Our Commitments to You
Six Things 678ph Promises About Your Privacy
Before you read the full policy, here are the six core commitments that shape how 678ph handles your personal information every single day.
We Only Collect What We Need
678ph does not collect personal data for the sake of it. Every piece of information we ask for has a specific, documented purpose — whether that's verifying your identity, processing a payment, or keeping your account secure. We don't hold on to data we no longer need.
We Never Sell Your Data
Your personal information is not a product. 678ph does not sell, rent, or trade your data to third-party marketers or advertising networks. The only parties who receive your information are those directly involved in delivering our services — payment processors, game providers, and regulatory authorities as required by law.
Bank-Grade Encryption
All data transmitted between your device and the 678ph platform is protected with 256-bit SSL encryption — the same standard used by major Philippine banks for their online portals. Sensitive data stored on 678ph servers is encrypted at rest using current industry standards.
You Control Your Data
As a 678ph player, you have the right to access the personal data we hold about you, request corrections, ask for deletion where legally permitted, and opt out of certain types of processing. These rights are real, actionable, and explained fully in this policy.
Compliant with Philippine Law
This Privacy Policy is written and maintained in compliance with Republic Act 10173, also known as the Data Privacy Act of 2012, and its implementing rules. 678ph is registered with the National Privacy Commission (NPC) and maintains a designated Data Protection Officer.
We'll Tell You If Something Changes
If there are any material changes to how 678ph processes your personal data, you will be notified through your registered email address or via an in-platform notification before the changes take effect. The date at the top of this policy always reflects the most recent update.
1. Who We Are
678ph (referred to in this policy as "678ph," "we," "our," or "us") is a licensed online gaming platform operating in the Philippines under a valid gaming licence issued by the applicable Philippine regulatory authority. The 678ph platform is accessible at 678ph.best and provides casino games, live dealer tables, slots, jackpot games, and sports betting services to registered players in the Philippines.
As the operator of the platform, 678ph is the data controller for all personal information collected through the registration process, account management, payment processing, and general platform use. This means 678ph is responsible for determining the purposes and means by which your personal data is processed.
For any questions or concerns about this Privacy Policy or how your data is handled by 678ph, you can contact our Data Protection Officer at privacy@678ph.best. Contact details are also provided at the end of this policy.
2. What Data We Collect
678ph collects different categories of personal data depending on how you interact with the platform. Below is a clear breakdown of what we collect and in which context.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, government ID number, nationality | Registration & KYC verification |
| Contact Data | Mobile number, email address | Registration |
| Financial Data | GCash/Maya account name, bank account details, transaction history | Deposits, withdrawals, KYC |
| Technical Data | IP address, device type, browser type, session timestamps | Platform use (automatic) |
| Gameplay Data | Games played, bet amounts, win/loss records, session durations | Active platform use |
| Communications Data | Live chat logs, email correspondence, support ticket history | Customer support interactions |
| Verification Documents | Copies of government IDs, proof of address documents, selfies | KYC process |
3. How We Collect Your Data
678ph collects personal data through the following channels:
3.1 Direct Collection
The majority of data we hold comes directly from you. This includes information you provide when creating your 678ph account, completing the KYC verification process, making deposit or withdrawal requests, contacting customer support, or participating in promotions. You choose what information to share, but some data is required for specific functions — for example, identity verification is required before large withdrawals can be processed.
3.2 Automatic Collection
When you use the 678ph platform, certain technical data is collected automatically. This includes your IP address, device identifiers, browser type and version, pages visited, time spent on the platform, and error logs. This data is collected primarily for platform security, fraud prevention, and to improve the user experience.
3.3 Third-Party Sources
In some cases, 678ph may receive personal data from third-party sources. For example, payment processors such as GCash or Maya may share transaction confirmation data, or identity verification service providers may return results of document checks. 678ph only uses such data in connection with the service or purpose for which it was originally obtained.
4. Why We Use Your Data
678ph uses the personal data it collects for the following clearly defined purposes:
- Account creation and management: To register your account, verify your identity, and maintain your player profile on the 678ph platform.
- Payment processing: To process deposits and withdrawals through your chosen payment method and maintain accurate transaction records.
- Regulatory compliance: To meet obligations under Philippine gaming regulations, anti-money laundering laws, and data protection requirements — including KYC verification and transaction monitoring.
- Platform security: To detect and prevent fraudulent activity, account takeovers, and violations of the 678ph Terms and Conditions.
- Customer support: To respond to your enquiries, resolve account issues, and maintain records of support interactions.
- Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply any self-exclusion or limit settings you have configured.
- Marketing communications: To send you information about promotions, bonuses, and platform updates — but only where you have given consent, and only through channels you have opted into.
