Privacy Policy

1. Data Controller Information

ph68.club ("ph68", "we", "us", "our") is the Data Controller responsible for the personal information collected through this platform. ph68 is a PAGCOR-authorized online gaming operator registered and operating in the Republic of the Philippines.

ph68 processes personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). ph68 has appointed a Data Protection Officer (DPO) to oversee compliance with the DPA. Contact details for the DPO are set out in Section 13 of this Policy.

2. Personal Data We Collect

2.1 Data Provided Directly by You

When you register and use the ph68 platform, we collect the following categories of personal data:

2.2 Data Collected Automatically

When you access the ph68 platform, we automatically collect certain technical data including: IP address, device type and operating system, browser type and version, pages visited and time spent, referral URL, and session duration. This data is used to maintain platform security, detect fraud, and improve the user experience for our Filipino player base.

3. How ph68 Uses Your Personal Data

ph68 uses your personal data for the following purposes:

• To create and manage your ph68 account, including identity verification and KYC processes required under PAGCOR regulations.
• To process deposits and withdrawals through GCash, PayMaya, BPI, BDO, and Metrobank, and to verify that payment accounts are registered in your verified name.
• To fulfil ph68's obligations under the Anti-Money Laundering Act (Republic Act No. 9160, as amended), including transaction monitoring and Suspicious Transaction Reporting to the Anti-Money Laundering Council (AMLC).
• To deliver and improve the gaming services available on ph68, including bingo rooms, slot titles, live dealer tables, and sports betting features.
• To send you account-related notifications, including deposit confirmations, withdrawal status updates, and security alerts (OTPs).
• To provide customer support through live chat and email, and to maintain records of support interactions.
• To enforce ph68's Terms and Conditions, detect and prevent fraud, bonus abuse, and multi-account operation.
• To comply with responsible gaming obligations, including enforcing deposit limits, self-exclusion requests, and the 21+ age requirement mandated by PAGCOR.
• To comply with lawful requests from PAGCOR, the NPC, the AMLC, and other competent Philippine regulatory authorities.

ph68 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, ph68 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the ph68 Terms and Conditions — including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming enforcement, where such interests are not overridden by your rights.
• Consent: Where required and where none of the above grounds apply — for example, for certain marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Disclosure to Third Parties

5.1 Permitted Disclosures

ph68 discloses personal data to third parties only where strictly necessary. Authorized third-party recipients include:

• Payment Processors: GCash (Mynt – Globe Fintech Innovations), PayMaya, BPI, BDO, and Metrobank — solely for the purpose of processing deposits and withdrawals to and from your verified ph68 account.
• Identity Verification Providers: Third-party KYC service providers used to verify government-issued Philippine ID documents during account registration and periodic re-verification.
• Game Content Providers: Licensed game studios whose titles are hosted on the ph68 platform may receive pseudonymized gaming activity data for RNG audit and reporting purposes.
• Regulatory Authorities: PAGCOR, the AMLC, the NPC, and other competent Philippine authorities where ph68 is under a legal obligation to disclose.
• IT Infrastructure Providers: Cloud hosting and security infrastructure providers operating under binding data processing agreements that prohibit secondary use of your data.

5.2 No Sale of Data

ph68 does not sell, rent, license, or otherwise transfer your personal data to third parties for commercial or marketing purposes. Any data shared under Section 5.1 is subject to contractual restrictions limiting its use to the specified purpose.

6. Cookies and Tracking Technologies

ph68 uses cookies and similar tracking technologies to operate the platform, maintain session security, and improve the player experience. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function, including session authentication after ph68 login, CSRF protection tokens, and load-balancing identifiers. These cannot be disabled.
• Performance Cookies: Used to collect anonymous usage statistics that help ph68 identify pages and features that need improvement. Data collected is aggregated and does not identify individual players.
• Security Cookies: Used to detect fraudulent activity, enforce rate limits on login attempts, and identify unusual access patterns that may indicate account compromise.

