visited, games played, session duration, click-stream data, timestamps of login and logout events.
• Transaction data: Deposit amounts, withdrawal requests, bet history, game round outcomes, and bonus activations.
• Geolocation data: Approximate location derived from IP address, used to verify jurisdictional eligibility.
• Cookie and tracking data: As described in Section 7 of this Policy.

3.3 Information from Third Parties

ph677 may receive personal data from third parties including identity verification bureaus, fraud prevention services, and payment processors in order to verify your identity, prevent financial crime, and ensure compliance with applicable regulations.

4. How We Use Your Personal Data

ph677 processes your personal data for the following purposes:

• Account creation and management: To register and maintain your ph677 account, verify your identity, and provide access to Platform services.
• Transaction processing: To process deposits, withdrawals, and account-to-account transfers, and to maintain accurate financial records.
• Regulatory compliance: To fulfil Anti-Money Laundering (AML), Know Your Customer (KYC), and responsible gaming obligations under Philippine law and PAGCOR requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multiple-account creation, bonus abuse, and other prohibited conduct.
• Customer support: To respond to your queries, resolve disputes, and improve support quality through interaction records.
• Service improvement: To analyse Platform usage patterns, troubleshoot technical issues, and improve game selection, user interface, and overall player experience.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling and to enforce self-imposed limits and self-exclusion elections.
• Marketing communications: To send promotional offers, bonus notifications, and product updates where you have consented to receive such communications. You may withdraw consent at any time.
• Legal obligations: To respond to lawful requests from courts, law enforcement, or regulatory bodies, and to enforce our Terms & Conditions.

5. Legal Basis for Processing

ph677 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to register your account and deliver the services you have requested under the ph677 Terms & Conditions.
• Legal obligation: Processing required to comply with AML, KYC, tax reporting, and other applicable Philippine legal requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional analytics, where you have provided specific, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

ph677 does not sell or rent your personal data. We share personal data only in the following limited circumstances:

• Payment processors: GCash (G-Xchange Inc.), PayMaya (Voyager Innovations), and banking partners (BPI, BDO, Metrobank) receive necessary financial data to process your transactions.
• Game providers: Your username and gameplay data may be shared with third-party game software providers to deliver their games on the ph677 Platform. These providers do not receive your full identity or payment details.
• Identity verification services: KYC and AML service providers process your identity documents on ph677's behalf under strict contractual data processing agreements.
• Fraud prevention services: Anonymised or pseudonymised device and behavioural data may be shared with fraud detection platforms to protect the Platform and its users.
• Regulatory and law enforcement authorities: ph677 will disclose personal data to PAGCOR, the AMLC (Anti-Money Laundering Council), the NPC, or other competent Philippine authorities when legally required to do so.
• Professional advisers: Legal counsel, auditors, and compliance advisers may access personal data on a need-to-know basis under professional confidentiality obligations.

All third-party processors are contractually required to implement appropriate technical and organisational security measures and to process personal data only for the purposes specified by ph677.

7. Cookies and Tracking Technologies

ph677 uses cookies and similar web technologies (including local storage, session storage, and pixel tags) on the Platform. Cookies are small text files placed on your device that help us deliver and improve our services.

7.1 Types of Cookies We Use

• Essential cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to understand how players navigate the Platform, which games are most popular, and where technical errors occur. Data is aggregated and not used to identify individual players.
• Preference cookies: Store your language and display preferences so you don't have to set them on each visit.
• Fraud prevention cookies: Help ph677 identify unusual patterns that may indicate fraudulent activity or multiple-account creation.

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is placed. Disabling analytics and preference cookies may affect your experience on ph677 but will not prevent access to core gaming services. Essential cookies cannot be disabled.

8. Data Retention

ph677 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements imposed by Philippine law:

• Account and KYC records: Retained for a minimum of 5 years from the date of account closure, as required by AML and PAGCOR regulations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support records: Retained for 2 years from the date of each interaction, or longer where a dispute remains unresolved.
• Marketing consent records: Retained for 3 years from the date of consent or withdrawal, whichever is later.

Upon expiry of the applicable retention period, ph677 will securely delete or anonymise personal data such that it can no longer be linked to an identifiable individual. Where deletion is not technically feasible in the short term (e.g., in backup systems), ph677 will isolate the data from further processing until deletion is possible.

9. Data Security

ph677 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and ph677 servers.
• Encryption at rest for sensitive personal data including identity documents and financial information.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• OTP-based withdrawal verification to prevent unauthorised fund transfers.
• Regular security audits, penetration testing, and vulnerability assessments.
• Real-time fraud and intrusion detection monitoring.

No data transmission over the internet can be guaranteed as 100% secure. While ph677 takes all reasonable precautions, we cannot warrant absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, ph677 will notify affected users and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012.

10. Your Rights as a Data Subject

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph677:

To exercise any of the above rights, contact ph677's Data Protection Officer (see Section 13). ph677 will respond to verified requests within 15 business days. We may request proof of identity before processing any data subject rights request.

11. Children's Privacy

ph677 is strictly intended for adults aged 21 years and above. ph677 does not knowingly collect personal data from individuals below the age of 21. If ph677 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and all personal data deleted, subject to any AML or legal hold obligations.

If you are a parent or guardian and believe that a minor has registered on ph677, please contact support immediately. ph677 cooperates fully with parental requests to close underage accounts.

12. Changes to This Privacy Policy

ph677 reserves the right to amend this Privacy Policy at any time. When material changes are made, ph677 will update the "Last Updated" date at the top of this Policy and, where required by applicable law, notify registered users via SMS or the registered email address. Minor clarifications may be made without formal notification.

Continued use of the ph677 Platform following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you should cease using ph677 and request account closure.

13. Contact Us and Data Protection Officer

ph677 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. For any privacy-related query, data subject rights request, or complaint, please contact:

Data Protection Officer — ph677
Email: support@ph677.app (plain text — not a clickable link)
Subject line: "Privacy / DPO Enquiry"
Response time: Within 15 business days of verified request receipt

If you are not satisfied with ph677's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC complaint process is available through Philippine government resources.