456php Privacy Policy — Your Data, Protected Under Philippine Law

This Privacy Policy explains how 456php collects, uses, stores, shares, and protects the personal data of players who register and use the 456php online gaming platform at 456php.net. It is written to be understood by any Filipino player — not just lawyers — and we've tried to keep the language as plain and direct as possible.

456php is committed to protecting the privacy and personal data of every player on the platform. We understand that when you sign up for a 456php account, you're trusting us with sensitive information — your name, your mobile number, your payment details. That trust is something we don't take lightly, and this policy describes exactly how we handle everything you share with us.

This Privacy Policy applies to all personal data collected through the 456php website, mobile platform, customer support interactions, and any related 456php services. It should be read alongside the 456php Terms and Conditions, which govern the overall use of the platform.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173), 456php — operating as the legal entity licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) — is the Personal Information Controller (PIC) of all personal data collected from players and users of the 456php platform.

As the Personal Information Controller, 456php is responsible for determining the purpose and means of processing your personal data, for implementing appropriate security measures, and for responding to data subject rights requests in accordance with RA 10173 and its Implementing Rules and Regulations.

456php has appointed a Data Privacy Officer (DPO) who is responsible for overseeing compliance with RA 10173 and this Privacy Policy. Contact details for the DPO are provided in Section 13 of this policy.

456php collects personal data only to the extent necessary to operate the platform, verify player identity, process financial transactions, and comply with applicable regulations. The categories of personal data collected include:

456php does not collect sensitive personal information such as racial or ethnic origin, political opinion, religious belief, health data, or biometric data beyond what is contained in government-issued IDs submitted for identity verification purposes.

456php collects personal data through the following channels and methods:

• Direct Submission: When you register a 456php account, complete KYC (Know Your Customer) verification, make a deposit or withdrawal, contact customer support, or update your account profile, you directly provide personal data to 456php.
• Automated Collection: When you use the 456php platform, certain technical data is automatically collected by our systems — including your IP address, device information, browser type, and session activity logs. This data is used to ensure platform security, detect fraud, and improve the user experience.
• Third-Party Payment Providers: When you deposit or withdraw using GCash, Maya, a Philippine bank, or other payment methods, those providers share transaction confirmation data with 456php to verify that payments have been completed. 456php does not receive your full GCash PIN, bank password, or any other authentication credentials from payment providers.
• Identity Verification Services: For KYC purposes, 456php may use third-party identity verification services to confirm the authenticity of government-issued IDs submitted during registration. These services process your data under their own privacy policies, which comply with Philippine data protection standards.
• Cookies and Tracking Technologies: The 456php website uses cookies and similar technologies as described in Section 8 of this policy.

456php processes personal data only for specific, legitimate purposes. The following table outlines the purposes for which your data is used and the lawful basis for each under RA 10173:

456php does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review.

456php does not sell your personal data. We share data only with third parties where strictly necessary for legitimate operational, legal, or security purposes. Data sharing at 456php is limited to the following categories of recipients:

• Payment Processing Partners: GCash (Mynt), Maya (Voyager Innovations), Philippine banks, and other payment service providers receive only the transaction and identity data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by Philippine financial regulations.
• Identity Verification Services: Third-party KYC providers that process government ID data to verify player identity. All such providers are contractually required to process data only for identity verification purposes and in compliance with RA 10173.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies may receive player data where 456php is legally required to disclose it — for example, in connection with regulatory audits, suspected money laundering investigations, or court orders.
• Technology and Infrastructure Providers: Cloud hosting, database management, security monitoring, and fraud detection vendors who process data on behalf of 456php as Personal Information Processors (PIPs) under contracts that comply with RA 10173 requirements.
• Professional Advisors: Legal counsel, auditors, and compliance consultants who require access to certain data in connection with legal proceedings or regulatory compliance work. All such parties are bound by professional confidentiality obligations.

456php implements technical and organizational security measures proportionate to the risks associated with processing your personal data. Our security framework includes:

• Encryption in Transit: All data transmitted between your browser or mobile device and the 456php platform uses 256-bit TLS/SSL encryption. This prevents interception of your data during transmission.
• Encryption at Rest: Personal data stored in 456php databases is encrypted at the storage level, meaning the data is unreadable even if accessed without authorization.
• Access Controls: Internal access to personal data is restricted using role-based access controls. Only 456php staff with a demonstrated operational need can access specific categories of player data. All internal access is logged and audited.
• Two-Factor Authentication: All 456php internal systems that store or process personal data require two-factor authentication for staff login. We also make 2FA available to all players for their own account security.
• Regular Security Audits: 456php conducts periodic security assessments of our infrastructure, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to affect your rights and freedoms, 456php will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

While 456php takes all reasonable precautions to protect your data, no online system can be guaranteed 100% secure. We strongly recommend enabling two-factor authentication on your 456php account and using a strong, unique password that you do not use for any other service.

The 456php website uses cookies — small text files stored on your device — and similar tracking technologies to make the platform work correctly and to help us understand how players use it. Here's what we use and why:

• Strictly Necessary Cookies: These are required for the 456php platform to function. They keep you logged in during a session, maintain your account settings, and enable secure payment flows. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: These collect anonymized data about how players navigate the 456php site — which pages are visited most, how long sessions last, and where errors occur. This data helps our development team improve the platform. No personally identifiable data is captured in these cookies.
• Functional Cookies: These remember your preferences — such as language settings, preferred games, or notification settings — so you don't have to re-enter them every session.
• Session Security Cookies: Used to detect and prevent fraudulent login attempts, multiple account creation, and bot activity on the platform.

456php does not use third-party advertising cookies or allow external ad networks to place tracking cookies on the 456php platform. You can manage or delete cookies through your browser settings, though doing so may affect the functionality of the 456php platform.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by 456php:

To exercise any of the above rights, contact the 456php Data Privacy Officer at the details provided in Section 13. Please include your full name, registered mobile number, and a clear description of your request. 456php will respond within 15 business days.

456php retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in compliance with minimum retention requirements under Philippine law. General retention periods are as follows:

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be linked to you as an individual.

The 456php platform is strictly for adults aged 21 and over, as required by PAGCOR regulations and Philippine gaming law. 456php does not knowingly collect personal data from individuals under the age of 21. Registration requires age verification, and accounts found to belong to underage individuals will be closed immediately and any personal data collected will be deleted.

If you are a parent or guardian and you believe your child has registered on 456php, please contact us immediately at support@456php.net. We will investigate and take appropriate action — including account closure and full deletion of the minor's data — as quickly as possible.

456php may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements under Philippine law, or new features on the platform. The "Last Updated" date at the top of this page indicates when the most recent changes were made.

When we make material changes to this Privacy Policy — changes that significantly affect how your personal data is collected, used, or shared — we will notify registered players via the email address on file at least seven (7) days before the changes take effect. For minor, non-material updates (such as clarifications of existing practices), we may update the policy without direct notification but will always update the effective date.

By continuing to use 456php after an updated Privacy Policy has taken effect, you accept the updated terms. If you have concerns about any changes, please contact our Data Privacy Officer before the effective date — or close your account if you cannot accept the revised policy.