ph956 Privacy Policy

This Privacy Policy applies to all personal information processed by ph956 in connection with the operation of ph956.club and any related services, promotions, and communications directed at players and visitors based in the Philippines and elsewhere.

ph956 acts as the Personal Information Controller (PIC) in respect of the personal data described in this Policy. As PIC, ph956 determines the purposes and means of processing your personal information and bears primary responsibility for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

ph956 collects the following categories of personal data from players and visitors:

ph956 does not collect sensitive personal information (as defined in RA 10173) except where strictly required for identity verification, age verification, or compliance with PAGCOR or AMLA requirements, and only with your express consent where that consent is the applicable legal basis.

ph956 collects personal data through the following channels and mechanisms:

• Direct Provision: Data you provide voluntarily when registering an Account, completing KYC verification, initiating financial transactions, completing promotional opt-ins, or contacting ph956 customer support.
• Automated Collection: Technical data collected automatically when you access ph956.club, including IP address, device fingerprint data, browser information, and session metadata via server logs and first-party cookies.
• Payment Processors: Financial transaction data received from GCash, Maya, BPI, BDO, UnionBank, and other approved Philippine payment providers in connection with deposits and withdrawals you initiate.
• Identity Verification Providers: Identity and document verification data returned by third-party KYC service providers when you submit identity documents for account verification.
• PAGCOR and Regulatory Sources: Information received from PAGCOR or other competent Philippine authorities in the course of regulatory compliance, licensing, or enforcement processes.

ph956 processes your personal data for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, verifying, and administering your ph956 Account, including authentication, password management, and account recovery.
• Age and Identity Verification (KYC): Verifying that you meet the minimum age requirement of 21 years and confirming your identity in accordance with PAGCOR licensing conditions and Philippine AML regulations.
• Transaction Processing: Processing your deposits, withdrawals, and bonus credits; maintaining your Account balance; and managing chargebacks or payment disputes.
• Game Delivery: Providing access to casino games, sports betting, bingo, and other gaming content on the ph956 platform; recording game outcomes for dispute resolution purposes.
• Regulatory Compliance: Meeting ph956's obligations under PAGCOR licensing, RA 9160 (Anti-Money Laundering Act), and other applicable Philippine statutes, including reporting obligations to competent authorities.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, underage gambling, and other security threats to ph956 and its players.
• Customer Support: Responding to your enquiries, complaints, and support requests; maintaining records of support interactions for quality assurance purposes.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates via SMS or email to registered players who have not opted out. You may withdraw marketing consent at any time from Account Settings.
• Responsible Gaming: Monitoring account activity to identify patterns associated with problem gambling and applying responsible gaming measures in accordance with PAGCOR requirements and ph956's Responsible Gaming Policy.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience.

ph956 processes personal data only where a lawful basis exists under the Philippine Data Privacy Act of 2012. The applicable legal bases are:

• Contractual Necessity: Processing necessary for the performance of ph956's contractual obligations to you under the ph956 Terms and Conditions — including Account management, game delivery, and transaction processing.
• Legal Obligation: Processing required to comply with a legal obligation to which ph956 is subject, including PAGCOR licensing conditions, AML reporting requirements, and tax obligations under Philippine law.
• Legitimate Interests: Processing necessary for the legitimate interests of ph956 — including fraud prevention, security monitoring, and platform improvement — provided those interests are not overridden by your rights and interests.
• Consent: Processing for purposes that require your prior, freely given, specific, informed, and unambiguous consent — including direct marketing communications and the collection of sensitive personal information where required for identity verification.

ph956 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ph956 shares your personal data only in the following circumstances:

• Game Providers and Technology Partners: ph956 shares necessary Account and session data with licensed game software providers (such as Pragmatic Play, PG Soft, and Jili Games) solely to the extent required to deliver game content and record game outcomes.
• Payment Processors: Financial transaction data is shared with GCash, Maya, BPI, BDO, UnionBank, and other approved payment providers to process deposits and withdrawals you authorise.
• KYC and Identity Verification Providers: Identity documents and related data are shared with accredited KYC service providers operating under appropriate data processing agreements with ph956.
• PAGCOR and Regulatory Authorities: ph956 is obligated to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent Philippine authorities when required by law, regulation, court order, or official regulatory direction.
• Law Enforcement: ph956 may disclose personal data to Philippine law enforcement agencies where required by a lawful order or where disclosure is necessary to prevent or investigate criminal activity.
• Professional Advisers: ph956 may share personal data with lawyers, accountants, auditors, and other professional advisers subject to professional confidentiality obligations, where necessary for the conduct of ph956's business.

