ph62a Privacy Policy

This Privacy Policy applies to all personal data collected and processed by ph62a in connection with the operation of the ph62a online gaming and sports betting platform accessible at ph62a.cam ("the Platform"). It applies to all registered players, prospective registrants, and visitors to the Platform, regardless of the device or network used to access it.

ph62a recognises that the personal data of Filipino players is sensitive and deserves genuine protection — not just a policy document that satisfies a legal checkbox. The data privacy framework at ph62a is designed to give players meaningful visibility into how their data is used and genuine control over their personal information, consistent with both the letter and the spirit of the Philippine Data Privacy Act of 2012.

This Policy should be read alongside ph62a's Terms and Conditions, available at ph62a.cam/terms-conditions. In the event of any inconsistency between this Policy and the Terms and Conditions on a data privacy matter, this Privacy Policy shall prevail.

ph62a is the data controller responsible for the personal data collected and processed through the Platform. As data controller, ph62a determines the purposes and means of processing your personal data and is accountable for its lawful handling under the Data Privacy Act.

ph62a has designated a Data Protection Officer (DPO) as required under the Data Privacy Act for entities processing personal data at scale. The DPO is responsible for overseeing ph62a's compliance with data privacy obligations, handling data subject requests, and serving as the point of contact with the National Privacy Commission. Contact details for the DPO are provided in Section 15 of this Policy.

ph62a collects the following categories of personal data from players and Platform users:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (used to verify the 21+ age requirement mandated by PAGCOR)
• Residential address in the Philippines (city, province, postal code)
• Email address (primary account communication channel)
• Philippine mobile number (used for SMS verification and account security)
• Username and encrypted password hash

3.2 KYC & Verification Data

• Government-issued ID type and ID number (Passport, Driver's License, UMID, PhilSys National ID, PRC ID, Voter's ID, or Postal ID)
• Scanned or photographed copies of the submitted ID document
• Proof of address documents (utility bills, bank statements, or official government correspondence)
• Selfie or liveness check image submitted during enhanced KYC verification, where applicable

3.3 Financial & Transaction Data

• Payment method identifiers (e.g., GCash-registered mobile number, bank account reference, cryptocurrency wallet address)
• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Account balance history and transaction logs
• Source of funds declarations where required under AMLA thresholds

3.4 Gaming & Betting Activity Data

• Game session records, including games played, bets placed, outcomes, and winnings
• Sports betting history, including markets, stake amounts, odds, and settlement results
• Bonus and promotion usage records
• Responsible gaming tool settings (deposit limits, self-exclusion status, session time limits)

3.5 Technical & Device Data

• IP address and approximate geolocation (used for fraud detection and PAGCOR geographic compliance)
• Device type, operating system, and browser version
• Session timestamps and login/logout records
• Cookie and tracking data as described in Section 7

3.6 Communication Data

• Records of live chat conversations with ph62a's support team
• Email correspondence with ph62a
• Complaint and dispute records

ph62a collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or update your account settings.
• Automatically from your device: When you access the Platform, ph62a's servers automatically record technical data including your IP address, device identifiers, and session information. Cookies and similar tracking technologies also collect data as described in Section 7.
• From payment processors: When you transact via GCash, Maya, BPI, BDO, Metrobank, QR Ph, 7-Eleven CLiQQ, USDT TRC20, or Coins.ph, ph62a receives transaction confirmation data from the relevant payment processor sufficient to credit your account and maintain transaction records.
• From identity verification services: Where ph62a uses a third-party KYC verification provider to assist with document verification or liveness checks, that provider may return verification results and associated data to ph62a.
• From fraud prevention services: ph62a uses automated fraud detection tools that analyse behavioural and technical signals to identify suspicious activity. These tools may process personal data as part of their analysis.

The following table summarises the primary purposes for which ph62a processes your personal data, the categories of data involved, and the legal basis for that processing under the Data Privacy Act:

ph62a does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared only in the following circumstances and only to the extent necessary for the relevant purpose:

6.1 Regulatory Authorities

ph62a is required by law to disclose personal data and transaction records to the following Philippine authorities where legally required:

• PAGCOR — in connection with licensing compliance, audits, and regulatory investigations.
• Anti-Money Laundering Council (AMLC) — for covered transaction reports and suspicious transaction reports as required under the AMLA.
• National Privacy Commission (NPC) — in connection with data breach notifications and regulatory investigations under the Data Privacy Act.
• Philippine courts and law enforcement — where ph62a is required to disclose data pursuant to a lawful court order, subpoena, or other legal process issued under Philippine law.

6.2 Service Providers (Data Processors)

ph62a engages trusted third-party service providers who process personal data on ph62a's behalf strictly in accordance with ph62a's instructions and applicable data privacy law. Categories of service providers include:

• Payment processors and e-wallet operators (GCash, Maya, BPI, BDO, Metrobank, and other accepted payment providers)
• KYC and identity verification technology providers
• Cloud infrastructure and hosting providers
• Fraud detection and cybersecurity service providers
• Customer support platform providers

ph62a requires all data processors to maintain appropriate technical and organisational security measures and to process personal data only for the purposes specified in their data processing agreements with ph62a.

