678v Privacy Policy

678v ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses the 678v online gaming platform. We understand that when you share your personal information with us — whether during registration, when making a deposit via GCash or BDO, or when contacting our support team — you are placing trust in us to handle that information responsibly.

This Privacy Policy describes how 678v collects, uses, stores, shares, and protects your personal data. It also explains the rights you have over your personal information under the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and how you can exercise those rights.

By registering an account on 678v, accessing the platform, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not use the 678v platform.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal information is the operator of the 678v platform. As data controller, 678v determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable Philippine data protection law.

678v has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy and implementation, ensuring compliance with RA 10173, and serving as the primary point of contact for data subjects wishing to exercise their rights or raise concerns about how their personal data is handled.

678v collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify you are 21 years of age or older)
• Gender (optional, collected during registration)
• Government-issued ID number (e.g., PhilSys ID, passport, driver's licence) — collected during KYC verification
• Selfie or photograph submitted for identity verification purposes

Contact Data

• Email address
• Mobile phone number (used for account verification and security alerts)
• Residential address (city and province level, e.g., Makati, Cebu City, Davao)

Financial Data

• GCash mobile number or PayMaya account reference
• Bank account details for BPI, BDO, or Metrobank transfers (account name and number only — never full card details)
• Transaction history including deposit amounts, withdrawal amounts, and timestamps

Technical Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser information
• Session timestamps and duration
• Cookie identifiers and similar tracking technologies (see Section 11)

Gameplay Data

• Game history including games played, bet amounts, and outcomes
• Bonus and promotion usage history
• Responsible gaming settings and self-exclusion records

Communications Data

• Records of your communications with 678v customer support
• Feedback, complaints, and dispute records
• Marketing preferences and opt-in/opt-out records

678v collects your personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically: When you access and use the 678v platform, we automatically collect technical data such as your IP address, device information, and session data through cookies and similar technologies.
• From third-party service providers: Identity verification providers may share the results of document checks with us. Payment processors share transaction confirmation data. Fraud prevention services may share risk signals associated with your account activity.
• From publicly available sources: In limited circumstances, 678v may verify information against publicly available records to comply with anti-money laundering obligations.

678v processes your personal data for the following specific purposes:

Under the Data Privacy Act of 2012, 678v processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and 678v — specifically, to operate your account, process your transactions, and deliver gaming services. Without this processing, 678v cannot provide its services to you.
• Legal obligation: 678v is required by Philippine law — including anti-money laundering regulations, PAGCOR-aligned gaming regulations, and the Data Privacy Act itself — to collect and retain certain categories of personal data. This includes KYC identity verification and transaction records.
• Legitimate interests: 678v processes certain data on the basis of its legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of its services. Where legitimate interests are relied upon, 678v has assessed that these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and the use of non-essential cookies, 678v relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

678v does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive the minimum data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Identity verification providers: Third-party KYC and document verification services receive identity data solely for the purpose of verifying your identity and age in compliance with regulatory requirements.
• Fraud prevention and security services: 678v may share technical data and transaction signals with fraud detection providers to protect the platform and its players from fraudulent activity.
• Game providers: Third-party game studios and live casino providers may receive your player ID and gameplay data to the extent necessary to deliver their games on the 678v platform. These providers do not receive your full identity or financial data.
• Regulatory and law enforcement authorities: 678v will disclose personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), or other competent authorities when required to do so by law, court order, or regulatory directive.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by 678v may access personal data on a need-to-know basis, subject to strict confidentiality obligations.

678v retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years after account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of 5 years from the date of the transaction, as required by the Anti-Money Laundering Act (AMLA) of the Philippines.
• Gameplay data: Retained for the duration of your account and for 2 years after account closure, unless a longer period is required for dispute resolution or regulatory purposes.
• Customer support communications: Retained for 3 years from the date of the last communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Marketing preferences and consent records: Retained for the duration of your account and for 1 year after account closure or withdrawal of consent.
• Technical and log data: Retained for up to 12 months, after which it is deleted or anonymised.

When personal data is no longer required, 678v will securely delete or anonymise it in a manner that prevents reconstruction or identification. Anonymised data may be retained indefinitely for analytical purposes.

678v implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption: All data transmitted between your device and the 678v platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• AES-256 encryption at rest: Sensitive personal data stored on 678v servers — including identity documents and financial data — is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised 678v personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Two-factor authentication (2FA): 678v offers 2FA for player accounts to provide an additional layer of security against unauthorised access.
• Regular security audits: 678v conducts regular internal and third-party security assessments, including penetration testing, to identify and address vulnerabilities.
• Incident response: 678v maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by 678v. These rights are not absolute and may be subject to limitations under applicable law, but 678v is committed to honouring them to the fullest extent possible.

To exercise any of the above rights, contact the 678v Data Protection Officer at [email protected] with the subject line "Data Privacy Request". Please include your registered email address and a description of your request. 678v will respond within 15 business days of receiving a valid request, as required by NPC guidelines.

678v uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and — with your consent — deliver relevant promotional content. A cookie is a small text file placed on your device when you visit the 678v website.

The following categories of cookies are used on the 678v platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming limits — to provide a more personalised experience. They are enabled by default but can be disabled in your browser settings.
• Analytics cookies: With your consent, 678v uses analytics cookies to understand how players use the platform — which pages are visited most, where players encounter difficulties, and how the platform can be improved. Analytics data is aggregated and anonymised where possible.
• Marketing cookies: With your explicit consent, 678v may use cookies to deliver promotional content relevant to your interests. You can withdraw consent for marketing cookies at any time through your account settings or browser preferences.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 678v platform. For detailed information on the specific cookies used and their retention periods, refer to the 678v Cookie Notice available in your account settings.

The 678v platform is strictly for adults aged 21 years and above, in accordance with Philippine gaming regulations. 678v does not knowingly collect personal data from individuals under the age of 21.

During registration, all players are required to confirm that they are at least 21 years of age. 678v employs age verification procedures — including KYC document checks — to enforce this requirement. Any account found to be held by a person under 21 will be immediately suspended, all associated data will be handled in accordance with applicable law, and any funds held in the account will be dealt with per our Terms & Conditions.

678v reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, 678v will notify registered players through one or more of the following methods:

• A prominent notice displayed on the 678v platform upon your next login
• An email notification to your registered email address
• An update to the "Effective Date" at the top of this Privacy Policy

Your continued use of the 678v platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how 678v is protecting your personal data. Previous versions of this policy are available upon request by contacting our Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 678v handles your personal data, please do not hesitate to get in touch. Our Data Protection Officer and support team are available 24 hours a day, 7 days a week — including Philippine public holidays.

If you are not satisfied with 678v's response to your data privacy request or complaint, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012.