Privacy Policy – How ph565 Collects, Uses, and Protects Your Data

1. Data Controller Identity & Contact Details

The data controller responsible for your personal information under this Privacy Policy is ph565, operating ph565.cam. As data controller, ph565 determines the purposes and means by which your personal data is processed and is accountable for ensuring your information is handled in compliance with the Data Privacy Act of 2012.

We have appointed a Data Protection Officer (DPO) responsible for overseeing our data protection practices, handling data subject requests, and serving as the primary point of contact for privacy-related inquiries. You may contact our DPO at any time:

• Email: [email protected] (Subject line: "DPO — Privacy Request")
• Response Time: We will acknowledge your request within 3 business days and provide a full response within 30 calendar days.

2. Categories of Personal Data We Collect

ph565 collects personal data in several ways: directly from you when you register or use our services, automatically through your use of ph565.cam and our mobile applications, and from third-party service providers involved in identity verification and payment processing.

2.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, nationality, government-issued identification number (passport, driver's license, UMID, SSS, PhilSys ID), and copies of identification documents.
• Contact Data: Philippine mobile phone number, email address, current residential address (barangay, city/municipality, province).
• Account Data: Username, password (stored only in encrypted/hashed form, never in plain text), security questions, and personal preferences.
• Financial Data: GCash account number, PayMaya account, bank account details (BPI, BDO, Metrobank, etc.), credit/debit card details (processed through PCI-DSS compliant third-party processors — ph565 does not store full card numbers), deposit and withdrawal history, and transaction records.
• Communications Data: Records of your correspondence with ph565 customer support, including chat transcripts, emails, and call recordings (where applicable with prior notice).

2.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, device identifiers, and hardware specifications.
• Usage Data: Pages visited on ph565.cam, time and date of access, session duration, games played, bets placed, wagers, outcomes, and navigation patterns.
• Location Data: Approximate geographic location derived from your IP address, used to verify your location within Philippine territory and comply with geographic access restrictions. We do not collect precise GPS location without your explicit consent.
• Cookie Data: Information collected through cookies, web beacons, and similar tracking technologies as described in Section 9 of this Policy.

2.3 Data From Third Parties

• Identity Verification Providers: We may receive identity verification results from our KYC partners who cross-reference your submitted documents against government databases.
• Payment Processors: GCash, PayMaya, and banking partners may confirm transaction statuses and flag suspicious activity to ph565.
• Fraud Prevention Services: Our fraud detection partners may provide risk scores, device fingerprinting data, and behavioral analytics used to protect your account.

2.4 Special Categories of Data

ph565 does not intentionally collect special categories of sensitive personal data (as defined under the Data Privacy Act) such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where strictly necessary for regulatory compliance (e.g., biometric data on government-issued IDs submitted for KYC verification). Such data is processed only to the extent required for identity verification and is stored with heightened security controls.

3. Purposes for Which We Process Your Data

ph565 processes your personal information only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The principal purposes for which we process your personal data are:

Service Provision & Account Management

To create and manage your ph565 account, verify your identity during registration and KYC processes, enable you to log in securely, maintain your account preferences and gaming history, process deposit and withdrawal transactions, credit bonus funds, and provide access to our casino games and sports betting markets.

Legal & Regulatory Compliance

To comply with our obligations under Philippine law, including the Data Privacy Act of 2012, Republic Act No. 9160 (Anti-Money Laundering Act) as amended, PAGCOR regulations, and other applicable laws and regulations. This includes conducting enhanced due diligence on high-value transactions, filing suspicious transaction reports when required, and maintaining records for regulatory inspection.

Security & Fraud Prevention

To protect your account from unauthorized access, detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities, monitor transactions for suspicious patterns, enforce our Terms and Conditions, and ensure the integrity of our gaming platform.

Customer Support & Communications

To respond to your inquiries and support requests, communicate important account information such as deposit confirmations, withdrawal processing updates, and security alerts, and send service-related notifications. With your explicit consent, we may also send promotional communications about bonuses, new games, and special offers — you may withdraw this consent at any time.

Responsible Gaming

To monitor your gaming activity for indicators of problem gambling behavior, enforce self-exclusion periods and deposit limits you have set, and fulfill our responsible gaming obligations under applicable regulations. This processing is conducted in your interest and is required for compliance with responsible gaming standards.

