Privacy Policy
56ph Online Gaming Platform

56ph ("we," "us," "our," or "the Platform") operates the online gaming platform accessible at 56ph.win. This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information that we receive from users ("you," "your") who visit, register on, or otherwise interact with the 56ph Platform.

This Policy applies to all personal information processed by 56ph in connection with the Platform, including information collected through the website at 56ph.win, any mobile-optimized version of the Platform, and all communications between you and 56ph (including live chat, email, and SMS). It does not apply to third-party websites, applications, or services that may be linked from our Platform, each of which operates under its own privacy practices.

By registering a 56ph account or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal information as described herein. If you do not agree with this Policy, please do not register or continue to use the Platform.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for your personal information is 56ph, the operator of the gaming platform at 56ph.win.

As data controller, 56ph determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with Applicable Law.

Questions regarding this Privacy Policy or 56ph's data processing practices may be directed to our Data Protection contact, reachable via the contact information provided in Section 17 of this Policy.

56ph collects the following categories of personal information from users of the Platform:

• Philippine mobile number (primary account identifier);
• Date of birth (for age verification — minimum 21 years required);
• Username (if created separately from mobile number);
• Password (stored in encrypted form; never accessible in plaintext by 56ph staff).

• Government-issued photo identification (e.g., Philippine passport, driver's license, SSS ID, UMID, PhilHealth ID, Voter's ID);
• Proof of address (utility bill, bank statement, or other document issued within 3 months);
• Selfie photograph with identification document (required for enhanced verification at certain withdrawal thresholds);
• Tax Identification Number (TIN) where required by applicable Philippine taxation or AML regulations.

• GCash wallet account details (mobile number associated with GCash);
• Maya wallet account details;
• Philippine bank account details (account name, account number, bank name — for BPI, BDO, Metrobank, UnionBank, and other supported banks);
• Visa / Mastercard card details (card number, expiry date — stored via PCI-DSS compliant payment processor; full card details are not stored by 56ph directly);
• Transaction history: all deposit and withdrawal records, amounts, timestamps, and payment method used.

• Game play history: games played, bet amounts, outcomes, session durations, and timestamps;
• Bonus and promotion usage history;
• Responsible gaming tool settings and self-exclusion records;
• Customer support interactions and correspondence.

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Mobile network carrier (Globe, Smart, DITO, etc.);
• Platform session tokens, login timestamps, and session duration data;
• Cookies and similar tracking technologies (see Section 7).

• Live chat transcripts with 56ph support staff;
• Email correspondence with 56ph;
• SMS messages sent to your registered mobile number (OTPs, alerts, promotional messages where consent has been given).

56ph collects personal information through the following means:

• Directly from you — when you register a 56ph account, complete identity verification, make deposits or withdrawals, contact customer support, respond to surveys, or participate in promotions;
• Automatically — through your use of the Platform, via cookies, session tracking, server logs, and device fingerprinting technologies that record your interactions with the Platform;
• From payment providers — GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other payment processors confirm transaction status and, where required, provide account-holder verification data to 56ph;
• From identity verification partners — where 56ph uses third-party identity verification services to authenticate government-issued identification documents submitted by users;
• From publicly available sources — where permitted under Applicable Law, 56ph may supplement user account information with data from publicly available sources for the purpose of fraud prevention and regulatory compliance.

56ph processes your personal information for the following specific purposes:

56ph does not use your personal information for purposes incompatible with those listed above without first obtaining your explicit consent or establishing a new lawful basis for such processing.

56ph processes your personal information under one or more of the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing required to perform the contract between you and 56ph, including account management, gaming services, payment processing, and customer support;
• Legal obligation — processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, anti-money laundering regulations, taxation obligations, and mandatory identity verification requirements;
• Legitimate interests — processing necessary for 56ph's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your fundamental rights and freedoms;
• Consent — processing based on your explicit, freely given, and specific consent, including for marketing communications and certain optional data collection activities. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

56ph uses cookies and similar tracking technologies (including local storage, session tokens, and device fingerprinting) to operate the Platform, improve user experience, maintain session security, and gather aggregate usage analytics. Cookies are small text files stored on your device by your browser when you access the Platform.

