68ph Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how 68ph ("68ph", "we", "us", "our") collects, processes, stores, shares, and protects personal data relating to individuals ("you", "Player", "User") who access or use the 68ph platform at 68ph.org, including all associated gaming services, payment systems, customer support channels, and promotional communications.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (NPC). It also reflects our obligations under PAGCOR regulations governing the collection and use of player personal data on licensed online gaming platforms.

By registering an account at 68ph, depositing funds, or otherwise using 68ph services, you acknowledge that you have read, understood, and consented to the data processing practices described in this Policy. If you do not agree with this Policy, you should not create a 68ph account or use 68ph services.

This Policy applies to all personal data 68ph processes in connection with its operations in the Philippines, regardless of where the data is ultimately stored or processed, subject to applicable cross-border data transfer safeguards described in Section 7.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, 68ph is the personal information controller in respect of personal data collected through the 68ph platform. As the personal information controller, 68ph determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

Where 68ph engages third-party service providers (such as payment processors, game software providers, or identity verification services) to process personal data on its behalf, such providers act as personal information processors and are bound by contractual obligations consistent with the requirements of the DPA.

Contact details for data privacy inquiries are set out in Section 15 of this Policy.

3. Data We Collect

68ph collects the following categories of personal data in connection with its services:

3.1 Registration & Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth and age verification data
• Philippine mobile number (primary account identifier)
• Email address
• Username chosen at registration
• Philippine residential address

3.2 KYC & Verification Data

• Copies of government-issued photo identification documents (SSS card, PhilHealth ID, UMID, Driver's License, Passport, or Voter's ID)
• Selfie photographs for biometric verification purposes
• Proof of address documentation where required
• Source of funds documentation for large transaction thresholds as required under the Anti-Money Laundering Act (AMLA)

3.3 Financial Data

• GCash account number, Maya account number, or other payment method identifiers associated with your 68ph wallet
• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references
• Wallet balance history

3.4 Gaming & Behavioral Data

• Game session records including game type, stakes, outcomes, and session duration
• Betting history and wagering patterns
• Bonus and promotion participation records
• Responsible gaming tool usage (deposit limits set, cooling-off periods, self-exclusion requests)

3.5 Technical & Device Data

• IP address and geolocation data (country and region level)
• Device type, operating system, and browser information
• Session identifiers and authentication tokens
• Log data including login timestamps, page navigation records, and error logs

3.6 Communication Data

• Records of customer support interactions including live chat transcripts and email correspondence
• Survey responses and feedback submitted to 68ph
• Records of communication preference settings

4. How We Use Your Data

68ph uses your personal data for the following purposes:

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 68ph processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and 68ph — including account management, game access, payment processing, and support services.
• Legal Obligation: Processing is required to comply with applicable Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and obligations under the Data Privacy Act itself (e.g., KYC and age verification requirements).
• Legitimate Interests: Processing for fraud detection, platform security, and aggregate analytics is conducted on the basis of 68ph's legitimate business interests, provided those interests are not overridden by your rights and interests.
• Consent: Where we send optional marketing communications or process sensitive data beyond what is required by law or contract, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing

68ph does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and with the following categories of recipients:

• Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment service providers receive the minimum personal data necessary to process your transactions. Each provider is subject to their own privacy obligations under Philippine law.
• Identity Verification Providers: Third-party KYC and biometric identity verification services receive identity and document data strictly for verification purposes.
• Game Software Providers: Live casino providers and RNG game providers may receive session data (non-identifying where possible) to facilitate game delivery and dispute resolution.
• Regulatory Authorities: PAGCOR and other Philippine government bodies including the Anti-Money Laundering Council (AMLC) may receive player data as required by law or regulatory order.
• Law Enforcement: Philippine law enforcement authorities may receive personal data in response to lawful court orders, subpoenas, or statutory reporting obligations.
• Responsible Gaming Bodies: In cases involving mandatory self-exclusion enforcement or referral for problem gambling support, relevant data may be shared with PAGCOR's Responsible Gaming unit or recognized support organizations.

7. International Data Transfers

Some of 68ph's service providers — including game software platforms and cloud infrastructure providers — may process personal data in jurisdictions outside the Philippines. Where such transfers occur, 68ph ensures that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act and NPC guidance on cross-border data flows.

Safeguards may include: contractual data processing agreements incorporating NPC-recognized standard clauses, adequacy assessments of the recipient jurisdiction's data protection framework, and binding corporate rules where applicable. By using 68ph services, you acknowledge that your data may be processed outside the Philippines subject to these safeguards.

8. Data Retention

68ph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in any case no longer than required by applicable Philippine law. The following general retention guidelines apply:

• Account and KYC data: Retained for the duration of your active 68ph account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of transaction in compliance with AMLA record-keeping requirements.
• Gaming and session records: Retained for a minimum of three (3) years from the date of activity, or longer where a dispute or investigation is pending.
• Communication data: Customer support records retained for three (3) years from the date of last interaction.
• Marketing data: Retained until you withdraw consent, plus a reasonable administrative period for processing the withdrawal.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to any identifiable individual.

9. Cookies & Tracking Technologies

The 68ph platform uses cookies and similar technologies (including local storage and session identifiers) to operate the platform and deliver a functional, secure experience to players. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These manage your login session, maintain your authenticated state, and support security features including 2FA. These cannot be disabled without preventing normal platform use.
• Functional Cookies: Store your preferences such as language settings and game history display preferences across sessions.
• Analytics Cookies: Collect aggregate, anonymized data on how players navigate 68ph in order to improve platform performance and user experience. No individual player is identifiable from analytics data.

68ph does not use third-party behavioral advertising cookies. You may control cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair or prevent access to the 68ph platform.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in relation to personal data that 68ph holds about you:

To exercise any of these rights, submit a Data Subject Access Request by contacting 68ph through the channels listed in Section 15. 68ph will respond within fifteen (15) business days. Some rights may be limited where processing is required to comply with Philippine legal obligations.

11. Children's Privacy

The 68ph platform is strictly for adults aged 21 years and older, as required by PAGCOR for all licensed online gaming services in the Philippines. 68ph does not knowingly collect personal data from individuals under 21 years of age.

Any account found to have been created by or on behalf of an individual under 21 years of age will be immediately suspended, access to gaming services will be revoked, and personal data associated with the account will be deleted after mandatory regulatory reporting where applicable. If you believe that a person under 21 has submitted personal data to 68ph, please contact us immediately at the details in Section 15.

12. Security Measures

68ph implements technical and organizational security measures appropriate to the risk of processing player personal data. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 68ph servers
• Encryption of personal data and financial records at rest using AES-256 or equivalent standards
• Access controls ensuring that employee access to personal data is restricted to those with a legitimate business need
• Multi-factor authentication requirements for administrative system access
• Regular security assessments and penetration testing of the 68ph platform
• Incident response procedures including mandatory NPC notification within seventy-two (72) hours of becoming aware of a personal data breach that poses risk to data subjects

While 68ph employs robust security measures, no online platform can guarantee absolute security. You are encouraged to protect your own account by using a strong, unique password and enabling two-factor authentication on your 68ph account. Report any suspected unauthorized access immediately to 68ph customer support.

13. Third-Party Links

The 68ph platform may contain references or indirect connections to third-party services such as payment providers accessed via their own interfaces. This Privacy Policy applies solely to data processing conducted by 68ph. 68ph is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third-party service you interact with in connection with your use of 68ph.

14. Amendments to This Policy

68ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or 68ph's data processing practices. Where amendments are material, 68ph will notify registered players by email or on-platform notification prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Your continued use of 68ph services after the effective date of any amended Policy constitutes your acknowledgment of the updated terms. If you do not accept an amended Policy, you should discontinue use of 68ph services and contact support to close your account.

15. Contact & Complaints

For all data privacy inquiries, Data Subject Access Requests, or complaints relating to 68ph's handling of your personal data, please contact:

If you are not satisfied with 68ph's response to a data privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012.