866ph Casino Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") describes how 866ph ("866ph," "we," "us," or "our") collects, uses, stores, discloses, and protects personal information relating to individuals ("you," "your," or "Data Subject") who access or use the 866ph online gaming platform available at https://866ph.co and any associated mobile-optimized interfaces (collectively, the "Platform").

This Policy applies to all current and prospective users of the 866ph Platform, regardless of the device or connection method used to access it. It covers personal data collected through the account registration process, during KYC (Know Your Customer) verification, through your ongoing use of Platform services, through customer support interactions, and through any automated data collection mechanisms described herein.

This Policy is to be read alongside the 866ph Terms & Conditions, which govern the broader relationship between 866ph and its registered users. In the event of any inconsistency between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.

Data Controller

The Data Controller responsible for your personal information is the operator of the 866ph Platform. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, 866ph is the Personal Information Controller (PIC) in respect of the personal data it collects and processes about registered users and visitors to the Platform.

866ph has designated a Data Protection Officer (DPO) responsible for overseeing data privacy compliance across the organization. The DPO can be contacted through the support channels listed in Section 16 of this Policy. All data privacy inquiries, rights requests, and complaints will be routed to the DPO for review and response.

Data We Collect

866ph collects the following categories of personal data in connection with the operation of its Platform. The specific data points collected from you will depend on how you interact with 866ph — a registered player who has completed KYC verification will have more data on file than an unregistered visitor.

How We Collect Your Data

4.1 Directly From You

The majority of personal data held by 866ph is provided directly by you through the following interactions:

• Completing the account registration form on the 866ph Platform;
• Uploading identity documents during the KYC verification process;
• Making deposits or withdrawals and linking payment methods;
• Contacting 866ph customer support via live chat, email, or other channels;
• Responding to surveys, promotions, or feedback requests;
• Updating your account profile or preferences.

4.2 Automatically During Platform Use

Certain technical and usage data is collected automatically when you access and use the 866ph Platform. This includes session logs, IP address records, device fingerprinting data used for fraud prevention, game and betting activity records, and cookie data as described in Section 10.

4.3 From Third Parties

866ph may receive limited personal data from trusted third-party service providers in the following circumstances:

• Payment processors (e.g., GCash, Maya) providing transaction confirmation and account status information necessary to process deposits and withdrawals;
• Identity verification partners providing verification status outcomes;
• Fraud detection and AML screening services providing risk assessment data;
• Regulatory or law enforcement authorities providing information required for compliance investigations.

Purposes & Legal Basis for Processing

866ph processes personal data only where there is a lawful basis for doing so under the Philippine Data Privacy Act of 2012. The following table describes the primary purposes for which 866ph processes personal data and the corresponding legal basis for each:

Data Sharing & Disclosure

6.1 Service Providers

866ph shares personal data with third-party service providers only to the extent necessary for them to perform services on 866ph's behalf. All such providers are contractually required to implement adequate data protection measures and to process data only in accordance with 866ph's documented instructions. Service providers that may receive personal data include: payment processing partners (GCash, Maya, and banking partners), identity verification and KYC providers, fraud detection and AML screening services, IT infrastructure and cloud hosting providers, and customer support technology platforms.

6.2 Regulatory & Legal Disclosures

866ph may disclose personal data to Philippine government authorities, regulatory bodies (including PAGCOR and the National Privacy Commission), the Anti-Money Laundering Council (AMLC), or law enforcement agencies where required to do so by applicable Philippine law, court order, or binding regulatory direction. 866ph will notify affected users of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial part of 866ph's assets, personal data held by 866ph may be transferred to the acquiring or succeeding entity, subject to that entity assuming equivalent privacy obligations under this Policy and applicable law. Registered users will be notified of any such transfer through their registered email address.

6.4 No Sale of Personal Data

866ph does not and will not sell, rent, lease, or trade your personal data to any third party for commercial purposes. Your data is not a product at 866ph.

International Data Transfers

866ph's primary operations are based in the Philippines, and personal data is primarily stored and processed within Philippine-based infrastructure. In certain circumstances, personal data may be processed by service providers whose infrastructure is located outside the Philippines — for example, cloud infrastructure providers or international gaming platform vendors.

Where personal data is transferred outside the Philippines, 866ph ensures that such transfers are made to countries or organizations that provide an adequate level of data protection, or that appropriate contractual safeguards — such as data processing agreements with standard contractual clauses — are in place to protect your data during and after the transfer.

You may request information about the specific safeguards in place for any international transfer of your data by contacting 866ph through the channels listed in Section 16.

Data Retention

866ph retains personal data for the period necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in compliance with Anti-Money Laundering Act (AMLA) record-keeping requirements;
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of each transaction, as required under AMLA and relevant BSP regulations;
• KYC and Identity Verification Documents: Retained in accordance with PAGCOR compliance requirements and AMLA obligations, typically five (5) years from the date of verification or account closure, whichever is later;
• Customer Support Communications: Retained for three (3) years from the date of the final communication in a support interaction;
• Technical and Usage Data: Retained for up to twelve (12) months for security and fraud monitoring purposes, after which it is aggregated or deleted;
• Cookie Data: Retained according to the applicable cookie lifespan, as described in Section 10.

