Privacy
Policy

The data controller responsible for your personal information is ph6355, operating as a PAGCOR-regulated online gaming platform serving Filipino players across the Philippines. ph6355 determines the purposes and means of processing your personal data and is accountable for all data processing activities conducted on the platform.

ph6355 has appointed a designated Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012. The DPO is responsible for ensuring ph6355's ongoing compliance with RA 10173 and its Implementing Rules and Regulations, handling data subject requests, coordinating with the National Privacy Commission, and overseeing internal data governance policies.

Contact details for our Data Protection Officer are provided in Section 12 of this Policy. Players are encouraged to reach out to the DPO directly for any privacy-related concerns that cannot be resolved through the standard customer support channel.

ph6355 collects personal data at various stages of the player lifecycle. The categories of data we collect, and the context in which they are collected, are set out in the table below:

ph6355 collects only the minimum personal data necessary to fulfill the purposes described in Section 3 of this Policy — a principle known as data minimisation under RA 10173. We do not collect sensitive personal information (as defined under Section 3(l) of the DPA) beyond what is strictly required for identity verification and AML compliance.

ph6355 uses the personal data it collects for the following specific, legitimate purposes:

• Account Creation & Management: To register your ph6355 account, verify your identity, and maintain your account in good standing throughout your relationship with the platform.
• KYC & Age Verification: To confirm that you are at least 21 years of age, as required by Philippine law and PAGCOR regulations, and to verify that your identity matches the payment methods associated with your account.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, Coins.ph, and USDT TRC20, and to maintain accurate transaction records as required by PAGCOR.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your inquiries, process your complaints, and maintain a record of your interactions with the ph6355 support team.
• Regulatory Compliance: To meet our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and any other applicable Philippine legislation.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to administer self-exclusion, deposit limit, and cooling-off period requests made by players.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve game offerings, platform performance, and the overall player experience on ph6355.
• Marketing Communications: To send you promotional offers, bonuses, and platform updates via email or SMS — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time.

ph6355 does not use automated decision-making or profiling in a manner that produces legal effects or significantly affects you, beyond standard fraud detection algorithms designed to protect the integrity of the platform.

Under the Data Privacy Act of 2012, ph6355 relies on the following legal bases to process your personal data:

• Contractual Necessity (Section 12(b), RA 10173): Processing necessary to fulfil our contract with you — i.e., to operate your ph6355 account, process transactions, and deliver gaming services.
• Legal Obligation (Section 12(c), RA 10173): Processing required to comply with PAGCOR licensing conditions, AMLA obligations, NPC directives, and other applicable Philippine law.
• Legitimate Interest (Section 12(f), RA 10173): Processing necessary for ph6355's legitimate interests in maintaining platform security, preventing fraud, and improving our services, where such interests are not overridden by your rights and freedoms.
• Consent (Section 12(a), RA 10173): Processing based on your freely given, specific, and informed consent — particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where processing is based on consent, ph6355 maintains records of the consent obtained, including the date, scope, and method of consent collection, in accordance with NPC guidelines.

ph6355 does not sell, rent, or trade your personal data. We share your personal data with third parties only in the following limited and controlled circumstances:

• Payment Service Providers: GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, Coins.ph, and cryptocurrency processors receive only the minimum data necessary to process your transactions securely.
• KYC & Identity Verification Partners: ph6355 works with regulated identity verification providers to assist with document authentication and liveness checks during the KYC process. These partners are bound by strict data processing agreements.
• Game Content Providers: Game providers such as JILI Games, Pragmatic Play, and Evolution Gaming receive anonymised session and gameplay data for game performance monitoring. They do not receive personally identifiable information.
• PAGCOR: As our licensing authority, PAGCOR may require ph6355 to submit player records, transaction logs, and other regulated data as part of our compliance obligations.
• Anti-Money Laundering Council (AMLC): ph6355 is required by law to report covered transactions and suspicious transactions to the AMLC under the Anti-Money Laundering Act of 2001, as amended.
• Law Enforcement Authorities: ph6355 will disclose personal data to Philippine law enforcement or judicial authorities when required to do so by a valid court order, subpoena, or other lawful process.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by ph6355 may access personal data on a strictly need-to-know basis under confidentiality obligations.