• Strictly necessary cookies — essential for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. The Platform cannot function correctly without these and they do not require consent;
• Functional cookies — remember your preferences such as language settings, game lobby view preferences, and "Remember me" login state. These improve your experience but are not strictly required;
• Analytics cookies — collect anonymized data about how users interact with the Platform (pages visited, time on site, navigation paths). This data is used to improve Platform design and performance. These cookies require consent;
• Security cookies — used to detect and prevent fraudulent activity, unauthorized account access, and bot traffic on the Platform.

You may configure your browser to block or delete cookies. However, blocking strictly necessary cookies will prevent the Platform from functioning correctly and may make it impossible to log in or complete transactions. Most browsers allow you to manage cookie preferences through their settings menus.

56ph does not sell, rent, or trade your personal information to any third party for their own marketing purposes. We share your personal information only in the following circumstances:

56ph engages carefully selected third-party service providers to support Platform operations, including payment processors (GCash, Maya, BPI, BDO, and others), identity verification service providers, cloud hosting providers, analytics platform operators, customer support software providers, and cybersecurity service providers. These providers process your data solely on 56ph's behalf and are contractually bound to handle it in accordance with this Privacy Policy and Applicable Law.

Game-specific session data — including bet amounts, game outcomes, and session identifiers — may be transmitted to 56ph's licensed gaming software providers (JILI, Pragmatic Play, PG Soft, Spadegaming, and others) for the purpose of operating game engines and maintaining game audit logs. These providers are internationally licensed and process this data under their own licensing obligations.

56ph will disclose your personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), Philippine law enforcement agencies, or other competent authorities where: (a) required by Applicable Law; (b) compelled by valid court order or government directive; (c) necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity; or (d) required to enforce 56ph's legal rights.

In the event of a merger, acquisition, asset sale, or other corporate restructuring affecting 56ph, your personal information may be transferred to the acquiring entity as part of that transaction, subject to the continuing application of privacy protections at least equivalent to those described in this Policy.

The operation of the 56ph Platform may involve the transfer of certain personal information to service providers and technology partners located outside the Republic of the Philippines. Such transfers may occur, for example, when gaming software providers process session data on servers located in Malta, Gibraltar, or other gaming-regulated jurisdictions, or when cloud infrastructure services store backup data in regional data centers.

Where personal information is transferred outside the Philippines, 56ph takes appropriate safeguards to ensure that your data receives an equivalent level of protection to that afforded under the Philippine Data Privacy Act of 2012. Safeguards used include contractual data processing agreements incorporating standard data protection clauses, transfers to jurisdictions recognized by the National Privacy Commission as providing adequate protection, and the application of technical and organizational security measures appropriate to the transfer risk.

56ph retains your personal information for the period necessary to fulfill the purposes described in this Policy and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account registration and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations under Philippine law;
• Transaction records (deposits and withdrawals): Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC and BIR requirements;
• Gaming activity records: Retained for a minimum of three (3) years from the date of each session for dispute resolution and responsible gaming monitoring purposes;
• Customer support correspondence: Retained for a minimum of two (2) years from the date of each interaction;
• Marketing consent records: Retained for the duration of consent plus three (3) years to evidence compliance with consent obligations;
• Technical and security logs: Retained for a minimum of twelve (12) months for fraud investigation and platform security purposes.

Upon expiry of the applicable retention period, personal information is securely deleted or anonymized using industry-standard data destruction methods, unless longer retention is required by a specific regulatory authority instruction or ongoing legal proceeding.

