ph65 Privacy Policy

1. Data Controller Information

ph65 is the data controller responsible for the personal information collected through the Platform. As data controller, ph65 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (RA 10173) and all applicable regulations issued by the National Privacy Commission.

ph65 has appointed a Data Protection Officer (DPO) who oversees compliance with this Policy and applicable data privacy laws. You may contact the ph65 DPO at any time using the contact details provided in Section 12 of this Policy.

2. Personal Data We Collect

ph65 collects the following categories of personal data from players and visitors to the Platform:

3. How We Collect Your Data

ph65 collects personal data through the following means:

• Directly from you — when you register a ph65 account, complete identity verification, make a deposit or withdrawal, contact ph65 support, or update your account settings.
• Automatically — through cookies, server logs, and similar technologies when you access or use the Platform. This includes your IP address, device identifiers, and browsing behavior within ph65.
• From third parties — including identity verification service providers, payment processors (such as GCash and PayMaya), and fraud prevention partners, where necessary to verify your identity or process transactions.
• From regulatory bodies — ph65 may receive information about players from PAGCOR or other regulatory authorities in connection with its licensing obligations, including self-exclusion registers.

4. Purposes and Legal Basis for Processing

ph65 processes your personal data for the following purposes, each supported by a lawful basis under RA 10173:

• Account registration and management — to create and maintain your ph65 account, verify your identity, and provide access to the Platform. Basis: Performance of contract.
• Age and identity verification — to confirm that you are at least 21 years of age and to comply with PAGCOR's Know Your Customer (KYC) requirements. Basis: Legal obligation.
• Payment processing — to process deposits and withdrawals via GCash, PayMaya, and bank transfer. Basis: Performance of contract.
• Anti-money laundering (AML) compliance — to monitor transactions and report suspicious activity as required by the Anti-Money Laundering Act (AMLA) and PAGCOR regulations. Basis: Legal obligation.
• Responsible gaming — to monitor gaming behavior, enforce deposit limits and self-exclusion requests, and identify players who may be at risk of problem gambling. Basis: Legitimate interest / legal obligation.
• Customer support — to respond to your inquiries, resolve disputes, and improve our support services. Basis: Performance of contract / legitimate interest.
• Platform security and fraud prevention — to detect and prevent unauthorized access, cheating, and fraudulent activity. Basis: Legitimate interest.
• Marketing communications — to send you promotional offers, bonuses, and platform updates, where you have opted in to receive such communications. Basis: Consent.
• Platform improvement and analytics — to analyze usage patterns and improve the performance, features, and user experience of the ph65 Platform. Basis: Legitimate interest.

5. Sharing and Disclosure of Personal Data

ph65 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ph65 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Identity verification providers — third-party KYC service providers who assist ph65 in verifying your identity and age in compliance with PAGCOR requirements.
• Payment processors — GCash, PayMaya / Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to facilitate deposits and withdrawals. These providers process your financial data under their own privacy policies and applicable Philippine financial regulations.
• Fraud prevention and security partners — service providers who assist ph65 in detecting and preventing fraudulent activity, cheating, and unauthorized access to the Platform.
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law, court order, or regulatory directive.
• IT and platform service providers — cloud hosting, data storage, and software providers who process data on ph65's behalf under strict data processing agreements that prohibit independent use of your data.
• Professional advisers — lawyers, auditors, and accountants who require access to personal data in the course of providing professional services to ph65, subject to professional confidentiality obligations.

Where ph65 shares personal data with third-party processors, ph65 ensures that appropriate contractual safeguards are in place to protect your data and to require those processors to handle your data in accordance with RA 10173.

ph65 does not transfer personal data outside the Philippines except where strictly necessary for the operation of the Platform and where adequate data protection safeguards are in place in the recipient country.

6. Cookies and Tracking Technologies

ph65 uses cookies and similar technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. ph65 uses the following types of cookies:

• Strictly necessary cookies — essential for the Platform to function. These include session authentication cookies that keep you logged in to your ph65 account. These cookies cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies — used to collect anonymized data about how players use the Platform, such as which games are most popular and how long sessions last. This data helps ph65 improve the Platform experience for Filipino players.
• Security cookies — used to detect and prevent fraudulent activity, including bot detection and CSRF protection tokens.

ph65 does not use third-party advertising cookies, social media tracking pixels, or any cross-site tracking technologies. You may configure your browser to refuse or delete cookies, but please note that disabling strictly necessary cookies will prevent you from logging in to your ph65 account.

7. Data Retention

ph65 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and identity data — retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR licensing conditions and AMLA obligations.
• Transaction and financial data — retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA record-keeping requirements.
• Gaming history — retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer support communications — retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing preference data — retained until you withdraw your consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, ph65 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

8. Data Security

ph65 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• TLS encryption for all data transmitted between your device and the ph65 Platform.
• AES-256 encryption for sensitive personal data stored in ph65's databases, including government ID numbers and financial account details.
• Role-based access controls that restrict access to personal data to ph65 employees and contractors who require it to perform their job functions.
• Multi-factor authentication for ph65 staff accessing systems that contain personal data.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security professionals.
• Incident response procedures that include notification to affected players and the National Privacy Commission in the event of a personal data breach, in accordance with NPC Circular 16-03.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph65:

• Right to be informed — you have the right to be informed of how your personal data is being collected and processed, which this Policy fulfills.
• Right of access — you have the right to request a copy of the personal data ph65 holds about you, along with information about how it is being processed.
• Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data ph65 holds about you.
• Right to erasure or blocking — you have the right to request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph65's legal retention obligations.
• Right to object — you have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, subject to ph65's overriding legal obligations.
• Right to data portability — you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph65 has processed your personal data in violation of RA 10173.

To exercise any of the above rights, please contact the ph65 Data Protection Officer using the contact details in Section 12. ph65 will respond to all data subject requests within fifteen (15) business days of receipt. ph65 may request proof of identity before processing your request.

10. Children and Minors

The ph65 Platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. ph65 does not knowingly collect personal data from individuals under the age of 21.

If ph65 discovers or has reason to believe that a player is under 21 years of age, ph65 will immediately suspend the relevant account, investigate the matter, and take appropriate action including account termination and forfeiture of any balances in accordance with the ph65 Terms and Conditions.

If you are a parent or guardian and believe that a minor has registered a ph65 account or provided personal data to ph65, please contact ph65 support immediately so that the matter can be investigated and the data deleted without delay.

11. Changes to This Policy

ph65 may update this Privacy Policy from time to time to reflect changes in our data practices, the Platform, or applicable Philippine law. When we make material changes to this Policy, we will notify you by posting a prominent notice on the Platform and, where we hold your email address, by sending you an email notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the ph65 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform and may request account closure in accordance with the ph65 Terms and Conditions.

We encourage you to review this Policy periodically to stay informed about how ph65 is protecting your personal data.

12. Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ph65 handles your personal data, please contact the ph65 Data Protection Officer:

• Live Chat: Available 24/7 via the ph65 Platform — the fastest way to reach us
• Email: [email protected]
• Support Email: [email protected]

ph65 will acknowledge all privacy-related inquiries within two (2) business days and will endeavor to resolve them within fifteen (15) business days. If you are not satisfied with ph65's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.