ph67 Privacy Policy

ph67 Casino ("ph67," "we," "us," or "our") operates the online gaming platform accessible at ph67.asia. This Privacy Policy describes how ph67 collects, processes, stores, shares, and protects the personal data of individuals ("Players," "you," or "your") who register accounts, use ph67 Services, or otherwise interact with the ph67 platform.

This policy applies to all personal data collected through the ph67 website, mobile web interface, customer support channels, and any other means by which you interact with ph67. It does not apply to third-party websites or services that may be linked to from ph67, including game provider platforms operated independently.

By registering an account with ph67 or using ph67 Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not use ph67 Services.

This Privacy Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

ph67 Casino, operating under the ph67.asia domain, acts as the data controller with respect to the personal data of Players collected through the platform. As data controller, ph67 determines the purposes for which and the means by which personal data is processed.

ph67's designated Data Protection Officer (DPO) may be contacted for matters relating to data privacy, rights requests, or complaints through the contact details provided in Section 14 of this policy.

ph67 collects the following categories of personal data from Players:

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued Philippine identification document
• Date of birth (collected to verify the 21+ age requirement)
• Philippine mobile number and/or email address
• Username and encrypted password hash
• Residential address (required for KYC verification)
• Nationality and country of residence

3.2 Identity Verification (KYC) Documents

• Copies of government-issued Philippine identification (e.g., PhilSys ID, Passport, UMID, Driver's License, Voter's ID)
• Proof of address documentation (e.g., utility bill, bank statement)
• Payment method verification documents (e.g., GCash or Maya account screenshot confirming account holder name)

3.3 Financial & Transaction Data

• Deposit and withdrawal history, including amounts, timestamps, and payment method references
• GCash, Maya, BPI, BDO, Metrobank, or other payment method account identifiers (reference numbers only — ph67 does not store full bank account or card numbers)
• Bonus claim history and wagering activity
• Current account balance and transaction ledger

3.4 Gaming & Behavioral Data

• Game session logs, including games played, session duration, bet amounts, and outcomes
• Sports betting history and wager records
• VIP tier status and loyalty point accumulation
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session identifiers and authentication tokens
• Cookies and similar tracking technologies (see Section 6)

3.6 Communications Data

• Records of customer support interactions via live chat
• Email correspondence with ph67 support
• Complaints, feedback, and dispute records

ph67 collects personal data through the following means:

• Direct submission: Data you provide during account registration, KYC verification, payment transactions, or when contacting ph67 support.
• Automated collection: Technical and behavioral data collected automatically as you use the ph67 platform, including via cookies, session logs, and server-side event tracking.
• Third-party providers: Identity verification data returned from KYC/AML service providers engaged by ph67; payment confirmation data from GCash, Maya, and other payment processors; fraud prevention signals from security service providers.

The table below summarizes the purposes for which ph67 processes your personal data and the corresponding legal basis under applicable Philippine law:

Purpose	Data Categories Used	Legal Basis
Account registration and management	Registration & Identity, Technical	Contractual necessity
Age verification (21+ enforcement)	Identity, KYC Documents	Legal obligation; contractual necessity
Payment processing and withdrawal handling	Financial & Transaction	Contractual necessity
Anti-money laundering (AML) compliance	Identity, Financial & Transaction, KYC	Legal obligation
Fraud prevention and platform security	Technical, Financial & Transaction	Legitimate interest; legal obligation
Provision of gaming services and personalization	Gaming & Behavioral, Technical	Contractual necessity; consent
Responsible gaming monitoring	Gaming & Behavioral, Registration	Legal obligation; legitimate interest
Customer support and dispute resolution	Communications, Identity, Financial	Contractual necessity; legal obligation
Marketing communications (opt-in only)	Registration (email/mobile)	Consent
Analytics and platform improvement	Technical, Gaming & Behavioral (aggregated)	Legitimate interest

ph67 uses cookies and similar technologies to maintain session state, prevent fraud, and improve platform performance. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens and security cookies. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations. These can be disabled but will result in loss of saved preferences.
• Analytics Cookies: Collect aggregated, anonymized data about how players interact with ph67 pages to improve platform design and performance. ph67 uses first-party analytics only and does not employ third-party advertising trackers.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to ph67 and using core platform features.

ph67 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers receive transaction reference data necessary to process deposits and withdrawals.
• KYC/AML verification providers: Third-party identity verification services receive identity document data to fulfil regulatory age and identity verification requirements.
• Game providers: Game developers may receive anonymized session identifiers to deliver game content. ph67 does not share personally identifiable information with game providers beyond what is technically required to establish a game session.
• Fraud prevention and security services: Technical data including IP addresses may be shared with fraud detection providers to protect the platform and other players.
• Legal and regulatory authorities: ph67 will disclose personal data to Philippine government authorities, law enforcement, or regulators where required to do so by applicable law, court order, or regulatory direction — without prior notice to the Player where prohibited by law from providing such notice.
• Business transfers: In the event of a merger, acquisition, or sale of ph67's assets, Player data may be transferred to the relevant successor entity, subject to this Privacy Policy continuing to apply.

