ph86 Privacy Policy – How We Handle Your Personal Information

ph86 ("ph86," "we," "us," "our") operates the online gaming and sports betting platform available at ph86.best. We are a licensed online gaming operator serving adult players in the Philippines. This Privacy Policy applies to all personal information collected through the ph86 website, mobile interface, customer support channels, and any other service operated under the ph86 brand.

ph86 acts as a Personal Information Controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "the DPA") with respect to the personal data of our members and visitors.

This policy covers:

• Registered ph86 members based in the Philippines
• Visitors to the ph86.best website who have not yet registered
• Individuals who contact ph86 through customer support, email, or live chat

ph86 collects different categories of personal data depending on how you interact with the platform. The table below summarises the main data types, along with examples and why each category is collected.

ph86 does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law or expressly provided by you in connection with a responsible gaming self-assessment.

ph86 collects personal data through the following channels:

Direct Collection

Most of your data is provided directly by you when you register a ph86 account, complete KYC verification, make a deposit or withdrawal, contact customer support, set responsible gaming limits, or update your account profile.

Automated Collection

When you use the ph86 platform, certain data is collected automatically. This includes your IP address, device identifiers, session timing, pages visited, and in-game activity. This data is collected through cookies, log files, and similar tracking technologies. See Section 7 for full details on cookies.

Third-Party Sources

ph86 may receive supplementary identity verification data from licensed KYC and AML service providers operating in the Philippines. We may also receive fraud signals from payment processors, including GCash, Maya, and affiliated banking partners. In all cases, third-party data sharing is governed by appropriate data processing agreements.

ph86 processes your personal data for the following specific purposes:

• Account management: Creating, operating, and maintaining your ph86 account, including identity verification and KYC processes required by our operating licence and Philippine law.
• Transaction processing: Handling deposits and withdrawals through GCash, Maya, GrabPay, InstaPay/PESONet, BDO, BPI, UnionBank, and eligible Visa/Mastercard channels. All transactions are in Philippine pesos.
• Regulatory compliance: Meeting our obligations under Philippine Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, PAGCOR licensing requirements, and other applicable regulations.
• Security and fraud prevention: Detecting and preventing unauthorised access, account fraud, money laundering, identity theft, and other malicious activity on ph86.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gaming behaviour and applying or enforcing limits, cooling-off periods, or self-exclusion requests made by members.
• Customer support: Responding to your queries, processing complaints, and resolving disputes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the ph86 platform, fix bugs, and develop new features.
• Marketing communications: Sending you relevant ph86 promotions, offers, and platform updates — only if you have opted in to receiving these communications.

ph86 does not use automated decision-making that produces significant legal effects on members, except in automated fraud-detection systems where a human review is always available upon request.

Under the Philippine Data Privacy Act of 2012, ph86 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Member Agreement you accepted upon registration, including account operation and payment processing.
• Legal obligation: Processing required to comply with Philippine law, including AML reporting, KYC verification, tax obligations, and PAGCOR reporting requirements.
• Legitimate interests: Processing for security monitoring, fraud prevention, responsible gaming compliance, and platform improvement — where these interests do not override your fundamental rights.
• Consent: Processing for optional marketing communications, where you have explicitly opted in. You may withdraw consent at any time by updating your notification preferences in your ph86 account settings or by emailing support@ph86.best.

ph86 does not sell your personal data to any third party. We share your data only in the following limited circumstances:

Service Providers (Sub-Processors)

ph86 works with carefully selected service providers who process data on our behalf under strict contractual data processing agreements. These include identity verification and KYC providers, payment processors, cloud hosting infrastructure providers, fraud detection and security services, and customer support platform providers. All sub-processors are bound to process your data only for the purposes ph86 specifies.

Regulatory and Legal Disclosures

ph86 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts when required to do so by Philippine law, a valid legal order, or in connection with the prevention or investigation of suspected criminal activity.

Game Providers

ph86 uses third-party game providers to supply slot games, live casino titles, and other gaming content. These providers may receive limited technical and session data necessary to deliver the game and verify fair play outcomes. They do not receive your full identity data unless required for dispute resolution.

ph86 uses cookies and similar technologies to operate the platform, maintain your login session, remember your preferences, detect fraud, and analyse how members use the site. When you first visit ph86, you are presented with a cookie consent notice.

The table below summarises the main categories of cookies used on ph86:

You can manage cookie preferences through the cookie settings panel available on ph86. Note that disabling strictly necessary cookies will prevent the platform from functioning correctly.

ph86 retains personal data only for as long as it is needed to fulfil the purposes described in this policy, or as required by Philippine law:

• Active account data: Retained for the duration of your ph86 membership and for a minimum of five years after account closure, in compliance with AMLA and PAGCOR record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction, as required by the Philippine AMLA Revised Implementing Rules and Regulations.
• KYC verification documents: Retained for a minimum of five years after the member relationship ends, as required by AML law.
• Customer support records: Retained for two years from the date of the support interaction, unless related to an ongoing dispute or legal matter.
• Marketing consent records: Retained until you withdraw consent, plus one year for audit purposes.
• Technical and security logs: Retained for up to 12 months for active security monitoring, then anonymised for longer-term analytics.

When retention periods expire, ph86 securely deletes or anonymises personal data so that it can no longer be associated with you.

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by ph86. These rights can be exercised by contacting support@ph86.best with your registered account details:

ph86 implements appropriate technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security practices include:

• Encryption: All data transmitted between your device and ph86 servers is encrypted using TLS (Transport Layer Security). Stored sensitive data is encrypted at rest using industry-standard algorithms.
• Access controls: Personal data is accessible only to ph86 staff and authorised processors who have a business need to access it. Access is governed by role-based controls and audit logging.
• Network security: ph86 servers are protected by firewalls, intrusion detection systems, and regular security scanning. Infrastructure is hosted in secured, certified data centres.
• Account security: ph86 supports two-factor authentication (2FA) for member accounts. We recommend enabling 2FA in your account settings.
• Security testing: ph86 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph86 will notify you and the National Privacy Commission as required by Philippine law.

ph86 services are strictly for adults aged 21 and above in the Philippines. ph86 does not knowingly collect personal data from any person under the age of 21. If we become aware that a member is underage, we will immediately close the account, delete the personal data as far as legally permissible, and action any required regulatory reporting.

If you are a parent or guardian and you believe your child has registered on ph86, please contact us immediately at support@ph86.best so we can take appropriate action without delay.

ph86 may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, or Philippine legal requirements. When we make material changes, we will:

• Post the updated policy at ph86.best/privacy-policy with a revised "Last updated" date.
• Where required, send a notification to your registered email address.
• Display a notice on the ph86 platform when you next log in.

Your continued use of ph86 after the updated policy takes effect constitutes your acceptance of the changes. If you disagree with any changes, you should stop using ph86 and contact support@ph86.best to request account closure.

ph86 has appointed a Data Protection Officer (DPO) as required by the Philippine Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or how ph86 handles your personal data, please contact:

• Email: support@ph86.best (subject: "Privacy / Data Request")
• Live Chat: Available 24/7 through the ph86 platform interface
• Response commitment: Initial response within 5 business days; full resolution within 15 business days in line with NPC guidelines

If you are not satisfied with ph86's response to a privacy concern, you have the right to file a complaint directly with the Philippine National Privacy Commission (NPC). Information on how to file an NPC complaint is publicly available through official Philippine government channels.