Platform Improvement & Analytics

To analyze aggregate usage patterns, improve our website functionality, optimize game performance, personalize your gaming experience, and develop new features and services. Where possible, we use anonymized or pseudonymized data for analytics purposes to minimize privacy impact.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph565 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of our contract with you, including account registration, payment processing, and service provision. Without this processing, ph565 cannot provide you with gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering obligations, KYC requirements, PAGCOR regulatory compliance, and NPC reporting requirements.
• Legitimate Interest: Processing necessary for our legitimate business interests, including fraud prevention, security monitoring, platform analytics, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent for processing — primarily for marketing communications and optional analytics. You may withdraw your consent at any time by contacting [email protected] or updating your communication preferences in your account settings.
• Vital Interest: In exceptional circumstances, processing may be necessary to protect your vital interests or the interests of another person, such as identifying and addressing problem gambling behavior that poses a risk to your financial well-being.

5. Data Sharing & Third-Party Disclosures

ph565 does not sell your personal information to any third party. We do not trade, rent, or commercially exchange your personal data with advertisers, data brokers, or other commercial entities for their independent marketing purposes. We share your data only in the limited circumstances described below.

5.1 Service Providers & Processors

ph565 works with carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), banks, and card payment processors for transaction processing
• Identity Verification Providers: KYC and AML compliance platforms for identity document verification and sanctions screening
• Fraud Detection Services: Security and fraud prevention platforms that analyze transaction patterns and device data
• Cloud Infrastructure Providers: Hosting and data storage providers operating servers in compliant jurisdictions
• Customer Support Platforms: Live chat and ticketing systems used to manage your support interactions
• Game Providers: Licensed game suppliers (such as Pragmatic Play, Evolution Gaming) who may process session data to deliver game services

All service providers are contractually obligated to process your data only as instructed by ph565, implement appropriate security measures, and comply with applicable data protection laws.

5.2 Legal & Regulatory Disclosures

ph565 may disclose your personal data to governmental and regulatory authorities where required by law or where we have a good-faith belief that disclosure is necessary to:

• Comply with applicable laws, regulations, legal processes, or government requests
• Respond to subpoenas, court orders, or other legal processes served on ph565
• Fulfill our reporting obligations under the Anti-Money Laundering Act (AMLA), as required by the AMLC or PAGCOR
• Protect the safety, rights, or property of ph565, our users, or the public
• Detect, prevent, or address fraud, security breaches, or prohibited activities

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ph565's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or prominent notice on ph565.cam before your data is transferred to a different controller or becomes subject to a different privacy policy. You will have the right to object to such transfer as described in Section 8.

6. Data Retention Periods

ph565 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The principal retention periods applicable to ph565 are as follows:

Upon expiration of the applicable retention period, ph565 will securely delete or anonymize your personal data in a manner that prevents reconstruction or recovery. Where anonymization is not technically feasible, data will be deleted using secure erasure methods that comply with recognized data destruction standards.

In circumstances where your data is subject to legal proceedings, regulatory investigation, or active dispute, ph565 may retain relevant data beyond the standard retention period until such proceedings are finally resolved.

7. Data Security Measures

ph565 implements a comprehensive, multi-layered security framework designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include both technical and organizational safeguards appropriate to the sensitivity of the data we process and the risks associated with our online gaming platform.

7.1 Technical Security Controls

• Transport Layer Security (TLS 1.3): All data transmitted between your device and ph565 servers is encrypted using 256-bit TLS encryption, preventing interception of your data in transit.
• Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption. Passwords are hashed using bcrypt with a unique per-user salt — we never store passwords in readable form.
• Access Controls: Access to personal data is strictly controlled on a need-to-know basis. All staff with access to production data systems undergo background screening and must use multi-factor authentication.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems (IDS/IPS), DDoS mitigation, and continuous vulnerability scanning.
• Database Security: Databases are isolated in private network segments inaccessible from the public internet. All database connections are encrypted and require certificate-based authentication.

7.2 Organizational Security Controls

• Regular security awareness training for all staff who handle personal data
• Strict data classification policy differentiating public, internal, confidential, and restricted data
• Formal data breach response plan with defined roles, escalation procedures, and NPC notification protocols
• Regular third-party penetration testing and security audits conducted at least annually
• Data processing agreements with all third-party service providers
• Clean desk and clear screen policies for all staff handling personal information

7.3 Data Breach Notification

In the event of a personal data breach that is likely to result in harm to you, ph565 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the Data Privacy Act. We will also notify affected users directly within a reasonable period, providing clear information about the nature of the breach, what data was affected, likely consequences, and steps we have taken and recommend you take to mitigate potential harm.

