ph563 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") is issued by ph563 ("ph563," "we," "us," or "our") and applies to all personal data collected through the ph563 website, mobile platform, customer support channels, and any other services we provide (collectively, the "Platform").

ph563 is committed to protecting the privacy and personal data of all users in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. Where applicable, ph563 also observes internationally recognised data protection principles.

By registering an account or using the ph563 Platform in any way, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the ph563 Platform.

2. Data We Collect

ph563 collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name, date of birth, and gender.
• Residential address (including city, province, and postal code within the Philippines).
• Email address and mobile phone number.
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, driver's licence, SSS/UMID card, PhilSys National ID).
• Proof of address documents (e.g., utility bill, bank statement).
• Selfie or facial image submitted for identity verification purposes.

2.3 Financial Data

• Payment method details (e.g., GCash mobile number, Maya account reference, bank account details for BPI, BDO, Metrobank, UnionBank, or other Philippine banks).
• Transaction history, including deposits, withdrawals, and gaming activity.
• Debit card details where applicable (card number is tokenised and never stored in plain text).

2.4 Technical & Usage Data

• IP address, device type, operating system, and browser type.
• Pages visited, features used, session duration, and clickstream data.
• Geolocation data (city/region level) derived from your IP address.
• Cookie identifiers and similar tracking technologies (see Section 5).

2.5 Communications Data

• Records of your communications with ph563 customer support, including live chat transcripts, email correspondence, and support ticket history.
• Survey responses and feedback you voluntarily provide.

2.6 Responsible Gaming Data

• Self-imposed limits (deposit limits, loss limits, session time limits) set through your account dashboard.
• Self-exclusion requests and cooling-off period records.
• Responsible gaming assessments where applicable.

3. How We Use Your Data

ph563 uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Registration data, identity data
Identity verification (KYC) and age verification (21+)	KYC data, date of birth
Processing deposits and withdrawals	Financial data, identity data
Providing gaming services and personalising your experience	Usage data, gaming history
Customer support and dispute resolution	Communications data, account data
Fraud prevention, anti-money laundering (AML) compliance	Financial data, technical data, KYC data
Responsible gaming monitoring and intervention	Responsible gaming data, gaming history
Sending service notifications and account alerts	Email address, mobile number
Marketing communications (with your consent)	Email address, usage data
Platform security and abuse prevention	Technical data, IP address
Regulatory reporting to PAGCOR and other authorities	Identity data, financial data
Analytics and Platform improvement	Usage data, technical data (anonymised)

ph563 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph563 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform our contract with you — i.e., to provide the ph563 gaming services you have registered for, including account management, payment processing, and game delivery.
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and NPC data privacy requirements.
• Legitimate interests: Processing is necessary for ph563's legitimate interests, including fraud prevention, Platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, ph563 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Cookies & Tracking Technologies

ph563 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and deliver relevant content. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limit configurations.
• Analytics cookies: Collect anonymised data about how users interact with the Platform, helping ph563 identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Marketing cookies: Used only with your consent to deliver relevant promotional content. You may opt out of marketing cookies at any time through your account settings or browser controls.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair the functionality of the ph563 Platform.

6. Sharing Your Data

ph563 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, etc.) to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity verification providers: Third-party KYC and age verification services that assist ph563 in verifying your identity and confirming you meet the 21+ age requirement.
• Game software providers: Technology partners who supply the gaming software powering ph563's casino, slots, bingo, and virtual sports products. These partners may receive anonymised session data necessary to deliver game functionality.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory obligation.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection partners who process data on ph563's behalf under strict data processing agreements.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party data processors engaged by ph563 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with ph563's documented instructions.

7. Data Retention

ph563 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing requirements and AMLA obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine anti-money laundering regulations.
• Customer support records: Retained for three (3) years from the date of the last interaction, or longer if required for ongoing dispute resolution.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, whichever is earlier.
• Technical and usage data: Retained in anonymised or aggregated form for analytics purposes; identifiable technical data is retained for up to twelve (12) months.

Upon expiry of the applicable retention period, ph563 will securely delete or anonymise your personal data in accordance with our data disposal procedures.

8. Data Security

ph563 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the ph563 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including payment details and identity documents, is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised ph563 personnel and third-party processors on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication: ph563 offers 2FA for player accounts and mandates it for all internal administrative access to systems containing personal data.
• Penetration testing and vulnerability management: ph563 conducts regular security assessments, including penetration testing and vulnerability scans, to identify and remediate security weaknesses.
• Incident response:ph563 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, ph563 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay.

While ph563 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your ph563 account credentials. Please refer to the Account Security section of our Terms & Conditions for guidance on keeping your account safe.

9. Your Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ph563:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed — which is the primary purpose of this Policy.
• Right of access: You have the right to request a copy of the personal data ph563 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details directly through your ph563 account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph563's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on ph563's legitimate interests.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph563 has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact ph563's Data Protection Officer using the contact details provided in Section 14 of this Policy. ph563 will respond to all verified data subject requests within thirty (30) calendar days of receipt, or within such extended period as permitted by applicable law.

10. Children's Privacy

The ph563 Platform is strictly intended for adults aged 21 years and above, in accordance with the minimum legal age for casino-style gambling in the Philippines. ph563 does not knowingly collect personal data from any person under the age of 21.

During registration, ph563 collects your date of birth and conducts age verification as part of the KYC process. Any account found to belong to a person under 21 will be immediately suspended, and any personal data collected in connection with that account will be securely deleted in accordance with applicable regulations.

If you are a parent or guardian and believe that a minor has registered on the ph563 Platform, please contact us immediately at [email protected] so that we can take prompt action.

11. Cross-Border Data Transfers

ph563 primarily stores and processes personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, game software suppliers, and KYC verification partners — may be located in or operate from other countries.

Where personal data is transferred outside the Philippines, ph563 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses that impose data protection obligations on the recipient equivalent to those under Philippine law.
• Transfers to countries or organisations that the NPC has recognised as providing an adequate level of data protection.
• Binding corporate rules where applicable within corporate group structures.

By using the ph563 Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

12. Third-Party Links

The ph563 Platform may contain references to third-party services such as payment providers (GCash, Maya, Philippine banks) and game software suppliers. While ph563 takes care to work only with reputable partners, we are not responsible for the privacy practices of third-party websites or services.

This Privacy Policy applies solely to the ph563 Platform. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of ph563, particularly your chosen payment provider.

13. Changes to This Policy

ph563 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, ph563 will:

• Post the updated Policy on this page with a revised "Last updated" date.
• Notify registered players by email or through a prominent notice on the Platform, where the changes are material and affect your rights.

Your continued use of the ph563 Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting our support team.

We recommend reviewing this Policy periodically to stay informed of how ph563 protects your personal data.

14. Contact & Data Protection Officer

ph563 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and the National Privacy Commission's registration and accountability framework. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.