56ph implements technical and organizational security measures designed to protect your personal information against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 56ph Platform servers;
• Encryption at rest for sensitive personal data including identity documents, financial account details, and password hashes stored in 56ph databases;
• Password hashing using industry-standard one-way hashing algorithms — plaintext passwords are never stored or accessible;
• Access controls limiting access to personal information to 56ph personnel and contractors with a specific operational need, enforced via role-based access control and multi-factor authentication for administrative systems;
• Network security including firewalls, intrusion detection systems, and regular security audits;
• PCI-DSS compliant payment processing for Visa and Mastercard transactions — card data is processed and stored by certified payment processors, not directly by 56ph;
• Incident response procedures for detecting, containing, and reporting personal data breaches in accordance with the National Privacy Commission's breach notification requirements.

While 56ph implements reasonable security measures, no online system can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying 56ph immediately if you suspect unauthorized access to your account.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by 56ph:

To exercise any of the above rights, contact 56ph's Data Protection contact via the details in Section 17. 56ph will respond to rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days with written notice to you.

Certain rights are subject to limitations under Applicable Law. For example, the right to erasure does not override 56ph's legal obligation to retain records for anti-money laundering and tax compliance purposes. Where a right cannot be exercised in full, 56ph will explain the applicable limitation.

If 56ph becomes aware that personal information has been collected from an individual under the age of 21 — through misrepresentation of date of birth or any other means — 56ph will take immediate steps to delete all personal information associated with that individual's account and close the account without payout of any balance.

If you are aware of any individual under the age of 21 who may have registered on the 56ph Platform, please notify 56ph immediately via the contact information in Section 17.

With your consent, 56ph may send you marketing communications regarding new games, promotions, bonuses, and other 56ph Platform news via SMS to your registered Philippine mobile number. Marketing SMS messages are sent only where you have explicitly opted in during registration or through your Account Settings.

You may withdraw consent to receive marketing communications at any time by:

• Updating your notification preferences in your 56ph Account Settings;
• Replying STOP to any marketing SMS message;
• Contacting 56ph support via live chat or email and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect the lawfulness of processing conducted prior to withdrawal. Transactional messages — including deposit confirmations, withdrawal notifications, OTPs, security alerts, and responsible gaming notifications — are not marketing communications and will continue to be sent regardless of marketing opt-out status, as they are necessary for the operation of your 56ph account.

The 56ph Platform does not contain outbound links to third-party websites. However, third-party payment processors (GCash, Maya, BPI, BDO, etc.) that you interact with as part of the deposit and withdrawal process operate their own platforms, interfaces, and privacy policies. When you are redirected to or interact with a third-party payment interface, that interaction is governed by the third party's own privacy policy and terms of service, not by this Privacy Policy.

56ph encourages you to review the privacy policies of any third-party payment providers you use in connection with your 56ph account. 56ph has no control over and accepts no responsibility for the data practices of third-party services.

56ph reserves the right to update or modify this Privacy Policy at any time to reflect changes in Platform features, processing activities, legal requirements, or regulatory guidance. Where changes are material — meaning they affect the nature of data collected, the purposes for which it is used, or your rights as a data subject — 56ph will endeavor to notify registered users via SMS or a notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this document indicates the most recent revision. Your continued use of the Platform following publication of an updated Privacy Policy constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and request account closure in accordance with the Terms & Conditions.

Prior versions of this Privacy Policy are archived and available upon written request to 56ph's Data Protection contact.

For any questions, concerns, or requests relating to this Privacy Policy or 56ph's data processing practices — including to exercise your data subject rights under Section 12 — please contact 56ph through the following channels:

If you believe that 56ph has processed your personal information in violation of the Philippine Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. 56ph encourages you to first contact us directly so we may attempt to resolve the matter. However, your right to approach the NPC directly is unconditional and is not contingent on first raising the matter with 56ph.

Information about filing NPC complaints is publicly available on the National Privacy Commission's official website. 56ph does not publish a direct link to external websites from this page; the NPC may be reached through standard government directory resources.