ph687 Privacy Policy

This Privacy Policy ("Policy") describes how ph687 ("ph687," "we," "us," "the Company") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "Player," "User") who access or use the ph687 online gaming platform available at ph687.vip and any associated services, features, applications, and games (collectively, the "Platform").

ph687 is committed to protecting the privacy of every Filipino player in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the regulations issued by the National Privacy Commission (NPC) of the Philippines. We are equally bound by applicable PAGCOR licensing conditions and the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended), which impose independent data processing obligations on the Company.

By registering an account on ph687 or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to any part of this Policy, you must not use the Platform.

For the purposes of the Data Privacy Act of 2012 and its IRR, ph687 is the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. ph687 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is lawful, fair, and transparent.

ph687 operates under a license issued and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). Our licensing status is subject to periodic review and renewal by PAGCOR, which independently imposes data governance standards on all licensees.

A designated Data Protection Officer (DPO) has been appointed by ph687 in compliance with NPC requirements. The DPO is responsible for overseeing compliance with this Policy, the DPA, and any applicable NPC circulars. Contact details for the DPO are provided in Section 14 of this Policy.

ph687 collects personal data through several channels: information you provide directly during account registration and KYC verification; data generated automatically through your use of the Platform; and, in limited circumstances, data obtained from third-party payment processors and identity verification services.

3.1 Information You Provide Directly

3.2 Data Collected Automatically

ph687 processes your personal data only for specific, explicit, and legitimate purposes. We do not use your data for purposes incompatible with those stated at the time of collection.

4.1 Account and Service Delivery

• Creating, managing, and maintaining your ph687 account;
• Processing deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other supported channels;
• Verifying your age and identity in compliance with PAGCOR requirements and the AMLA;
• Providing access to games, live dealer services, sports betting, bingo, and all other ph687 Platform features;
• Sending transactional communications — deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — relating to your ph687 account.

4.2 Legal and Regulatory Compliance

• Fulfilling obligations under the PAGCOR licensing framework;
• Complying with Anti-Money Laundering Act (AMLA) obligations, including customer due diligence, transaction monitoring, and mandatory reporting to the AMLC;
• Responding to lawful requests from Philippine government authorities, courts, or regulatory bodies;
• Maintaining records as required by law, including financial records and gaming activity logs.

4.3 Platform Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct;
• Enforcing responsible gaming restrictions including self-exclusion and cooling-off periods;
• Protecting the integrity of games and the fairness of outcomes;
• Managing access controls and authentication for your ph687 account.

4.4 Customer Support and Communication

• Responding to support enquiries submitted through the Support page;
• Resolving disputes related to your ph687 account, transactions, or game outcomes;
• Sending promotional communications where you have opted in to receive them (you may opt out at any time through your account settings).

4.5 Platform Analytics and Improvement

• Analysing aggregated, anonymised usage patterns to improve Platform performance, game loading speeds, and user interface design;
• Conducting internal research to understand player preferences and improve the ph687 experience for Filipino users.

Under the Data Privacy Act of 2012, ph687 relies on the following lawful bases for processing your personal data:

• Consent: Where you have freely given specific, informed, and unambiguous consent to processing — such as opting in to receive marketing communications from ph687.
• Contractual Necessity: Processing necessary for the performance of your account agreement with ph687, including account creation, game access, and payment processing.
• Legal Obligation: Processing necessary for compliance with applicable Philippine laws, including PAGCOR regulatory requirements, the AMLA, and NPC obligations.
• Legitimate Interests: Processing necessary for the legitimate interests of ph687 (or a third party), where those interests are not overridden by your data protection rights — including fraud prevention, security monitoring, and platform analytics.

ph687 does not sell, rent, or trade your personal data. Disclosure to third parties is limited to the following circumstances:

6.1 Regulatory and Law Enforcement Authorities

ph687 is legally required to disclose player information to PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), and other competent Philippine authorities in response to lawful requests, regulatory inquiries, court orders, or subpoenas. ph687 will disclose only the minimum data required to satisfy the specific legal obligation and will notify affected players where permitted by law and not prohibited by the applicable legal process.

6.2 Payment Service Providers

To process deposits and withdrawals, ph687 shares necessary payment and identity information with licensed Philippine payment service providers including GCash, Maya (PayMaya), BPI, BDO, Metrobank, and UnionBank. These providers are bound by their own data privacy obligations under Philippine law and are not authorised to use your information for any purpose beyond processing your transaction.

