680ph Privacy
Policy

1.1  The Data Controller responsible for your personal data is 680ph, the online casino and gaming platform accessible at https://680ph.club, operating under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR).

1.2  In this Privacy Policy, references to "680ph," "we," "us," or "our" refer to the Data Controller. References to "you," "your," or "the Player" refer to any natural person whose personal data is processed by 680ph in the course of providing its online gaming services.

1.3  680ph has designated a Data Protection Officer (DPO) as required by the Data Privacy Act of 2012 and National Privacy Commission (NPC) issuances. The DPO can be contacted at [email protected] with the subject line "DPO — Data Privacy Inquiry."

2.1  680ph collects the following categories of personal data:

2.2  680ph does not collect sensitive personal information as defined under Section 3(l) of R.A. 10173 (such as health or medical records, political affiliation, or sexual orientation) unless specifically required by applicable law or PAGCOR regulations and with your explicit consent.

2.3  680ph does not knowingly collect personal data from individuals under 21 years of age. Where an Account is found to belong to a person below the minimum legal gambling age, all data associated with that account will be securely deleted following closure of the account, subject to any mandatory retention obligations under PAGCOR or AMLA regulations.

3.1  680ph collects personal data through the following channels:

• Account Registration: You provide Identity Data and Contact Data directly when you sign up for a 680ph account on the Platform.
• KYC Verification: You provide government-issued ID documents when completing identity verification prior to your first withdrawal.
• Deposits and Withdrawals: Financial Data is collected when you fund your Wallet or request a payout using GCash, Maya, BPI, BDO, Metrobank, or other supported payment methods.
• Platform Use: Gaming Activity Data and Technical Data are generated automatically when you log in to 680ph and use its services.
• Support Interactions: Communications Data is collected when you contact 680ph Support via live chat, email, or any other channel.
• Cookies and Similar Technologies: Certain Technical Data and Preferences Data are collected via cookies placed on your browser or device. See Section 8 for full details.

3.2  680ph does not purchase personal data from data brokers or other third-party data aggregators for the purpose of building player profiles.

4.1  680ph processes your personal data only for specific, legitimate purposes. Each processing activity has an identified legal basis under R.A. 10173:

4.2  Where processing is based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You may withdraw marketing consent via the Notification Preferences section of your account settings or by contacting [email protected].

5.1  680ph does not sell or trade your personal data. We may share your data only in the following circumstances:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), and partner banks (BPI, BDO, Metrobank) receive the minimum financial data necessary to process your transactions. These entities are subject to their own data protection obligations under Philippine law.
• Game Studio Providers: Third-party game studios whose products appear in the 680ph lobby may receive technical session data necessary to operate games. They do not receive your identity or financial data and are bound by data processing agreements.
• PAGCOR: As our licensing authority, PAGCOR may require 680ph to submit player data for regulatory compliance purposes, including AML investigations, responsible gaming compliance audits, and license renewal reviews.
• Anti-Money Laundering Council (AMLC): Under the Anti-Money Laundering Act (R.A. 9160, as amended), 680ph is a covered person obligated to report covered and suspicious transactions to the AMLC. This reporting may include personal and financial data.
• Law Enforcement and Courts: 680ph will disclose personal data to law enforcement, courts, or other government bodies where required by valid legal process, court order, or as otherwise required by Philippine law.
• Service Providers: Third-party providers supplying technical infrastructure, cybersecurity services, fraud detection tools, or customer support platforms access data strictly to provide those contracted services under data processing agreements requiring GDPR-equivalent protections.

5.2  In all cases of data sharing, 680ph limits disclosure to the minimum data necessary for the stated purpose and requires all third parties to maintain confidentiality and comply with applicable Philippine data protection law.

6.1  680ph retains your personal data for as long as it is necessary for the purposes for which it was collected, subject to any longer retention required by law. The principal retention periods applicable to 680ph data are:

6.2  Upon expiry of applicable retention periods, data is securely deleted or anonymized in accordance with 680ph's internal data lifecycle management procedures.

