ph3653 Privacy Policy

This Privacy Policy ("Policy") describes how ph3653 ("ph3653," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of registered users ("Player," "User," or "you") who access and use the ph3653 online gaming platform available at ph3653.org, including all associated subdomains and mobile applications (collectively, the "Platform").

ph3653 is committed to protecting the privacy of all players and operates in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the applicable data protection guidelines issued by the National Privacy Commission of the Philippines ("NPC"). Our privacy practices also reflect the PAGCOR-mandated requirements for responsible handling of player data by regulated online gaming operators.

By registering an account on ph3653, accessing the Platform, or using any ph3653 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not register or access the ph3653 Platform.

This Policy should be read alongside the ph3653 Terms & Conditions, which govern the overall use of the ph3653 Platform. In the event of any conflict between this Policy and the Terms & Conditions on a data privacy matter, this Policy shall prevail.

ph3653 collects personal data in the following categories. We collect only what is necessary for the specific purpose identified, in line with the principle of proportionality under the DPA:

ph3653 uses your personal data strictly for the purposes described below. We do not use your data for any purpose incompatible with the original purpose for which it was collected without obtaining your separate consent or as required by law:

• Account creation and management: To register your ph3653 account, verify your identity, maintain your account, and facilitate secure login;
• KYC and age verification: To verify that you are at least 21 years of age as required by PAGCOR, and to fulfill AML due diligence obligations under RA 9160;
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and other authorized payment methods in PHP;
• Gaming services delivery: To operate the ph3653 game catalog, record game outcomes, apply bonuses, and maintain game history;
• Customer support: To respond to your support requests, resolve account issues, and process complaints;
• Legal and regulatory compliance: To meet PAGCOR reporting obligations, AML transaction monitoring, tax compliance, and NPC data protection requirements;
• Security and fraud prevention: To detect and prevent unauthorized account access, fraudulent transactions, bonus abuse, and other prohibited conduct;
• Responsible gaming: To monitor gaming behavior and, where appropriate, apply responsible gaming interventions in accordance with PAGCOR guidelines;
• Platform improvement: To analyze aggregate usage patterns for the purpose of improving the ph3653 platform performance and user experience;
• Marketing communications: Where you have provided explicit consent, to send you information about ph3653 promotions, bonuses, and new features. You may withdraw consent at any time.

ph3653 processes personal data on one or more of the following lawful bases recognized under the Philippine Data Privacy Act and its Implementing Rules and Regulations:

ph3653 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary and under appropriate safeguards:

• PAGCOR and Philippine regulatory authorities: ph3653 is required to provide player data to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC) and the Bureau of Internal Revenue (BIR) in accordance with applicable reporting obligations;
• Payment processors: GCash (GXI), PayMaya (Voyager Innovations), BDO Unibank, BPI, Metrobank, and other authorized payment service providers receive only the financial data necessary to process your specific transaction;
• Game providers: Certified game studios (such as JILI, Pragmatic Play, Evolution Gaming) receive limited technical data necessary to deliver the game session. These providers are bound by data processing agreements that restrict their use of your data;
• KYC and identity verification service providers: Third-party identity verification platforms that assist with document validation and age verification for PAGCOR compliance purposes;
• Customer support platforms: CRM and live chat technology providers that enable ph3653 to deliver customer support. These providers act as data processors under binding contracts;
• Law enforcement and courts: Where required by a valid legal process, court order, or law enforcement request under Philippine law;
• Fraud prevention services: Shared intelligence services used to detect and prevent fraudulent activity across the platform.

All third-party data processors engaged by ph3653 are required to maintain appropriate technical and organizational security measures and may only process your data for the specific purpose for which they were engaged.

ph3653 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

You may control non-essential cookies through your browser settings. Disabling essential cookies may prevent the ph3653 Platform from functioning correctly and may result in inability to access your account. ph3653 does not use third-party advertising tracking cookies.

ph3653 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account data and KYC documents: Retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act (RA 9160) and PAGCOR licensing requirements;
• Financial transaction records: Retained for a minimum of five (5) years in accordance with AML regulations and BIR tax record-keeping requirements;
• Game history: Retained for a minimum of two (2) years from the date of the game session, or longer where subject to an active dispute or regulatory inquiry;
• Customer support records: Retained for two (2) years from the date of the final support interaction;
• Marketing consent records: Retained for the duration of your active account plus one (1) year after account closure, or until you withdraw consent, whichever occurs first;
• Technical and security logs: Retained for twelve (12) months on an active rolling basis, except where relevant to an ongoing investigation.

