ph968 Privacy Policy

1. Who We Are (Data Controller)

1.1 For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("DPA IRR"), ph968 is the personal information controller in respect of the personal data of players and users of the ph968 platform.

1.2 ph968 operates the online gaming and sports betting platform accessible at ph968.app, serving registered players across the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and all other provinces and cities nationwide.

1.3 All inquiries relating to this Privacy Policy, including requests to exercise data subject rights, should be directed to the ph968 Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy.

2. Personal Data We Collect

2.1 ph968 collects the following categories of personal data from players and platform users:

2.1.1 Identity & Registration Data

• Full legal name as it appears on a valid Philippine government-issued ID;
• Date of birth (used for 21+ age verification in compliance with PAGCOR requirements);
• Philippine mobile number (used as primary account identifier and for OTP authentication);
• Username and encrypted password credentials;
• Gender (optional, collected for responsible gaming profiling purposes).

2.1.2 Identity Verification (KYC) Data

• Scanned or photographed copy of a valid Philippine government-issued ID (e.g., PhilSys National ID, UMID, driver's licence, or passport);
• Proof of address documentation where required for enhanced due diligence;
• Selfie or liveness-check image where biometric verification is required by regulatory guidelines.

2.1.3 Financial & Transaction Data

• GCash account reference or PayMaya wallet reference linked to your ph968 account;
• BPI, BDO, or Metrobank account details provided for bank transfer deposits or withdrawals;
• Deposit history, withdrawal history, and transaction amounts in PHP;
• Bonus and promotional credit history.

2.1.4 Gaming & Behavioural Data

• Game session logs, bet amounts, game outcomes, and win/loss records;
• Responsible gaming preference settings (deposit limits, session timers, self-exclusion status);
• Platform navigation behaviour and feature usage patterns.

2.1.5 Technical & Device Data

• IP address and approximate geolocation at time of login;
• Device type, operating system, and browser version;
• Session timestamps and login history;
• Cookies and similar tracking technologies (see Section 10).

2.1.6 Communications Data

• Content of customer support interactions via live chat or email;
• Survey responses and player feedback submitted to ph968.

3. How We Collect Your Data

3.1 ph968 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotions;
• Automated collection: Technical and device data collected automatically when you access the ph968 platform, including via cookies and server logs;
• Third-party payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, and Metrobank when you conduct financial transactions with ph968;
• Identity verification services: Data received from third-party KYC and AML screening providers engaged by ph968 to comply with the Anti-Money Laundering Act and PAGCOR regulatory requirements.

4. How We Use Your Personal Data

4.1 ph968 uses the personal data collected for the following purposes:

• To create, manage, and administer your ph968 player account;
• To verify your identity and confirm that you meet the 21+ age requirement mandated by PAGCOR;
• To process deposits, withdrawals, and other financial transactions via GCash and other Philippine payment channels;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activity in accordance with the AMLA and its implementing rules;
• To provide customer support and resolve account or payment queries;
• To deliver bonuses, promotions, and personalised offers to eligible ph968 players;
• To monitor gaming activity for responsible gaming purposes and to enforce self-exclusion and limit settings;
• To comply with applicable Philippine law, PAGCOR regulatory obligations, and orders from competent authorities;
• To improve the ph968 platform through analysis of aggregated, anonymised usage data;
• To communicate with you about your account, platform updates, and promotional communications where you have opted in.

5. Legal Basis for Processing

5.1 ph968 processes personal data under the following lawful bases as recognised by the Philippine Data Privacy Act and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to fulfil our obligations to you as a ph968 account holder, including account administration, payment processing, and game provision;
• Legal obligation: Processing required to comply with the AMLA, PAGCOR regulations, National Privacy Commission requirements, and other applicable Philippine law;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where ph968's interests do not override your fundamental privacy rights;
• Consent: Processing for optional purposes such as marketing communications, where your explicit consent has been obtained and may be withdrawn at any time.

6. Data Sharing & Disclosure

6.1 ph968 does not sell your personal data to third-party marketers. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction-specific data necessary to process your deposits and withdrawals;
• KYC and AML providers: Identity verification and anti-money laundering screening services engaged by ph968 under appropriate data processing agreements;
• Game providers: Certified game studios supplying games to the ph968 platform may receive anonymised session identifiers necessary for game operation and dispute resolution;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where disclosure is required by law or regulatory directive;
• Legal and professional advisers: Lawyers, accountants, or auditors engaged by ph968 in connection with its legal obligations, subject to professional confidentiality obligations;
• Corporate transactions: In the event of a merger, acquisition, or restructuring of ph968, player data may be transferred to a successor entity under equivalent data protection obligations.

6.2 All third parties with whom ph968 shares personal data are required to maintain appropriate technical and organisational data protection measures consistent with ph968's obligations under the DPA.

