ph649 processes all personal data in strict compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations administered by the National Privacy Commission (NPC) of the Philippines.
All data transmitted between your device and ph649 servers is encrypted using 256-bit SSL — the same standard used by Philippine banks and government digital platforms. Your credentials, transaction records, and personal details are protected in transit and at rest.
As a Filipino data subject, you hold rights under RA 10173 including the right to access, correct, erase, and object to the processing of your personal data. ph649 provides clear channels for exercising all of these rights without undue delay or cost.
ph649 does not sell, rent, or commercially distribute your personal data to third parties. Data is shared only with licensed software providers, payment processors, and PAGCOR as required by Philippine gaming regulation — never for advertising or profiling by unrelated parties.
Identity documents submitted during KYC verification — including PhilSys IDs, passports, driver's licenses, and UMID cards — are stored in encrypted form, accessed only by authorized compliance personnel, and retained only for as long as required by PAGCOR and AMLC regulatory obligations.
In the event of a personal data breach that is likely to result in harm to any ph649 account holder, ph649 will notify affected individuals and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC requirements.
ph649 takes the privacy of its players seriously. This Privacy Policy describes in clear, specific terms how ph649 collects, uses, stores, shares, and protects personal data in the course of operating the ph649 online gaming platform, accessible at ph649.vip.
ph649 is required to comply with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (the "DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). ph649 is also subject to personal data obligations arising from PAGCOR's regulatory framework and Republic Act No. 9160, the Anti-Money Laundering Act, as amended.
This Policy should be read alongside ph649's Terms & Conditions, which are available at ph649.vip/terms-conditions and are incorporated by reference into this Privacy Policy. Where those Terms contain provisions relating to data handling, this Policy provides the more detailed governing framework.
For the purposes of the Philippine Data Privacy Act of 2012, ph649 acts as the Personal Information Controller (PIC) in respect of all personal data processed through the ph649.vip platform. As PIC, ph649 determines the purposes for which personal data is processed and the means by which that processing takes place.
ph649 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA, this Privacy Policy, and all NPC issuances. The DPO's contact information is set out in Section 14 of this Policy. The DPO is accessible to all data subjects at any time for queries, complaints, or the exercise of data subject rights.
ph649 collects personal data across several categories. The specific data collected depends on how you interact with the platform.
| Category | Data Elements | When Collected |
|---|---|---|
| Registration Data | Username, Philippine mobile number, password (hashed), date of birth, country of residence | Account registration |
| Identity Data (KYC) | Full legal name, government-issued ID type and number (PhilSys, passport, driver's license, UMID), ID photographs, selfie verification images | Prior to first withdrawal |
| Financial Data | GCash account reference, PayMaya account reference, bank account details (BPI, BDO, Metrobank), USDT wallet address, deposit and withdrawal transaction records | Payment processing |
| Gaming Data | Wager history, game session logs, win/loss records, VIP tier and point accumulation, bonus claim history | Ongoing platform use |
| Technical Data | IP address, device type and model, operating system, browser type, session timestamps, cookie identifiers | Platform access |
| Communications Data | Live chat transcripts, Viber and Messenger message logs, support ticket contents, responsible gaming request records | Support interactions |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, session time alert preferences, cooling-off period records | Responsible gaming tool use |
ph649 collects personal data through the following means:
ph649 processes personal data for the following specific, declared purposes:
To create, maintain, verify, and close player accounts. This includes authentication, password recovery, session management, and security monitoring for suspicious login activity.
To process deposits and withdrawals via GCash, PayMaya, Philippine bank transfers, and USDT, including transaction verification, reconciliation, and the dispatch of withdrawal funds to player-designated payment accounts.
To fulfill ph649's obligations under PAGCOR's licensing conditions, Republic Act No. 9160 (Anti-Money Laundering Act), and Republic Act No. 10173 (Data Privacy Act). This includes identity verification, age confirmation, source-of-funds checks, and mandatory transaction reporting to the AMLC where applicable.
To deliver casino games, sports betting markets, and live dealer content; to maintain server integrity; and to record game outcomes and session data for dispute resolution and audit purposes.
To handle player queries, complaints, account recovery requests, and responsible gaming assistance requests through live chat, Viber, and Messenger channels in Tagalog and English.
To determine player eligibility for promotional offers, to calculate and credit cashback and bonus awards, and to administer the ph649 VIP tier program based on accumulated wagering activity.
To enforce deposit limits, session time settings, cooling-off periods, and self-exclusion requests; to detect patterns of gaming behavior consistent with problem gambling; and to comply with PAGCOR's responsible gaming program requirements.
To detect and prevent unauthorized account access, bonus abuse, multi-account creation, money laundering, and other fraudulent activity on the platform.