All third parties with whom ph956 shares personal data are required to process that data in compliance with the Philippine Data Privacy Act and applicable data protection standards. ph956 enters into appropriate data processing agreements or data sharing agreements with such parties where required by law.

ph956 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, ph956 will securely delete or anonymise your personal data unless a different period is required by law or a supervisory authority directive.

ph956 implements appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• Encryption in Transit: All data transmitted between your device and ph956.club is encrypted using Transport Layer Security (TLS) with 256-bit encryption — equivalent to the security standard used by Philippine online banking platforms.
• Encryption at Rest: Sensitive personal data, including identity documents and financial information, is encrypted in ph956's storage systems using industry-standard encryption algorithms.
• Access Controls: Access to personal data within ph956's systems is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: ph956 offers two-factor authentication for player accounts. Internal administrative access to systems containing personal data requires multi-factor authentication.
• Penetration Testing: ph956's platform and infrastructure is subject to regular security assessments and penetration testing by qualified security professionals.
• Incident Response: ph956 maintains a documented data breach response procedure, including procedures for notifying the National Privacy Commission and affected data subjects within the timelines prescribed by RA 10173 and the NPC's Circular No. 16-03.

ph956.club uses cookies and similar tracking technologies to provide, maintain, and improve the platform. A cookie is a small text file placed on your device by a web server when you visit a website. ph956 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your ph956 Account. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences — such as preferred game categories, last-used payment methods, and language settings — to improve your platform experience on return visits.
• Analytics Cookies: Collect anonymised data about how players interact with ph956.club — pages visited, time spent, error messages encountered — to help ph956 improve the platform. ph956 uses first-party analytics only.
• Security Cookies: Support fraud detection and session integrity by identifying unusual access patterns, device changes, or geographic anomalies associated with your Account.

You may control cookie settings through your browser's preferences. Please note that disabling certain cookies may affect the functionality of ph956.club, including your ability to remain logged in during a gaming session.

ph956 does not knowingly collect personal data from individuals under the age of 21. The ph956 platform is strictly for adults aged 21 and above in accordance with PAGCOR regulations governing online gambling in the Philippines.

If ph956 becomes aware that personal data has been collected from a person under 21 years of age, ph956 will immediately close the associated Account, void any associated transactions, and delete the personal data in question as expeditiously as possible consistent with applicable legal obligations.

If you believe that a minor may have created a ph956 Account, please contact ph956 support immediately at [email protected] so that the matter can be investigated and addressed without delay.

To exercise any of the data rights described in this Privacy Policy — including your right to access, rectify, erase, or object to the processing of your personal data — please submit a request to ph956 through any of the following channels:

• Live Chat: Available 24/7 inside your registered ph956 Account. For data rights requests, identify your request as "Data Rights Request" at the start of the chat session.
• Email: [email protected] — submit your request with the subject line "Data Rights Request" and include sufficient information to verify your identity as the Account holder.

ph956 will respond to verified data rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. Where a request requires additional time to fulfil — for example, due to the volume or complexity of data involved — ph956 will notify you within the initial 15-day period and provide an estimated completion date.

ph956 may request additional verification information before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party. There is no fee for submitting a data rights request. However, if requests are manifestly unfounded, repetitive, or excessive, ph956 reserves the right to charge a reasonable administrative fee or decline to respond.

In the event of a personal data breach that is likely to result in a real risk of serious harm to affected data subjects, ph956 will:

• Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.
• Notify affected data subjects as soon as practicable once the scope of the breach has been established and notification will not compromise the security investigation.
• Provide affected data subjects with a clear description of the nature of the breach, the categories of data involved, the likely consequences of the breach, and the steps ph956 is taking to address the breach and mitigate its effects.
• Maintain an internal register of all data breaches, whether or not they are notifiable to the NPC.

ph956 may transfer personal data to third parties — such as game software providers or KYC service providers — whose servers or operations are located outside the Philippines. Where such cross-border transfers occur, ph956 ensures that appropriate safeguards are in place to protect your personal data, consistent with the requirements of RA 10173 and NPC guidelines on cross-border data transfer.

Such safeguards may include the execution of standard contractual clauses approved by the NPC, or confirmation that the recipient jurisdiction provides an adequate level of data protection as assessed by the NPC. Details of the safeguards applicable to any specific cross-border transfer are available upon written request to ph956.

ph956 may update this Privacy Policy from time to time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or ph956's data processing practices. When material changes are made, ph956 will provide reasonable advance notice to registered Account holders by in-platform notification, email to the registered Account address, or a prominent notice on ph956.club.

The updated Privacy Policy will always display the "Last Updated" date at the top of this page. Your continued use of ph956 following the effective date of any amendment constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically.

ph956 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. To contact the ph956 DPO, or to submit a data rights request, privacy concern, or complaint, please use the following contact details:

• Data Protection Officer: ph956 · Philippines
• Email: [email protected] — please include "DPO / Data Privacy" in the subject line of all correspondence intended for the DPO.
• Response Time: The ph956 DPO will acknowledge receipt of your correspondence within five (5) business days and provide a substantive response within fifteen (15) business days.
• Live Chat: Available 24/7 inside your ph956 Account. Identify your query as a privacy matter at the start of the session so it can be escalated to the appropriate team.