7. International Data Transfers

7.1 Where ph968 engages service providers located outside the Philippines — such as international game certification bodies or cloud infrastructure providers — personal data may be transferred to jurisdictions outside the Republic of the Philippines.

7.2 ph968 ensures that any international transfer of personal data is subject to appropriate safeguards, including contractual clauses that impose data protection obligations on the recipient equivalent to those required under Philippine law, or where the recipient jurisdiction has been assessed as providing an adequate level of data protection by the National Privacy Commission.

8. Data Retention

8.1 ph968 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by applicable Philippine law.

8.2 Specific retention periods applicable to ph968:

• Account and KYC records: retained for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• Transaction records: retained for a minimum of five (5) years from the date of each transaction;
• Game logs and dispute records: retained for a minimum of two (2) years;
• Customer support communications: retained for a minimum of two (2) years from the date of the interaction;
• Marketing consent records: retained until consent is withdrawn and for an additional one (1) year thereafter.

8.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

9. Security Measures

9.1 ph968 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Technical and organisational measures in place include:

• SSL/TLS encryption for all data in transit between your device and ph968 servers;
• AES-256 encryption for sensitive personal data stored at rest, including KYC documents and financial records;
• Multi-factor authentication options for player accounts;
• Automated brute-force detection and account lockout controls on the ph968 Login interface;
• Role-based access controls limiting ph968 staff access to personal data on a need-to-know basis;
• Regular internal security audits and vulnerability assessments of the ph968 platform;
• Staff training on data handling obligations under the Philippine Data Privacy Act.

9.2 Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a personal data breach affecting your rights and freedoms, ph968 will notify the National Privacy Commission and affected data subjects in accordance with the notification requirements of the DPA IRR.

10. Cookies & Tracking Technologies

10.1 ph968 uses cookies and similar tracking technologies on the platform. Cookies are small data files stored on your device that help ph968 remember your preferences, maintain your authenticated session, and analyse platform usage.

10.2 Categories of cookies used by ph968:

• Strictly necessary cookies: Required for platform operation, including session authentication and security functions. These cannot be disabled without affecting platform functionality;
• Functional cookies: Remember your language preferences, responsible gaming settings, and display preferences;
• Analytics cookies: Collect anonymised data about how Filipino players navigate and use the ph968 platform, used solely to improve platform performance and user experience.

10.3 ph968 does not use third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the ph968 platform.

11. Your Data Subject Rights

11.1 Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by ph968:

• Right to be informed: The right to know what personal data ph968 holds about you and how it is being processed;
• Right of access: The right to request a copy of the personal data ph968 holds about you;
• Right to rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to erasure: The right to request deletion of your personal data where ph968 has no lawful basis for continued processing, subject to applicable legal retention obligations;
• Right to object: The right to object to specific types of processing, including processing for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe ph968 has processed your personal data in breach of the DPA.

11.2 To exercise any of the above rights, contact the ph968 Data Protection Officer as set out in Section 14. ph968 will respond to all data subject requests within fifteen (15) calendar days of receipt, in accordance with the DPA IRR.

12. Children & Minors

12.1 ph968 does not knowingly collect personal data from individuals under the age of 21. The ph968 platform is strictly intended for adult users aged 21 and above, in compliance with PAGCOR's minimum age requirements for online gaming in the Philippines.

12.2 Where ph968 discovers or is notified that a player account belongs to an individual under 21, the account will be immediately suspended, all personal data associated with the account will be deleted (subject to any mandatory legal retention obligations), and the matter will be reported to relevant Philippine regulatory authorities where required by law.

13. Changes to This Privacy Policy

13.1 ph968 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable Philippine law, PAGCOR regulatory requirements, or ph968's data processing practices. The "Last updated" date at the top of this page will be revised to reflect any material amendments.

13.2 Where a material change is made to this Policy that affects how ph968 processes your existing personal data, ph968 will provide notice through the ph968 platform or via your registered contact details prior to the change taking effect, and will seek fresh consent where required by law.

13.3 Your continued use of the ph968 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage all players to review this Policy periodically.

14. Contact & Data Protection Officer

14.1 For any questions, concerns, or requests relating to this Privacy Policy or to ph968's processing of your personal data, you may contact the ph968 Data Protection Officer by:

• Email: [email protected] (displayed as plain text — not a clickable link)
• Live chat: available 24/7 from within your authenticated ph968 account dashboard

14.2 ph968 customer support and the DPO team operate on Philippine Standard Time (PST, UTC+8). Written inquiries will receive a substantive response within fifteen (15) calendar days of receipt, in accordance with the timelines prescribed under the DPA IRR.

14.3 If you are not satisfied with ph968's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) through the NPC's official complaint mechanisms.