Privacy Policy

This Privacy Policy ("Policy") describes how 689ph ("we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "the Player") who access or use the 689ph online gaming platform available at 689ph.org, including all associated websites, mobile-browser interfaces, applications, and services (collectively, the "Platform").

689ph is committed to safeguarding the privacy of every Filipino player on our platform. We process personal data lawfully, fairly, and transparently, collecting only what is necessary for the purposes described in this Policy, and retaining it only for as long as those purposes require or as mandated by Philippine law.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy. By registering an account with 689ph or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, the data controller responsible for personal data processed through the 689ph Platform is:

• Brand Name: 689ph
• Platform URL: 689ph.org
• Registered Office: Philippines
• Privacy Contact: [email protected] (subject line: "Privacy – [Your Request]")

All data rights requests, privacy complaints, and regulatory enquiries should be directed to the privacy contact address above. 689ph has appointed a Data Protection Officer (DPO) in accordance with the requirements of the National Privacy Commission (NPC) of the Philippines.

689ph collects personal data across the following categories. We collect only data that is adequate, relevant, and limited to what is necessary for the purposes described in Section 5.

• Full legal name, date of birth, and nationality
• Email address and mobile number (Philippine number)
• Username and encrypted password
• Residential address (city, province, Philippines)

• Government-issued identification documents (Passport, Driver's License, PhilSys ID, UMID, SSS ID, or Voter's ID)
• Facial verification data where required for identity confirmation
• Proof of address documentation
• Source of funds documentation where required by AML compliance procedures

• GCash or PayMaya mobile number linked to your account
• Bank account details (BPI, BDO, Metrobank) where provided for withdrawals
• Payment card details (last four digits and card type only; full card numbers are never stored by 689ph)
• Deposit and withdrawal transaction history, amounts, timestamps, and reference numbers

• Game session logs, wager amounts, win/loss records, and game history
• Bonus claims, wagering progress, and promotional participation records
• Sportsbook bet history, selections, and settlement records
• Responsible gaming tool settings, session duration records, and any self-exclusion or limit requests

• IP address and approximate geographic location derived therefrom
• Device type, operating system, browser type and version
• Session start and end times, pages visited, and click-path data
• Cookie identifiers and similar tracking technology data (see Section 8)

• Records of live chat conversations with 689ph support agents
• Email correspondence sent to or received from 689ph
• Feedback, complaint, and dispute records

689ph collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or update your account settings.
• Automatically through platform use — when you browse the 689ph platform, play games, or interact with any platform feature, technical data including IP address, device identifiers, and session data is collected automatically.
• From payment service providers — GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard transmit transaction confirmation data to 689ph in connection with your deposits and withdrawals.
• From identity verification services — third-party KYC and AML screening services may provide identity verification outcomes to 689ph as part of the onboarding and ongoing compliance process.
• From fraud prevention and security services — 689ph works with fraud detection services that may provide risk signals associated with device fingerprints or behavioural patterns.

689ph processes personal data for the following specific and legitimate purposes:

Under the Data Privacy Act of 2012 and its Implementing Rules, 689ph relies on the following legal bases for processing personal data:

• Performance of a Contract: Processing necessary to register your account, execute deposits and withdrawals, deliver gaming services, and fulfil our obligations under the Terms & Conditions.
• Legal Obligation: Processing required to comply with Philippine AML regulations, PAGCOR-context regulatory obligations, age verification requirements, and mandatory reporting duties.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving platform performance, where such interests are not overridden by your data protection rights.
• Consent: Where we send you direct marketing communications or deploy non-essential cookies, we rely on your explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

689ph does not sell, rent, or trade personal data to third parties for commercial purposes. We share personal data only in the following circumstances and only to the extent necessary:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These entities act as independent data controllers with their own privacy policies.
• KYC and AML Service Providers: Identity verification and anti-money laundering screening providers process KYC documentation on our behalf under contractual data processing agreements that require equivalent data protection standards to those observed by 689ph.
• Game Software Providers: Game providers whose titles are hosted on the 689ph platform may receive anonymised session and outcome data for RNG certification and game integrity purposes. Full personal identification data is not shared with game providers.
• IT Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers may process personal data as data processors under our instruction, subject to data processing agreements.
• Regulatory Authorities: 689ph may disclose personal data to the National Privacy Commission, Philippine law enforcement agencies, or other government bodies where required by law, court order, or legitimate regulatory instruction.
• Professional Advisers: Legal, accounting, or compliance advisers engaged by 689ph may access personal data on a strictly need-to-know basis under professional confidentiality obligations.

