ph67 Privacy Policy – How We Handle Your Personal Data

01 Introduction

1.1 ph67 ("ph67," "we," "us," "our") is committed to protecting the privacy and personal data of all players who access and use the ph67 online gaming platform at ph67.club ("Platform"). This Privacy Policy ("Policy") describes how ph67 collects, uses, stores, shares, and protects the personal information of registered players and platform visitors across the Philippines.

1.2 This Policy applies to all Filipino players and other users who access the ph67 Platform, regardless of the device used — whether accessing via mobile browser on Android or iOS, or via desktop browser from any location in the Philippines including Metro Manila, Cebu, Davao, and all other regions.

1.3 By creating an account on ph67, completing the ph67 Login process, or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

1.4 This Policy should be read in conjunction with ph67's Terms & Conditions and Responsible Gaming Policy, both of which are available on the ph67 Platform and are incorporated herein by reference.

02 Data Controller

2.1 For the purposes of the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, ph67 acts as the data controller with respect to the personal information of its registered players and Platform users.

2.2 As data controller, ph67 is responsible for determining the purposes and means by which your personal data is processed, and for ensuring that such processing complies with applicable Philippine data protection law.

2.3 Any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph67 may be directed to the ph67 Data Privacy contact at: [email protected] (displayed as plain text — not a clickable link).

03 Personal Data We Collect

3.1 ph67 collects the following categories of personal data from players:

Identity and Contact Data

• Full legal name as it appears on a Philippine government-issued identification document;
• Date of birth (used to verify that you are at least 21 years of age, as required by Philippine law and PAGCOR regulations);
• Philippine mobile telephone number (used as primary account identifier and for OTP verification);
• Email address (optional at registration; used for account communications and recovery);
• Residential address within the Philippines.

Identity Verification (KYC) Data

• Copy of a valid Philippine government-issued identification document (e.g., PhilSys ID, UMID, Passport, Driver's License, SSS ID, PRC ID, Voter's ID);
• Selfie or photograph for facial verification purposes, where required by KYC procedures;
• Source of funds documentation, where required by PAGCOR anti-money laundering compliance procedures.

Financial and Transaction Data

• GCash or PayMaya mobile number used for deposits and withdrawals;
• Bank account details (BPI, BDO, Metrobank) where provided for bank transfer transactions;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references;
• Wallet balance history and bonus credit records.

Gaming Activity Data

• Game session logs including game titles, bet amounts, win/loss outcomes, and session duration;
• Sports betting activity including markets wagered on, stake amounts, and bet outcomes;
• Bonus usage history and wagering requirement fulfillment records.

Technical and Usage Data

• IP address at time of ph67 Login and during active sessions;
• Device type, operating system, browser version, and screen resolution;
• Mobile network operator (e.g., Globe, Smart, DITO) where applicable;
• Pages visited, features accessed, and interaction patterns within the Platform;
• Login timestamps, session duration, and logout events.

04 How We Collect Your Data

4.1 ph67 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing the ph67 Login process, submitting KYC documents, making deposits or withdrawals, contacting ph67 support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the ph67 Platform, including IP address, device identifiers, and session data, via server logs and cookies;
• Third-party sources: Identity verification service providers who assist ph67 in validating KYC documents; payment processors (GCash, PayMaya, BPI, BDO, Metrobank) who provide transaction reference data; fraud prevention services that provide risk signals.

05 How We Use Your Personal Data

5.1 ph67 uses the personal data it collects for the following purposes:

06 Legal Basis for Processing

6.1 ph67 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 (Republic Act 10173) of the Philippines:

• Contract performance: Processing necessary to provide gaming services, manage your ph67 account, and fulfill deposit and withdrawal transactions;
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money laundering laws, and orders from Philippine courts or government authorities;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, where you have given explicit consent. You may withdraw marketing consent at any time by contacting ph67 support.

07 Data Sharing and Disclosure

7.1 ph67 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes.

7.2 ph67 may share your personal data with the following categories of recipients, only to the extent necessary for the stated purpose:

• PAGCOR and Philippine regulatory authorities: As required for licensing compliance, audit obligations, and regulatory reporting;
• Philippine law enforcement agencies: Where disclosure is required by court order, subpoena, or applicable Philippine law;
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and USDT processing services, as necessary to process your financial transactions;
• Identity verification providers: Third-party KYC and anti-fraud service providers engaged by ph67 to assist with player identity verification;
• Technical service providers: Cloud hosting, security, analytics, and platform infrastructure providers engaged by ph67 under strict data processing agreements;
• Anti-money laundering (AML) compliance services: Where required for regulatory compliance under the Anti-Money Laundering Act (Republic Act 9160) and its amendments.

