ph867 Privacy Policy

This Privacy Policy ("Policy") describes how ph867 ("ph867," "we," "us," or "our"), the operator of the online gaming platform at ph867.cam ("the Platform"), collects, processes, stores, shares, and protects the personal information of users ("Player," "you," or "your") who access or register on the Platform.

ph867 is committed to protecting the privacy and personal data of Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and throughout the Philippines. This Policy is prepared in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC") of the Republic of the Philippines.

By creating an account on ph867, accessing the Platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with ph867's Terms & Conditions, which are incorporated by reference.

For the purposes of the Data Privacy Act of 2012, ph867 is the personal information controller in respect of the personal data collected through the Platform. ph867 operates under a license issued by the Philippine Amusement and Gaming Corporation ("PAGCOR"), and our data processing activities are subject to both PAGCOR regulatory requirements and the NPC's data protection framework.

ph867 collects the following categories of personal data from registered players and platform visitors. We collect only what is reasonably necessary for the purposes described in this Policy.

ph867 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings;
• Automatically via the Platform — when you visit or interact with ph867.cam, our servers automatically log technical data such as your IP address, browser type, device information, and session activity;
• Via cookies and similar technologies — as described in Section 10 of this Policy;
• From third-party payment processors — GCash, PayMaya, and banking partners may transmit transaction confirmation data to ph867 as part of the payment processing workflow;
• From identity verification services — ph867 may use third-party identity verification providers to cross-check the information you submit during the KYC (Know Your Customer) process, as required by PAGCOR's AML compliance framework.

ph867 processes your personal data for the following purposes:

• Account creation and management — registering your ph867 account, verifying your identity, maintaining your account profile, and enabling access to the Platform;
• Payment processing — facilitating deposits to and withdrawals from your ph867 account via GCash, PayMaya, BPI, BDO, and Metrobank;
• Regulatory compliance — fulfilling ph867's obligations under PAGCOR's licensing framework, the Anti-Money Laundering Act (AMLA), the Terrorism Financing Prevention and Suppression Act, and the Data Privacy Act of 2012;
• Responsible gaming — monitoring gaming activity to support responsible gaming tools including deposit limits, session timers, and self-exclusion, and to identify players who may be at risk of problem gambling;
• Security and fraud prevention — detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, and other prohibited conduct under ph867's Terms & Conditions;
• Customer support — responding to your inquiries, complaints, and support requests, and maintaining records of correspondence;
• Service improvement — analysing aggregated and anonymised platform usage data to improve game offerings, user experience, and platform performance;
• Marketing communications — sending you promotional information about ph867 bonuses, new games, and events, where you have provided your consent to receive such communications. You may withdraw this consent at any time via Account Settings.

Under the Data Privacy Act of 2012, ph867 processes personal data on the following legal grounds:

• Consent — for marketing communications and optional analytics features, where you have provided explicit consent during registration or via Account Settings;
• Contractual necessity — to perform our obligations under the account agreement with you, including payment processing, game access, and customer support;
• Legal obligation — to comply with PAGCOR licensing requirements, AML reporting obligations, tax regulations, and NPC data protection requirements;
• Legitimate interests — for fraud prevention, platform security, service improvement using anonymised data, and responsible gaming monitoring, provided such interests are not overridden by your data protection rights.

ph867 does not sell, rent, or trade your personal data. We share your personal information only in the following circumstances:

• Payment processors — GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data required to execute deposit and withdrawal transactions on your behalf;
• Identity verification providers — third-party KYC services receive identity document data solely for the purpose of verifying your identity as required by PAGCOR and AMLA regulations;
• Game software providers — game providers (such as JILI and fishing game operators) may receive anonymised or pseudonymised player session data necessary to deliver their games. These providers are contractually prohibited from using this data for any purpose other than delivering the game service;
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other competent Philippine government authority, where ph867 is legally required to disclose your data by law, court order, or regulatory direction;
• Self-exclusion registers — where required by PAGCOR, ph867 may share limited identification data with national self-exclusion databases to prevent excluded players from accessing online gaming platforms;
• Professional advisers — lawyers, auditors, and compliance consultants, subject to binding confidentiality obligations, where required for legal or regulatory advice.

