ph968 Privacy Policy
ph968 respects your right to privacy. This Privacy Policy explains exactly what personal information ph968 collects from Filipino players, why we collect it, how it is used and stored, who it may be shared with, and what rights you have over your own data under applicable Philippine privacy law.
Your Privacy Rights at a Glance
A plain-language summary of the rights ph968 players hold over their personal data. Full details are in the policy below.
Right to Access
You may request a copy of all personal data ph968 holds about you at any time. ph968 will respond to verified access requests within a reasonable timeframe in accordance with applicable Philippine law.
Right to Correction
If your personal data held by ph968 is inaccurate or outdated, you may request a correction. You can update most contact details directly from your ph968 account settings; other changes require support verification.
Right to Erasure
Subject to ph968's legal obligations — including AML record-keeping requirements — you may request deletion of your personal data. Requests are evaluated on a case-by-case basis against ph968's retention obligations.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. ph968 will honor opt-out requests within a reasonable processing period.
Right to Security
ph968 is obligated to implement appropriate technical and organizational measures to protect your personal data. All platform connections use SSL/TLS encryption. Payment data is handled only through certified payment processors.
Right to Lodge a Complaint
If you believe ph968 has mishandled your personal data, you may file a complaint with ph968's Data Protection Officer or with the National Privacy Commission of the Philippines in accordance with the Data Privacy Act of 2012.
Introduction
ph968 ("we," "us," "our," or "ph968") operates the online gaming platform accessible at https://ph968.vip (the "Platform"). ph968 is committed to protecting the personal data and privacy rights of all registered players, visitors, and users of the Platform, with particular regard to the rights of Filipino individuals under the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA") and its Implementing Rules and Regulations.
This Privacy Policy ("Policy") describes the personal data ph968 collects, the purposes for which it is processed, the legal bases upon which such processing is conducted, the parties with whom personal data may be shared, the safeguards in place to protect that data, your rights as a data subject, and how you may exercise those rights.
By registering an account on ph968, using any features of the ph968 Platform, or otherwise interacting with ph968, you acknowledge that you have read and understood this Privacy Policy. Your continued use of the ph968 Platform following any update to this Policy constitutes your acceptance of the revised terms.
This Privacy Policy applies to personal data collected through the ph968 website at ph968.vip, ph968's customer support channels, ph968 promotional communications, and ph968's payment processing interactions. It does not apply to third-party websites, applications, or services that may be linked from or integrated into the ph968 Platform. ph968 does not control and is not responsible for the privacy practices of third-party operators.
Personal Data We Collect
ph968 collects the categories of personal data described below. The collection of certain data is mandatory for account registration and regulatory compliance; other data is collected automatically through your use of the Platform.
| Data Category | Specific Examples | Type |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, government-issued ID number (SSS, PhilHealth, UMID, Driver's License, Passport) | Required |
| Contact Data | Philippine mobile number (+63 format), email address, city of residence (e.g., Manila, Cebu, Davao) | Required |
| KYC Documents | Scanned copy of government-issued ID, selfie photograph for facial verification, proof of residential address | Required |
| Financial Data | GCash account reference, PayMaya account reference, bank account name and number (BPI, BDO, Metrobank), deposit and withdrawal transaction history | Required |
| Gaming Activity | Games played, bet amounts, win/loss history, session duration, game preferences, bonus usage | Automatic |
| Technical Data | IP address, device type, operating system, browser type, screen resolution, session timestamps, login history | Automatic |
| Communications Data | Support chat transcripts, email correspondence, SMS OTP verification records | Situational |
| Marketing Preferences | Opt-in or opt-out status for ph968 promotional emails, SMS notifications, and in-platform offers | Optional |
Certain data ph968 collects — including government-issued identification numbers, financial account details, and facial photographs — qualifies as sensitive personal information under the Philippine Data Privacy Act. ph968 applies heightened protection standards to all such data and processes it only on the basis of explicit consent, legal obligation, or as strictly necessary to fulfill its contractual obligations to you as a registered player.
How We Collect Your Data
ph968 collects personal data through the following channels and mechanisms:
Direct Collection – From You
- During the account registration process, when you provide your name, mobile number, date of birth, and other required information;
- During KYC verification, when you submit identity documents and facial verification photographs;
- When you initiate a deposit or withdrawal and provide payment method details;
- When you contact ph968 customer support via email, chat, or other support channels;
- When you voluntarily participate in surveys, promotions, or feedback programs offered by ph968.
Automated Collection – From Your Device and Usage
- Through server logs that automatically record your IP address, browser details, and page requests when you access the ph968 Platform;
- Through session tracking systems that record gameplay activity, session duration, and account interactions;
- Through cookies and similar tracking technologies as described in Section 9 of this Policy;
- Through fraud detection and security systems that monitor login patterns and transaction behaviors.
