ph68 Privacy Policy

1 Introduction and Scope

ph68 ("ph68," "we," "our," or "us") is committed to protecting the privacy and personal data of all individuals who interact with the ph68 online gaming platform, accessible at ph68.one (the "Platform"). This Privacy Policy ("Policy") describes in detail how ph68 collects, uses, stores, discloses, and protects personal data in the course of providing its services to players based in the Philippines and elsewhere.

This Policy applies to all personal data processed by ph68 in connection with your use of the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and marketing communications. It applies to all users of the Platform regardless of the device or method of access used.

ph68 is the data controller for the purposes of this Policy. This means ph68 determines the purposes and means by which your personal data is processed. Where ph68 engages third-party service providers to process data on its behalf, those providers act as data processors and are contractually bound to process data only in accordance with ph68's instructions and applicable law.

2 Personal Data We Collect

ph68 collects personal data from you directly when you provide it, automatically when you use the Platform, and in some cases from third parties involved in the delivery of our services. The categories of personal data we collect include:

2.1 Identity and Contact Data

• Full legal name as it appears on government-issued identification;
• Date of birth and age verification data;
• Residential address (including barangay, city/municipality, province);
• Email address and mobile phone number;
• Copies of government-issued identification documents (e.g., PhilSys ID, passport, driver's licence, UMID).

2.2 Financial and Transaction Data

• GCash account numbers, PayMaya account identifiers, and other e-wallet reference data;
• Bank account information where bank transfer payment methods are used (e.g., BPI, BDO, Metrobank);
• Transaction histories including deposits, withdrawals, and game wager records;
• Bonus and promotional claim records.

2.3 Technical and Usage Data

• IP address, device type, operating system, and browser information;
• Session logs, login timestamps, and geographic location data derived from IP address;
• Game play records, betting history, and Platform interaction data;
• Cookie data and similar tracking technology data (see Section 6).

2.4 Communications Data

• Records of live chat conversations and Messenger interactions with ph68 support agents;
• Email correspondence with ph68;
• Survey responses and feedback submitted to ph68.

3 How We Use Your Personal Data

ph68 uses personal data for the following primary purposes:

• Account Registration and Management: To create and maintain your ph68 account, verify your identity, and manage your player profile;
• Service Delivery: To provide access to games, process deposits and withdrawals, apply bonuses, and generally operate the Platform;
• Legal and Regulatory Compliance: To comply with PAGCOR licensing obligations, Anti-Money Laundering Act (AMLA) requirements, and other applicable Philippine law, including mandatory reporting to the Anti-Money Laundering Council (AMLC);
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account misuse, and security incidents;
• Customer Support: To respond to your inquiries, resolve complaints, and provide assistance through our live chat, Messenger, and email support channels;
• Responsible Gaming: To monitor gameplay patterns and identify players who may be at risk, in support of ph68's responsible gaming obligations;
• Marketing (where consented): To send you promotional communications, personalized offers, and updates about ph68 services, where you have provided consent to receive such communications;
• Platform Improvement: To analyze usage patterns and improve the functionality, performance, and content of the ph68 Platform.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ph68 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of our agreement with you (the ph68 Terms & Conditions) — this covers account management, service delivery, and transaction processing;
• Legal Obligation: Processing is required to comply with applicable law — this covers KYC verification, AML reporting, PAGCOR compliance, and regulatory record-keeping;
• Legitimate Interests: Processing is necessary for ph68's legitimate business interests, including fraud prevention, security operations, and Platform analytics, where these interests are not overridden by your rights;
• Consent: Where processing is not covered by the above grounds — particularly for direct marketing communications — ph68 will seek your explicit consent. You may withdraw consent at any time by contacting ph68 support.

5 Data Sharing and Third-Party Disclosure

ph68 does not sell your personal data. We may share your personal data with the following categories of recipients:

5.1 Regulatory and Law Enforcement Authorities

ph68 is required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies where legally mandated. Such disclosures are made strictly as required and are not within ph68's discretion to withhold.

