866ph Privacy Policy

Last Updated: June 2026  |  Effective Date: June 2026

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 866ph ("866ph," "we," "us," "our"), the operator of the online gaming platform at 866ph.one, collects, uses, processes, stores, and shares the personal data of individuals ("you," "your," "Player," "User") who access or use our platform.

This Policy applies to all personal data collected through the 866ph website, mobile-optimized platform, customer support channels, and any other interaction between you and 866ph. It is intended to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on 866ph or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller and Data Protection Officer

866ph is the personal information controller responsible for your data processed through this platform. We have designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and this Policy.

Data Protection Officer – 866ph
Contact: [email protected]
Platform: 866ph.one
Response Time: Within 15 business days of receiving a verifiable data subject request.

3. Personal Data We Collect

3.1 Registration and Identity Data

• Full legal name as it appears on a government-issued ID
• Date of birth (for age verification — must be 21+ under PAGCOR requirements)
• Gender (where voluntarily provided)
• Nationality and country of residence
• Philippine mobile number (+63 format) and/or email address
• Username and encrypted password

3.2 Verification (KYC) Data

• Government-issued photo identification (passport, UMID, PhilSys ID, driver's license, or equivalent)
• Proof of address documents (where required for enhanced due diligence)
• Selfie or biometric verification data (where required by KYC process)
• Source of funds declaration (where required for large transactions)

3.3 Financial and Transaction Data

• GCash account number or Maya wallet identifier linked to your 866ph account
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where used for transactions
• Deposit amounts, dates, and payment method used
• Withdrawal requests, amounts, and processing status
• Transaction history and gaming activity records (required for PAGCOR compliance)

3.4 Technical and Usage Data

• IP address and approximate geolocation (country/region level)
• Device type, operating system, and browser information
• Session logs, login timestamps, and duration of platform use
• Game interaction data, bet history, and account activity logs
• Cookie data and similar tracking technologies (see Section 9)

3.5 Communications Data

• Records of live chat conversations with 866ph support
• Email correspondence with 866ph
• Feedback, survey responses, or dispute submissions you provide

4. How We Collect Your Data

866ph collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically — when you use the 866ph platform, through server logs, cookies, and analytics tools that record your interactions with the site.
• From third parties — from payment processors (GCash, Maya, BPI, BDO, etc.) to confirm transaction status; from identity verification service providers during KYC; from PAGCOR or other Philippine government authorities where legally required.

5. Legal Basis for Processing

866ph processes your personal data on the following legal bases under the Philippine Data Privacy Act and its IRR:

• Consent — where you have given clear, informed consent for a specific processing purpose (e.g., marketing communications).
• Contractual necessity — processing required to fulfill our obligations to you under the 866ph Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation — processing required to comply with PAGCOR regulatory requirements, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
• Legitimate interests — processing necessary for fraud prevention, security monitoring, platform improvement, and responsible gaming compliance, where these interests are not overridden by your privacy rights.

6. How We Use Your Personal Data

866ph uses the personal data we collect for the following purposes:

• To create, verify, and maintain your 866ph player account.
• To process deposits and withdrawals through your selected payment method (GCash, Maya, BPI, BDO, etc.).
• To comply with PAGCOR's Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• To verify that you meet the minimum age requirement of 21 years as mandated by Philippine gaming law.
• To deliver customer support and resolve disputes or complaints.
• To send you transactional notifications related to your account activity (deposits, withdrawals, security alerts).
• To send promotional communications, if you have consented to receive them, which you may opt out of at any time.
• To detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities.
• To analyze platform usage and improve the 866ph user experience.
• To comply with legal obligations including responses to lawful government requests.

7. Sharing of Personal Data

866ph does not sell, rent, or trade your personal data to third-party marketers or advertisers. We share personal data only in the following circumstances:

• Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, and other payment providers receive the minimum data necessary to process your transactions.
• KYC / Identity Verification Providers: Third-party identity verification services receive your identification documents solely for the purpose of verifying your identity as required by PAGCOR.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies may receive data where required by law.
• Service Providers: Trusted third-party providers who support 866ph's operations (hosting, analytics, customer support tools) under strict data processing agreements that prohibit independent use or disclosure of your data.
• Legal Requirements: Where 866ph is required by a court order, government directive, or legal process to disclose personal data.

All third parties with whom 866ph shares personal data are required to implement appropriate technical and organizational security measures and to process data only in accordance with 866ph's instructions and applicable law.

8. Data Retention

866ph retains personal data for as long as necessary to fulfill the purposes described in this Policy, comply with legal and regulatory obligations, and resolve disputes. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, consistent with PAGCOR and AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Communications data: Support chat logs and email correspondence are retained for up to three (3) years.
• Technical / usage data: Retained for up to two (2) years, or as required for security and fraud prevention purposes.

Upon expiration of applicable retention periods, personal data is securely deleted or anonymized in accordance with 866ph's data disposal procedures.

9. Cookies and Tracking Technologies

866ph uses cookies and similar tracking technologies (local storage, session storage, web beacons) on the platform for the following purposes:

• Essential cookies: Required for the platform to function, including maintaining your login session and security token.
• Functional cookies: Remember your preferences (language, display settings) to improve your experience.
• Analytics cookies: Help 866ph understand how players use the platform so we can improve it. Data collected is aggregated and does not identify individuals.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the 866ph platform. 866ph does not use cookies for third-party advertising or behavioral profiling for marketing purposes without your consent.

10. Security Measures

866ph implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data in transit between your browser and 866ph servers.
• Encryption of sensitive data at rest, including financial details and identification documents.
• Bcrypt or equivalent one-way hashing for account passwords — 866ph staff cannot view your password.
• Role-based access controls ensuring staff access only the data necessary for their job function.
• Regular security assessments and penetration testing.
• Two-factor authentication available for player accounts and mandatory for administrative access.

Despite these measures, no system is completely immune to security risks. 866ph encourages players to use strong, unique passwords and enable two-factor authentication on their 866ph accounts.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 and its IRR, you have the following rights regarding your personal data held by 866ph:

• Right to be Informed: You have the right to know that your personal data is being collected and processed, and the purpose for which it is used — which this Policy fulfills.
• Right of Access: You may request a copy of the personal data 866ph holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to 866ph's legal retention obligations.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, contact 866ph's Data Protection Officer at [email protected]. 866ph will respond to verifiable data subject requests within fifteen (15) business days.

12. Children's Privacy

The 866ph platform is strictly for individuals who are 21 years of age or older, in compliance with PAGCOR's age requirements. 866ph does not knowingly collect personal data from persons under 21 years of age. If 866ph discovers that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be closed. If you believe a minor has registered on the 866ph platform, please contact us immediately.

13. International Data Transfers

866ph's primary data processing occurs within the Philippines. Where data is transferred to or processed by service providers outside the Philippines — for example, cloud hosting infrastructure or identity verification services — 866ph ensures that such transfers comply with the requirements of the Philippine Data Privacy Act, including implementing appropriate safeguards such as data processing agreements that require equivalent levels of data protection.

14. Changes to This Privacy Policy

866ph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or regulatory guidance. Material changes will be communicated to registered players via their registered email address or through a prominent notice on the 866ph platform. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the 866ph platform after changes are posted constitutes acceptance of the revised Policy.

15. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact 866ph's Data Protection Officer:

Data Protection Officer – 866ph
Email: [email protected]
Platform: 866ph.one
Response Time: Within 15 business days
Support: Available 24/7 via live chat on the 866ph platform

You also have the right to submit a complaint to the National Privacy Commission (NPC) of the Philippines if you are not satisfied with 866ph's response to a data privacy concern.