ph86 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by ph86 ("ph86", "we", "us", "our") and applies to all personal data collected, processed, stored, or shared in connection with your use of the ph86 online gaming platform accessible at ph86.asia and all related services (collectively, the "Services").

ph86 is committed to protecting the privacy and personal data of all users of the ph86 platform, including registered players and visitors. This Policy explains the types of personal data ph86 collects, the purposes for which it is processed, the legal bases upon which ph86 relies, your rights as a data subject under Philippine law, and how to exercise those rights.

This Policy is to be read together with ph86's Terms and Conditions and any game-specific rules published on the ph86 platform. By creating an account with ph86 or using the ph86 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein, to the extent that consent is the applicable legal basis for a given processing activity.

This Policy applies specifically to Philippine-resident players and is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, ph86 is the personal information controller in respect of all personal data collected through the ph86 platform. ph86 determines the purposes and means of processing your personal data and is responsible for ensuring that your personal data is handled in accordance with applicable Philippine data privacy law.

ph86's designated Data Protection Officer (DPO) can be contacted for privacy-related inquiries at [email protected] (plain text — not a clickable link). All formal data subject requests must be submitted in writing to the ph86 DPO via the contact details provided in Section 12 of this Policy.

3. Personal Data We Collect

3.1 Registration and Account Data

When you create a ph86 account, we collect the following personal data:

• Full legal name (as it appears on your government-issued Philippine ID).
• Date of birth (for age verification — ph86 is a 21+ platform).
• Philippine mobile number (+63 format).
• Account password (stored in hashed, non-reversible form — ph86 does not store passwords in plaintext).
• Email address (where provided).
• Residential address in the Philippines.

3.2 KYC and Identity Verification Data

To comply with PAGCOR regulations and anti-money laundering requirements, ph86 conducts Know Your Customer (KYC) verification, which may require collection of:

• Copies of government-issued Philippine identification documents (Philippine National ID, passport, driver's licence, voter's ID, SSS or GSIS ID, or equivalent).
• Selfie photographs for identity matching purposes.
• Proof of address documents (utility bills, bank statements, or equivalent).
• Payment method verification documents where required.

3.3 Financial Transaction Data

ph86 collects records of all financial transactions conducted through the ph86 platform, including:

• Deposit and withdrawal amounts, dates, and methods (GCash, Maya, BDO, BPI, Metrobank, QR Ph, etc.).
• GCash or Maya account numbers associated with transactions (partial masking applied in display).
• Bank account details where bank transfer is used.
• Transaction reference numbers and timestamps.

3.4 Gaming Activity Data

ph86 maintains records of all gaming activity conducted on the platform, including bet placement records, game outcomes, session durations, responsible gaming tool activations, and bonus utilisation history. These records are maintained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

3.5 Technical and Device Data

ph86 automatically collects certain technical data when you access the ph86 platform, including:

• IP address and approximate geolocation.
• Device type, model, and operating system.
• Browser type and version.
• Mobile network operator (Smart, Globe, DITO, etc.).
• Session timestamps and login history.
• Pages visited and features used within the ph86 platform.

4. How We Use Your Personal Data

ph86 uses the personal data described in Section 3 for the following purposes:

• Account administration: Creating and managing your ph86 account, processing ph86 login authentication, and providing access to the ph86 gaming platform.
• Age and identity verification: Confirming that players meet the mandatory 21+ age requirement and verifying identity for KYC compliance.
• Payment processing: Processing deposits and withdrawals via GCash, Maya, bank transfers, and other payment methods available on ph86.
• Regulatory compliance: Meeting ph86's obligations under PAGCOR regulations, anti-money laundering (AMLA) requirements, and other applicable Philippine law.
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeover attempts, money laundering, and other prohibited conduct on the ph86 platform.
• Responsible gaming: Monitoring gaming behaviour and applying responsible gaming tools including deposit limits, session alerts, and self-exclusion in accordance with ph86's responsible gaming obligations.
• Customer support: Responding to player inquiries, complaints, and disputes submitted to ph86 customer support.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the ph86 platform, user experience, and game offering.
• Marketing communications: Sending promotional offers, bonus notifications, and ph86 news to players who have not opted out of marketing communications. Players may opt out at any time via account settings or by contacting ph86 support.

5. Legal Basis for Processing

ph86 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform ph86's obligations under the Terms and Conditions you accepted when creating your ph86 account — including account management, payment processing, and provision of gaming services.
• Legal obligation: Processing required to comply with ph86's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine law.
• Legitimate interests: Processing necessary for ph86's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Marketing communications and certain non-essential analytics, where ph86 relies on your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6. Cookies and Tracking Technologies

ph86 uses cookies and similar tracking technologies on the ph86 platform. Cookies are small data files stored on your device that help ph86 recognise returning players, maintain session state across the ph86 platform, and improve platform performance and personalisation.