5.2 Payment Service Providers

Transaction data is shared with payment processors including GCash, PayMaya, and banking partners (BPI, BDO, Metrobank) as necessary to process deposits and withdrawals. These processors are subject to their own data protection obligations under Philippine law.

5.3 Game Software Providers

Certain gameplay data may be shared with licensed game software and live dealer providers to enable game functionality, audit game outcomes, and resolve disputes. These providers are contractually bound by data processing agreements consistent with this Policy.

5.4 Technology and Infrastructure Providers

ph68 uses third-party technology providers for platform infrastructure, analytics, fraud detection, and customer support tools. Such providers act as data processors and process data only on ph68's behalf and in accordance with ph68's instructions.

6 Cookies and Tracking Technologies

ph68 uses cookies and similar tracking technologies on the Platform to support its functionality, analyze usage, and where applicable, personalize content. The types of cookies ph68 uses include:

• Strictly Necessary Cookies: Essential for the Platform to function — these enable login sessions, maintain security tokens, and preserve your account state. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymized information about how users navigate and interact with the Platform, enabling ph68 to improve performance and content.
• Functional Cookies: Enable enhanced functionality such as remembering your language preferences and session settings.
• Marketing Cookies: Used to deliver relevant promotional content where you have consented to such use. These are not active unless you have provided consent.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the ph68 Platform. ph68 does not use tracking technologies to build profiles for sale to third parties.

7 Data Retention

ph68 retains personal data for as long as necessary to fulfill the purposes outlined in this Policy, and no longer than required by applicable law. The following general retention guidelines apply:

• Account and Identity Data: Retained for the duration of your account relationship with ph68, plus a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLA record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years in compliance with AMLA and relevant PAGCOR regulations;
• Customer Support Records: Retained for three (3) years following the resolution of the relevant interaction;
• Marketing Data: Retained until you withdraw consent to marketing communications or for three (3) years from the date of your last interaction with ph68, whichever is earlier.

After the applicable retention period, personal data is securely deleted or anonymized in accordance with ph68's data deletion procedures.

8 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph68:

• Right to be Informed: The right to be notified of how your personal data is being processed — which is the primary purpose of this Privacy Policy;
• Right of Access: The right to obtain a copy of the personal data ph68 holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure or Blocking: The right to request deletion or blocking of personal data where processing is no longer necessary or lawful, subject to regulatory retention obligations;
• Right to Object: The right to object to processing of your personal data for direct marketing purposes at any time;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact ph68 using the details in Section 12. ph68 will respond to data subject requests within thirty (30) days of receipt, or notify you if an extension is required.

9 Data Security Measures

ph68 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph68's servers;
• Encryption of sensitive data at rest, including financial credentials and government ID data;
• Role-based access controls ensuring that ph68 personnel can only access personal data on a need-to-know basis;
• Multi-factor authentication requirements for system access by ph68 staff;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Incident response procedures for the detection, containment, and notification of data breaches.

While ph68 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your ph68 account and to enable two-factor authentication where available.

10 Children and Minors

ph68 is strictly an adult-only platform. The minimum age requirement to register and use ph68 is 21 years of age, in accordance with Philippine gaming regulations. ph68 does not knowingly collect personal data from individuals under the age of 21.

If ph68 becomes aware that personal data has been collected from a minor, the relevant account will be immediately closed, the data will be deleted, and any deposited funds will be returned net of bonuses claimed. If you believe a minor has registered an account with ph68, please contact our support team immediately.

11 Changes to This Privacy Policy

ph68 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered players via email or a prominent notice on the ph68 Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of ph68 following any update constitutes acceptance of the revised Policy.

12 Contact and Data Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or ph68's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 via the ph68 Platform — the fastest way to raise a data privacy query;
• Messenger: Via the ph68 official Messenger channel;
• Support Email: [email protected]

For formal data subject access requests, correction requests, or deletion requests, please contact ph68 in writing with proof of identity. ph68's Data Privacy Officer will handle all formal data subject requests in accordance with the timelines required by the Data Privacy Act of 2012.

If you are not satisfied with ph68's response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines through the NPC's official complaints procedure.