- Platform improvement: To analyse usage data in aggregate form to improve the 678ph platform's performance, layout, and game offering.
5. Legal Basis for Processing
Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, every instance of personal data processing must have a lawful basis. The following bases apply to 678ph's processing activities:
- Contractual necessity: Processing required to fulfil the agreement between you and 678ph — including managing your account and processing payments.
- Legal obligation: Processing required to comply with Philippine gaming regulations, anti-money laundering laws, tax obligations, and data retention requirements.
- Legitimate interests: Processing conducted for fraud prevention, platform security, and general platform improvement, where these interests are not overridden by your privacy rights.
- Consent: Processing for marketing communications and non-essential cookies, where you have given clear and specific consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
6. Who We Share Your Data With
678ph does not sell your personal data. We share it only with parties who need access to provide the services that make the 678ph platform work. These include:
6.1 Payment Processors
Payment service providers — including GCash, Maya, GrabPay, InstaPay, and banking partners — receive only the transaction data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are bound by the same Philippine data protection laws.
6.2 Game Providers
Third-party game providers whose titles are available on 678ph — such as JILI Games, Pragmatic Play, Evolution Gaming, and PG Soft — may receive limited technical data (such as session tokens and bet records) necessary to deliver and audit game outcomes. These providers are contractually bound to use this data only for game delivery and compliance purposes.
6.3 Identity Verification Services
During KYC verification, 678ph may use third-party identity verification services to process and validate the documents you submit. These providers are contractually restricted from retaining or using your data beyond the verification purpose.
6.4 Regulatory and Law Enforcement Authorities
678ph will disclose personal data to Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or law enforcement agencies when required to do so by law, court order, or legitimate regulatory request.
6.5 Professional Advisers
In limited circumstances, 678ph may share personal data with legal counsel, auditors, or other professional advisers — for example, in the context of a legal dispute or compliance audit. Such sharing is limited to what is strictly necessary and is subject to professional confidentiality obligations.
7. Data Retention
678ph retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following general retention periods apply:
- Account data: Retained for the duration of your active 678ph account, plus a minimum of five (5) years after account closure, in accordance with Philippine anti-money laundering and gaming regulations.
- Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
- KYC documents: Retained for the duration of your account and for a minimum of five (5) years after closure. Copies of ID documents are stored securely and access is restricted to authorised personnel only.
- Communications records: Support chat logs and email correspondence are retained for up to three (3) years from the date of the interaction, unless a longer retention period is required due to an ongoing dispute or investigation.
- Technical and session data: Typically retained for up to twelve (12) months, after which it is either deleted or anonymised for analytical purposes.
Once the applicable retention period has passed, 678ph will securely delete or anonymise the data in accordance with its internal data lifecycle procedures.
8. International Data Transfers
Some of the third-party service providers that 678ph works with — including certain game providers and technical infrastructure partners — may process data outside of the Philippines. Where this occurs, 678ph ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with Philippine data protection requirements.
These safeguards may include contractual clauses requiring the receiving party to apply data protection standards equivalent to those in the Philippines, or reliance on the receiving country's adequacy of protection as assessed under applicable guidelines. 678ph does not transfer personal data internationally in a manner that exposes it to materially lower protections than those required under RA 10173.
9. Cookies and Tracking Technologies
The 678ph platform uses cookies and similar tracking technologies to enable essential platform functions, improve performance, and — where you have given consent — deliver relevant promotional content.
9.1 Essential Cookies
These cookies are required for the platform to function. They maintain your session state while you're logged in, remember your language or display preferences, and support security features like CSRF protection. You cannot opt out of essential cookies without disabling core platform functionality.
9.2 Analytics Cookies
678ph uses anonymised analytics data to understand how players use the platform — which pages are visited most, where players encounter difficulties, and how session flows can be improved. Analytics data does not identify individual players and is used solely for platform improvement purposes.
9.3 Marketing Cookies
Where you have given consent, 678ph may use cookies to measure the effectiveness of promotional campaigns and to personalise the promotions shown to you on the platform. You can withdraw consent for marketing cookies at any time through your account settings or by clearing your browser cookies.
10. Your Privacy Rights
As a data subject under Philippine law, you have a number of rights regarding the personal data that 678ph holds about you. These rights are real and exercisable — not just listed for appearances.
Your Rights Under RA 10173
What You Can Ask 678ph to Do With Your Data
These rights apply to all registered players on the 678ph platform. To exercise any of them, contact our Data Protection Officer at privacy@678ph.best.
Right to Access
Request a copy of the personal data 678ph holds about you, including what it is, why we have it, and who it has been shared with.
