56ph Privacy Policy

56ph operates the online gaming platform accessible at 56ph.asia, including all associated subdomains, mobile web interfaces, and APIs. This Privacy Policy applies to all personal data processed in connection with your use of any part of the 56ph platform, whether you are a registered player, a visitor browsing without an account, or a person who contacts our support team.

By accessing the 56ph platform, creating a Player Account, or otherwise providing personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact our support team to close your account.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal information is the company operating the 56ph platform under the PAGCOR regulatory framework. The controller determines the purposes and means of processing personal data collected through the 56ph platform.

References to "56ph," "we," "us," or "our" in this Privacy Policy refer to this data controller. If you have questions about how your data is handled or wish to exercise any of your rights, please use the contact details provided in Section 14 of this Policy.

56ph collects personal data in several ways: directly from you when you register or use the platform, automatically through your device and browser, and from third-party verification and payment service providers. The categories of data we collect include:

We do not collect or store full payment card numbers, full bank account numbers, or CVV codes. Payment processing for GCash and Maya is handled through the respective payment providers' secure environments — 56ph receives only confirmation tokens and masked account identifiers.

56ph processes personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your 56ph Player Account; authenticating your identity at login; managing password resets and two-factor authentication via SMS OTP.
• Service Delivery: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, and Metrobank; crediting winnings to your wallet; fulfilling bonus and promotional entitlements.
• Legal & Regulatory Compliance: Completing PAGCOR-required KYC identity verification; meeting Anti-Money Laundering Act (AMLA) obligations; retaining transaction records for the legally required period; responding to lawful requests from PAGCOR, the AMLC, the NPC, and other competent Philippine authorities.
• Responsible Gaming: Monitoring gaming patterns for signs of potential problem gambling; enforcing deposit limits and self-exclusion requests; verifying that account holders meet the 21-year minimum age requirement.
• Fraud Prevention & Security: Detecting and investigating suspicious account activity, fraudulent deposits or chargebacks, multi-accounting, and other security incidents.
• Customer Support: Responding to your inquiries, resolving account disputes, and maintaining support ticket records for quality assurance.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve game selection, website performance, and mobile experience — particularly on Android and iOS devices commonly used by Filipino players.
• Marketing Communications: Sending promotional offers and platform news to your registered mobile number, where you have consented to receive such communications. You may withdraw consent at any time via account settings or by contacting support.

Under the Data Privacy Act of 2012, 56ph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the 56ph Terms & Conditions — including account creation, game access, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine law.
• Consent: Processing for marketing communications and optional platform features, where you have provided freely given, informed, specific consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
• Legitimate Interests: Processing for fraud detection, security monitoring, platform performance analytics, and responsible gaming oversight — where these interests do not override your fundamental data privacy rights.

56ph does not sell, rent, or trade your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for each purpose:

• Payment Service Providers: GCash (GXI), Maya Philippines, BPI, BDO, and Metrobank receive limited transaction data necessary to process deposits and withdrawals. Each provider operates under its own Privacy Policy and applicable Philippine financial regulations.
• Game Providers: Third-party game providers (e.g., JILI, Pragmatic Play, PG Soft) may receive a pseudonymous player identifier and session data necessary to deliver and audit game results. They do not receive your name, mobile number, or payment details.
• KYC Verification Partners: Identity documents submitted for KYC are processed by our verification partner(s) operating under strict data processing agreements and Philippine law requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent Philippine government authorities as required by law or upon issuance of a lawful order.
• Technology Infrastructure: Cloud hosting and server infrastructure providers operating under data processing agreements that require compliance with the Data Privacy Act of 2012.

56ph retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law. The following retention periods apply:

• Account & Registration Data: Retained for the duration of your active account plus five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• KYC / Identity Documents: Retained for a minimum of five (5) years from the date of submission, in accordance with AMLA implementing rules applicable to covered persons including licensed online gaming operators.
• Financial Transaction Records: Retained for five (5) years from the date of each transaction, consistent with AMLA and BIR requirements.
• Gaming Activity Logs: Retained for three (3) years for dispute resolution purposes, and in anonymized aggregated form beyond that period for platform analytics.
• Customer Support Records: Retained for two (2) years from the closure of each support ticket or inquiry.
• Self-Exclusion Records: Retained permanently to prevent circumvention of self-exclusion by re-registration under the same or different details, as required by PAGCOR responsible gaming standards.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data cannot be fully deleted due to backup architecture, it is quarantined from active systems and deleted at the next scheduled backup cycle.

