ph586 Privacy Policy

Data Controller Information

ph586 operates as the data controller responsible for the processing of your personal information. We are registered with the National Privacy Commission of the Philippines and comply with all applicable data protection regulations. For privacy-related inquiries, you may contact our designated Data Protection Officer through the contact information provided at the end of this policy.

Entity Name: ph586 Online Gaming Corporation
PAGCOR License: PAGCOR-RL-2019-034
NPC Registration: NPC-DPO-2020-001582
Principal Office: Makati City, Metro Manila, Republic of the Philippines

Information We Collect

2.1 Personal Identification Information

During account registration and identity verification, ph586 collects the following personal information:

• Identity Data: Full legal name as it appears on government-issued identification, date of birth, gender, nationality, and citizenship status.
• Contact Information: Residential address (street, barangay, city, province, postal code), primary email address, and mobile telephone number registered with Philippine telecommunication providers.
• Government-Issued Identification: Scanned or photographed copies of Philippine passport, driver's license, UMID, SSS ID, postal ID, or other government-issued identification documents bearing your photograph and signature.
• Proof of Address: Utility bills (electricity, water, internet), bank statements, or government correspondence dated within the last three (3) months showing your current residential address.
• Selfie Verification: Photograph of yourself holding your identification document to verify physical possession and prevent identity fraud.

2.2 Financial Information

To process deposits, withdrawals, and comply with Anti-Money Laundering regulations, we collect:

• Payment Instrument Details: GCash or PayMaya account numbers, bank account information (account holder name, account number, bank branch), cryptocurrency wallet addresses.
• Transaction History: Records of all deposits, withdrawals, wagers, wins, bonuses claimed, and account balance changes with timestamps.
• Source of Funds: For withdrawals exceeding ₱500,000 in a single month, ph586 may request documentation verifying your source of income (employment certificate, business registration, bank statements) in compliance with AMLC regulations.

2.3 Technical and Usage Data

ph586 automatically collects technical information when you access our platform:

• Device Information: Operating system, browser type and version, screen resolution, device model, unique device identifiers.
• Network Data: IP address, internet service provider, approximate geolocation (city level), connection timestamps, and session duration.
• Gameplay Data: Games played, bet amounts, win/loss records, session duration, betting patterns, and Risk Management System (RMS) analytics.
• Communication Records: Live chat transcripts, email correspondence, customer support tickets, and complaint resolution documentation.

2.4 Information from Third Parties

ph586 may receive personal information from external sources including payment processors (GCash, PayMaya, banking partners), identity verification services cross-referencing Philippine government databases, fraud prevention agencies, and PAGCOR regulatory reporting systems.

How We Use Your Personal Data

ph586 processes your personal information for the following purposes, each grounded in a legitimate legal basis under the Data Privacy Act of 2012:

3.1 Account Management and Service Provision

• Creating and maintaining your player account on ph586.cam and mobile applications.
• Processing deposits, withdrawals, and managing your account balance in real-time.
• Providing access to gaming products (slots, live casino, sports betting, bingo) and processing wagers.
• Delivering customer support through live chat, email, and telephone channels.
• Communicating account-related notifications (transaction confirmations, balance updates, security alerts).

3.2 Regulatory Compliance

• Age Verification: Ensuring all players meet the minimum age requirement of twenty-one (21) years as mandated by PAGCOR regulations.
• Know Your Customer (KYC): Verifying player identity to prevent fraud, account takeover, and multi-accounting in compliance with PAGCOR Memorandum Circular No. 2019-004.
• Anti-Money Laundering (AML): Monitoring transactions for suspicious activity, conducting enhanced due diligence on high-value transactions, and filing Covered Transaction Reports (CTR) and Suspicious Transaction Reports (STR) with the Anti-Money Laundering Council (AMLC) as required by Republic Act No. 9160 as amended.
• Responsible Gaming: Identifying problem gambling behavior patterns, implementing deposit limits and self-exclusion requests, and providing intervention support.

3.3 Fraud Prevention and Security

• Detecting and preventing fraudulent account creation, payment fraud, bonus abuse, collusion, and other forms of gaming manipulation.
• Employing advanced Risk Management Systems (RMS) to analyze gameplay patterns and identify anomalous betting behavior.
• Verifying geolocation to ensure players are physically located within Philippine territory during gameplay.
• Investigating disputes, chargebacks, and complaints through analysis of transaction and communication records.

3.4 Marketing and Promotional Communications

• Sending personalized bonus offers, free spins, tournament invitations, and VIP program updates via email, SMS, push notifications, and in-app messaging.
• Conducting player segmentation based on gaming preferences and activity levels to deliver relevant promotions.
• Inviting participation in market research surveys and collecting feedback to improve ph586 services.

Important: You may opt out of marketing communications at any time through your account settings or by contacting customer support. Opting out will not affect transactional communications related to your account activity or regulatory notices.