Upon expiry of the applicable retention period, ph3653 will securely delete or anonymize your personal data in accordance with industry-standard data destruction practices.

ph3653 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by ph3653. You may exercise these rights by submitting a written request to ph3653's Data Protection Officer (see Section 15):

To exercise any of the above rights, please submit a written request to ph3653's Data Protection Officer using the contact details in Section 15. We will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days. Identity verification may be required before processing your request.

ph3653 is an online gaming platform strictly for individuals who are at least twenty-one (21) years of age, in accordance with PAGCOR's mandatory minimum age requirement. ph3653 does not knowingly collect personal data from any person under 21 years of age.

All accounts are subject to mandatory age verification through KYC document submission. Where ph3653 discovers or has reasonable grounds to believe that a user is under 21 years of age, the account will be immediately suspended, access will be terminated, and any personal data collected will be handled in accordance with PAGCOR compliance procedures and Philippine law. If a parent or guardian believes their minor child has registered on ph3653 in violation of our age policy, they should contact ph3653's Data Protection Officer immediately using the contact information in Section 15.

Some ph3653 service providers and game studio partners are located outside the Philippines. Where personal data is transferred to, or processed by, entities outside the Philippines, ph3653 ensures that such transfers comply with the cross-border transfer requirements of the Data Privacy Act and NPC guidelines, including:

• Execution of binding data processing or transfer agreements with the receiving entity;
• Transfer to jurisdictions that the NPC has recognized as providing an adequate level of protection, or;
• Implementation of appropriate safeguards — including contractual clauses — that provide data subjects with enforceable rights and effective legal remedies.

The primary categories of recipients outside the Philippines who may receive your data are: international game providers operating under PAGCOR certification, cloud infrastructure providers with Philippine data residency options where available, and international payment network operators (Visa, Mastercard) processing card transactions.

The ph3653 Platform integrates third-party services necessary for operation, including payment processors, game providers, and support tools. Each of these third parties operates under their own privacy policies in addition to the data processing agreements they have entered into with ph3653.

ph3653 is not responsible for the privacy practices of third-party sites or services that are not directly under ph3653's control and do not operate under a data processing agreement with ph3653. This Policy does not apply to personal data you provide directly to third parties — for example, registering separately on a GCash application or downloading a game provider's standalone application. In those cases, the relevant third party's privacy policy governs.

ph3653 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new game releases, and special events where you have provided explicit consent during registration or have subsequently opted in through your ph3653 account settings.

You have the right to withdraw your consent for marketing communications at any time, at no cost, by:

• Updating your notification preferences in Account Settings → Communications;
• Clicking the unsubscribe link in any ph3653 marketing email; or
• Contacting ph3653 support or the Data Protection Officer with a written opt-out request.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and does not affect ph3653's right to send you non-promotional service communications — such as account security alerts, transaction confirmations, and support responses — which are necessary for the operation of your ph3653 account.

ph3653 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes — particularly those that affect your rights or the types of data we collect — will be communicated to registered players via their registered email address and/or a prominent in-platform notification at least seven (7) days before the change takes effect.

The effective date of the most current version of this Policy is shown at the top of this page. Your continued use of the ph3653 Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should discontinue use of the Platform and contact ph3653 to request account closure.

The current version of this Privacy Policy is always accessible at ph3653.org/privacy-policy. We recommend that you review this page periodically, especially following any communication from ph3653 about a policy update.

ph3653 has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and National Privacy Commission guidelines. The DPO is responsible for overseeing ph3653's data protection compliance and is your primary point of contact for exercising your data subject rights under this Policy.

ph3653 is registered with the National Privacy Commission of the Philippines as a personal information controller, as required under NPC Circular 17-01. Complaints about ph3653's data processing practices that cannot be resolved through our internal DPO process may be submitted to the NPC at its official address or through the NPC's online complaint portal at privacy.gov.ph.