ph666 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how ph666 ("ph666", "we", "us", "our") collects, processes, stores and protects personal data relating to individuals ("you", "your", "Member") who access or use the ph666 online gaming platform at ph666.io and any associated mobile applications (collectively, the "Platform").

ph666 takes your privacy seriously. We are committed to being transparent about our data practices and to processing your personal data lawfully, fairly and securely. By creating an account or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the ph666 Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. If you have questions about any aspect of this Policy, please contact us at [email protected] before using the Platform.

2 Data Controller

For the purposes of this Policy, ph666 acts as the data controller in respect of personal data collected through the Platform. As data controller, ph666 determines the purposes and means by which your personal data is processed.

All data protection enquiries, access requests and deletion requests should be directed to our Privacy team at: [email protected]. Please include your registered username and a description of your request in your correspondence.

3 Data We Collect

ph666 collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration Data

When you create a ph666 account, we collect your full legal name, date of birth, residential address, mobile phone number, email address and a username of your choosing. This data is required to establish your account identity and verify that you meet the 21+ age requirement.

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and to verify your identity, ph666 may collect copies of government-issued identification documents such as your National ID Card, passport or driving licence, as well as proof of current residential address such as a utility bill or bank statement dated within the last three months.

3.3 Financial & Transaction Data

ph666 records all deposits, withdrawals and wagers made through your account. We collect the payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), transaction reference numbers, amounts in BDT, timestamps and transaction outcomes. We do not store full card numbers or mobile banking PINs; payment credentials are handled by our certified payment processors.

3.4 Usage & Technical Data

When you use the Platform, we automatically collect technical data including your IP address, device type, operating system, browser type and version, session duration, pages visited, games played and bet history. This data is used for platform security, fraud detection and service improvement purposes.

3.5 Communications Data

If you contact ph666 customer support, we retain records of your correspondence including email messages, live chat transcripts and the nature of your enquiry. This data is used to resolve your query and to improve our support services.

3.6 Responsible Gaming Data

Where you voluntarily set deposit limits, loss limits, cooling-off periods or self-exclusion through your account settings, ph666 records these preferences and the dates on which they were applied. This data is used exclusively to enforce the responsible gaming protections you have requested and to identify members who may require additional support.

4 How We Use Your Data

ph666 uses the personal data we collect for the following purposes:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, KYC data	Contract performance
Processing deposits and withdrawals	Financial data, KYC data	Contract performance
Identity verification and fraud prevention	KYC data, usage data, transaction data	Legal obligation, legitimate interest
Customer support	Communications data, account data	Contract performance, legitimate interest
Responsible gaming monitoring	Responsible gaming data, usage data	Legal obligation, legitimate interest
Platform security and technical operation	Usage data, technical data	Legitimate interest
Compliance with legal and regulatory obligations	All categories as required	Legal obligation
Service improvement and analytics	Anonymised usage data	Legitimate interest

ph666 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human review. We do not use your data to build advertising profiles or to serve third-party advertisements.

5 Legal Basis for Processing

ph666 processes your personal data on the following legal bases:

• Contract Performance: Processing that is necessary to provide the services you have requested when registering a ph666 account, including account management, payment processing and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering requirements, age verification obligations and responsible gaming duties.
• Legitimate Interest: Processing necessary for ph666's legitimate business interests, including fraud prevention, platform security, customer support and service improvement, where these interests are not overridden by your fundamental rights.
• Consent: Where ph666 relies on your consent for a specific processing activity (for example, optional marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6 Sharing Your Data

ph666 does not sell your personal data. We share your data only in the following limited circumstances:

6.1 Service Providers

ph666 engages trusted third-party service providers to assist with platform operations, including payment processing, identity verification, fraud detection, cloud hosting and customer support technology. These providers access only the minimum data required to deliver their specific service and are bound by confidentiality agreements that prohibit any use of your data beyond the stated purpose.

6.2 Game Content Providers

ph666 integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi. Game providers may receive anonymised session identifiers to facilitate game delivery and outcome verification. No personally identifiable information is shared with game providers beyond what is technically necessary for game operation.

6.3 Legal and Regulatory Disclosure

ph666 may disclose personal data where required to do so by law, court order, regulatory authority or law enforcement request. In such cases, ph666 will disclose only the minimum information legally required and will notify the affected member where permitted to do so by law.