ph867 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law:

• Account and identity data — retained for the duration of your active account plus a minimum of five (5) years after account closure, in accordance with PAGCOR's record-keeping requirements and AMLA obligations;
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• Gaming activity records — retained for the duration of your account plus three (3) years after closure, to support responsible gaming assessments and dispute resolution;
• Support correspondence — retained for two (2) years from the date of the last interaction;
• Marketing preference records — retained until you withdraw consent or close your account, plus a short administrative period.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ph867's data disposal procedures.

ph867 implements technical and organisational security measures commensurate with the sensitivity of the personal data we hold. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and ph867 servers;
• AES-256 encryption for sensitive personal data stored at rest, including identity documents and financial information;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for all ph867 internal systems that process personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Automated anomaly detection systems to identify unusual login patterns, including logins from unrecognised locations;
• Hashed and salted password storage — ph867 staff cannot see your password in any readable form;
• Regular staff training on data protection obligations under the DPA and PAGCOR's cybersecurity standards.

ph867 uses cookies and similar technologies (such as session tokens and local storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies — required for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled without affecting Platform functionality.
• Functional cookies — used to remember your preferences such as language settings, game lobby layout, and responsible gaming limit configurations between sessions.
• Performance and analytics cookies — used to collect anonymised information about how players navigate the Platform, which game categories are most visited, and where technical errors occur. This data is used solely to improve Platform performance.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the ph867 Platform. ph867 does not use third-party advertising cookies or tracking pixels for cross-site behavioral advertising.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph867:

• Right to be informed — to know what personal data ph867 holds about you, the purposes for which it is processed, and the recipients with whom it is shared. This Policy serves as the primary means of fulfilling this right.
• Right of access — to request a copy of the personal data ph867 holds about you. Requests will be fulfilled within 15 business days.
• Right to rectification — to request correction of inaccurate or incomplete personal data. You may update most personal details directly via Account Settings; changes to identity-linked data require re-verification.
• Right to erasure — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph867's overriding legal obligations to retain certain data under AMLA and PAGCOR regulations.
• Right to object — to object to the processing of your personal data for marketing purposes at any time. You may withdraw marketing consent via Account Settings or by contacting [email protected].
• Right to data portability — to receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to damages — to seek compensation for any harm caused by ph867's violation of the Data Privacy Act in respect of your personal data.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Rights Request." ph867 may require identity verification before processing your request to prevent unauthorised access to another person's data.

ph867 strictly prohibits the use of its Platform by individuals under 21 years of age, in accordance with PAGCOR's online gaming regulations. ph867 does not knowingly collect personal data from persons under 21. If ph867 discovers that personal data has been collected from an individual below the minimum age, that account will be immediately suspended, all personal data will be deleted, and any deposited funds will be returned to the source payment method after verification.

ph867's primary data processing infrastructure is located in jurisdictions that provide an adequate level of data protection. Where personal data is transferred to game software providers or technical infrastructure partners located outside the Philippines, ph867 ensures that appropriate safeguards are in place, including:

• Data processing agreements that contractually require recipient organisations to maintain data protection standards equivalent to the DPA;
• Technical measures ensuring that personal data is pseudonymised or encrypted prior to cross-border transmission where feasible;
• Transfer impact assessments conducted prior to engaging new third-party data processors in jurisdictions outside the Philippines.

ph867 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform features. When material changes are made, ph867 will notify registered players via email to the address on file and by posting a prominent notice on the Platform. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the ph867 Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using the Platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a complaint about ph867's data handling practices, please contact us:

If you are not satisfied with ph867's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority for data protection matters under the DPA.

For other legal matters, please also review our Terms & Conditions. For responsible gaming tools and support, visit our Responsible Gaming page. For frequently asked questions, visit our FAQ.