6.3 KYC and Identity Verification Services

ph687 may engage third-party identity verification providers to assist with KYC document authentication and facial matching. These providers process your government-issued ID and selfie solely for identity verification purposes and are contractually prohibited from using your data for any other purpose.

6.4 Game Technology Providers

Certain game providers who supply live dealer games, slot titles, and other content through the ph687 Platform may receive limited gameplay data (such as bet amounts and game session identifiers) to the extent technically necessary to deliver the game service. These providers are not provided with your identity documents, contact details, or financial account information beyond what is strictly necessary.

6.5 Professional Advisers

ph687 may disclose personal data to its legal counsel, auditors, and financial advisers on a need-to-know basis and subject to professional confidentiality obligations, where necessary for the operation of the Platform or compliance with legal obligations.

ph687 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your logged-in session securely, to remember your preferences, and to gather aggregated analytics data that helps us improve the Platform experience for Filipino players.

7.1 Types of Cookies Used

You can control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your ph687 account. ph687 does not use third-party advertising cookies or cross-site tracking technologies.

ph687 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable Philippine law.

Upon expiry of the applicable retention period, ph687 will securely delete or irreversibly anonymise your personal data. Secure deletion means that data is rendered permanently unrecoverable using methods appropriate to the sensitivity of the data involved.

ph687 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

9.1 Technical Controls

• Transport Encryption: All data transmitted between your device and ph687 servers is encrypted using TLS 1.2 or higher (256-bit encryption). The ph687 Platform operates exclusively over HTTPS.
• Password Security: Account passwords are stored using a one-way cryptographic hashing algorithm with per-account salting. Plain-text passwords are never stored at any point in the ph687 system.
• Access Controls: Access to personal data within ph687's systems is restricted using role-based access controls (RBAC). Staff members can only access the minimum data required for their specific job function.
• Two-Factor Authentication: ph687 offers optional 2FA for player accounts and requires 2FA for all internal staff accessing personal data systems.
• Infrastructure Security: ph687's server infrastructure is hosted in secure data centres with physical access controls, environmental monitoring, and redundant systems. Regular penetration testing and vulnerability scanning are performed by qualified security professionals.

9.2 Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, ph687 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03. Affected players will be notified promptly where the breach poses a high risk to their personal rights and freedoms. ph687 maintains a documented data breach response plan and conducts annual breach response training for relevant staff.

The Data Privacy Act of 2012 grants you the following rights with respect to your personal data held by ph687. All rights requests should be submitted to ph687's Data Protection Officer as described in Section 14.

To exercise any of the rights above, submit a written request to ph687's Data Protection Officer via the Support page or by email at [email protected]. ph687 will acknowledge valid requests within 5 business days and provide a substantive response within 15 business days. We may request additional information to verify your identity before processing a rights request.

If you are a parent or guardian and believe that your child has registered an account on ph687 or provided personal data to the Platform, please contact ph687 Support immediately via the Support page. We will investigate and take appropriate remedial action promptly.

Certain third-party service providers engaged by ph687 — including game technology providers, identity verification platforms, and cloud infrastructure providers — may process personal data in jurisdictions outside the Philippines. Where such transfers occur, ph687 ensures that the recipient country provides an adequate level of data protection, or that appropriate contractual safeguards (such as standard data processing agreements that replicate the protections of the DPA) are in place before any transfer takes place.

ph687 does not transfer personal data to any jurisdiction identified by the NPC as presenting unacceptable privacy risks without implementing additional protective measures. All cross-border processing arrangements are reviewed periodically by the ph687 Data Protection Officer.

ph687 reserves the right to update or amend this Privacy Policy at any time. We will provide reasonable prior notice of material changes through an in-platform notification or by email to the address registered on your ph687 account. The effective date at the top of this Policy indicates when the current version came into force.

We encourage you to review this Policy periodically. Your continued use of the ph687 Platform after the effective date of any amendment constitutes acceptance of the updated Policy. If you do not agree with the changes, you may close your ph687 account at any time by contacting Support.

For all data privacy enquiries, rights requests, or to contact ph687's designated Data Protection Officer, please use the contact channels below. The email address is displayed as plain text only — not as a clickable link — in accordance with ph687's platform link policy.

Last Updated: January 1, 2026  ·  Version: 2.0  ·  Jurisdiction: Republic of the Philippines  ·  Legal Basis: RA 10173 (Data Privacy Act of 2012)  ·  Regulator: National Privacy Commission (NPC) & PAGCOR