ph86 Privacy Policy

1. Introduction

This Privacy Policy describes how ph86 ("we", "our", "the Platform", or "the Operator") collects, uses, stores, and protects the personal data of individuals ("you", "the User", "the Player") who access or use the ph86 website at ph86.cam and all associated services, games, and features offered thereon.

ph86 is committed to protecting your privacy and handling your personal data with transparency, fairness, and in full compliance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). We also comply with data governance requirements prescribed by the Philippine Amusement and Gaming Corporation (PAGCOR) as part of our online gaming licence obligations.

By accessing ph86, creating an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy.

2. Data Controller

For purposes of the Data Privacy Act of 2012, ph86 is the Personal Information Controller responsible for the personal data collected through the ph86 platform. ph86 operates under PAGCOR regulation for the Philippines market. All enquiries regarding this Privacy Policy or the handling of your personal data should be directed to the ph86 Data Privacy Officer (DPO) using the contact details provided in Section 12.

3. Personal Data We Collect

3.1 Information You Provide Directly

When you register an account or interact with ph86 services, we collect personal information that you provide directly to us, including:

• Identity information: Full legal name, date of birth, gender, and nationality;
• Contact information: Email address, mobile phone number, and residential address;
• Account credentials: Username and encrypted password;
• Identity verification documents (KYC): Government-issued ID (e.g., Philippine passport, SSS card, PhilSys National ID, UMID, driver's licence), selfie photographs, and proof of address where required;
• Payment information: GCash number, PayMaya account details, bank account details (BPI, BDO, Metrobank, UnionBank), and other payment method details used to fund your account or receive withdrawals;
• Responsible gaming preferences: Deposit limits, session limits, and self-exclusion requests;
• Support communications: Any information you provide when contacting ph86 customer support via live chat or email.

3.2 Information Collected Automatically

When you access and use the ph86 platform, certain technical data is collected automatically by our systems:

• Device and technical data: IP address, device type, operating system, browser type and version, and screen resolution;
• Usage data: Pages visited, games played, session duration, betting history, deposit and withdrawal records, and navigation patterns within the platform;
• Location data: General geographic location inferred from your IP address, used to verify that you are accessing the platform from within the Philippines as required by our PAGCOR licence;
• Cookie and tracking data: As described in Section 6 of this Policy.

3.3 Information from Third Parties

In limited circumstances, ph86 may receive personal data about you from trusted third parties, including:

• Identity verification providers engaged to assist with KYC compliance;
• Payment processors and e-wallet providers (GCash, PayMaya) to confirm transaction status;
• Fraud detection and anti-money laundering screening services;
• PAGCOR and other competent regulatory authorities where required by law.

4. How We Use Your Personal Data

ph86 processes your personal data only for specified, legitimate purposes and in accordance with one or more lawful bases under the Data Privacy Act of 2012.

Purpose	Data Used	Lawful Basis
Account registration and management	Identity, contact, credentials	Contractual necessity
Processing deposits and withdrawals	Identity, payment data	Contractual necessity
Identity verification (KYC)	Identity documents, selfie	Legal obligation (PAGCOR / AML)
Anti-money laundering compliance	Transaction history, identity	Legal obligation (AMLA)
Fraud prevention and platform security	Device data, IP, usage patterns	Legitimate interest
Responsible gaming tools	Gaming activity, limits set	Legal obligation / consent
Customer support	Contact, support communications	Contractual necessity
Marketing and promotions (optional)	Email, preferences	Consent (opt-in)
Platform analytics and improvement	Usage data, cookies	Legitimate interest
Regulatory reporting to PAGCOR	Identity, transaction records	Legal obligation

5. Data Sharing and Disclosure

ph86 does not sell, rent, or trade your personal information to any third party for commercial purposes. We may share your personal data with the following categories of recipients only where necessary and with appropriate safeguards in place:

• PAGCOR and regulatory authorities: We are legally obligated to share certain player data and transaction records with PAGCOR as part of our licensing compliance. We may also share data with the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or law enforcement authorities where required by Philippine law.
• KYC and identity verification providers: Third-party providers engaged to assist with identity verification and document authentication as part of our KYC and AML compliance processes.
• Payment processors: GCash, PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank, Instapay) receive the minimum personal and payment data necessary to process your deposits and withdrawals.
• Technology and infrastructure providers: Cloud hosting, data storage, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements and confidentiality obligations.
• Game software providers: Certified gaming software providers (e.g., Pragmatic Play, Playtech) may receive minimal technical session data necessary to operate their games within the ph86 platform.