Right to Correction
Request that inaccurate or outdated personal data be corrected. For name or ID changes, supporting documentation will be required.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Right to Object
Object to processing carried out on the basis of legitimate interests, including direct marketing communications. Objections to marketing are always honoured immediately.
Right to Portability
Request your personal data in a structured, machine-readable format so that it can be transferred to another service provider where technically feasible.
Right to Complain
Lodge a complaint with the National Privacy Commission (NPC) if you believe 678ph has processed your personal data in violation of RA 10173.
Data Security
How 678ph Keeps Your Information Safe
Data security at 678ph is not a single feature — it's a set of layered controls applied across every part of how personal information is stored, accessed, and transmitted. The platform undergoes regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
Access to personal data within 678ph is restricted on a need-to-know basis. Only authorised staff whose roles require access to specific data categories are permitted to view it, and all access is logged and auditable. Staff who handle personal data receive regular training on data protection obligations and security practices.
In the event of a personal data breach that poses a risk to your rights and freedoms, 678ph will notify you and the National Privacy Commission within 72 hours of becoming aware of the incident — in line with the requirements of RA 10173. Notifications will include a clear explanation of what happened, what data was affected, and what steps 678ph is taking to address the situation.
11. Security Measures
678ph implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between players and the 678ph platform.
- Encryption of sensitive data stored on 678ph servers, including financial data and identity documents.
- Role-based access controls limiting staff access to personal data strictly to what their job function requires.
- Regular security audits, vulnerability assessments, and penetration testing of the platform infrastructure.
- Two-factor authentication available for all player accounts and required for administrative staff access.
- Automated transaction monitoring systems designed to detect unusual activity indicative of fraud or account compromise.
While 678ph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their 678ph account and to enable two-factor authentication.
12. Children's Privacy
The 678ph platform is strictly for individuals aged 21 and above in accordance with Philippine gaming regulations. 678ph does not knowingly collect personal data from anyone under the age of 21. If you believe a minor has registered an account on 678ph, please contact us immediately at privacy@678ph.best so we can take prompt action to close the account and delete any associated data.
Age verification is conducted during the registration process and reinforced during KYC. Any account found to belong to a person under 21 years of age will be immediately suspended, and all balances will be handled in accordance with applicable regulatory requirements.
13. Changes to This Privacy Policy
678ph reviews this Privacy Policy regularly and updates it when necessary to reflect changes in how the platform operates, changes in applicable law, or feedback from players and regulators. The date of the most recent update is always displayed at the top of this page.
Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — 678ph will notify you by email to your registered address and by an in-platform notification at least seven (7) days before the changes take effect. Your continued use of the 678ph platform after that notification period constitutes acceptance of the updated policy.
For minor updates — such as corrections to language, clarifications of existing practices, or contact detail changes — 678ph may update the policy immediately without advance notice. The updated date at the top of the page will always reflect when any change, major or minor, was last made.
14. Contact & Data Protection Officer
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a concern about how 678ph handles your personal information, you can reach us through the following channels:
- Data Protection Officer Email: privacy@678ph.best
- General Support Email: support@678ph.best
- Live Chat: Available 24/7 on the 678ph platform after logging in.
When submitting a data subject rights request, please include your registered email address or mobile number and a brief description of what you are requesting. 678ph aims to acknowledge all privacy-related requests within 72 hours and to fully resolve them within thirty (30) calendar days, which is the timeframe specified under RA 10173.
If you are not satisfied with 678ph's response to your privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the regulatory body responsible for enforcing RA 10173.
Privacy as a Foundation
Why Your Privacy Matters to 678ph Beyond Compliance
It would be easy to treat data protection as just another regulatory box to tick. 678ph takes a different view. The relationship between 678ph and every Filipino player is built on trust — trust that the platform plays fair, that payouts are processed correctly, and that personal information stays private.
When a player creates a 678ph account, they're sharing their name, their contact details, and their financial information. That's a meaningful act of trust, and 678ph takes the responsibility that comes with it seriously. Data protection isn't managed as an afterthought — it's embedded into how the platform is built, how staff are trained, and how third-party relationships are structured.
The 678ph team monitors developments in Philippine data protection law and gaming regulation closely, and this policy is updated whenever new requirements arise. Players don't need to chase us for updates — changes are communicated proactively because that's what a genuinely trustworthy platform does.
If something ever feels off — if you receive a communication that seems unusual, if you notice unexpected activity on your account, or if you have any doubt about how your data is being used — the 678ph support and privacy teams are available around the clock. Alagang-alaga kayo dito.
Your Data Is Protected — Now Come and Play on 678ph
678ph handles your personal information with care and transparency. Registration is free, deposits are instant via GCash or Maya, and over 500 casino games are ready when you are.
Must be 21 or older · Terms & Conditions · Responsible Gaming