Upon expiry of the applicable retention period, personal data will be securely deleted, destroyed, or anonymized so that it can no longer identify you. Where anonymization is not feasible, data will be deleted using industry-standard secure deletion procedures.

Your Data Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to personal data held about you by 866ph. To exercise any of these rights, contact 866ph support using the details in Section 16. We will respond to all verified rights requests within fifteen (15) business days of receipt.

Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by the 866ph Platform when you visit. They allow the Platform to remember information about your visit — such as your login session, language preferences, and browsing behavior within the Platform — improving functionality and security.

10.2 Types of Cookies Used by 866ph

• Strictly Necessary Cookies: Required for the Platform to function. They enable account login, session management, and security features. These cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: Store your preferences such as game display settings and responsible gaming dashboard configurations. These improve your experience but are not strictly required.
• Analytics Cookies: Collect aggregated, anonymized data about how users interact with the Platform — pages visited, features used, and error events — to help 866ph improve Platform performance and usability.
• Security Cookies: Used for fraud detection, bot prevention, and identifying suspicious login patterns. These are essential for protecting your account.

10.3 Managing Cookies

You can control non-essential cookies through your browser settings or through any cookie preference tool available on the Platform. Disabling strictly necessary or security cookies will impair Platform functionality and may prevent login. Note that 866ph does not use cookies for third-party advertising purposes.

Children & Minors

The 866ph Platform is strictly intended for and directed at adults who are twenty-one (21) years of age or older, in accordance with Philippine gaming regulations. 866ph does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the 866ph KYC process for all accounts.

If 866ph becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration of age or any other means — the relevant account will be immediately suspended, all activity voided, and the personal data of the underage individual deleted as promptly as possible, subject to any mandatory retention requirements under Philippine law.

If you believe that a minor has registered on 866ph or that personal data belonging to a minor is being held by 866ph, please contact support immediately using the channels in Section 16.

Security Measures

866ph implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and the 866ph Platform is encrypted using TLS 1.3 (Transport Layer Security), the current industry standard for web communications security;
• Encryption at Rest: Sensitive personal data — including identity documents and financial account references — is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. 866ph employees access only the data necessary to perform their specific job functions;
• Two-Factor Authentication: All 866ph account logins support and encourage two-factor authentication (2FA) via SMS OTP to reduce the risk of unauthorized account access;
• Annual Security Audits: Independent third-party security assessments are conducted annually to identify and remediate vulnerabilities in 866ph's infrastructure and data handling practices;
• Staff Training: All 866ph employees with access to personal data undergo regular data privacy and security training, including awareness of phishing and social engineering risks.

While 866ph employs commercially reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying 866ph promptly if you suspect unauthorized access to your account.

Data Breach Procedures

In the event of a personal data breach — meaning a security incident resulting in unauthorized access to, disclosure of, alteration of, or destruction of personal data held by 866ph — the following procedures apply:

1. Containment: Upon detection of a breach, 866ph's incident response team will immediately work to contain the breach and prevent further unauthorized access;
2. Assessment: The scope, nature, and likely consequences of the breach will be assessed as rapidly as possible;
3. Regulatory Notification: Where the breach is likely to result in a risk to the rights and freedoms of affected individuals, 866ph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03;
4. User Notification: Where a breach is likely to result in high risk to affected individuals, 866ph will notify affected account holders through their registered email address as promptly as possible;
5. Remediation: 866ph will take appropriate steps to remediate the vulnerability that gave rise to the breach and to prevent recurrence.

Third-Party Services & Links

The 866ph Platform may reference or display content from game studio providers and payment service partners whose own privacy practices are governed by their respective privacy policies. 866ph does not control the privacy practices of these third parties and is not responsible for the content of their privacy policies.

866ph does not incorporate third-party advertising networks, social media tracking pixels, or behavioral analytics platforms that share data with external advertising ecosystems. Any third-party technology integrated into the Platform is evaluated for privacy risk prior to deployment, and contractual data processing obligations are imposed on all third-party technology providers.

Changes to This Privacy Policy

866ph may revise this Privacy Policy from time to time to reflect changes in applicable law, regulation, or our data processing practices. When material changes are made, 866ph will notify registered users via their registered email address and will update the "Last Updated" date at the top of this document prior to the revised Policy taking effect.

Your continued use of the 866ph Platform following the effective date of any revised Policy constitutes your acceptance of the revised terms. If you do not accept a revised Policy, you should cease using the Platform and, if applicable, request account closure in accordance with the Terms & Conditions.

We encourage you to review this Policy periodically to stay informed about how 866ph handles your personal data. The current version of this Policy is always available at https://866ph.co/privacy-policy.

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 866ph holds about you, please contact 866ph's Data Protection Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the 866ph Platform. For privacy-related matters, state "Data Privacy Inquiry" at the start of your message to ensure routing to the DPO team.
• Email: [email protected] (plain text — not a clickable link). Subject line: "Privacy Policy Request."

866ph will acknowledge your inquiry within two (2) business days and will endeavor to provide a substantive response within fifteen (15) business days. Where a request is complex or numerous, the response period may be extended by a further fifteen (15) business days, and you will be notified of the extension.

If you are not satisfied with 866ph's response to your privacy inquiry or rights request, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information about how to file a complaint with the NPC is available on the NPC's official website.