684ph Privacy Policy

1 Who We Are

684ph ("the Company", "we", "us", "our") operates the online gaming platform accessible at 684ph.app, offering casino games, slots, bingo, fishing games, and related entertainment services to registered players in the Philippines.

684ph acts as the Data Controller for all personal data collected through the platform. As Data Controller, we determine the purposes and means by which your personal data is processed, and we are responsible for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable regulations issued by the National Privacy Commission (NPC).

If you have any questions about how 684ph handles your personal data, please refer to Section 13 of this policy for our Data Protection Officer contact details.

2 Data We Collect

684ph collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Gender (optional, collected during registration).
• Username and account credentials (password stored in hashed, non-reversible form).
• Nationality and country of residence.

2.2 Contact Data

• Email address (primary communication channel for account notifications and support).
• Mobile phone number (used for two-factor authentication and account security alerts).
• Residential address (collected during KYC verification).

2.3 Identity Verification (KYC) Documents

• Government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, PRC ID, or UMID).
• Proof of address documents (e.g., utility bill, bank statement, or barangay certificate dated within the last three months).
• Proof of payment method ownership where required for withdrawal processing.
• Source of funds documentation where required by anti-money laundering regulations.

2.4 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment method references.
• GCash account references, Maya account references, or bank account details (account name and last four digits only — full account numbers are not stored by 684ph).
• Bonus and promotional credit history.
• Account balance history.

2.5 Gaming Activity Data

• Game session logs, including games played, wager amounts, win/loss outcomes, and session duration.
• Betting history across all 684ph game categories.
• Responsible gaming tool usage, including deposit limits set, session reminders activated, and self-exclusion requests.

2.6 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser type and version.
• Unique device identifiers.
• Platform access logs, including login timestamps and session durations.
• Cookie identifiers and similar tracking technology data (see Section 7).

2.7 Communications Data

• Records of your communications with 684ph customer support, including live chat transcripts and email correspondence.
• Feedback, complaints, and dispute records.
• Marketing preference settings and opt-in/opt-out records.

3 How We Collect Data

684ph collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the 684ph platform, including through cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance databases; payment verification data from payment processors such as GCash and Maya.
• Regulatory sources: Data shared with 684ph by PAGCOR or other regulatory bodies in connection with licensing compliance, player protection programs, or self-exclusion registries.

4 Why We Use Your Data

684ph uses your personal data for the following purposes. The table below maps each purpose to the data categories involved and the legal basis for processing:

684ph does not use your personal data for automated decision-making that produces significant legal effects without human review. Where automated tools are used for fraud screening or responsible gaming monitoring, flagged cases are reviewed by a qualified member of our compliance team before any action is taken on your account.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 684ph processes your personal data on the following legal grounds:

• Contract performance: Processing is necessary to fulfill our obligations to you under the 684ph Terms & Conditions, including providing gaming services, processing transactions, and managing your account.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), PAGCOR licensing requirements, and NPC data protection regulations.
• Legitimate interest: Processing is necessary for 684ph's legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your privacy rights.
• Consent: For optional processing activities such as marketing communications and non-essential cookies, 684ph relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

684ph does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

6.1 Service Providers

684ph engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include KYC and identity verification providers, payment processors (GCash, Maya, and partner banks), cloud hosting and infrastructure providers, customer support platform providers, and fraud detection and cybersecurity services. All service providers are contractually required to process data only as instructed by 684ph and to maintain appropriate security standards.

6.2 Regulatory and Law Enforcement Authorities

684ph may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other government authorities where required by Philippine law, court order, or regulatory directive. Such disclosures are made only to the extent required and are documented in our compliance records.

6.3 Game Providers

Certain technical data (such as session identifiers and game activity logs) may be shared with our licensed third-party game providers for the purpose of delivering game content, resolving disputes, and ensuring game integrity. Game providers do not receive your full identity or financial data.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 684ph's business, personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and your rights under this policy will continue to apply.

7 Cookies & Tracking Technologies

684ph uses cookies and similar technologies (such as web beacons and local storage) to operate the platform, remember your preferences, and analyze how players use our services. The types of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these may affect your experience.
• Analytics cookies: Collect anonymized data about how players navigate the platform, which pages are visited most, and where errors occur. This data helps us improve 684ph. Analytics cookies require your consent.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your 684ph account. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

684ph does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertisements on external websites.

8 Data Retention

684ph retains personal data for as long as necessary to fulfill the purposes described in this policy, subject to the following retention guidelines:

After the applicable retention period expires, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures. Anonymized data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual.

9 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 684ph. You may exercise any of these rights by contacting our Data Protection Officer as described in Section 13.

684ph will respond to all privacy rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified of the extension and the reason for it. There is no fee for exercising your privacy rights, unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

If you are not satisfied with 684ph's response to a privacy rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10 Data Security

684ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and the 684ph platform is encrypted using TLS 1.2 or higher (HTTPS). We do not support unencrypted HTTP connections.
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Password security: Account passwords are stored using industry-standard one-way hashing algorithms. 684ph staff cannot view your password in plain text.
• Access controls: Access to personal data is restricted to 684ph staff who require it to perform their job functions. All staff with data access undergo background checks and regular data privacy training.
• Two-factor authentication: 684ph offers two-factor authentication (2FA) for all player accounts. We strongly recommend enabling 2FA to protect your account.
• Penetration testing: 684ph conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in our platform.
• Incident response: In the event of a personal data breach, 684ph will notify affected players and the NPC within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

While 684ph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying 684ph immediately if you suspect unauthorized access to your account.

11 Children & Minors

684ph is strictly an adult platform. In accordance with Philippine gaming regulations, the minimum age to register and use 684ph is twenty-one (21) years. 684ph does not knowingly collect personal data from individuals under the age of 21.

If 684ph becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and report the incident to PAGCOR as required by our licensing obligations.

If you are a parent or guardian and believe that a minor has registered an account on 684ph, please contact our Data Protection Officer immediately using the contact details in Section 13. We will investigate and take appropriate action within 48 hours of receiving your report.

12 Policy Updates

684ph may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will notify you by email to your registered address and by posting a prominent notice on the 684ph platform at least fourteen (14) days before the changes take effect.

The "Last updated" date at the top of this policy reflects the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how 684ph protects your personal data.

Your continued use of the 684ph platform after the effective date of any policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated policy, you must stop using 684ph and may request account closure in accordance with our Terms & Conditions.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 684ph, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the 684ph platform

For complaints that have not been resolved to your satisfaction by 684ph, you may escalate your concern to the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC): privacy.gov.ph
• NPC Complaints: [email protected]

684ph is committed to resolving all privacy-related concerns in a fair, transparent, and timely manner. We aim to acknowledge all DPO inquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days.