3.5 Platform Improvement and Analytics

• Analyzing aggregated usage statistics to optimize website performance, mobile app functionality, and user experience.
• Conducting A/B testing on interface designs, promotional campaigns, and game recommendations.
• Troubleshooting technical issues, identifying software bugs, and improving system reliability.
• Developing new gaming features and products based on player preferences and market trends.

Legal Basis for Processing

Under the Data Privacy Act of 2012, ph586 must have a lawful basis for processing your personal information. We rely on the following legal grounds:

4.1 Contractual Necessity

Processing is necessary to perform our contract with you (the Terms and Conditions you accepted when creating your account). This includes account management, payment processing, and providing access to gaming services.

4.2 Legal Obligation

Processing is required to comply with Philippine laws and regulations, including PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA), Tax Code provisions requiring transaction reporting, and Data Privacy Act retention requirements.

4.3 Legitimate Interest

Processing is necessary for ph586's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and direct marketing (subject to your right to opt-out). We conduct Legitimate Interest Assessments (LIA) to ensure our interests do not override your fundamental rights and freedoms.

4.4 Consent

For certain processing activities not covered by the above legal bases (such as sharing data with third-party marketing partners or using sensitive personal information beyond regulatory requirements), we obtain your explicit, freely-given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.

Data Sharing and Third-Party Disclosure

ph586 shares your personal information with the following categories of third parties under strict data processing agreements:

5.1 Service Providers and Processors

• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), banking partners, and cryptocurrency payment gateways process financial transactions on our behalf.
• Game Providers: Evolution Gaming, Pragmatic Play, Microgaming, and other software developers providing gaming content receive limited player data necessary for game functionality.
• Cloud Infrastructure: Amazon Web Services (AWS) and Cloudflare host ph586's platform and provide content delivery network (CDN) services.
• Identity Verification Services: Third-party KYC providers cross-reference your identification documents with Philippine government databases.
• Customer Support Tools: Live chat software (Zendesk, Intercom) and email service providers process communication records.

5.2 Regulatory Authorities

ph586 is legally required to disclose personal information to Philippine government agencies including:

• PAGCOR (Philippine Amusement and Gaming Corporation): Player activity reports, responsible gaming incident records, and compliance audits.
• AMLC (Anti-Money Laundering Council): Covered Transaction Reports (CTR) for transactions exceeding ₱500,000 and Suspicious Transaction Reports (STR) when money laundering is suspected.
• BIR (Bureau of Internal Revenue): Withholding tax documentation for winnings exceeding ₱10,000 in compliance with the National Internal Revenue Code.
• NPC (National Privacy Commission): Data breach notifications and compliance reports as required under NPC regulations.

5.3 Legal Proceedings and Law Enforcement

ph586 may disclose personal information when required by court orders, subpoenas, or lawful requests from Philippine law enforcement agencies investigating criminal activity (fraud, money laundering, cybercrime). We will notify you of such disclosures unless prohibited by law or court order.

5.4 Business Transfers

In the event of a merger, acquisition, corporate reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such transfer and provided with options regarding your data.

Data Security Measures

ph586 implements organizational, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction in compliance with NPC Circular No. 16-03:

6.1 Technical Security Controls

• Encryption: All data transmissions between your device and ph586 servers use TLS 1.3 encryption. Personal information stored in databases is encrypted using AES-256 encryption algorithms.
• Access Controls: Role-based access control (RBAC) limits employee access to personal information on a need-to-know basis. Multi-factor authentication (MFA) is mandatory for all administrative accounts.
• Network Security: Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) protect ph586 infrastructure from cyber attacks. Regular penetration testing and vulnerability assessments are conducted by independent security firms.
• Data Anonymization: When possible, ph586 anonymizes or pseudonymizes personal information used for analytics and reporting to minimize privacy risks.

6.2 Organizational Security Measures

• Employee Training: All ph586 employees undergo mandatory data privacy training upon hiring and annual refresher courses on confidentiality obligations and data handling procedures.
• Confidentiality Agreements: Employees, contractors, and service providers sign Non-Disclosure Agreements (NDA) binding them to strict confidentiality obligations.
• Incident Response Plan: ph586 maintains a documented data breach response plan enabling rapid containment, investigation, and notification in compliance with NPC breach notification timelines (72 hours to NPC, without undue delay to affected individuals).

6.3 Physical Security

• Data centers hosting ph586 infrastructure employ 24/7 security personnel, biometric access controls, surveillance systems, and environmental controls (fire suppression, climate management).
• Physical documents containing personal information are stored in locked cabinets within restricted-access areas and securely destroyed when no longer needed.

Data Retention and Deletion

ph586 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

7.1 Account Closure and Data Deletion

When you close your ph586 account, we will deactivate your profile within seven (7) business days. However, we are legally required to retain certain records (transaction history, KYC documents, AML reports) for the periods specified in the table above. After the retention period expires, we will securely delete or anonymize your personal information using industry-standard data sanitization methods.