All third parties with whom ph67 shares personal data are required to handle that data in accordance with applicable data protection law and are contractually prohibited from using it for any purpose beyond the specific service they provide to ph67.

Some of ph67's service providers — including game developers and certain technical infrastructure providers — may be located outside the Philippines. Where personal data is transferred to a recipient in a country that does not provide a level of data protection equivalent to that provided under Philippine law, ph67 ensures that appropriate contractual safeguards are in place, consistent with the requirements of the Philippines' National Privacy Commission.

By using ph67 Services, you acknowledge and consent to the transfer of your personal data to recipients outside the Philippines where necessary for the purposes described in this Privacy Policy, subject to the safeguards described above.

ph67 implements technical and organizational security measures appropriate to the risks associated with processing player personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between Players and the ph67 platform
• Encrypted storage of passwords (hashed using industry-standard algorithms — passwords are never stored in plaintext)
• Access controls restricting internal access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments of the ph67 platform
• Two-factor authentication availability for all Player accounts
• Monitoring systems for unusual account activity and unauthorized access attempts

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely secure. ph67 cannot guarantee absolute security of your personal data and shall not be liable for unauthorized access resulting from circumstances beyond our reasonable control. In the event of a data breach affecting your personal data, ph67 will notify affected Players and the National Privacy Commission in accordance with applicable Philippine law.

ph67 retains your personal data for the following periods:

• Active accounts: Personal data is retained for the duration of your account with ph67, plus a minimum of five (5) years following account closure, to satisfy AML, financial record-keeping, and regulatory compliance requirements.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following the date of verification, as required by applicable Philippine financial crime prevention regulations.
• Transaction records: Financial transaction data is retained for a minimum of five (5) years following the relevant transaction, consistent with Philippine accounting and AML requirements.
• Customer support records: Communication records are retained for three (3) years following the date of interaction, or for the duration of any open dispute.
• Marketing data: Email and SMS marketing consent records are retained until you withdraw consent, plus a reasonable period thereafter as evidence of the consent previously given.
• Technical and analytics data: Aggregated, anonymized analytics data may be retained indefinitely for platform improvement purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized.

Under the Philippines' Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by ph67:

• Right to be Informed: The right to be informed that your personal data is being processed and the basis, purposes, and extent of that processing — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data ph67 holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. For basic account information, you may update certain details directly through your ph67 account settings.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph67's legal retention obligations which may override this right in certain circumstances.
• Right to Data Portability: The right to request that ph67 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, or where processing is based on legitimate interests.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph67 has processed your personal data in violation of applicable law.

To exercise any of these rights, please submit a written request to ph67 at [email protected] with the subject line "Data Privacy Request." ph67 will acknowledge your request within five (5) Philippine business days and will respond substantively within thirty (30) days, consistent with NPC guidelines.

ph67 Services are strictly intended for individuals aged 21 years and above. ph67 does not knowingly collect personal data from individuals under the age of 21. If ph67 discovers or is notified that personal data has been collected from a person under 21, ph67 will immediately suspend the associated account, take steps to delete the relevant data, and, where applicable, return any deposited funds to the original payment method.

If you are a parent or guardian and believe that your child under the age of 21 has submitted personal data to ph67, please contact ph67 support immediately at [email protected] so that the appropriate action can be taken without delay.

ph67 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. The date of the most recent update is indicated at the top of this document. Where changes are material, ph67 will endeavor to notify registered Players via email or in-platform notification prior to the revised policy taking effect.

Your continued use of ph67 Services following the posting of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how ph67 protects your personal data.

For questions, concerns, rights requests, or complaints related to this Privacy Policy or ph67's data processing practices, please contact ph67's Data Protection Officer through the following channels:

• Privacy / DPO Email: [email protected] — Subject line: "Data Privacy Request"
• Live Chat: Available 24/7 through the ph67 platform after logging in
• Platform: ph67.asia

ph67 aims to acknowledge all privacy-related inquiries within five (5) Philippine business days. Formal data subject rights requests will be processed within thirty (30) days of receipt.

If you are dissatisfied with ph67's response to a privacy inquiry or complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (privacy.gov.ph). ph67 cooperates fully with NPC investigations.