689ph uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device that allows the Platform to recognise your browser across sessions. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that maintain your logged-in state after a successful 689ph login, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Enable personalisation features such as remembering your language preference and game history display settings. These cookies improve your experience but are not essential to basic platform operation.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the Platform — which pages are visited, how long sessions last, and which game categories are most used. This data helps us improve the platform. Analytics cookies are deployed only with your consent.
• Security and Fraud Prevention: Device fingerprinting and behavioural analytics tools that help identify anomalous account activity, detect fraudulent access attempts, and protect your account.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the 689ph login from functioning correctly. For Chrome on Android — the most common browser used by Filipino players accessing 689ph — cookie settings are accessible via Settings → Privacy → Cookies.

689ph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer identify an individual.

689ph implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Layer Security: All data transmitted between your device and 689ph is encrypted using TLS 1.3 with 256-bit encryption, regardless of whether you access the platform via mobile data or Wi-Fi.
• Data Encryption at Rest: Personal and financial data stored in 689ph databases is encrypted at rest using AES-256 encryption. Passwords are hashed using industry-standard one-way hashing algorithms and are never stored in recoverable form.
• Access Controls: Access to personal data within 689ph is restricted on a strict need-to-know basis. Internal access is controlled by role-based permissions, and all internal access to sensitive data is logged and auditable.
• Two-Factor Authentication: 689ph offers 2FA for all player accounts and mandates it for all internal staff accounts with access to player data systems.
• Regular Security Audits: The 689ph platform undergoes regular independent security assessments, penetration testing, and vulnerability scanning.
• Incident Response: 689ph maintains a data breach response procedure. In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, we will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected players without undue delay where required.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 689ph:

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request – [Your Request Type]". We will acknowledge your request within 72 hours and respond substantively within the timeframe required by the NPC — typically not more than 15 business days. In complex cases, this period may be extended by an additional 15 business days with prior notification to you.

The 689ph platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process at 689ph, and any account found to belong to an individual under 21 will be immediately suspended.

If you believe that 689ph has inadvertently collected personal data from a person under 21, please contact us immediately at [email protected]. Upon confirmation, we will take prompt steps to delete the personal data in question and close the associated account.

Where the operation of the 689ph platform requires personal data to be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international payment processors — 689ph ensures that such transfers comply with the cross-border transfer provisions of the Data Privacy Act of 2012 and any applicable NPC guidelines.

Specifically, 689ph will only transfer personal data internationally where:

• The recipient country or organisation provides an adequate level of data protection as recognised under Philippine law; or
• Appropriate safeguards are in place, such as contractual clauses requiring the recipient to maintain data protection standards equivalent to those of the Data Privacy Act; or
• The transfer is necessary for the performance of a contract to which you are a party (for example, processing an international card payment).

The 689ph platform does not contain links to external third-party websites as a matter of policy. However, to the extent that any third-party services are integrated into the platform (for example, payment gateway interfaces rendered within the 689ph checkout flow), those third-party services operate under their own privacy policies and data processing practices.

689ph is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any external services you interact with in connection with using the 689ph platform, such as GCash or your bank's online banking portal.

689ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law, or guidance issued by the National Privacy Commission. Material updates will be communicated to registered players via the email address on file at least seven (7) days before the changes take effect, and by a prominent notice on the 689ph platform.

The version number and effective date displayed at the top of this Policy indicate when it was last updated. The current version is always accessible at 689ph.org/privacy-policy. Your continued use of the 689ph platform following the effective date of an updated Policy constitutes your acknowledgment of the updated terms.

For all privacy-related enquiries, data rights requests, or concerns about how 689ph processes your personal data, please contact our Data Protection Officer:

• Email: [email protected] (subject line: "Privacy – [Your Request]")
• Live Chat: Available 24/7 on the 689ph platform — ask to speak with the Privacy team
• Response Timeframe: Acknowledgement within 72 hours; substantive response within 15 business days

If you are not satisfied with how 689ph has responded to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012. Information on filing a complaint with the NPC is available through the NPC's official channels.