You can configure your browser to reject non-essential cookies; however, disabling strictly necessary cookies will prevent you from logging in to or using the ph68 platform. ph68 does not use third-party advertising cookies or cross-site tracking technologies.

7. Data Retention

ph68 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of the account plus five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for ten (10) years from the date of each transaction, as required by anti-money laundering legislation.
• Gaming Activity Logs: Retained for five (5) years, accessible to PAGCOR and the AMLC upon lawful request.
• Support Communications: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical/Server Logs: Retained for ninety (90) days, unless extended for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines.

8. Security Measures

ph68 implements technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph68 servers.
• AES-256 encryption for sensitive data stored at rest, including financial data and government ID copies.
• Multi-factor authentication for internal systems access by ph68 staff.
• Role-based access controls ensuring that ph68 staff access only the personal data necessary for their specific function.
• Regular independent security audits and penetration testing of the ph68 platform.
• OTP-based verification for new-device logins to player accounts.
• Automated fraud detection systems monitoring for suspicious login patterns and transaction anomalies.

Notwithstanding the above measures, no electronic transmission or storage system is entirely secure. ph68 cannot guarantee absolute security but commits to maintaining industry-standard protections and responding promptly to any identified vulnerabilities.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act and its IRR, you have the following rights regarding your personal data held by ph68:

• Right to be Informed: You have the right to know what personal data ph68 collects, how it is used, and with whom it is shared — the content of this Privacy Policy fulfils this obligation.
• Right of Access: You may request a copy of the personal data ph68 holds about you, together with information about how it is being processed.
• Right to Correction: You may request correction of inaccurate, outdated, incomplete, or misleading personal data. Account holders can update basic contact information directly from their ph68 account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where there is no longer a legal or contractual basis for ph68 to retain it. Note that regulatory retention obligations under Section 7 above limit the scope of this right.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: You may object to the processing of your personal data for purposes other than those required for the performance of our contract or legal obligations.

To exercise any of the above rights, submit a written request to ph68's Data Protection Officer at the contact details in Section 13. ph68 will respond within fifteen (15) calendar days. Requests that are manifestly unfounded or excessive may be declined, with written reasons provided.

10. Children's Privacy

The ph68 platform is strictly restricted to individuals aged 21 years and older, in compliance with PAGCOR regulations. ph68 does not knowingly collect personal data from persons under 21. If ph68 discovers that personal data has been collected from a person under 21, the account will be suspended immediately, the data deleted, and any associated funds reviewed in accordance with our Terms and Conditions.

If you believe a person under 21 has registered on the ph68 platform, please notify us immediately at the contact details in Section 13.

11. International Data Transfers

ph68's primary servers and data processing operations are located in the Philippines. Where it is necessary to transfer personal data outside the Philippines — for example, to a payment processor or game content provider with infrastructure in another jurisdiction — ph68 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating NPC-approved standard contractual clauses.
• Transfer only to jurisdictions or organizations that provide an adequate level of data protection, as assessed by the NPC or ph68's DPO.
• Where required, notification to and approval from the NPC prior to cross-border data transfer.

12. Amendments to This Policy

ph68 reserves the right to update this Privacy Policy to reflect changes in our data processing practices, Philippine law, or NPC guidance. Material changes — those that meaningfully affect your rights or how your data is used — will be communicated by email to your registered address at least fourteen (14) calendar days before taking effect.

The current version of this Policy is always accessible at https://ph68.club/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the ph68 platform after the effective date of any amendment constitutes acceptance of the revised Policy.

13. Contact and Data Protection Officer

For questions, requests, or complaints relating to this Privacy Policy or ph68's handling of your personal data, you may contact our Data Protection Officer through the following channels:

• Email: [email protected] (mark subject line: "Privacy / DPO Request")
• Live Chat: Available 24/7 on ph68.club — average response time under 90 seconds for general queries; DPO-specific requests are escalated within one business day.

If you are not satisfied with ph68's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the competent supervisory authority for data protection matters in the Philippines.