08 Cookies and Tracking Technologies

8.1 ph67 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including maintaining your ph67 Login session, remembering your preferences, and enabling secure navigation;
• Analytics cookies: Used to understand how players use the Platform (e.g., which pages are visited, how long sessions last) in order to improve the Platform experience — data collected for analytics is aggregated and not linked to individual player identities;
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

8.2 You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may impair your ability to use certain features of the ph67 Platform, including the ph67 Login function.

8.3 ph67 does not use third-party advertising cookies or tracking technologies for behaviorally targeted advertising purposes.

09 Data Retention

9.1 ph67 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of 5 years following account closure, in compliance with PAGCOR record-keeping requirements and applicable Philippine anti-money laundering law;
• Financial and transaction records: Retained for a minimum of 5 years following the date of each transaction, in accordance with Philippine financial record-keeping obligations;
• KYC documents: Retained for a minimum of 5 years following the completion of KYC verification or account closure, whichever is later;
• Game activity logs: Retained for a minimum of 3 years following the date of each game session;
• Technical and usage data: Retained for a maximum of 12 months, after which it is deleted or anonymized.

9.2 Where a legal obligation, regulatory requirement, or legitimate dispute requires data to be retained beyond the periods above, ph67 will retain the relevant data for as long as that obligation persists.

10 Security Measures

10.1 ph67 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between players' devices and ph67 servers;
• Encrypted storage of sensitive personal data including identity documents and financial information;
• OTP-based multi-factor authentication for ph67 Login and sensitive account actions;
• Access controls limiting ph67 personnel access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of ph67 platform systems;
• Automated anomaly detection to identify and respond to suspicious account activity.

10.2 Notwithstanding the above, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to the rights and freedoms of affected players, ph67 will notify the National Privacy Commission and affected players in accordance with applicable Philippine law.

11 Your Data Rights

11.1 Under the Data Privacy Act of 2012 (Republic Act 10173), Philippine players have the following rights with respect to their personal data held by ph67:

• Right to be informed: The right to know what personal data ph67 holds about you and how it is being processed — this Policy fulfills that obligation;
• Right to access: The right to request a copy of your personal data held by ph67;
• Right to correction: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to legal retention obligations and ongoing regulatory requirements;
• Right to object: The right to object to processing based on legitimate interests, including processing for marketing purposes;
• Right to data portability: The right to request your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe ph67 has processed your data unlawfully.

11.2 To exercise any of the above rights, please contact ph67 at [email protected]. ph67 will respond to data rights requests within 15 business days of receipt. Some requests may require identity verification before they can be processed.

12 Children's Privacy and Age Restrictions

12.1 The ph67 Platform is strictly intended for adults who are 21 years of age or older, as required by Philippine gaming regulations. ph67 does not knowingly collect personal data from individuals below 21 years of age.

12.2 If ph67 discovers that personal data has been collected from an individual below the minimum age, such data will be deleted immediately and the associated account will be terminated. Any funds deposited to such an account will be returned to the verified payment source minus any transaction fees incurred.

12.3 If you believe a person below 21 years of age has registered an account on ph67, please contact ph67 support immediately at [email protected].

13 Updates to This Privacy Policy

13.1 ph67 reserves the right to update this Privacy Policy at any time. Updated versions will be published on this page with a revised "Last Updated" date. Material changes will be communicated to registered players via the contact details on their ph67 account.

13.2 Continued use of the ph67 Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised Policy. If you do not agree to any update, you should cease using the Platform and request account closure.

13.3 We encourage all ph67 players to review this Policy periodically, particularly before making significant transactions or account changes.

14 Contact and Data Privacy Inquiries

14.1 For all privacy-related inquiries, data rights requests, or complaints regarding ph67's handling of your personal data, please contact the ph67 Data Privacy team:

14.2 If you are not satisfied with ph67's response to your data privacy inquiry, you have the right to escalate your complaint to the Philippine National Privacy Commission (NPC), which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012 in the Philippines.