646php Privacy Policy — How We Protect Your Personal Data

646php is an online gaming and sports betting platform operating at 646php.app and serving players in the Philippines. When this Privacy Policy refers to "646php", "we", "us", or "our", it means the company operating the 646php platform and all services available through it.

646php acts as the data controller for all personal information collected through the platform. This means we are responsible for deciding how and why your personal data is processed. We are committed to processing your data in accordance with the Republic Act 10173, also known as the Data Privacy Act of 2012, and its implementing rules, as enforced by the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all information collected through the 646php website, any mobile browser interface, and any communication you have with the 646php support team or marketing channels. By registering an account on 646php or by continuing to use the platform, you acknowledge that you have read and understood this policy.

646php collects different categories of personal information depending on how you interact with the platform. We only collect data that is necessary for a defined purpose and do not collect excessive information beyond what is required.

Registration Data: When you create a 646php account, we collect your full legal name, date of birth, Philippine mobile number, email address, and the username and password you create. This information is necessary to open and manage your account.

Identity Verification Data: To meet our regulatory and anti-money laundering obligations, 646php requires verified identity documentation before processing your first withdrawal or when triggered by our risk management processes. This may include a scanned copy of your government-issued ID (such as a PhilSys card, passport, driver's licence, or UMID), a selfie photograph, and proof of address such as a utility bill or bank statement.

Financial Data: We collect details of your deposits and withdrawals, including transaction amounts, dates, payment methods used (such as GCash account number, Maya account details, or bank account details), and transaction reference numbers. We do not store full card numbers for Visa/Mastercard transactions — card processing is handled by certified payment gateway providers.

Gaming & Betting Activity: 646php records all bets placed, games played, session durations, game outcomes, and associated transaction amounts. This data is used for account management, responsible gaming monitoring, and dispute resolution.

Technical Data: We automatically collect certain technical information when you access 646php, including your IP address, device type, operating system, browser type and version, referring URL, and pages visited within the platform. This data is used to improve the service, maintain security, and detect fraudulent activity.

Communications Data: We retain records of communications you have with the 646php support team, including live chat transcripts, emails, and any attachments you provide in support of a query or complaint.

646php uses the personal information we collect for the following clearly defined purposes:

• Account creation and management: To open your 646php account, maintain it, and authenticate your identity each time you log in.
• Payment processing: To process your deposits and withdrawals via GCash, Maya, BDO, BPI, UnionBank, and other supported Philippine payment methods. Your financial details are passed to licensed payment processors solely for this purpose.
• Identity verification and KYC: To comply with our regulatory obligations under Philippine gaming laws, we verify your identity before processing withdrawals and when required by our risk management systems. This includes verifying that you are 21 years of age or older.
• Responsible gaming monitoring: We analyse your gaming behaviour and transaction patterns to identify signs of problem gambling or financial stress, in order to offer appropriate tools and interventions in accordance with our responsible gaming commitments.
• Anti-fraud and security: We monitor account activity, login patterns, IP addresses, and transaction data to detect and prevent fraud, money laundering, underage access, and multiple account registration.
• Customer support: To respond to your queries, process complaints, and investigate disputes. Support communications are retained to provide context in follow-up interactions.
• Platform improvement: To analyse how players use the 646php platform and identify improvements to design, game selection, and support processes. This analysis is performed on aggregated or anonymised data where possible.
• Marketing communications: Where you have opted in, we use your contact details to send promotional offers, bonus notifications, and platform updates. You can withdraw this consent at any time.
• Legal and regulatory compliance: To meet our obligations under the Data Privacy Act of 2012, Philippine gaming regulations, anti-money laundering laws, and other applicable legislation.

Under the Data Privacy Act of 2012, 646php must have a lawful basis for processing your personal information. The lawful bases we rely on are:

• Contractual necessity: Processing your registration data, payment information, and gaming activity is necessary to fulfil our contract with you — that is, to provide the 646php gaming and betting services you signed up for.
• Legal obligation: Identity verification, record-keeping, and reporting of suspicious transactions are required of 646php under Philippine gaming regulations and anti-money laundering laws. We are required by law to process this data regardless of consent.
• Legitimate interests: Security monitoring, fraud prevention, platform improvement, and responsible gaming analysis are conducted on the basis of our legitimate interest in maintaining a safe and fair gaming environment for all members.
• Consent: Marketing communications are sent only where you have explicitly opted in. This consent can be withdrawn at any time without affecting your account or the services available to you.

646php does not sell your personal data to any third party. We share personal information only where it is necessary to provide our services, meet our legal obligations, or protect the security of the platform. The categories of third parties we share data with are:

• Payment processors: Your financial details are shared with licensed payment service providers (including GCash operator G-Xchange Inc., Maya, and bank payment gateways) solely to process your deposits and withdrawals. These providers process your data under their own privacy policies and regulatory obligations.
• Identity verification providers: When KYC verification is required, your identity documents and biometric data may be shared with licensed third-party identity verification services. These providers are contractually required to process your data only for verification purposes and to maintain appropriate security standards.
• Game and software providers: Some 646php games are provided by licensed third-party game suppliers. Technical gaming data (game outcomes, session data) may be shared with these providers for the purpose of delivering and auditing the game services.
• Regulatory and law enforcement authorities: 646php is required by law to report certain information — including suspicious transaction reports — to Philippine regulatory and law enforcement bodies. We may also be required to disclose information in response to a valid court order or legal process.
• Technology and hosting providers: Our platform operates on secure cloud infrastructure. Hosting and technical service providers may have access to data stored on their infrastructure, but are bound by strict data processing agreements and cannot use this data for their own purposes.