7.1  680ph implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Current security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 680ph servers;
• AES-256 encryption for data stored at rest in our databases, including account credentials and KYC documents;
• OTP-based two-factor authentication for player account access and sensitive account actions;
• One-way cryptographic hashing (bcrypt) for password storage — your actual password is never stored in readable form;
• Role-based access controls limiting internal staff access to personal data strictly to job functions that require it;
• Regular independent penetration testing and vulnerability assessments of the platform and supporting infrastructure;
• Automated anomaly detection systems monitoring for unusual login patterns, payment behavior, and API activity;
• Physical and logical data center security measures at all hosting facilities.

7.2  While 680ph maintains robust security controls, no online system is entirely immune to risk. You play a critical role in your own data security — please see the account security provisions in our Terms & Conditions for your responsibilities regarding credential management.

7.3  In the event of a personal data breach that poses a significant risk of harm to affected players, 680ph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

8.1  680ph uses cookies and similar local storage technologies to operate the platform and improve your experience. The following types of cookies may be placed on your device:

8.2  680ph does not place third-party advertising cookies or permit advertising networks to track your behavior across unrelated websites via cookies placed during your 680ph session.

8.3  You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will impair your ability to use 680ph services.

9.1  As a data subject under R.A. 10173, you have the following rights with respect to your personal data held by 680ph:

9.2  To exercise any of these rights, submit a written request to 680ph at [email protected] with the subject line "Data Rights Request — [Right Type]." Include your full registered name and registered mobile number for identity verification. 680ph will respond within 15 business days of receipt.

10.1  680ph's services are strictly restricted to individuals aged 21 years and above as required by PAGCOR and Philippine law. 680ph does not knowingly collect personal data from any person under the age of 21.

10.2  Age is verified during the KYC process using government-issued Philippine identification. Any Account found during or after registration to belong to a person under 21 will be immediately suspended, the matter reported to PAGCOR, and all personal data associated with the account deleted or anonymized upon completion of any mandatory retention period under applicable law.

10.3  If you are a parent or legal guardian and you believe that a minor has provided personal data to 680ph or has registered an account, please contact us immediately at [email protected]. We will take prompt action to investigate and remedy the situation.

11.1  680ph's primary data processing infrastructure is hosted in data centers within the Asia-Pacific region. In the course of providing services, certain personal data may be transferred to or accessible from locations outside the Philippines — specifically in connection with third-party game studio providers, cybersecurity services, and cloud infrastructure partners.

11.2  Where personal data is transferred outside the Philippines, 680ph ensures that appropriate safeguards are in place consistent with Section 21 of R.A. 10173 and NPC Circular No. 16-01. Safeguards include contractual clauses requiring the receiving party to maintain data protection standards equivalent to those required under Philippine law.

11.3  680ph does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing compensating controls such as data processing agreements containing standard contractual clauses approved by the NPC.

12.1  680ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes — those that significantly affect how we use your personal data or your rights — will be communicated via SMS to your registered Philippine mobile number no less than 7 calendar days before the updated Policy takes effect.

12.2  Non-material changes (such as clarifications, corrections of typographical errors, or structural reformatting that does not alter substance) may be made without prior individual notice, and the updated effective date at the top of this document will be updated accordingly.

12.3  The current version of this Privacy Policy is always available at https://680ph.club/privacy-policy. We recommend reviewing this page periodically. Continued use of 680ph services after the effective date of a revised Policy constitutes your acceptance of the revised terms.

13.1  For any privacy-related inquiry, data rights request, complaint, or concern, please contact 680ph's Data Protection Officer using the contact details below. All privacy correspondence is treated as confidential.

13.2  If you are not satisfied with 680ph's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC can be reached through its official government channels. 680ph cooperates fully with NPC investigations and inquiries.

13.3  Email addresses in this Policy are displayed as plain text only and are not clickable links. This is an intentional security measure. Do not act on any unsolicited email purporting to be from 680ph that you did not initiate. Phishing attempts impersonating 680ph should be reported to [email protected] immediately.