To analyze aggregated and anonymized usage data for the purpose of improving the ph649 platform, optimizing game lobby curation, and enhancing the mobile browsing experience for Filipino players.
Under the Philippine Data Privacy Act, all processing of personal data requires a valid legal basis. ph649 relies on the following legal bases:
ph649 does not sell, rent, or commercially license your personal data to any third party. ph649 shares personal data only in the following circumstances and only to the minimum extent necessary for each purpose:
Game providers such as JILI, PG Soft, Pragmatic Play, and Evolution Gaming may receive session data (player identifier, wager amounts, game outcomes) strictly for the purpose of game delivery and dispute resolution. These providers are engaged under data processing agreements that restrict their use of data to their contracted service scope.
GCash, PayMaya, BPI, BDO, Metrobank, and USDT processing partners receive transaction data necessary to process deposits and withdrawals. Payment providers handle this data under their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.
Third-party KYC providers process identity document images for the purpose of verification only. These providers are prohibited from retaining or using your documents beyond their contracted scope.
ph649 is legally required to provide player data to PAGCOR upon request as part of its regulatory oversight obligations. Similarly, ph649 is required to submit mandatory suspicious transaction reports to the AMLC under the Anti-Money Laundering Act. Such disclosures are legal obligations and do not require your separate consent.
ph649 will disclose personal data to Philippine law enforcement agencies or courts where required to do so by valid legal process, including court orders, subpoenas, or other legally mandated requests.
ph649 retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:
Following the applicable retention period, personal data is securely deleted or anonymized using industry-standard data destruction procedures. Anonymized, aggregated data may be retained indefinitely for statistical and platform improvement purposes.
ph649 implements a layered data security architecture incorporating technical, organizational, and procedural controls to protect personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction:
No data security system is infallible. In the event that a breach occurs, ph649 will follow its incident response plan and comply with NPC notification obligations as described in Section 6 of the feature highlights above.
ph649 uses cookies and similar tracking technologies to operate the platform effectively and to improve the player experience. The following categories of cookies are used:
ph649 does not use third-party advertising cookies or share cookie data with advertising networks. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair platform functionality.
Under Republic Act No. 10173 and its Implementing Rules and Regulations, you hold the following rights with respect to your personal data processed by ph649. You may exercise any of these rights by contacting ph649's Data Protection Officer at the contact details provided in Section 14.
The right to be informed of the purpose, scope, and manner of processing of your personal data before it is collected. This Policy fulfills that obligation.
The right to request a copy of all personal data ph649 holds about you, free of charge, within a reasonable timeframe following a verified request.
The right to request correction of any inaccurate or incomplete personal data ph649 holds about you, subject to verification of the corrected information.
The right to request deletion of your personal data where processing is no longer necessary, subject to overriding legal retention obligations under PAGCOR and AMLC requirements.
The right to object to processing based on legitimate interests, including direct marketing and profiling. Objection to legally obligated processing (KYC, AML) may require account closure.
The right to lodge a complaint with the National Privacy Commission of the Philippines (www.privacy.gov.ph) if you believe ph649 has processed your data unlawfully.
ph649 will respond to all data subject rights requests within fifteen (15) working days of receiving a verified request. Where requests are complex or numerous, ph649 may extend this period by a further fifteen (15) working days with written notice to the requestor.
ph649 does not direct any marketing communications, game promotions, or platform content toward persons under the age of 21. All registration flows include an age declaration requirement, and KYC verification confirms the age of all withdrawing players.
Where ph649 identifies that personal data belonging to a person under 21 has been collected, that data will be immediately deleted and the associated account permanently closed. Any winnings accrued by an underage account will be forfeited in accordance with ph649's Terms & Conditions.
ph649 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC issuances, PAGCOR regulatory requirements, or ph649's own processing practices.
Material changes — meaning changes that affect your rights, the categories of data collected, or the purposes for which data is used — will be communicated to you via the mobile number or other contact details registered to your ph649 account no fewer than seven (7) calendar days before the amended Policy takes effect.
The effective date of the current version of this Privacy Policy is displayed at the top of this page. Continued use of the ph649 platform after a revised Policy takes effect constitutes your acknowledgment of the updated terms. We encourage you to review this Policy periodically.
For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights, please contact ph649's Data Protection Officer:
If you are not satisfied with ph649's handling of your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC can be reached at privacy.gov.ph — their contact details are published on their official government website. ph649 will cooperate fully with any NPC inquiry or investigation.
Register a ph649 account today. PAGCOR-regulated, 256-bit encrypted, and built entirely for Filipino players across Manila, Cebu, Davao, and beyond. 800+ games. GCash deposits in seconds. 21+ only.
Must be 21 years or older to register. Gambling involves risk — please play responsibly. NCMH: 1553.