7.2 Inactive Account Policy

Accounts with no login activity for thirty-six (36) consecutive months are considered inactive. ph586 will send email notifications before deactivating inactive accounts. After deactivation, personal information is retained according to the schedule above, but you will need to contact customer support to reactivate your account.

Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

8.1 Right to Information

You have the right to be informed whether ph586 is processing your personal data, the purposes of processing, the recipients of your data, and the existence of your other rights. This Privacy Policy fulfills this obligation.

8.2 Right to Access

You may request copies of the personal information ph586 holds about you. To exercise this right, submit a request through your account settings or contact our Data Protection Officer. We will provide the information in a structured, commonly-used format within fifteen (15) business days.

8.3 Right to Rectification

If your personal information is inaccurate or incomplete, you may request corrections. You can update most information directly through your account settings. For changes requiring document verification (name, date of birth), contact customer support with supporting documentation.

8.4 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information when: (a) it is no longer necessary for the purposes collected, (b) you withdraw consent and there is no other legal ground for processing, (c) you object to processing and there are no overriding legitimate grounds, or (d) data was unlawfully processed. Note that we must retain certain information to comply with legal obligations as outlined in Section 7.

8.5 Right to Object

You may object to processing of your personal information for direct marketing purposes at any time. We will cease such processing upon request. You may also object to processing based on legitimate interests, though we may demonstrate compelling legitimate grounds that override your interests.

8.6 Right to Data Portability

You may request your personal information in a machine-readable format and have it transmitted to another controller where technically feasible. This right applies to information you provided to ph586 and is processed based on consent or contract.

8.7 Right to Lodge a Complaint

If you believe ph586 has violated your data privacy rights, you may file a complaint with the National Privacy Commission of the Philippines:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC),
Vicente Sotto St., Pasay City, 1307 Metro Manila
Email: [email protected]
Hotline: +63 2 8234-2228

8.8 Exercising Your Rights

To exercise any of the above rights, contact ph586's Data Protection Officer at [email protected]. We will respond to your request within fifteen (15) business days and verify your identity before processing requests involving sensitive personal information.

Cookies and Tracking Technologies

ph586 uses cookies, web beacons, and similar tracking technologies to enhance your user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.

9.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including session management, authentication, security features, and load balancing. These cannot be disabled without breaking core services.
• Performance Cookies: Collect anonymous information about how visitors use ph586 (pages visited, time spent, errors encountered) to help us improve platform performance.
• Functional Cookies: Remember your preferences (language selection, display settings, game favorites) to provide enhanced personalization.
• Marketing Cookies: Track your activity across ph586 and other websites to deliver relevant advertisements and measure campaign effectiveness. These cookies may be set by third-party advertising networks.

9.2 Managing Cookie Preferences

You can control cookie settings through your browser options. Most browsers allow you to refuse cookies or delete existing cookies. However, blocking essential cookies will prevent you from accessing certain features of ph586. Visit your browser's help documentation for specific instructions:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and website data
• Microsoft Edge: Settings → Cookies and site permissions

9.3 Third-Party Tracking

ph586 uses Google Analytics to analyze website traffic and Firebase Analytics for mobile app usage. These services may set their own cookies and are governed by their respective privacy policies. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

International Data Transfers

ph586 primarily processes personal information within the Philippines. However, some service providers (cloud infrastructure, game providers, payment processors) may store or process data in countries outside the Philippines. When transferring personal information internationally, ph586 ensures appropriate safeguards are in place:

10.1 Adequacy Determinations

We transfer data only to countries recognized by the National Privacy Commission as providing adequate protection for personal information, or where the recipient organization has implemented appropriate safeguards.

10.2 Standard Contractual Clauses

Service providers located in countries without adequacy determinations must sign Standard Contractual Clauses (SCC) approved by the NPC, binding them to Philippine data protection standards.

10.3 Your Consent

By using ph586 services, you consent to the transfer of your personal information to jurisdictions outside the Philippines where our service providers operate, subject to the safeguards described in this section.

Children's Privacy Protection

ph586 services are intended exclusively for individuals aged twenty-one (21) years and above. We do not knowingly collect personal information from minors. Our age verification systems cross-reference Philippine government databases to prevent underage registration.

If we discover that we have inadvertently collected personal information from an individual under 21 years of age, we will immediately delete such information, close the account, and forfeit any funds in accordance with PAGCOR regulations. Parents or guardians who believe their child has provided personal information to ph586 should contact our Data Protection Officer immediately at [email protected].

Changes to This Privacy Policy

ph586 reserves the right to update this Privacy Policy to reflect changes in our data processing practices, legal requirements, or business operations. Material changes that significantly affect your rights will be communicated through prominent notice on our website and via email to your registered address at least thirty (30) days before the changes take effect.

Non-material changes (clarifications, formatting updates, contact information changes) will be posted on this page with an updated "Last Updated" date. Continued use of ph586 services after the effective date of changes constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Previous versions of this policy are archived and available upon request to our Data Protection Officer.