All third-party service providers who process personal data on behalf of ph86 are contractually bound to process that data only as instructed by ph86 and in compliance with applicable Philippine data protection law.

6. Cookies and Tracking Technologies

ph86 uses cookies and similar tracking technologies to operate the platform efficiently, improve the user experience, and maintain platform security. A cookie is a small text file stored on your device by your browser when you visit the ph86 website.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences (e.g., language settings, last visited game category) to provide a more personalised experience.
• Analytics cookies: Help us understand how players use the ph86 platform by collecting aggregated, anonymised usage data. This helps us improve the platform layout, game discovery, and overall user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

6.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the ph86 platform. Strictly necessary cookies cannot be disabled without preventing access to the platform.

7. Data Retention

ph86 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and our PAGCOR licence obligations. The following retention periods generally apply:

• Active account data: Retained throughout the period your ph86 account remains active and for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• KYC and identity documents: Retained for a minimum of five (5) years following the end of the business relationship, in compliance with the Anti-Money Laundering Act (AMLA) and PAGCOR licensing requirements.
• Transaction records: Retained for a minimum of five (5) years following each transaction, as required by AMLA and PAGCOR.
• Support communications: Retained for up to three (3) years following resolution of the relevant enquiry or complaint.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to legal retention requirements.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with ph86's data destruction procedures.

8. Security Measures

ph86 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• SSL/TLS encryption for all data in transit between your device and ph86 servers;
• AES-256 encryption for sensitive data at rest, including payment details and identity documents;
• Bcrypt password hashing — ph86 never stores your password in plain text;
• Two-factor authentication (2FA) available and encouraged for all player accounts;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing conducted by independent cybersecurity professionals;
• Fraud detection systems monitoring for unusual account activity, login anomalies, and suspicious transactions in real time;
• Incident response procedures in place to detect, report, and manage personal data breaches in compliance with NPC notification requirements.

While ph86 employs industry-standard security measures, no digital platform can guarantee absolute security. You also have a responsibility to keep your ph86 login credentials confidential and to contact us immediately if you suspect any unauthorised access to your account.

9. Your Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ph86:

• Right to be informed: The right to be notified about the collection and processing of your personal data — which is the purpose of this Privacy Policy.
• Right of access: The right to obtain a copy of the personal data ph86 holds about you and information about how it is being processed.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected or updated.
• Right to erasure (right to be forgotten): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data, particularly for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph86 has handled your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact the ph86 Data Privacy Officer using the contact details in Section 12. ph86 will respond to all verified data subject requests within thirty (30) days of receipt, as required by the Data Privacy Act.

Please note that certain rights are subject to limitations where ph86 is required to retain data for compliance with PAGCOR licensing obligations, AML requirements, or other legal mandates. In such cases, ph86 will explain the applicable legal basis for retaining the data.

10. Minors and Age Restriction

If ph86 discovers or reasonably suspects that personal data has been collected from a person under the age of 21, we will promptly close the relevant account, delete the associated personal data, and return any deposited funds to the payment method on file, subject to legal reporting obligations where applicable.

If you believe a minor has accessed or registered on the ph86 platform, please contact our support team immediately using the details provided in Section 12.

11. Changes to This Privacy Policy

ph86 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, ph86 will notify registered players via email or through an in-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this Privacy Policy reflects the date of the most recent revision. We encourage you to review this page periodically to stay informed about how ph86 handles your personal data. Your continued use of the ph86 platform following any update constitutes your acceptance of the revised Privacy Policy.

12. Contact — Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by ph86, please contact our Data Privacy Officer:

• Data Privacy Officer: ph86 Data Privacy Officer
• Support Email: [email protected]
• Live Chat: Available 24/7 on the ph86 platform
• Response Time: Within 2 hours for general queries; within 30 days for formal data subject requests — Philippine Standard Time

For complaints that remain unresolved after contacting ph86, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.