ph67c Privacy Policy

1 Introduction

ph67c is the Philippines' premier online gaming and sports betting platform, serving players from Manila to Davao and beyond. We are committed to maintaining the privacy and security of your personal information. This Privacy Policy sets out in clear, plain terms what data we collect from you, why we collect it, how we use and protect it, and what rights you have in relation to it.

By registering an account, accessing the ph67c platform, or otherwise using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the ph67c platform and may request account closure by contacting our support team.

This Privacy Policy applies to all personal data collected through the ph67c website, mobile web platform, and any associated services, promotions, or communications we provide. It does not apply to third-party websites or services that may be linked from our platform; those services are governed by their own privacy policies.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and applicable data protection regulations, ph67c acts as the Personal Information Controller (PIC) in respect of the personal data collected through the ph67c platform.

As the Personal Information Controller, ph67c determines the purposes and means of processing your personal data and is responsible for implementing appropriate technical and organizational measures to ensure data is handled lawfully, fairly, and securely.

ph67c has appointed a Data Protection Officer (DPO) in accordance with Section 21 of Republic Act No. 10173. The DPO oversees ph67c's compliance with this Privacy Policy and applicable data protection law. Contact details for the DPO are provided in Section 14 of this Policy.

3 Data We Collect

ph67c collects personal data through several channels, including account registration, platform usage, customer support interactions, and payment transactions. The categories of personal data we collect are described in the table below:

3.1 Sensitive Personal Information

In certain circumstances, ph67c may collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act of 2012, including government-issued identification numbers (e.g., PhilSys ID, SSS, TIN) for KYC and AML compliance purposes. Such sensitive data is processed only to the extent strictly necessary and is subject to enhanced security safeguards.

3.2 Data You Provide Voluntarily

Some data is collected only when you choose to provide it — for example, when you participate in a survey, submit a support request, or opt in to a promotional campaign. Where data provision is voluntary, we will indicate this at the point of collection.

3.3 Data We Do Not Collect

ph67c does not collect sensitive personal information beyond what is required for regulatory compliance. We do not collect racial or ethnic origin data, political opinions, religious beliefs, health information, or biometric data unless legally mandated by a PAGCOR directive or applicable Philippine law.

4 How We Use Your Data

ph67c uses the personal data we collect for the following purposes:

• Account Management: To create, verify, maintain, and administer your ph67c player account, including processing login credentials and account recovery requests.
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with PAGCOR regulations and Republic Act No. 9160 (Anti-Money Laundering Act) as amended.
• Transaction Processing: To process deposits, withdrawals, and bonus credits through supported payment channels including GCash, Maya, BPI, BDO, and other approved Philippine payment methods.
• Platform Delivery: To provide access to casino games, sports betting markets, slots, bingo, and other gaming services offered on the ph67c platform.
• Customer Support: To respond to your queries, complaints, and requests for assistance through our 24/7 Filipino-friendly support team.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct in accordance with our Terms & Conditions.
• Responsible Gaming: To monitor gaming behavior and implement responsible gaming tools such as deposit limits, session reminders, cooling-off periods, and self-exclusion where applicable.
• Regulatory Compliance: To fulfill our legal and regulatory obligations under PAGCOR's operating framework, Philippine AML law, and the Data Privacy Act of 2012.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in or where permitted under applicable law. You may opt out at any time.
• Platform Improvement: To analyze usage patterns and technical performance data to improve the ph67c platform, fix bugs, and develop new features that better serve Filipino players.

5 Legal Basis for Processing

ph67c processes your personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The applicable legal bases for our processing activities are:

• Contractual Necessity: Processing is necessary for the performance of our contract with you (i.e., the ph67c Terms & Conditions), including account creation, transaction processing, and the delivery of gaming services.
• Legal Obligation: Processing is required to comply with our legal obligations under Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act of 2012.
• Legitimate Interests: Processing is necessary for the legitimate interests of ph67c, including fraud prevention, platform security, and business analytics, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your freely given, specific, informed, and unambiguous consent — such as marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

ph67c does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances and only to the extent strictly necessary:

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under written data processing agreements. These include payment processors (GCash, Maya, BPI, BDO, UnionBank, Metrobank, and others), game technology providers (JILI, PG Soft, Pragmatic Play), identity verification services, fraud detection platforms, and cloud infrastructure providers. All service providers are required to process data strictly in accordance with our instructions and this Privacy Policy.

6.2 Regulatory and Law Enforcement Authorities

ph67c may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts when required to do so by law, regulation, legal process, or enforceable governmental request. We will notify you of such disclosures where legally permitted.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or part of ph67c's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. We will notify you of any such transfer and of any material changes to the applicable privacy terms.

