646php Privacy Policy

1Introduction

Welcome to the 646php Privacy Policy. 646php ("646php", "we", "us", "our") is committed to protecting the personal data of every Filipino player who uses our online casino and sports betting platform at https://646php.net. This Privacy Policy describes the categories of personal information we collect, the purposes for which we process that information, the parties with whom we may share it, the security measures we employ to protect it, and the rights available to you under Philippine law.

This Privacy Policy applies to all personal data collected through the 646php website, mobile platform, customer support channels, and any other interaction you have with 646php, whether online or offline. It should be read alongside our Terms & Conditions, which govern your use of the 646php platform.

646php processes personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). By registering a 646php account or using any part of our platform, you acknowledge that you have read and understood this Privacy Policy.

2Data We Collect

2.1 In the course of operating the 646php platform and delivering our services to Filipino players, we collect the following categories of personal data:

2.2 Sensitive Personal Information. Where required for KYC verification under the PAGCOR framework and Philippine anti-money laundering regulations, 646php may collect government-issued identification documents that contain sensitive personal information as defined under RA 10173. Such data is handled with heightened security controls and is never used beyond its stated compliance purpose.

2.3 646php does not collect full payment card numbers. Where payment card references are used, only tokenized or masked identifiers provided by regulated payment processors are stored on our systems.

3How We Collect Your Data

3.1 646php collects personal data through the following means:

• Direct interactions: When you register a 646php account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or communicate with us by any means.
• Automated technologies: As you use the 646php platform, we automatically collect Technical Data and Gaming Activity Data through server logs, cookies, web beacons, pixel tags, and similar tracking technologies. See Section 6 for full details on cookies.
• Third-party sources: We may receive data about you from identity verification partners (KYC providers), payment processors (GCash, Maya, BPI, BDO, Metrobank), fraud prevention services, and analytics providers, strictly for the purpose of operating the 646php platform safely and in compliance with applicable law.
• Publicly available sources: In limited circumstances, we may cross-reference publicly available data (such as government sanctions lists or PAGCOR exclusion registers) to fulfil our regulatory obligations.

3.2 Where we rely on your consent as the legal basis for collecting any category of personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, and it may result in limited access to certain features of the 646php platform.

4Why We Use Your Data

4.1 646php uses the personal data we collect for the following purposes:

• Account registration and management: Creating and maintaining your 646php player account, verifying your identity, managing your account settings and preferences.
• Platform delivery: Providing access to casino games, sports betting markets (PBA, NBA, UFC, boxing, volleyball), bingo, sabong, and all other 646php services.
• Payment processing: Processing deposits and withdrawals via GCash, Maya, GrabPay, InstaPay, PesoNet, BPI, BDO, Metrobank, 7-Eleven CLiQQ, and other accepted payment methods in Philippine Peso (₱).
• KYC compliance: Verifying your age (21+), identity, and source of funds as required under the PAGCOR framework and Philippine anti-money laundering laws (RA 9160, as amended).
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct on the platform.
• Responsible gaming: Monitoring gaming behavior patterns to identify potential problem gambling indicators, enforcing self-exclusion and deposit limit settings, and ensuring compliance with responsible gaming obligations.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of communications for quality assurance and regulatory purposes.
• Legal and regulatory compliance: Meeting 646php's obligations under Philippine law, including reporting to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) as required.
• Platform improvement: Analyzing aggregated usage data to improve the 646php user experience, fix bugs, and develop new features.
• Marketing (with consent): Sending promotional offers, bonus notifications, and news about 646php — only where you have provided consent and subject to your communication preferences. See Section 12 for opt-out details.

5Legal Basis for Processing

5.1 Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, 646php processes personal data on the following legal bases:

5.2 Where processing is based on legitimate interest, 646php has assessed that the relevant interest is not overridden by your interests or fundamental rights. You may contact our DPO (Section 15) to request further information about these assessments.

6Cookies & Tracking Technologies

6.1 646php uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit 646php. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your 646php account, security tokens, and load-balancing cookies. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming alerts. Disabling these may affect your platform experience.
• Analytics Cookies: Help us understand how players use the 646php platform — which pages are visited most, how long sessions last, and where users encounter issues. Data is aggregated and anonymized where possible.
• Marketing Cookies (with consent): Used to deliver relevant promotional content about 646php. Only activated where you have provided consent via the cookie consent banner.

6.2 You can manage or withdraw your cookie consent at any time through your browser settings or our cookie preference center. Note that disabling strictly necessary cookies will prevent you from accessing your 646php account.

6.3 646php does not sell cookie-collected data to third parties for advertising purposes unrelated to the platform.

7Data Sharing & Disclosure

7.1 646php does not sell your personal data to any third party. We may share your personal data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other regulated payment service providers receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Regulated third-party KYC partners receive identity documents and personal data necessary to complete mandatory verification checks.
• Fraud prevention and security providers: Specialized service providers assist 646php in detecting and preventing fraudulent activity, account takeover, and money laundering.
• IT infrastructure and cloud providers: Hosting, database, and infrastructure providers that support the operation of the 646php platform under appropriate data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies where disclosure is required by law or regulatory directive.
• Legal and professional advisors: Lawyers, auditors, and compliance consultants acting on 646php's behalf, subject to professional confidentiality obligations.

7.2 All third-party service providers with whom 646php shares personal data are required to process that data only for the specified purpose and in accordance with applicable Philippine data privacy law. 646php maintains data processing agreements with all such providers.