6.1 Types of Cookies Used by ph86

• Strictly necessary cookies: Essential for the ph86 platform to function, including session authentication cookies that keep you logged in during your ph86 session. These cannot be disabled without disabling core platform functionality.
• Functional cookies: Remember your preferences on the ph86 platform, such as your preferred language, default game lobby view, and responsible gaming settings.
• Analytics cookies: Collect anonymised data about how players use the ph86 platform to help ph86 improve the product. No personally identifiable information is transmitted via analytics cookies.

You can control cookie settings through your browser. Disabling strictly necessary cookies will impair your ability to use the ph86 platform, including the ph86 login function.

7. Sharing of Personal Data

ph86 does not sell, rent, or trade your personal data to third parties for commercial purposes. ph86 shares personal data only in the following circumstances:

• Payment processors: Financial transaction data is shared with GCash, Maya, BDO, BPI, Metrobank, and other payment service providers as strictly necessary to process deposits and withdrawals.
• KYC and identity verification providers: Identity documents and verification data may be shared with third-party KYC technology providers engaged by ph86 to perform identity verification services. These providers are bound by confidentiality obligations and data processing agreements with ph86.
• Regulatory authorities: ph86 is obligated to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine regulatory or law enforcement authorities where required by law, court order, or regulatory directive.
• Game providers: Certain technical gaming data (player session identifiers, bet records) is shared with third-party game providers whose titles are hosted on the ph86 platform, to the extent necessary to provide the gaming service. No directly identifying personal data is shared with game providers beyond what is technically necessary.
• Group companies: Personal data may be shared within the ph86 corporate group for the purposes described in this Policy, subject to equivalent privacy protections.

All third parties with whom ph86 shares personal data are required to implement appropriate technical and organisational security measures and are prohibited from using ph86 player data for any purpose other than that for which it was shared.

8. Data Retention

ph86 retains personal data only for as long as necessary to fulfil the purposes described in this Policy and to meet legal, regulatory, and contractual obligations. Specific retention periods applied by ph86 include:

• Account and identity data: Retained for the duration of your active ph86 account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, in compliance with AMLA requirements.
• Gaming activity records: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Marketing preferences and consent records: Retained for the duration of your ph86 account and for three (3) years following account closure.
• Technical log data: Typically retained for 12 months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, ph86 will securely delete or anonymise your personal data in a manner that prevents reconstruction of the original information.

9. Security Measures

ph86 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph86 servers.
• AES-256 encryption for personal data stored at rest on ph86 systems.
• Hashed (non-reversible) storage of account passwords — ph86 staff cannot access your password in plaintext.
• Two-factor authentication (OTP via SMS) for ph86 login from new devices.
• Role-based access controls limiting ph86 employee access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the ph86 platform.
• Automated suspicious login detection and account protection systems.

In the event of a personal data breach affecting ph86 players, ph86 will notify the National Privacy Commission and affected players in accordance with the timelines and procedures prescribed by the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, Filipino players whose personal data is processed by ph86 have the following rights:

• Right to be informed: The right to know what personal data ph86 holds about you, the purposes for which it is processed, and your rights under this Policy.
• Right of access: The right to request a copy of the personal data ph86 holds about you, provided in a readable format within a reasonable period.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update certain account information directly in the ph86 account Settings section after ph86 login.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes collected, subject to ph86's legal retention obligations under PAGCOR and AMLA regulations, which may prevent immediate deletion.
• Right to object: The right to object to processing of your personal data for direct marketing purposes. You may exercise this right at any time via ph86 account settings or by contacting ph86 support.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated by ph86.

To exercise any of the above rights, please submit a written request to the ph86 Data Protection Officer using the contact details provided in Section 12. ph86 will respond to all data subject requests within thirty (30) calendar days of receipt, or within such longer period as may be permitted by applicable law where the request is complex or numerous.

11. Changes to This Privacy Policy

ph86 reserves the right to update or amend this Privacy Policy at any time to reflect changes in ph86's data processing practices, changes in applicable Philippine law, or changes in PAGCOR regulatory requirements. When material changes are made to this Policy, ph86 will provide reasonable advance notice to registered ph86 players via the mobile number or email address registered to their ph86 account, and will update the "Last Updated" date at the top of this document.

Your continued use of the ph86 platform following notification of changes to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the amended Privacy Policy, you must cease using the ph86 platform and close your ph86 account.

The most current version of this Privacy Policy is always available on the ph86 platform at ph86.asia/privacy-policy.

12. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or ph86's handling of your personal data, please contact the ph86 Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available on ph86.asia 24 hours a day, 7 days a week

ph86 aims to resolve all privacy-related inquiries within five (5) business days. If you are not satisfied with ph86's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph (reference only — not a clickable link on this page).