638club Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") describes how 638club ("638club," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "Player," or "User") who access or use the 638club online gaming platform, including the website at 638club.net, any associated mobile applications, and all related services (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines. By registering an account or using the 638club Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions, which govern your use of the 638club Platform.

2. Personal Data We Collect

638club collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Sensitive Personal Information

Certain data we collect may constitute "sensitive personal information" under the DPA, including government ID numbers and financial account details. 638club processes such data only to the extent strictly necessary for identity verification, fraud prevention, and compliance with PAGCOR and anti-money laundering (AML) requirements under Republic Act No. 9160, as amended.

3. How We Use Your Personal Data

638club uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your 638club account, including processing your registration and verifying your identity.
• Service Delivery: To provide you with access to games, process deposits and withdrawals in Philippine Peso (PHP), and deliver the core features of the 638club Platform.
• KYC & Compliance: To verify your identity and age (21+), comply with PAGCOR licensing requirements, and fulfil our obligations under Philippine AML laws.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the Platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance via live chat and email.
• Responsible Gaming: To monitor gaming behaviour, enforce deposit limits and self-exclusion requests, and identify players who may be at risk of gambling-related harm.
• Marketing & Promotions: To send you information about 638club bonuses, promotions, and new features, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the performance and user experience of the 638club Platform.
• Legal Obligations: To comply with applicable Philippine laws, regulations, court orders, and requests from regulatory authorities including PAGCOR and the NPC.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, 638club processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions), including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for 638club's legitimate interests in fraud prevention, platform security, and responsible gaming, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

638club does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, etc.) to process deposits and withdrawals.
• Identity Verification Providers: Third-party KY C providers engaged to verify government-issued IDs and confirm player identity in compliance with PAGCOR requirements.
• Game Software Providers: Licensed game studios and platform providers whose games are available on 638club, to the extent necessary to deliver gameplay and resolve disputes.
• Fraud Prevention & AML Services: Third-party providers that assist 638club in detecting and preventing fraudulent transactions, money laundering, and other prohibited activity.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or regulatory mandate.
• Professional Advisers: Lawyers, auditors, and accountants engaged by 638club, subject to professional confidentiality obligations.
• IT & Hosting Providers: Cloud infrastructure and hosting partners who process data on 638club's behalf under strict data processing agreements.

6. Cookies & Tracking Technologies

The 638club Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyse Platform usage. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limits you have set on your account.
• Analytics Cookies: Collect anonymised data about how players use the Platform, including pages visited and session duration, to help us improve the 638club experience.
• Marketing Cookies: Used to deliver relevant promotional content about 638club to you. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 638club Platform. For strictly necessary cookies, no consent is required as they are essential to service delivery.

7. Data Retention

638club retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account Data: Retained for the duration of your active 638club account, plus a minimum of five (5) years following account closure, as required by PAGCOR and AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory investigation.
• Support Communications: Retained for three (3) years from the date of the last communication, to assist with dispute resolution.
• Technical & Usage Logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, plus three (3) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 638club's data disposal procedures.

8. Data Security

638club implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and 638club servers is encrypted using industry-standard TLS protocols.
• Data Encryption at Rest: Sensitive personal data, including financial account details and KYC documents, is encrypted when stored on 638club servers.
• Access Controls: Access to personal data is restricted to authorised 638club personnel and service providers on a strict need-to-know basis, enforced through role-based access controls.
• Two-Factor Authentication: 638club offers two-factor authentication (2FA) for player accounts to provide an additional layer of login security.
• Regular Security Audits: 638club conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the Platform.
• Incident Response: In the event of a personal data breach, 638club will notify affected players and the National Privacy Commission within the timeframes prescribed by the DPA and its IRR.

While 638club takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 638club login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 638club:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and shared, as set out in this Policy.
• Right of Access: You have the right to request a copy of the personal data 638club holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 638club's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 638club's overriding legal obligations.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 638club has processed your personal data in violation of the DPA.

10. Children & Minors

The 638club Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. 638club does not knowingly collect personal data from individuals under the age of 21.

If 638club discovers or is notified that personal data has been collected from a player who is under 21 years of age, we will immediately suspend the relevant account, delete the personal data in question, and return any deposited funds to the originating payment method after deducting any winnings derived from underage play.

If you are a parent or guardian and believe that your child has registered an account on the 638club Platform, please contact our support team immediately via live chat so that we can take prompt action.

11. Third-Party Links

The 638club Platform may contain references to third-party services, such as payment processors and game providers. This Policy applies solely to personal data collected and processed by 638club. 638club is not responsible for the privacy practices of any third-party services, and we encourage you to review the privacy policies of any third parties you interact with in connection with your use of the Platform.

12. Changes to This Privacy Policy

638club reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The date of the most recent revision is indicated at the top of this page.

Where changes are material, 638club will notify registered players via email or an on-platform notification prior to the changes taking effect. Your continued use of the 638club Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

13. Contact Us & Data Protection Officer

638club has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act of 2012 and handling all data privacy inquiries and complaints from players in the Philippines.

If you have any questions about this Privacy Policy, wish to exercise your data privacy rights, or wish to lodge a complaint regarding 638club's data processing practices, please contact our DPO:

• Live Chat: Available 24/7 via the chat widget on the 638club Platform.
• Email: [email protected]

If you are not satisfied with 638club's response to your complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.