68ph Privacy Policy – How We Protect Your Data

This Privacy Policy ("Policy") describes how 68ph ("the Platform", "we", "us", "our"), operator of https://68ph.vip, collects, uses, stores, and protects personal information provided by users ("Member", "User", "you") of the 68ph website, mobile application, and associated services. This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations.

1. Introduction

1.1 68ph is committed to protecting the privacy and personal data of all its members, including those from Manila, Cebu, Davao, Quezon City, and every other province and city across the Philippines where 68ph is accessible.

1.2 By registering an account on 68ph or continuing to use the platform after this Policy has been published, you acknowledge that you have read and understood its contents and consent to the processing of your personal data as described herein.

1.3 This Policy should be read alongside the 68ph Terms & Conditions, which govern the overall use of the platform.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, the data controller responsible for your personal data is 68ph, operating the platform at 68ph.vip.

2.2 Questions or requests relating to this Policy or the handling of your personal data may be directed to 68ph's Data Protection Officer (DPO) at the contact details set out in Section 15 of this Policy.

3. Personal Data We Collect

68ph collects the following categories of personal data:

Registration Data:

• Full legal name
• Date of birth (for age verification — must be 21 years or older)
• Residential address (including city and province)
• Valid email address
• Philippine mobile number
• Username and encrypted password

KYC Verification Data:

• Government-issued identification documents (e.g., Philippine passport, SSS ID, driver's licence, UMID, PhilSys National ID)
• Proof of address documents
• Selfie photographs for identity matching

Financial Data:

• GCash account number (last digits only, for matching purposes)
• PayMaya account reference
• Bank account details for BPI, BDO, Metrobank transfers
• Transaction history (deposits, withdrawals, game bets)

Technical & Usage Data:

• IP address and approximate geolocation
• Device type, operating system, and browser
• Session logs and login timestamps
• Pages viewed and features accessed
• Game play history and betting patterns

Communications Data:

• Support chat and email correspondence
• Survey responses and feedback submitted

4. How We Collect Your Data

4.1 Directly from you — when you register, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions.

4.2 Automatically — through cookies, log files, and similar tracking technologies as you browse and use the 68ph platform. See Section 8 for details.

4.3 From third parties — KYC verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention services, and PAGCOR regulatory systems where applicable.

5. Legal Basis for Processing

68ph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to operate your 68ph account and provide gaming services
• Legal obligation — processing required to comply with PAGCOR regulations, AMLA obligations, and Philippine tax law
• Legitimate interests — fraud prevention, platform security, and responsible gaming monitoring
• Consent — marketing communications and optional personalisation features (consent may be withdrawn at any time)

6. How We Use Your Personal Data

68ph uses collected personal data for the following purposes:

• Account registration, authentication, and 68ph login security
• Identity and age verification (mandatory 21+ requirement)
• Processing deposits and withdrawal requests via GCash, PayMaya, and bank transfers
• Customer support and resolution of disputes
• Regulatory compliance reporting to PAGCOR and other Philippine authorities
• Anti-money laundering (AML) monitoring and suspicious transaction reporting
• Responsible gaming monitoring — detecting patterns associated with problem gambling
• Fraud detection and prevention
• Platform improvement, bug fixing, and performance optimisation
• Marketing communications (with consent)
• Personalisation of the gaming experience (with consent)

7. Data Sharing and Disclosure

7.1 68ph does not sell personal data to third parties. Personal data may be shared with the following categories of recipients where necessary:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard (for transaction processing)
• KYC verification providers — identity verification and age confirmation services
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies as required by law
• IT and security service providers — cloud infrastructure, DDoS protection, and security audit firms operating under data processing agreements
• Legal advisers — where disclosure is necessary to defend or assert legal claims

7.2 All third-party processors engaged by 68ph are contractually obligated to process personal data only in accordance with 68ph's instructions and to maintain appropriate security measures.

8. Cookies and Tracking Technologies

8.1 68ph uses cookies and similar tracking technologies (pixel tags, local storage) to operate and improve the platform. The following cookie categories are used:

• Strictly necessary cookies — required for 68ph login sessions and platform security. Cannot be disabled.
• Performance cookies — collect anonymous usage statistics to improve platform performance.
• Functional cookies — remember your preferences (e.g., language, display settings).
• Analytics cookies — track aggregate usage patterns to inform product decisions.

8.2 You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 68ph platform.

9. Data Security

9.1 68ph implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls with least-privilege principles
• Multi-factor authentication for internal system access
• Regular security audits and penetration testing
• 24/7 security monitoring and incident response protocols

9.2 In the event of a personal data breach that is likely to result in harm to affected individuals, 68ph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will inform affected members without undue delay.

10. Data Retention

10.1 68ph retains personal data for the following periods:

• Account data — for the duration of your account and five (5) years following account closure, as required by PAGCOR and AMLA regulations
• KYC documents — five (5) years from the date of submission or account closure, whichever is later
• Transaction records — five (5) years, as required by AMLA
• Support correspondence — two (2) years from the date of the last communication
• Marketing preferences — until you withdraw consent or close your account

10.2 At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, as a Philippine data subject you have the following rights with respect to your personal data held by 68ph:

• Right to be Informed — the right to know how your data is being processed (addressed by this Policy)
• Right of Access — the right to obtain a copy of your personal data held by 68ph
• Right to Rectification — the right to correct inaccurate or incomplete data
• Right to Erasure — the right to request deletion of your data, subject to legal retention obligations
• Right to Object — the right to object to processing based on legitimate interests or for direct marketing purposes
• Right to Data Portability — the right to receive your data in a structured, machine-readable format
• Right to Lodge a Complaint — the right to file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph

To exercise any of the above rights, contact 68ph's Data Protection Officer at the details in Section 15. 68ph will respond to all valid data subject requests within fifteen (15) business days.

12. Children's Privacy

12.1 21+ The 68ph platform is strictly for adults aged 21 years and above. 68ph does not knowingly collect personal data from persons under 21 years of age.

12.2 If 68ph becomes aware that personal data has been collected from a person under the age of 21 without verified parental consent, such data will be immediately deleted and the account will be closed.

13. Cross-Border Data Transfers

13.1 Some of 68ph's third-party service providers (including cloud infrastructure and security services) may process personal data outside the Philippines. Where such transfers occur, 68ph ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to provide a level of data protection equivalent to the Philippine Data Privacy Act of 2012.

14. Changes to This Policy

14.1 68ph may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. Material changes will be communicated to registered members via email or in-platform notification at least seven (7) days before taking effect.

14.2 The current version of this Policy, together with its effective date, will always be accessible at 68ph.vip/privacy-policy.

15. Contact & Data Protection Officer

For privacy-related enquiries, data subject requests, or to contact 68ph's Data Protection Officer, please use the following channels:

• Live Chat: Available 24/7 via the 68ph platform — select "Privacy / Data Request" from the topic menu
• Email: [email protected] — use subject line "DATA PRIVACY REQUEST"

Our Filipino-speaking support team can assist with privacy queries in both Tagalog and English. Formal data subject requests require identity verification before processing.