646php uses cookies and similar tracking technologies to make the platform work, to improve your experience, and to understand how the platform is being used. Here is a plain breakdown of what we use and why:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your language preferences, and ensure security features like CSRF protection work correctly. You cannot opt out of essential cookies without breaking the platform.
• Analytics cookies: We use anonymised analytics to understand how players navigate the 646php platform — which pages are most visited, where users drop off, and how long sessions typically last. This data is used in aggregate form to improve the platform.
• Preference cookies: These remember your settings within the 646php platform, such as display preferences or previously selected options, so you do not need to reconfigure them every session.
• Marketing cookies: If you have opted in to marketing communications, we may use cookies to track which promotions you have engaged with and tailor future offers accordingly. You can opt out of marketing cookies through the cookie preference settings on the platform.

You can manage cookie preferences through your browser settings. Disabling cookies beyond essential cookies may affect some platform functionality but will not prevent you from accessing core gaming and betting features on 646php.

646php retains personal data only for as long as it is needed for the purpose it was collected, or for as long as required by law. The following retention periods apply:

• Account and registration data: Retained for the duration of your active account plus five (5) years after account closure, in line with our regulatory record-keeping obligations.
• Financial transaction records: Retained for at least five (5) years from the date of the transaction, as required by Philippine anti-money laundering regulations.
• Identity verification documents: Retained for the duration of your account plus five (5) years after closure. These records must be maintained for regulatory audit purposes.
• Gaming and betting activity: Retained for five (5) years from the date of the activity. Retained for dispute resolution, regulatory compliance, and responsible gaming monitoring.
• Support communications: Retained for three (3) years from the date of the interaction, to allow context for follow-up queries and audit records.
• Marketing data: Retained until you withdraw consent. Upon opt-out, marketing data is removed from active marketing systems within 30 days, subject to minimum record-keeping requirements.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by 646php. To exercise any of these rights, contact us at support@646php.app with the subject line "Data Rights Request" and include your registered email address and the right you wish to exercise.

646php implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and 646php servers is encrypted using current-standard SSL/TLS protocols. This applies to login sessions, payment submissions, and all API communications.
• Encrypted data storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form on secure servers. Encryption keys are managed separately from encrypted data.
• Access controls: Internal access to personal data is restricted to 646php staff who need it to perform their job responsibilities. Access is logged and regularly reviewed. Employees are bound by confidentiality obligations.
• Two-factor authentication: OTP-based two-factor authentication is available and encouraged for all 646php member accounts to protect against unauthorised access.
• Security monitoring: 646php operates continuous monitoring of platform activity for signs of intrusion, data exfiltration, or suspicious access patterns. Security incidents are investigated and addressed promptly.
• Regular security reviews: Our platform and data handling practices are reviewed periodically by internal and external security professionals to identify and address vulnerabilities.

646php is strictly restricted to individuals aged 21 and above. The platform is not intended for, and does not knowingly collect personal information from, anyone under the age of 21.

646php employs age verification at the point of registration and during the KYC verification process to confirm that all members meet the minimum age requirement. Any account found to belong to a person under the age of 21 will be immediately suspended, and any associated funds will be handled in accordance with our legal obligations.

If you believe a minor has registered an account on 646php, please contact us immediately at support@646php.app. We will investigate promptly and take appropriate action.

646php may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, and special offers — but only if you have opted in to receive these communications at the time of registration or through your account settings.

You can withdraw your consent to marketing communications at any time through the following methods:

• Clicking the unsubscribe link in any marketing email from 646php.
• Updating your communication preferences in the account settings section of the 646php platform.
• Contacting the support team directly at support@646php.app with the subject line "Marketing Opt-Out".

Opting out of marketing communications does not affect your ability to receive transactional notifications that are required for the operation of your account — such as deposit confirmations, withdrawal processing updates, and security alerts. These operational messages will continue regardless of your marketing preferences.

Upon receiving an opt-out request, 646php will remove your details from active marketing systems within 30 days. You may still receive messages already in our sending queue during this period.

646php may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements in how we describe our practices to you. All changes will be posted on this page with an updated "Last Updated" date at the top.

For material changes — those that significantly affect your rights or how we process your data — 646php will provide advance notice through an in-platform notification or an email to your registered address at least seven (7) days before the changes come into effect.

Your continued use of the 646php platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you should stop using 646php and may request account closure.

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a concern about how 646php has handled your personal information, please reach out through the following channels:

• Email: support@646php.app — use subject line "Privacy Enquiry" or "Data Rights Request" so we can route it to the right team.
• Live Chat: Available 24/7 through the 646php platform after logging in. Suitable for general questions about this policy.
• FAQ: Our FAQ page covers the most common account and privacy questions in plain language.

We aim to acknowledge all privacy-related requests within 48 hours and to provide a full response within 15 business days. For complex requests involving large volumes of data or legal review, we will notify you of any extension to this timeline.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines.