ph968 Privacy Policy

1 Introduction

ph968 is committed to protecting the privacy and security of the personal information entrusted to us by Filipino players. This Privacy Policy describes in detail the types of personal information ph968 collects, the purposes for which we use that information, the circumstances under which we may share it, and the rights you have regarding your personal data under Philippine law.

This Privacy Policy applies to all personal information collected through the ph968 Platform at https://ph968.cam, including information collected during account registration, gameplay, financial transactions, customer support interactions, and all other uses of ph968 services.

By creating a ph968 account or using any ph968 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein, in accordance with Republic Act 10173 (Data Privacy Act of 2012).

2 Data Controller

For the purposes of the Data Privacy Act of 2012, ph968 is the data controller responsible for your personal information. ph968 determines the purposes and means of processing your personal data and is accountable for compliance with applicable data protection legislation, including RA 10173 and the regulations issued by the National Privacy Commission (NPC).

ph968 is registered with the National Privacy Commission as a personal information controller in accordance with NPC Circular No. 16-03. Our registration with the NPC reflects our commitment to transparent and lawful data processing practices under Philippine jurisdiction.

3 Personal Data We Collect

ph968 collects and processes the following categories of personal information, depending on your interactions with the Platform:

3.1 Registration and Account Information

• Full legal name (as appearing on your government-issued ID)
• Date of birth
• Philippine mobile telephone number
• Email address
• Residential address (proof of address may be required for KYC)
• Username and encrypted password
• Preferred language and communication preferences

3.2 Identity Verification (KYC) Information

• Copies of Philippine government-issued identification documents (PhilSys National ID, passport, driver's license, PRC ID, Postal ID, Voter's ID, or other valid government-issued ID)
• Proof of residential address (utility bills, bank statements, or government correspondence)
• Selfie or biometric verification data for identity authentication where required
• Source of funds documentation where required under AML regulations

3.3 Financial and Transaction Information

• Payment method details (GCash mobile number, Maya account identifier, bank account details for deposits and withdrawals, cryptocurrency wallet addresses)
• Transaction history (deposits, withdrawals, wagers, wins, and all financial movements on your account)
• Wagering behavior and gaming activity records
• Bonus claim and usage history

3.4 Technical and Usage Information

• IP address and geolocation data
• Device type, operating system, and browser information
• Login timestamps and session duration
• Pages visited, games played, and interaction patterns
• Cookies and tracking identifiers (see Section 10 for details)
• Network connection type and speed

3.5 Communications and Support Data

• Live chat transcripts and customer support ticket history
• Email correspondence with ph968
• Survey responses and feedback submissions
• Marketing communication preferences

4 How We Collect Your Data

ph968 collects personal information through the following methods:

• Direct Provision: Information you provide directly when registering an account, completing your profile, uploading KYC documents, or contacting customer support.
• Automated Collection: Technical data collected automatically through cookies, web beacons, server logs, and similar technologies as you use the ph968 Platform.
• Third-Party Payment Processors: Transaction information shared by GCash, Maya, Philippine banks, and other payment service providers when you deposit or withdraw funds.
• Game Providers: Gameplay data and session records from third-party game studios whose titles are hosted on the ph968 Platform.
• Publicly Available Sources: In limited circumstances, ph968 may verify information you provide against publicly accessible databases or directories to fulfill regulatory obligations.

5 How We Use Your Personal Data

ph968 processes your personal information for the following purposes, all of which are necessary for the provision of ph968 services or required by applicable law:

6 Legal Basis for Processing

Under Republic Act 10173, ph968 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to provide the ph968 Platform services you have requested, including account management, gaming access, and financial transactions.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions, Republic Act 9160 (Anti-Money Laundering Act), Republic Act 10175 (Cybercrime Prevention Act), and all applicable NPC regulations.
• Legitimate Interest: Processing necessary for ph968's legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your privacy rights.
• Consent: Processing carried out based on your explicit, freely given, specific, and informed consent — principally for marketing communications. You may withdraw this consent at any time without affecting other processing activities.

7 Data Sharing and Disclosure

ph968 does not sell, rent, or lease your personal information to any third party. ph968 may share your personal information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

7.1 Regulatory and Law Enforcement Authorities

ph968 is legally required to share certain player information and transaction records with PAGCOR as part of its licensing obligations. ph968 is also required under RA 9160 to report covered and suspicious transactions to the Anti-Money Laundering Council (AMLC). Compliance with valid orders from Philippine courts, the NPC, or other competent Philippine government authorities may also require disclosure of player data.

7.2 Payment Service Providers

ph968 shares the personal and financial information necessary to process deposits and withdrawals with GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other Philippine payment processors. These providers receive only the data necessary to complete the relevant transaction and are bound by their own privacy policies and applicable Philippine financial regulation.

7.3 Game Providers

Third-party game studios whose titles are available on ph968 may receive limited player session and account data necessary to deliver and record gameplay. This data sharing is governed by data processing agreements between ph968 and each provider, which include obligations to process data only for the specified purpose and to maintain appropriate security standards.

7.4 Technology and Infrastructure Service Providers

ph968 uses third-party service providers for cloud hosting, cybersecurity monitoring, identity verification processing, and platform analytics. These providers operate as data processors under ph968's instruction and are contractually prohibited from using player data for their own purposes. All such providers are selected on the basis of their demonstrated security and privacy compliance standards.

7.5 KYC Verification Partners

ph968 may use accredited third-party identity verification services to assist with KYC document review and biometric authentication. These partners process only the information required to complete identity verification and are bound by confidentiality agreements and applicable data protection law.

8 Data Retention Period

ph968 retains your personal information for as long as is necessary to fulfill the purposes for which it was collected, and in accordance with the minimum retention periods required under applicable Philippine law:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and AML record-keeping obligations under RA 9160.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, as required by the Anti-Money Laundering Act and PAGCOR reporting obligations.
• Game Records: Retained for the period required by PAGCOR regulations, typically not less than three (3) years.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant support interaction, or longer where related to an unresolved dispute.
• Marketing Consent Records: Retained for the duration of your registration and for three (3) years following account closure, to demonstrate compliance with consent requirements.
• Technical Logs: Retained for periods appropriate to their security monitoring purpose, typically between ninety (90) days and two (2) years.

Upon expiry of applicable retention periods, ph968 will securely delete or anonymize your personal information in a manner that prevents reconstruction or re-identification.

9 Security Measures

ph968 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, accidental loss, destruction, disclosure, or alteration. These measures include:

• Encryption: All data transmitted between your device and ph968 servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest — including payment information and identity documents — is encrypted using industry-standard encryption algorithms.
• Access Controls: Access to player personal data within ph968's systems is restricted to authorized personnel with a documented business need. Access is governed by role-based access controls and requires multi-factor authentication for all administrative access.
• Network Security: ph968's infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems, and continuous network monitoring for anomalous activity.
• Physical Security: ph968's server infrastructure is hosted in accredited data centers with physical access controls, CCTV monitoring, and environmental protection systems.
• Security Audits: ph968 conducts regular security assessments including penetration testing and vulnerability scanning to identify and remediate security weaknesses before they can be exploited.
• Staff Training: All ph968 personnel with access to player data undergo regular data privacy and security training in accordance with NPC requirements.

10 Cookies & Tracking Technologies

ph968 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device that allows ph968 to recognize your browser and record certain information about your use of the Platform.

10.1 Types of Cookies We Use

10.2 Cookie Management

You may control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and configure notifications when cookies are set. Note that disabling strictly necessary cookies will impair or prevent access to the ph968 Platform, as these cookies are required for core functionality including authentication and security.

ph968 does not use cookies to deliver third-party advertising, and does not share cookie data with external advertising networks for targeting purposes.

11 Your Privacy Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by ph968:

• Right to Be Informed: You have the right to be informed about how ph968 collects, uses, and processes your personal information — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal information ph968 holds about you, including a description of the data, its sources, and the purposes for which it is being processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information held by ph968. You may update many account details directly through your ph968 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to ph968's legal obligations to retain data under PAGCOR regulations and AML law, which may override erasure requests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where ph968 relies on legitimate interest as the legal basis, or where data is being used for direct marketing purposes.
• Right to Lodge a Complaint: If you believe ph968 has violated your rights under RA 10173, you have the right to lodge a complaint with the National Privacy Commission at https://www.privacy.gov.ph (external regulatory authority — not a ph968 link).

To exercise any of the rights above, please contact ph968's Data Protection Officer through the contact details provided in Section 14 of this Policy. ph968 will respond to all verifiable data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

12 Children's Privacy

The ph968 Platform is strictly prohibited for use by persons under 21 years of age, in accordance with PAGCOR's minimum age requirements for online casino gaming in the Philippines. ph968 does not knowingly collect personal information from persons under 21 years of age.

If ph968 becomes aware that personal information has been collected from a person under 21 years of age — whether through registration, account activity, or KYC review — ph968 will immediately suspend the relevant account and take steps to delete the associated personal data, subject to any applicable legal retention obligations relating to the underage use incident itself.

If you believe that a person under 21 years of age has created a ph968 account, please contact ph968 support immediately at [email protected] so that appropriate action can be taken without delay.

13 Changes to This Privacy Policy

ph968 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. Material changes to this Privacy Policy will be communicated to registered players by email notification to the address registered on their account, and by prominent notice on the ph968 Platform, not less than seven (7) days before the amended Policy takes effect.

Your continued use of the ph968 Platform after the effective date of any amended Privacy Policy constitutes your acknowledgment of the updated terms. We encourage you to review this Privacy Policy periodically to remain informed of how ph968 protects your personal information. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

14 Contact — Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or ph968's handling of your personal data, please contact ph968's Data Protection Officer through the following channels:

• 24/7 Live Chat: Available directly on the ph968 Platform at https://ph968.cam — response within 60 seconds for general queries.
• Email: [email protected] (plain text — not a clickable link). Email responses are provided within 2–4 hours for general support and within 15 business days for formal data subject rights requests.

When submitting a formal privacy inquiry or data subject rights request by email, please include "Privacy Request" or "Data Subject Rights" in your subject line, along with your registered account username and a description of your request. ph968 will acknowledge receipt of your request and advise of the expected response timeline.