Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how phi68 ("phi68," "we," "us," "the Company") collects, uses, stores, and protects the personal information of users ("you," "Player," "User") who access or use the phi68 Casino platform at phi68.net and any associated mobile-optimized versions (collectively, the "Platform").

1.2 phi68 is committed to handling your personal data responsibly and in compliance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

1.3 phi68 also operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR), which imposes additional data collection and retention obligations on licensed gaming operators. Some data collection by phi68 is mandatory under PAGCOR regulations and cannot be waived by individual players.

1.4 By registering an account on phi68 or using any phi68 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the phi68 Platform.

1.5 This Policy should be read alongside phi68's Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the Platform.

2. Personal Data We Collect

2.1 phi68 collects personal data through several channels: directly from you during registration and account use, automatically through your use of the Platform, and from third parties such as payment processors and identity verification services.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile number, and residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati).
• Identity verification (KYC) data: Government-issued ID (passport, driver's license, Philippine national ID), selfie or live photo for facial verification, and proof of address documents.
• Payment data: GCash mobile number, Maya account details, bank account information (BPI, BDO, Metrobank, UnionBank, etc.), and debit card details. phi68 does not store full card numbers — payment data is tokenized by our payment processors.
• Communications: Messages sent to phi68 support via live chat or email, including the content of those communications and any attachments.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, and reality check preferences that you configure on your account.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, session duration, betting history, transaction history, login timestamps, and navigation patterns within the Platform.
• Location data: General geographic location derived from your IP address, used to verify that you are accessing the Platform from the Philippines.
• Cookie data: Information collected through cookies and similar tracking technologies as described in Section 8 of this Policy.

2.3 Data from Third Parties

• Identity verification providers: Results of identity and age verification checks conducted by phi68's third-party KYC partners.
• Payment processors: Transaction confirmation data, payment status updates, and fraud screening results from GCash, Maya, and banking partners.
• Fraud prevention services: Risk scores and fraud indicators from third-party fraud detection services used to protect the integrity of the Platform.

3. How phi68 Uses Your Personal Data

3.1 phi68 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your phi68 account, verifying your identity and age, and managing your account settings and preferences.
• Service delivery: Processing deposits and withdrawals, providing access to games and betting markets, and delivering the core gaming services of the phi68 Platform.
• Regulatory compliance: Meeting phi68's obligations under PAGCOR regulations, the Data Privacy Act of 2012, and applicable anti-money laundering (AML) laws, including the reporting of suspicious transactions to the Anti-Money Laundering Council (AMLC) where required.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: Monitoring player behavior to identify signs of problem gambling, enforcing self-exclusion and deposit limits, and providing responsible gaming interventions where appropriate.
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Platform improvement: Analyzing usage patterns to improve the phi68 Platform, fix bugs, and develop new features that better serve Filipino players.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where phi68 has a legitimate interest in doing so. You may opt out of marketing communications at any time.

4. Legal Basis for Processing

4.1 phi68 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and phi68 — i.e., to provide the gaming services you have registered for.
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legal requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where phi68's legitimate interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

5.1 phi68 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. phi68 shares your personal data only in the following circumstances:

• Service providers: phi68 shares data with carefully selected third-party service providers who assist in operating the Platform, including payment processors (GCash, Maya, Philippine banks), KYC and identity verification providers, fraud detection services, cloud hosting providers, and customer support software providers. All service providers are contractually bound to process your data only as instructed by phi68 and to maintain appropriate security standards.
• Regulatory authorities: phi68 is required to share player data with PAGCOR, the AMLC, the National Privacy Commission, and other Philippine government authorities upon lawful request or as required by applicable regulations.
• Law enforcement: phi68 may disclose personal data to law enforcement agencies where required by law or where phi68 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of phi68's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
• With your consent: phi68 may share your data with third parties in other circumstances where you have provided explicit consent.

5.2 phi68 does not transfer your personal data outside the Philippines except where necessary to use internationally-based service providers (such as cloud hosting services). Where such transfers occur, phi68 ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012.

6. Data Retention

6.1 phi68 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. Specifically:

• Account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and AML laws.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with PAGCOR and AMLC requirements.
• KYC documents: Retained for a minimum of five (5) years after account closure or the last transaction, whichever is later.
• Support communications: Retained for three (3) years from the date of the communication.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications.

6.2 After the applicable retention period, phi68 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

7. Data Security

7.1 phi68 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phi68 Platform — the same standard used by BPI, BDO, and other Philippine banks;
• Encryption of sensitive data at rest, including KYC documents and payment information;
• Tokenization of payment card data — phi68 never stores full card numbers;
• Multi-factor authentication options for player accounts;
• Continuous security monitoring and intrusion detection systems;
• Regular security audits and penetration testing by independent security professionals;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Regular staff training on data protection and security best practices.

7.2 Despite these measures, no method of electronic transmission or storage is completely secure. phi68 cannot guarantee absolute security of your personal data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, phi68 will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012.

8. Cookies and Tracking Technologies

8.1 phi68 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the phi68 website.

8.2 phi68 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cookies cannot be disabled.
• Functional cookies: Remember your preferences (such as language settings and game lobby layout) to provide a more personalized experience.
• Analytics cookies: Help phi68 understand how players use the Platform, which pages are most visited, and where technical issues occur. This data is used in aggregate and does not identify individual players.
• Marketing cookies: Used to deliver relevant promotional content to you on the phi68 Platform. These cookies are only set with your consent.

8.3 You can control non-essential cookies through your browser settings. Note that dis abling certain cookies may affect the functionality of the phi68 Platform.

9. Your Data Privacy Rights

9.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phi68:

• Right to be informed: You have the right to know what personal data phi68 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data phi68 holds about you at any time by contacting our Data Protection Officer.
• Right to rectification: If any personal data phi68 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly through your phi68 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phi68's legal retention obligations under PAGCOR regulations and AML laws.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to phi68's overriding legal obligations.
• Right to data portability: You may request that phi68 provide your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: If you believe phi68 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

9.2 To exercise any of these rights, please contact phi68's Data Protection Officer at [email protected]. phi68 will respond to all data rights requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.

9.3 phi68 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to unauthorized parties.

10. Minors and Age Restriction

10.1 The phi68 Platform is strictly restricted to individuals who are at least twenty-one (21) years of age, in accordance with PAGCOR regulations. phi68 does not knowingly collect personal data from individuals under the age of 21.

10.2 If phi68 discovers that it has inadvertently collected personal data from a person under the age of 21, it will immediately close the associated account, delete the personal data, and report the incident to PAGCOR as required by regulation.

10.3 If you are a parent or guardian and believe that your child under the age of 21 has registered on the phi68 Platform, please contact phi68 support immediately at [email protected] so that the account can be closed and the data deleted.

11. Changes to This Privacy Policy

11.1 phi68 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When we make material changes, we will notify registered players by email and/or by posting a prominent notice on the phi68 Platform prior to the changes taking effect.

11.2 The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how phi68 protects your personal data.

11.3 Your continued use of the phi68 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy.

12. Contact Our Data Protection Officer

12.1 phi68 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data, please contact our DPO:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on the phi68 Platform

12.2 If you are not satisfied with phi68's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.