6ph Privacy Policy

The data controller responsible for the personal information processed through the 6ph platform (accessible at 6ph.bio) is the operator of 6ph, a PAGCOR-regulated online gaming entity operating in the Philippines. References to "6ph," "we," "us," or "our" throughout this Privacy Policy refer to the 6ph platform operator in its capacity as data controller.

6ph has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. Queries relating to this Privacy Policy or the exercise of your data subject rights may be directed to the DPO via [email protected].

When you create a 6ph account, we collect the following categories of personal data:

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — 6ph requires users to be 21 years of age or older)
• Residential address in the Philippines (province, city/municipality, barangay, ZIP code)
• Mobile number registered in your name
• Email address
• Chosen username and encrypted password

To comply with PAGCOR licensing requirements and the Anti-Money Laundering Act (AMLA), we may request:

• Copy of government-issued photo identification (e.g., Philippine National ID, UMID, Passport, Driver's License, SSS ID)
• Proof of residential address (e.g., utility bill, barangay certificate)
• Selfie or liveness check for identity matching
• Source of funds documentation for higher-value transactions

We collect information related to your payment transactions, including GCash account numbers, Maya (PayMaya) account identifiers, bank account names and numbers (BPI, BDO, Metrobank), deposit and withdrawal amounts and dates, and transaction reference numbers. 6ph does not store full card numbers or CVV codes; these are processed entirely by our certified payment service providers.

We maintain records of all gaming activity conducted through your 6ph account, including game sessions, bet amounts and outcomes, bonus activations and wagering progress, and responsible gaming limit settings. These records are required by PAGCOR for regulatory audit purposes.

When you access 6ph, we automatically collect technical information including IP address, device type and operating system, browser type and version, pages visited and session duration, and geolocation data (country/region level) for fraud prevention purposes.

6ph collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, contact our support team, or update your account information
• Automatically — through your use of the 6ph platform, via server logs, session cookies, and device fingerprinting tools used for fraud prevention and platform security
• From payment processors — transaction confirmation data from GCash, Maya, and banking partners required to reconcile deposits and process withdrawals
• From third-party identity verification services — where automated KYC tools are used to verify the authenticity of submitted identity documents

6ph processes your personal data under the following legal bases as recognised by the Data Privacy Act of 2012:

• Contractual necessity — processing is necessary to fulfil the 6ph Terms and Conditions you agreed to upon registration, including operating your account, processing transactions, and delivering gaming services
• Legal obligation — processing is required to comply with PAGCOR regulatory requirements, AMLA obligations, and other applicable Philippine laws
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights
• Consent — for any processing activities beyond those above, such as optional marketing communications, where you have provided explicit, informed consent that may be withdrawn at any time

6ph uses your personal data for the following purposes:

• To create and manage your 6ph account
• To verify your identity and age (21+ requirement) as mandated by PAGCOR
• To process deposits, withdrawals, and gaming transactions
• To provide customer support and respond to your enquiries
• To detect and prevent fraud, money laundering, and prohibited activities
• To monitor compliance with our Terms and Conditions and PAGCOR regulations
• To administer responsible gaming tools including deposit limits, loss limits, and self-exclusion
• To send transactional communications such as deposit confirmations, withdrawal notifications, and security alerts
• To comply with mandatory reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC)
• To improve and optimise the 6ph platform through aggregated, anonymised usage analytics
• To send promotional communications where you have provided explicit consent (you may opt out at any time)

6ph does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances:

6ph is legally obligated to share data with PAGCOR as our licensing authority, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other Philippine government authority in response to a lawful order or regulatory requirement.

To process your deposits and withdrawals, 6ph shares necessary financial identifiers with our certified payment service providers (GCash/GXI, Maya Philippines, BPI, BDO, Metrobank). These providers are contractually bound to process data solely for the purpose of completing your transactions.

For KYC compliance, identity document images and biometric data may be processed by certified third-party identity verification services. These providers operate under data processing agreements compliant with Philippine law and are prohibited from using your data for any purpose other than identity verification for 6ph.

Game providers (such as JILI Games, PG Soft, Evolution) receive session tokens and anonymised user identifiers sufficient to operate game sessions. They do not receive your full name, contact details, or financial information.

6ph uses the following categories of cookies:

• Essential cookies — required for the platform to function, including session authentication, CSRF protection, and load balancing. These cannot be disabled.
• Performance cookies — anonymous aggregated data on page load times and error rates used to improve platform reliability. No personal data is collected.
• Security cookies — device fingerprinting and fraud prevention signals that help 6ph identify suspicious access patterns.

6ph does not use third-party advertising cookies or behavioural tracking pixels. You may manage cookie preferences through your browser settings, though disabling essential cookies will prevent you from logging in to your 6ph account.

6ph implements technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS 1.2+ encryption for all data in transit between user devices and 6ph servers
• AES-256 encryption for sensitive data at rest, including ID documents and payment identifiers
• Access controls limiting staff access to personal data on a strict need-to-know basis
• Regular vulnerability assessments and penetration testing of the 6ph platform
• Incident response procedures to detect, contain, and notify affected users of data breaches within 72 hours, as required by NPC guidelines

Notwithstanding these measures, no internet transmission is completely secure. Users are responsible for maintaining the security of their own 6ph login credentials and should notify 6ph immediately if they suspect unauthorised access to their account.

6ph retains personal data for the following periods, or longer where required by applicable law:

• Account and identity data: Retained for the duration of the account plus 5 years following account closure, as required by PAGCOR and AMLA record-keeping obligations.
• Transaction and gaming records: Retained for 5 years from the date of the transaction, in compliance with PAGCOR audit requirements.
• KYC documents: Retained for 5 years following the termination of the business relationship, as required by the AMLA.
• Support communications: Retained for 2 years from the date of the communication.
• Technical logs: Retained for 90 days for security monitoring purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with 6ph's data disposal procedures.

Under the Data Privacy Act of 2012 (R.A. 10173), you have the following rights with respect to your personal data processed by 6ph:

To exercise any of your data subject rights, submit a written request to the 6ph Data Protection Officer at [email protected]. 6ph will respond within 15 business days of receiving a verifiable request.

The 6ph platform is strictly prohibited for use by individuals under 21 years of age. 6ph does not knowingly collect personal data from persons under 21. If 6ph discovers that personal data has been submitted by a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any deposits will be refunded in accordance with PAGCOR responsible gaming requirements.

If you are a parent or guardian and believe a minor in your care has registered on 6ph, please contact [email protected] immediately.

6ph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or PAGCOR requirements. Material changes will be communicated to registered users via the 6ph platform or registered email address at least 14 days before taking effect.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was most recently revised. Your continued use of the 6ph platform after the effective date of any change constitutes your acknowledgment of the revised Policy.

For all privacy-related enquiries, data subject rights requests, or to reach the 6ph Data Protection Officer:

• Email: [email protected] (plain text — not a mailto link)
• Subject line: "Data Privacy Request – [Your Account Username]"
• Live Chat: Available inside the 6ph platform 24 hours a day
• Response time: Within 15 business days for formal data subject requests

This Privacy Policy is governed by the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (R.A. 10173) and its Implementing Rules and Regulations. Any disputes shall be resolved in accordance with Philippine law and the jurisdiction of Philippine courts.