ph69 Privacy Policy

1. Introduction

ph69 ("ph69", "we", "us", "our") operates the ph69 online casino platform accessible at ph69.org. We understand that your personal data is important to you, and we take our obligations as a personal information controller seriously under Philippine law.

This Privacy Policy describes how ph69 collects, uses, stores, shares, and protects personal data provided by users ("you", "Player", "Data Subject") of the ph69 Platform. It also explains your rights under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and how to exercise them.

By registering on or using the ph69 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the ph69 Platform.

2. Data Controller

ph69 is the personal information controller responsible for your personal data collected through the ph69 Platform. ph69 has designated a Data Protection Officer (DPO) as required under the DPA. You may contact the ph69 DPO at the details provided in Section 13 of this Policy.

ph69 is registered with the National Privacy Commission (NPC) of the Philippines and operates in compliance with PAGCOR regulations governing online gaming platforms.

3. Data We Collect

ph69 collects the following categories of personal data:

3.1 Registration Data. When you create a ph69 account, we collect: full name, date of birth, nationality, residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati), email address, and mobile number.

3.2 Identity Verification (KYC) Data. To comply with PAGCOR and AMLC requirements, ph69 may collect copies of government-issued identification documents (e.g., Philippine passport, PhilSys ID, SSS ID, driver's license), selfie photographs for liveness verification, and proof of address documents.

3.3 Financial Data. ph69 collects transaction records including deposit amounts, withdrawal requests, payment method identifiers (e.g., GCash mobile number, bank account details), and transaction timestamps. ph69 does not store full payment card numbers.

3.4 Gaming Activity Data. ph69 records your game history, wager amounts, win/loss records, session durations, and responsible gaming tool usage (e.g., deposit limits set, cooling-off periods activated).

3.5 Technical Data. ph69 automatically collects IP address, device type and operating system, browser type and version, session timestamps, and geolocation data (country/region level) for security and compliance purposes.

3.6 Communications Data. If you contact ph69 support, we retain records of your communications including chat transcripts, email correspondence, and support ticket history.

4. How We Use Your Data

ph69 uses your personal data for the following purposes:

• Account Management: To create, maintain, and secure your ph69 account, including authentication and account recovery.
• KYC & Age Verification: To verify your identity and confirm that you meet the 21+ age requirement under PAGCOR regulations.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, and bank transfer in Philippine Peso.
• AML Compliance: To monitor transactions for suspicious activity and comply with the Anti-Money Laundering Act (AMLA) and AMLC reporting requirements.
• Platform Operations: To provide, maintain, and improve the ph69 gaming platform, including game delivery, customer support, and technical troubleshooting.
• Responsible Gaming: To administer deposit limits, session reminders, cooling-off periods, and self-exclusion tools in accordance with PAGCOR's responsible gaming framework.
• Communications: To send you account notifications, transaction confirmations, security alerts, and — where you have opted in — promotional communications about ph69 offers.
• Legal Compliance: To comply with applicable Philippine laws, PAGCOR regulations, NPC requirements, and court orders.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and violations of the ph69 Terms & Conditions.

5. Legal Basis for Processing

ph69 processes your personal data on the following legal bases under the DPA:

• Contractual Necessity: Processing required to perform the ph69 Terms & Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA, the DPA, and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming enforcement, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing communications, where you have provided explicit consent. You may withdraw consent at any time by contacting ph69 support or updating your account preferences.

6. Data Sharing & Disclosure

ph69 does not sell, rent, or trade your personal data. ph69 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• PAGCOR: As the regulatory authority overseeing ph69's operations, PAGCOR may require access to player data for audit, compliance, and licensing purposes.
• Anti-Money Laundering Council (AMLC): ph69 is required by law to report covered and suspicious transactions to the AMLC under the Anti-Money Laundering Act.
• Payment Service Providers: GCash, PayMaya, and partner banks receive the minimum data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC & Identity Verification Partners: ph69 may engage licensed third-party KYC service providers to assist with identity verification. These providers process data solely on ph69's instructions and are contractually bound to maintain confidentiality.
• Game Content Providers: Licensed game studios and aggregators may receive anonymised or pseudonymised session data necessary to deliver game content and resolve technical disputes.
• IT & Cloud Infrastructure Providers: ph69 uses secure cloud hosting and IT service providers to operate the Platform. These providers act as personal information processors under data processing agreements consistent with the DPA.
• Law Enforcement & Courts: ph69 will disclose personal data to Philippine law enforcement agencies, courts, or other government authorities where required by law, court order, or to protect the rights and safety of ph69 and its players.

7. Cookies & Tracking Technologies

ph69 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Essential Cookies: Required for the Platform to function, including session management, authentication, and security. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limits, and display options to personalise your ph69 experience.
• Analytics Cookies: Collect anonymised data about how players use the ph69 Platform — such as pages visited and session duration — to help ph69 improve its services. No personally identifiable information is included in analytics data.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorised account access attempts.

You may manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from accessing certain features of the ph69 Platform. ph69 does not use third-party advertising or behavioural tracking cookies.

8. Data Retention

ph69 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account & KYC Data: Retained for a minimum of five (5) years from account closure, as required by PAGCOR regulations and the AMLA.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of two (2) years for dispute resolution and responsible gaming monitoring purposes.
• Support Communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for ongoing dispute resolution.
• Technical & Security Logs: Retained for ninety (90) days for security monitoring, unless extended due to an active security investigation.

Upon expiry of the applicable retention period, ph69 will securely delete or anonymise your personal data in accordance with NPC-approved disposal methods.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph69:

• Right to Be Informed: The right to know what personal data ph69 collects, how it is used, and with whom it is shared — as set out in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data ph69 holds about you, including information on how it has been processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your ph69 account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph69's legal retention obligations under PAGCOR and AMLC requirements.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph69 has violated your data privacy rights.

To exercise any of the above rights, please contact the ph69 Data Protection Officer using the details in Section 13. ph69 will respond to verified data subject requests within fifteen (15) business days, as required by the DPA.

10. Data Security

ph69 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ph69 Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of ph69 systems.
• Multi-factor authentication requirements for ph69 administrative systems.
• Audit logging of all access to personal data by ph69 personnel.
• Employee data privacy training and confidentiality obligations.

While ph69 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph69 login credentials and for notifying ph69 support immediately if you suspect unauthorised access to your account.

11. Children's Privacy

The ph69 Platform is strictly intended for persons aged 21 years and above, in compliance with PAGCOR regulations governing casino-style gambling in the Philippines. ph69 does not knowingly collect personal data from persons under the age of 21.

If ph69 discovers that personal data has been collected from a person under 21, the account will be immediately suspended, all data will be deleted, and any funds will be handled in accordance with PAGCOR guidelines. If you believe a minor has registered on ph69, please contact ph69 support immediately.

12. Changes to This Privacy Policy

ph69 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The updated Policy will be posted on this page with a revised effective date.

Where changes are material — for example, where ph69 begins processing personal data for a new purpose — ph69 will notify registered players via email or in-platform notification prior to the changes taking effect. Your continued use of the ph69 Platform following notification of material changes constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how ph69 protects your personal data.

13. Contact & Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph69, please contact the ph69 Data Protection Officer:

• DPO Email: privacy@ph69.org
• General Support: support@ph69.org
• Live Chat: Available 24/7 via the ph69 Platform
• Response Time: DPO requests are acknowledged within three (3) business days and resolved within fifteen (15) business days

If you are not satisfied with ph69's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.