6.4 Business Transfers

In the event of a merger, acquisition or sale of all or part of ph666's business assets, member data may be transferred to the acquiring entity as part of the transaction. Members will be notified of any such transfer and of any change to this Privacy Policy that results from it.

7 Payment Data

All payment transactions on the ph666 Platform are processed through certified payment service providers. ph666 does not directly store full payment card numbers, CVV codes or mobile banking PINs. Payment processors used by ph666 for Bangladesh members include providers supporting bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank and card networks (Visa, Mastercard).

Payment processors engaged by ph666 operate under their own privacy policies and data protection standards. ph666 selects payment partners who maintain industry-recognised security certifications. Transaction records — including the payment method type, amount in BDT, transaction reference and timestamp — are retained by ph666 for audit and anti-money-laundering purposes for the minimum legally mandated period.

8 Cookies & Tracking Technologies

ph666 uses the following categories of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies: These cookies are required for the Platform to function. They include session authentication cookies that keep you logged in during a game session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences, such as language settings and display options, to provide a consistent experience across sessions. They persist between visits but contain no personally identifiable information in plain form.
• Analytics Cookies: ph666 uses anonymised, first-party analytics to understand how members navigate the Platform. This data is used exclusively for internal service improvement and is not shared with third-party analytics networks.

ph666 does not use advertising cookies, retargeting pixels or third-party behavioural tracking technologies. You can manage or clear cookies through your browser settings at any time. Note that disabling strictly necessary cookies may affect your ability to log in or use the Platform normally.

9 Data Retention

ph666 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account and Registration Data: Retained for the duration of your active membership plus a minimum of five (5) years following account closure, to comply with anti-money-laundering regulations and fraud prevention obligations.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later, as required by applicable regulations.
• Transaction and Financial Records: Retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements.
• Customer Support Correspondence: Retained for three (3) years from the date of the last interaction, unless the correspondence is relevant to an ongoing dispute or legal matter.
• Usage and Technical Logs: Retained for a maximum of twelve (12) months unless required for an active security investigation.
• Responsible Gaming Records: Retained for five (5) years following account closure to support member welfare assessments and regulatory compliance.

10 Your Privacy Rights

As a ph666 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your registered username and a description of your request. ph666 will respond within fourteen (14) calendar days:

• Right of Access: You may request a copy of the personal data ph666 holds about you, along with information about how it is used.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. Some corrections (such as name changes) require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to overriding legal retention obligations described in Section 9.
• Right to Restriction: You may request that ph666 restrict the processing of your data in specific circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on ph666's legitimate interests. ph666 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing relies on your consent, you may withdraw that consent at any time by contacting [email protected]. This does not affect processing carried out before withdrawal.

11 Children & Minors

The ph666 Platform is strictly for adults aged 21 years and above. ph666 does not knowingly collect personal data from any person under the age of 21. If ph666 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be securely deleted, and any deposits will be refunded to the original payment source where technically feasible.

If you believe a person under the age of 21 has created a ph666 account, please notify us immediately at [email protected]. ph666 takes underage access extremely seriously and will act on all such reports promptly.

12 Security Measures

ph666 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ph666 Platform.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) available to all registered members as an additional account security layer.
• Automated fraud detection and anomaly monitoring systems operating continuously on all account activity.
• Incident response procedures to detect, contain and remediate any data security event in a timely manner.

While ph666 takes every reasonable precaution to protect your data, no system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and interests, ph666 will notify affected members without undue delay.

13 Updates to This Policy

ph666 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform functionality. Material changes will be communicated to registered members via email or prominent in-platform notification at least seven (7) days before they take effect. The effective date at the top of this Policy will be updated accordingly.

We encourage you to review this Policy periodically. The current version is always accessible at ph666.io/privacy-policy. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14 Contact Us

For all privacy-related enquiries, data access requests or concerns about how ph666 handles your personal data, please use the contact details below. All addresses are plain text and are not clickable links:

• Privacy Enquiries: [email protected]
• General Support: [email protected]
• Responsible Gaming: [email protected]

ph666's Privacy team aims to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 14 calendar days. For complex data access or deletion requests, we may require up to 30 days and will inform you if an extension is necessary.