7.3 Cross-Border Transfers. Where personal data is transferred outside the Philippines for processing (for example, to cloud infrastructure providers), 646php ensures that appropriate safeguards are in place as required by the NPC, including standard contractual clauses or adequacy assessments.

8Data Retention

8.1 646php retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable Philippine law.

8.2 The following general retention periods apply:

• Account and KYC data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in accordance with PAGCOR framework requirements and RA 9160 (AMLA) obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine anti-money laundering regulations.
• Gaming activity data: Retained for three (3) years following the relevant gaming session, unless longer retention is required for dispute resolution or regulatory audit purposes.
• Communications and support records: Retained for two (2) years from the date of the last interaction, unless a live dispute or regulatory matter requires extended retention.
• Responsible gaming records: Self-exclusion and deposit limit records are retained for the duration of the restriction plus five (5) years to prevent circumvention of protective measures.
• Marketing consent records: Retained until consent is withdrawn plus two (2) years, as evidence of lawful processing.

8.3 When personal data is no longer required and no legal retention obligation applies, 646php will securely delete or anonymize the data in accordance with our internal data disposal procedures.

9Data Security

9.1 646php implements technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the 646php platform is protected by TLS (Transport Layer Security) encryption. Stored sensitive data is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All 646php staff with data access undergo background checks and regular data privacy training.
• Two-factor authentication (2FA): Available to all players and enforced for all 646php administrative accounts.
• Vulnerability management: Regular security assessments, penetration testing, and patch management processes are in place to protect the platform's infrastructure.
• Incident response: 646php maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, we will notify the NPC within 72 hours and affected individuals as required by law.

9.2 While 646php takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own 646php account credentials. Please refer to Section 4 of the Terms & Conditions for account security obligations.

10Your Data Rights

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 646php. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15.

• Right to be Informed: You have the right to be informed about what personal data 646php collects, how it is used, and with whom it is shared — which is the purpose of this Privacy Policy.
• Right to Access: You have the right to request a copy of the personal data 646php holds about you, together with information about how it is processed.
• Right to Correction: You have the right to request correction of any inaccurate, incomplete, or outdated personal data in your 646php account. For basic account details, you may be able to update these directly within your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal retention obligation applies.
• Right to Object: You have the right to object to the processing of your personal data where the legal basis is legitimate interest or direct marketing. Objection to marketing can be exercised via the unsubscribe mechanism in any 646php marketing communication.
• Right to Data Portability: Where technically feasible, you may request that 646php provide your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: If you believe 646php has processed your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10.2 646php will respond to all verified data rights requests within thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days and will notify you accordingly.

11Children & Minors

11.1 The 646php platform is strictly for adults aged 21 years and above, in compliance with PAGCOR regulations and Philippine law governing online gaming. 646php does not knowingly collect personal data from any person under the age of 21.

11.2 Age verification is a mandatory step in the 646php registration and KYC process. Any account found to belong to a person under 21 will be closed immediately, all associated data will be handled in accordance with our legal obligations, and deposited funds will be returned to the originating payment method.

11.3 If you are a parent or guardian and believe that a minor has registered on the 646php platform, please contact us immediately at [email protected] so we can take appropriate action without delay.

12Marketing Communications

12.1 With your consent, 646php may send you marketing communications about bonuses, promotions, new games, sports betting events (PBA, NBA, UFC, boxing), and other 646php platform updates via email, SMS, or push notification.

12.2 You may withdraw your marketing consent and unsubscribe from all marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any 646php marketing email;
• Updating your communication preferences within your 646php account settings;
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

12.3 Withdrawing marketing consent will not affect your ability to use the 646php platform, and you will continue to receive transactional communications (such as deposit confirmations, withdrawal notifications, security alerts, and KYC requests) that are necessary for the operation of your account.

12.4 646php does not share your contact data with third parties for their own marketing purposes.

13Third-Party Links

13.1 The 646php platform does not contain links to third-party websites for commercial or advertising purposes. Any informational references to regulatory bodies (such as PAGCOR or the NPC) are provided for context only.

13.2 646php is not responsible for the privacy practices of any third-party payment processors or service providers. We recommend reviewing the privacy policies of any third-party service you use in connection with your 646php account (for example, GCash's or Maya's own privacy policies) to understand how they handle your data.

14Updates to This Privacy Policy

14.1 646php may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal and regulatory requirements. The "Last Updated" date at the top of this page will reflect the most recent revision.

14.2 Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — 646php will notify you by email to your registered address or via a prominent notice on the platform at least seven (7) days before the changes take effect.

14.3 We encourage you to review this Privacy Policy periodically to stay informed about how 646php protects your data. Continued use of the platform after an updated Privacy Policy takes effect constitutes your acknowledgment of the revised terms.

15Contact Us & Data Protection Officer

15.1 646php has designated a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act of 2012. The DPO is responsible for overseeing 646php's data protection strategy and ensuring compliance with RA 10173 and NPC regulations.

15.2 To exercise any of your data rights, raise a privacy concern, request a copy of this Privacy Policy in an accessible format, or contact our DPO directly, please use the following:

• Email: [email protected] — please use the subject line "Data Privacy Request" for all data rights enquiries.
• Support Page: Visit /support for live chat and additional contact options available 24/7.

15.3 If you are not satisfied with 646php's response to a data privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority for data privacy matters in the Philippines.