ph56 is committed to protecting the personal data of every Filipino player on the platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have over it under Philippine law.
1.1 ph56 takes your privacy seriously. As a PAGCOR-licensed online gaming platform serving Filipino players across the Philippines — from Metro Manila to Cebu, Davao, and beyond — ph56 handles personal data on a daily basis. That data is never taken for granted.
1.2 This Policy applies to all personal data collected through the ph56 website at ph56.bio, including registration, gaming activity, financial transactions, customer support interactions, and any other use of platform services.
1.3 This Policy should be read alongside ph56's Terms & Conditions and Responsible Gaming Policy. In cases of conflict between this Policy and those documents regarding privacy matters, this Policy governs.
1.4 ph56 may update this Policy from time to time in response to regulatory changes, platform updates, or evolving best practices. The current version is always available at ph56.bio/privacy-policy. Material changes will be communicated to registered players via their registered contact details where practicable.
2.1 For the purposes of the Philippine Data Privacy Act of 2012, ph56 is the personal information controller in respect of the data it collects from players on the ph56 platform.
2.2 ph56 has designated a Data Protection Officer (DPO) in compliance with NPC requirements. The DPO oversees ph56's data protection compliance programme, handles data subject requests, and serves as the primary point of contact with the National Privacy Commission.
2.3 Contact details for the ph56 Data Protection Officer: [email protected] (plain text — not a clickable link). Please mark correspondence "Attention: Data Protection Officer" for prioritised handling.
ph56 collects the following categories of personal data, depending on the nature of your interaction with the platform:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality, government ID details (PhilSys, passport, UMID, driver's licence) | Yes — KYC requirement |
| Contact Data | Philippine mobile number (+63), email address | Yes — account registration |
| Financial Data | GCash account reference, bank account details (BPI, BDO, Metrobank), transaction history, deposit/withdrawal amounts | Yes — payment processing |
| Gaming Activity Data | Bets placed, games played, win/loss records, session duration, wagering patterns | Yes — platform operation & PAGCOR compliance |
| Technical Data | IP address, device type and model, browser, operating system, login timestamps, geolocation (country/region) | Yes — security & fraud prevention |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with ph56 support | As generated |
| Responsible Gaming Data | Self-exclusion status, deposit/loss limit settings, problem gambling risk indicators | As applicable |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, promotion redemption history | Optional |
3.1 ph56 does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and responsible gaming compliance. ph56 does not collect political opinions, religious beliefs, health data (except as relevant to responsible gaming interventions), or biometric data beyond what is contained in submitted government ID documents.
ph56 collects personal data through the following means:
ph56 processes personal data only for specific, legitimate, and documented purposes. The following table summarises our primary processing activities and their legal bases under the DPA:
6.1 ph56 does not sell your personal data to third parties. ph56 does not share your personal data with third parties for their independent marketing purposes without your explicit consent.
6.2 ph56 shares personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:
6.3 All third-party processors engaged by ph56 are required to maintain personal data security standards consistent with the DPA and its Implementing Rules, and are bound by written data processing agreements.
7.1 Some of ph56's technology partners and game software providers may be based outside the Philippines. Where personal data is transferred outside the Philippines, ph56 ensures that adequate safeguards are in place in accordance with NPC guidelines and DPA requirements — including the use of standard contractual clauses, data processing agreements, and transfers only to jurisdictions with adequate data protection frameworks.
7.2 ph56 maintains a register of international data transfers and the safeguards applicable to each, which is available to the NPC upon request.
7.3 All financial data relating to Philippine players is processed and stored with primary servers in the Philippines or in jurisdictions with equivalent data protection requirements.
8.1 ph56 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:
8.2 At the end of the applicable retention period, ph56 will securely delete or irreversibly anonymise personal data in accordance with NPC-approved data disposal procedures.
9.1 ph56 uses cookies and similar tracking technologies (including local storage and session tokens) on the ph56 platform. Cookies are small data files placed on your device that help the platform function correctly and enable analytical features.
9.2 ph56 uses the following categories of cookies:
9.3 ph56 does not use third-party advertising or behavioural tracking cookies. ph56 does not participate in cross-site advertising networks.
9.4 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of ph56.
10.1 ph56 implements technical and organisational security measures commensurate with the sensitivity of the personal data processed and the risks identified. These include:
10.2 Notwithstanding the above, no internet-based system can guarantee absolute security. ph56 will notify affected players and the NPC of any personal data breach that is likely to result in risk to player rights and freedoms, in accordance with the 72-hour notification requirement under the DPA's Implementing Rules.