6.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of ph62a's business or assets, personal data held by ph62a may be transferred to the relevant successor entity. ph62a will notify affected players via their registered email address prior to any such transfer and will ensure the receiving entity is bound by data privacy obligations equivalent to those in this Policy.

ph62a uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — including session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences (such as language settings and responsible gaming tool configurations) so you do not need to re-enter them on each visit.
• Analytics cookies: Used by ph62a to understand how players navigate the Platform — which pages are visited most frequently, where players encounter difficulties, and how the Platform's performance can be improved. Analytics data is aggregated and does not identify individual players.
• Security cookies: Support ph62a's fraud detection and login security systems by establishing a device fingerprint that helps identify unusual login activity.

ph62a does not use third-party advertising cookies or tracking pixels that share your data with external advertising networks. You may manage cookie preferences through your browser settings, noting that disabling strictly necessary cookies may prevent you from logging in to your ph62a account.

ph62a retains personal data for the periods set out below, after which data is securely deleted or anonymised unless a longer retention period is required by law:

Where ph62a is required to retain data beyond the standard periods above — for example, in connection with an ongoing regulatory investigation, legal proceedings, or an unresolved AMLC matter — data will be retained until the relevant matter is concluded and the legal basis for extended retention no longer applies.

ph62a implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• Encryption in transit: All data transmitted between your device and ph62a's servers is encrypted using TLS 1.3.
• Encryption at rest: Sensitive personal data — including KYC documents, payment details, and password hashes — is encrypted at rest using AES-256.
• Password hashing: Player passwords are never stored in plain text. ph62a uses bcrypt with a unique per-user salt for password storage, ensuring that passwords cannot be recovered even in a breach scenario.
• Access controls: Access to personal data within ph62a's organisation is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Two-factor authentication: ph62a's internal systems require multi-factor authentication for all staff access to player data management systems.
• Penetration testing: ph62a's platform undergoes regular security audits and penetration testing by qualified cybersecurity professionals to identify and remediate vulnerabilities.
• Intrusion detection: ph62a operates real-time intrusion detection and monitoring systems that alert the security team to anomalous access patterns.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. ph62a cannot guarantee absolute security but commits to implementing and maintaining industry-standard protective measures and to responding promptly to any security incident that does occur.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights in relation to your personal data held by ph62a:

• Right to be informed: You have the right to be informed that your personal data is being collected and processed, which this Privacy Policy fulfils.
• Right of access: You have the right to request a copy of all personal data ph62a holds about you, together with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data ph62a holds about you.
• Right to erasure / Right to be forgotten: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph62a's legal retention obligations (see Section 8).
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where the processing is based on ph62a's legitimate interests and you believe your fundamental rights override those interests.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph62a has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, submit a written request to ph62a's Data Protection Officer using the contact details in Section 15. ph62a will acknowledge your request within 3 business days and provide a substantive response within 15 business days, as required by NPC regulations. Requests may require identity verification to protect against fraudulent data access attempts.

ph62a does not knowingly collect personal data from individuals under 21 years of age. The ph62a Platform is strictly intended for adults aged 21 and above in compliance with PAGCOR's minimum age requirements for online gaming in the Philippines. This is a firm regulatory requirement — not a recommendation.

If ph62a discovers or is notified that personal data has been collected from an individual who is under 21 years of age, the relevant account will be immediately suspended and all personal data associated with that account will be deleted (subject only to any mandatory retention obligations under law). Any deposits made by the underage individual will be returned net of any winnings, which will be forfeited.

ph62a implements KYC identity verification requiring a valid Philippine government-issued ID as a primary safeguard against underage registration. This verification step is mandatory and cannot be bypassed.

Some of ph62a's service providers — including cloud infrastructure providers, KYC verification vendors, and security services — may process personal data on servers located outside the Philippines. Where personal data is transferred outside the Philippines, ph62a ensures that adequate safeguards are in place to protect that data to a standard equivalent to Philippine data privacy law.

Safeguards for cross-border transfers include: contractual clauses in data processing agreements that impose data privacy obligations on receiving parties; ensuring recipients are located in jurisdictions recognised by the NPC as providing adequate data protection; and conducting transfer impact assessments where required.

ph62a does not transfer personal data to jurisdictions that do not provide adequate data protection guarantees without implementing appropriate contractual safeguards.

ph62a may send marketing communications — including promotional offers, bonus announcements, and platform news — to players who have consented to receive them. Marketing communications are sent via email and, where you have opted in, via SMS to your registered Philippine mobile number.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email from ph62a;
• Updating your communication preferences in your account settings after login; or
• Contacting ph62a's support team by live chat or email and requesting removal from marketing communications.

Withdrawal of marketing consent does not affect your ability to use your ph62a account or receive transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts). These transactional communications are necessary for the performance of your account contract and cannot be opted out of while your account remains active.

Where ph62a places a player on a self-exclusion list — whether at the player's request or following a PAGCOR directive — that player is automatically removed from all marketing communications immediately and will not be re-added without explicit re-consent following the expiry of the self-exclusion period.

ph62a reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or ph62a's data processing practices. When material changes are made to this Policy, ph62a will notify registered players via their registered email address and will post a prominent notice on the Platform prior to the changes taking effect.

The updated Privacy Policy will be published on this page with a revised effective date and version number. ph62a encourages players to review this Policy periodically to stay informed about how their personal data is being handled.

Continued use of the ph62a Platform following notification of material changes to this Policy constitutes acceptance of the revised Policy. If you do not agree with any amendment, you must cease using the Platform and contact ph62a's Data Protection Officer to request account closure and data deletion where applicable.

For all data privacy enquiries, data subject requests, or complaints regarding ph62a's handling of your personal data, please contact ph62a's Data Protection Officer through the following channels:

• Email (plain text — not a link): [email protected] — Subject line: "Data Privacy Request — [Your Request Type]"
• Live Chat: Available 24/7 within your ph62a account dashboard. For DPO matters, request escalation to the Data Privacy team.

ph62a's DPO will acknowledge all data privacy requests within 3 business days and provide a substantive response within 15 business days. Complex requests involving large data volumes or requiring legal review may take longer — the DPO will notify you of an extended timeline where applicable.

If you are not satisfied with ph62a's response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. Information about the NPC's complaint process is available through the NPC's official channels.