6.4 With Your Consent

ph67c may share your data with third parties not described above where you have provided explicit, informed consent to such sharing. You may withdraw such consent at any time by contacting [email protected].

7 Cookies & Tracking Technologies

ph67c uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. The types of cookies we use are as follows:

You can manage your cookie preferences at any time through your ph67c account settings. Please note that disabling strictly necessary cookies may prevent certain platform features from functioning correctly.

8 Data Retention

ph67c retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with PAGCOR recordkeeping requirements and the Anti-Money Laundering Act.
• Transaction Data: Retained for a minimum of 5 years following each transaction, in compliance with AML reporting obligations under Republic Act No. 9160 as amended.
• Gaming and Session Data: Retained for 2 years from the date of each gaming session for dispute resolution and audit purposes.
• Customer Support Records: Retained for 2 years from the date of each support interaction.
• Marketing Data: Retained until you withdraw consent or until 1 year of account inactivity, whichever occurs first.
• Technical and Log Data: Retained for 90 days for security monitoring purposes, after which it is automatically purged or anonymized.

Upon expiry of the applicable retention period, ph67c will securely delete or anonymize your personal data in accordance with our data disposal procedures. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active systems pending deletion.

9 Data Security

ph67c implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the ph67c platform is encrypted using TLS 1.3 or higher. We enforce HTTPS across the entire platform with no unencrypted fallback.
• Encryption at Rest: Sensitive personal data and financial records stored in our databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All ph67c staff with access to personal data undergo background checks and mandatory data privacy training. Multi-factor authentication (MFA) is enforced for all administrative access.
• Regular Security Audits: ph67c conducts regular internal security reviews and periodic third-party penetration testing to identify and remediate vulnerabilities in our systems.
• Fraud Detection Systems: We operate real-time fraud monitoring systems that analyze transaction patterns and login behavior to detect and respond to suspicious activity.
• Incident Response: ph67c maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected users without undue delay.

10 Your Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by ph67c:

• Right to Be Informed: You have the right to be informed that your personal data is being processed, including the purposes, scope, and method of processing before your data is entered into a processing system.
• Right to Access: You have the right to obtain a copy of the personal data we hold about you, together with information about how it is being processed. You may submit an access request to [email protected].
• Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected. You can update most of your account information directly through your ph67c account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. Note that some data must be retained to comply with legal obligations even after account closure.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request its transfer to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstrating compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request." Please include your registered account email address and a description of the right you wish to exercise. We will acknowledge your request within 5 business days and respond substantively within 15 business days.

11 Children & Minors

The ph67c platform is strictly intended for users who are 21 years of age or older, in compliance with PAGCOR's age requirements for online casino-style gaming in the Philippines. ph67c does not knowingly collect personal data from individuals under 21 years of age.

If ph67c becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete the personal data, and — where required — report the incident to applicable regulatory authorities. Any funds deposited by an underage user may be withheld pending regulatory review.

Parents and guardians who believe that a minor has registered on the ph67c platform or submitted personal data to us are encouraged to contact us immediately at [email protected] with the subject line "Underage Account Report." We will investigate and act promptly on all such reports.

12 International Data Transfers

ph67c's primary operations and data processing activities are based in the Philippines. In certain circumstances, your personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international game technology vendors.

When your personal data is transferred outside the Philippines, ph67c ensures that appropriate safeguards are in place as required under the Data Privacy Act of 2012 and the rules issued by the National Privacy Commission. These safeguards may include:

• Execution of data processing agreements incorporating standard contractual clauses approved by the NPC;
• Transfer to countries determined to provide an adequate level of data protection;
• Binding corporate rules where transfers occur within a group of companies.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting our Data Protection Officer at the address provided in Section 14.

13 Changes to This Privacy Policy

ph67c reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this Policy;
• Post a prominent notice on the ph67c platform informing users of the change;
• Where practicable and required by law, send a notification to the email address associated with your registered account.

Your continued use of the ph67c platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how ph67c protects your personal data.

Archived versions of previous Privacy Policies are available upon written request to [email protected]. We maintain a complete version history to ensure full transparency over time.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph67c, please contact us through any of the following channels:

• General Privacy Inquiries: [email protected] — subject line "Privacy Inquiry"
• Data Rights Requests: [email protected] — subject line "Privacy Rights Request"
• Data Protection Officer: [email protected] — subject line "DPO Contact"
• Security Disclosures: [email protected] — subject line "Security Disclosure"
• Underage Account Reports: [email protected] — subject line "Underage Account Report"
• Live Chat: Available 24/7 through the ph67c platform
• Response Time: We aim to acknowledge all privacy-related inquiries within 5 business days and provide a substantive response within 15 business days.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that ph67c has failed to handle your personal data in accordance with the Data Privacy Act of 2012. The NPC can be reached through its official channels.