8. Your Data Subject Rights

Under the Data Privacy Act of 2012, ph565 users have the following rights regarding their personal data. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." We will respond within 30 calendar days.

9. Cookies, Web Beacons & Tracking Technologies

ph565 uses cookies and similar tracking technologies to enhance your experience, ensure platform security, analyze usage patterns, and deliver relevant content. This section explains our use of these technologies and your choices regarding them.

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit ph565.cam. They are widely used to make websites work efficiently and to provide information to website operators. Cookies may be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device for a defined period or until you delete them).

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of ph565.cam. These cookies enable core functions such as account login, session management, security, and load balancing. These cannot be disabled without impairing site functionality.
  Session ID CSRF Token Authentication Load Balancer
• Functional Cookies: Enable enhanced functionality and personalization, such as remembering your language preferences, game settings, and account display preferences.
  Language Game Preferences Display Settings
• Analytics Cookies: Help us understand how visitors use ph565.cam by collecting and reporting information anonymously. This data helps us improve site performance and user experience.
  Page Views Session Duration Error Logging
• Security Cookies: Used for fraud detection, bot prevention, and account security monitoring. These cookies help protect your account from unauthorized access.
  Device Fingerprint Risk Score Bot Detection

9.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, accept or reject specific cookies, set cookies to expire when you close your browser, and delete all cookies currently stored on your device. Please note that disabling strictly necessary cookies will impair ph565's functionality and may prevent you from logging in or using our services.

9.4 Do Not Track

Some browsers include a "Do Not Track" (DNT) feature. ph565 respects DNT signals where technically feasible. Where a DNT signal is detected, we limit non-essential tracking and analytics data collection to the extent possible without impairing core service functionality.

10. Protection of Minors & Age Verification

ph565 strictly prohibits the use of our gambling services by persons under the age of 21 years, as required by applicable Philippine gaming regulations. We do not knowingly collect personal data from individuals under 21, and we maintain stringent age verification procedures as part of our Know Your Customer (KYC) process to prevent underage access.

If ph565 discovers or has reasonable grounds to believe that a registered user is under 21 years of age, we will immediately:

• Suspend access to the account pending investigation
• Permanently close the account if the user is confirmed to be underage
• Refund any deposited funds not yet wagered to the originating payment method
• Forfeit any winnings obtained by the underage user
• Securely delete or anonymize all personal data associated with the underage account, except where legal retention obligations require otherwise
• Report the matter to relevant regulatory authorities where required by law

If you believe a minor is using a ph565 account, please report this immediately to [email protected]. We take reports of underage gambling extremely seriously and will investigate all credible reports promptly.

11. Changes to This Privacy Policy

ph565 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws and regulations, or the nature of our services. When we make material changes to this Privacy Policy, we will:

• Update the "Effective Date" at the top of this document
• Post a prominent notice on ph565.cam informing users of the change
• Where required by law or where changes are material, send direct notification via email to your registered email address at least 14 days before the changes take effect

Non-material changes (such as typographical corrections, clarifications, or reorganization that do not affect your rights) may be made without prior notice. Your continued use of ph565 after changes take effect constitutes your acceptance of the revised Privacy Policy. If you object to any changes, you must cease using ph565 and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how ph565 protects your personal information. Previous versions of this Privacy Policy are available upon request by contacting our DPO.

12. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or ph565's data processing practices, or if you wish to exercise any of your data subject rights under the Data Privacy Act of 2012, please do not hesitate to contact our Data Protection Officer:

• Email: [email protected] (Subject: "Privacy Policy / DPO Request")
• Availability: Our DPO team is available Monday to Friday, 9:00 AM to 6:00 PM Philippine Standard Time (PST). General customer support is available 24/7.
• Response Time: We will acknowledge your inquiry within 3 business days and provide a substantive response within 30 calendar days. Complex requests involving data portability or large-scale erasure may require up to 60 days, of which we will inform you in advance.

If you are not satisfied with our response or believe that we have not adequately addressed your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.