All third-party data processors engaged by ph6355 are required to enter into Data Sharing Agreements or Data Processing Agreements that comply with the requirements of RA 10173 and NPC Circular 16-01. ph6355 remains accountable for ensuring that third parties process your data lawfully and securely.

ph6355 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and maintain session security. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and last-visited game categories. These improve your experience but are not strictly required.
• Analytics Cookies: ph6355 uses first-party analytics to understand how players navigate the platform — such as which game categories are most visited and where users encounter errors. This data is aggregated and anonymised.
• Security Cookies: Used to detect and prevent suspicious login activity, bot traffic, and fraudulent sessions. These are active for all users and cannot be disabled.

ph6355 does not use third-party advertising or behavioural tracking cookies. You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use ph6355's services.

ph6355 retains your personal data for as long as is necessary to fulfil the purposes set out in this Policy, to maintain an active gaming account, and to comply with our legal obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, ph6355 will securely destroy, delete, or permanently anonymise your personal data in accordance with NPC-approved data disposal procedures. Anonymised data that can no longer be linked to any individual may be retained indefinitely for statistical and platform improvement purposes.

Under the Data Privacy Act of 2012, you are entitled to the following rights with respect to your personal data held by ph6355. These rights may be exercised by contacting our Data Protection Officer using the details in Section 12:

ph6355 will respond to all verified data subject requests within thirty (30) calendar days of receipt, in accordance with NPC guidelines. We may require identity verification before processing your request to protect against fraudulent access to personal data.

ph6355 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our current security infrastructure includes:

• Transport Layer Security (TLS 1.3): All data in transit between your device and ph6355 is encrypted using industry-standard TLS 1.3 protocols.
• Password Hashing: User passwords are stored exclusively as salted cryptographic hashes. ph6355 staff cannot view your password in plain text under any circumstances.
• Access Controls: Personal data is accessible only to ph6355 employees and contractors who require it to perform their designated functions, under a strict role-based access control policy.
• Two-Factor Authentication: ph6355 offers and strongly encourages the use of two-factor authentication (2FA) for all player accounts to reduce the risk of unauthorised access.
• Regular Security Audits: ph6355 conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in our systems.
• Incident Response: In the event of a personal data breach that poses a real risk to the rights and freedoms of affected players, ph6355 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with NPC Circular 16-03.

ph6355 is strictly an adult platform. Under Philippine law and PAGCOR regulations, online gaming services are available only to individuals who are 21 years of age or older. ph6355 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

All registrants are required to confirm their date of birth during account creation and to provide government-issued identity documents during the KYC process. Where ph6355 discovers or has reasonable grounds to believe that a registered account belongs to an individual under 21 years of age, we will:

• Immediately suspend the account and freeze any associated balance pending investigation.
• Permanently close the account upon confirmation of underage status.
• Delete all personal data associated with the account, except where retention is required by applicable law.
• Handle any associated funds in accordance with PAGCOR's guidelines on underage account closures.

If you are a parent or guardian and believe that your child has registered an account on ph6355, please contact our support team immediately via live chat so we can take prompt action.

ph6355 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidelines, or PAGCOR regulatory requirements. When material changes are made to this Policy, we will notify registered players via:

• An on-platform notification displayed upon your next login to ph6355.
• An email to the address associated with your registered account.

The "Effective Date" displayed at the top of this Policy will be updated each time a new version is published. The most current version of this Policy will always be accessible at ph6355.net/privacy-policy. Your continued use of ph6355 after the effective date of any revised Policy constitutes your acknowledgement of and agreement to the updated terms.

For changes that materially affect how we process your personal data in ways that require fresh consent under RA 10173, ph6355 will obtain your explicit consent before applying the updated processing activities to your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph6355, you may contact our designated Data Protection Officer through the following channels:

• Email: [email protected] — please use the subject line "Data Privacy Request" to ensure your message is routed to the DPO team.
• Live Chat: Available 24/7 directly on the ph6355 platform. Our support agents will escalate data privacy requests to the DPO team within one business day.

If you are not satisfied with ph6355's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012. Please note that ph6355 kindly asks that you first attempt to resolve your concern directly with us before escalating to the NPC, as most issues can be resolved promptly through our support channel.