11.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph56:
11.2 Right to access: You may request a copy of the personal data ph56 holds about you, along with information on how it is being processed.
11.3 Right to rectification: You may request correction of inaccurate or incomplete personal data held by ph56. Some corrections (e.g., name changes) require supporting documentation.
11.4 Right to erasure / right to be forgotten: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. Note that ph56 may be obligated to retain certain data for PAGCOR/AMLC compliance purposes even following an erasure request — in such cases, ph56 will explain which data must be retained and why.
11.5 Right to object: You may object to the processing of your personal data for marketing purposes at any time. You may also object to other processing activities where your particular situation justifies an objection, subject to ph56's legal obligations overriding such objection where applicable.
11.6 Right to data portability: You may request that ph56 provide your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) for transfer to another controller, where technically feasible.
11.7 Right to complain: If you believe ph56 has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines. ph56 encourages players to first contact our DPO at [email protected] to attempt resolution before escalating to the NPC.
11.8 To exercise any of the above rights, submit a written request to the ph56 Data Protection Officer. ph56 targets acknowledgement of rights requests within 5 business days and substantive response within 30 calendar days, as required by the DPA.
12.1 ph56 does not knowingly collect personal data from individuals under the age of 21. The ph56 platform is strictly for players aged 21 and above in accordance with PAGCOR's minimum age requirements for online gaming in the Philippines.
12.2 ph56 implements age verification as a mandatory step in the KYC process. Any account identified as belonging to a person under 21 will be immediately closed and personal data associated with that account will be retained only as long as necessary for legal compliance purposes, then securely deleted.
12.3 If you are a parent or guardian and believe that a person under 21 in your care has registered on ph56, please contact ph56 support immediately at [email protected].
13.1 The ph56 platform may contain references to or integrations with third-party services (such as game software from licensed providers). ph56 is not responsible for the privacy practices of third-party game providers or technology vendors. Players should review the privacy policies of any third-party services they interact with independently of ph56.
13.2 ph56 does not embed third-party social media tracking pixels, advertising networks, or behavioural profiling services on the ph56 platform.
14.1 ph56 may revise this Privacy Policy from time to time to reflect changes in Philippine data protection law, PAGCOR regulatory requirements, or ph56's data processing practices. The updated Policy will be published at ph56.bio/privacy-policy with a revised "Last Updated" date.
14.2 For material changes that significantly affect how ph56 processes your personal data or your rights, ph56 will proactively notify registered players via their registered mobile number or email address prior to the change taking effect where practicable.
14.3 Continued use of ph56 following publication of a revised Policy constitutes acceptance of the revised terms. If you do not accept a revised Policy, you may request account closure and data deletion (subject to applicable retention obligations).
For all privacy-related inquiries, data subject access requests, or complaints:
ph56 treats all privacy requests with confidentiality and in accordance with the Data Privacy Act. We are committed to resolving data privacy concerns fairly and transparently.
ph56's privacy framework is built on six core commitments — each one a concrete practice, not just a policy statement.
Every piece of data you transmit to ph56 — from your login credentials to your GCash deposit details — is encrypted using industry-standard 256-bit SSL/TLS. The same technology Philippine banks use for their online portals. Nothing travels in plaintext.
ph56 is compliant with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules. A designated Data Protection Officer oversees ongoing compliance with National Privacy Commission requirements and handles all player data rights requests.
You have the right to access, correct, delete, port, and object to the processing of your ph56 personal data. These rights are enshrined in Philippine law and ph56 is obligated to honour them. Submit a written request to our DPO and get a response within 30 days.
ph56 does not sell, rent, or trade your personal data to third-party marketers. Your data is used to operate the platform, comply with PAGCOR and AMLC requirements, and improve your player experience — nothing else. Marketing from ph56 only ever happens with your consent.
As a PAGCOR-licensed operator, ph56's data handling practices are subject to periodic PAGCOR audit. Regulatory oversight adds an additional layer of accountability beyond standard DPA compliance — ensuring that data practices meet gaming-sector-specific requirements for player protection.
In the event of a personal data breach that may affect your rights, ph56 is committed to notifying affected players and the NPC within the 72-hour window required by the DPA. We maintain a formal incident response plan and conduct regular security drills to keep this process current.
ph56 takes your personal data as seriously as your GCash balance. PAGCOR-licensed, DPA-compliant, and committed to Filipino players. 21+ only. Play responsibly.
For Filipino players 21 years old and above · PAGCOR-Regulated · DPA Compliant