56ph implements technical and organizational security measures appropriate to the sensitivity of the data we process. These measures include, but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and 56ph servers is encrypted using industry-standard TLS 1.2 or higher. The padlock icon in your browser confirms encryption is active.
• Password Hashing: Account passwords are stored using a one-way cryptographic hash function. 56ph staff cannot read your password; if lost, it must be reset, not retrieved.
• Two-Factor Authentication (2FA): SMS OTP two-factor authentication is available for all accounts and is strongly recommended, particularly for accounts with significant wallet balances.
• Access Controls: Access to personal data within 56ph's systems is restricted on a need-to-know basis. Staff with access to personal data are subject to contractual confidentiality obligations.
• Intrusion Detection & Monitoring: 56ph's security infrastructure includes real-time monitoring, automated intrusion detection, and regular security assessments of the platform.
• Data Isolation: Player funds data and personally identifiable information are stored in logically isolated systems with separate access controls to minimize the impact of any potential security incident.

The 56ph platform uses cookies and similar tracking technologies to operate certain features and improve your experience. Cookies are small text files stored on your device by your browser at our request.

• Strictly Necessary Cookies: Required for the platform to function, including session authentication, account security tokens, and player wallet state. These cannot be disabled without breaking core platform functions.
• Analytics Cookies: Used to understand how Filipino players navigate the platform — which game categories are most visited, average session durations, error rates. Data is processed in aggregated, anonymized form.
• Preference Cookies: Store your language preference, display settings, and responsible gaming notification configurations between sessions.

You can control cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to log in or play games, but may reduce the personalization of certain platform features. Note that strictly necessary cookies cannot be opted out of without logging out of your account.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to the personal data 56ph holds about you. To exercise any of these rights, contact us using the details in Section 14:

We will respond to all data subject requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day period. Requests may require identity verification before processing to prevent unauthorized access to another person's data.

The 56ph platform is strictly prohibited to persons under 21 years of age, in compliance with PAGCOR regulations governing casino-style online gaming in the Philippines. We do not knowingly collect or process personal data from individuals under 21.

If we become aware that personal data has been submitted by a person under the age of 21 — through our own detection or a report from a parent, guardian, or third party — we will take the following steps immediately:

• Suspend the account and restrict access to all platform services
• Delete all personal data associated with the account within a reasonable timeframe, subject to any legal hold requirements
• Report the matter to PAGCOR as required under our licensing conditions

56ph primarily processes and stores personal data within the Philippines. Where personal data is transferred to service providers operating data centers or processing facilities outside the Philippines — such as cloud infrastructure providers or game platform vendors — we ensure that:

• The transfer is governed by a data processing agreement that imposes data protection obligations at least equivalent to those under the Data Privacy Act of 2012
• The recipient jurisdiction provides adequate data protection, or appropriate safeguards are in place in the absence of an adequacy determination
• The transfer is reported to the National Privacy Commission as required under applicable NPC issuances

Game session data processed by third-party game providers may transit through servers in their operating jurisdictions. In all such cases, the game provider receives only a pseudonymous player identifier and game-specific session data — not your name, mobile number, or payment details.

56ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, new PAGCOR or NPC requirements, or other regulatory developments affecting Filipino players.

Material changes — those that significantly affect how we collect, use, or share your personal data — will be communicated to registered players via SMS to the registered mobile number at least seven (7) days before the effective date. Non-material corrections or clarifications may be published without advance notice.

The effective date at the top of this Policy will always reflect when it was last updated. We encourage you to review this page periodically. Continued use of the 56ph platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

For any questions, concerns, or formal requests related to your personal data and 56ph's privacy practices, please contact our Data Protection Officer (DPO) or general support team through the following channels:

If you are not satisfied with our response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for enforcing the Data Privacy Act of 2012 and overseeing data privacy rights of Filipino citizens and residents.