Third-Party Collection – From Trusted Partners
- From payment processors (GCash, PayMaya, BPI, BDO, Metrobank) confirming the status and outcome of deposit and withdrawal transactions;
- From identity verification service providers used in ph968's KYC process;
- From fraud prevention and anti-money laundering screening services as required by applicable Philippine regulations.
Legal Basis for Processing
ph968 processes your personal data on the following legal bases in accordance with the Philippine Data Privacy Act of 2012 and its Implementing Rules:
Bases for Processing Personal Data
- Contract Performance: Processing necessary to enter into and fulfill the gaming services contract between ph968 and a registered player, including account creation, gameplay, deposits, and withdrawals;
- Legal Obligation: Processing necessary to comply with ph968's obligations under Philippine law, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and applicable gaming regulations and PAGCOR requirements;
- Consent: Processing for direct marketing communications, optional promotional features, and any other processing for which you have provided specific, informed, and freely given consent;
- Legitimate Interest: Processing necessary for ph968's legitimate business interests including fraud prevention, security monitoring, platform improvement, and responsible gaming risk identification, provided that such interests do not override your fundamental privacy rights.
How We Use Your Personal Data
ph968 uses the personal data it collects for the following purposes:
Primary Purposes – Required for Platform Operation
- Creating and managing your ph968 player account;
- Verifying your identity and age (21+ requirement) in compliance with PAGCOR guidelines and the Data Privacy Act;
- Processing deposits from and withdrawals to your verified Philippine payment methods (GCash, PayMaya, BPI, BDO, Metrobank);
- Providing access to ph968 games, including slots, live casino, bingo, and other gaming products;
- Detecting and preventing fraud, unauthorized access, account takeovers, and prohibited conduct as defined in ph968's Terms and Conditions;
- Fulfilling ph968's AML obligations including transaction monitoring and suspicious activity reporting;
- Managing responsible gaming measures, including deposit limit enforcement, self-exclusion, and session controls.
Secondary Purposes – Subject to Consent or Legitimate Interest
- Sending promotional communications about ph968 offers, current bonuses, and new game releases (only where you have opted in);
- Conducting internal analysis to improve platform performance, user experience, and game selection;
- Providing personalized game recommendations based on your gaming history (where this feature is enabled);
- Responding to customer support inquiries and resolving disputes;
- Conducting surveys and collecting feedback to improve ph968's services.
ph968 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your personal data is shared only as described in Section 6 of this Policy and only with parties who are bound by appropriate data protection agreements and confidentiality obligations.
Sharing Your Personal Data
6.1 Service Providers. ph968 shares personal data with carefully selected third-party service providers who process data on ph968's behalf for the purposes described in this Policy. These providers include: identity verification and KYC providers, payment processors (including GCash, PayMaya, BPI, BDO, and Metrobank), fraud detection and AML screening services, cloud infrastructure and data hosting providers, and customer support platform providers. All third-party processors are contractually bound to process personal data only on ph968's documented instructions, to maintain appropriate security standards, and to comply with applicable Philippine data protection law.
6.2 Game Providers. ph968 works with third-party game studios and platform providers whose games are available on the ph968 Platform. In the course of gameplay, certain technical data (such as player session identifiers and bet data) may be shared with game providers for game operation, RNG certification, and payout calculation purposes. This data is used only for game operation and is governed by ph968's agreements with those providers.
6.3 Legal and Regulatory Disclosures. ph968 may be required to disclose personal data to Philippine government authorities, regulatory bodies, law enforcement agencies, or courts where such disclosure is required by law, regulation, court order, or lawful authority. This includes mandatory reporting obligations under the Anti-Money Laundering Act and any applicable PAGCOR reporting requirements. ph968 will only disclose the minimum data necessary to comply with such obligations.
6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of ph968's business assets, personal data held by ph968 may be transferred to the acquiring entity as part of that transaction, subject to that entity providing equivalent or superior data protection standards.
Data Retention
7.1 General Retention Principle. ph968 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce ph968's agreements. The retention period for each category of data is determined by the applicable legal requirement, the nature of the processing purpose, and ph968's legitimate operational needs.
Indicative Retention Periods
- Account and Identity Data: Retained for the duration of the active account relationship plus a minimum of five (5) years after account closure, in compliance with AMLA record-keeping requirements;
- Financial Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, or such longer period as required by applicable Philippine law;
- KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the business relationship to which the KYC applies;
- Gaming Activity Data: Retained for a minimum of two (2) years for operational purposes, and for longer where required for dispute resolution or regulatory reporting;
- Technical and Log Data: Generally retained for twelve (12) months for security and fraud monitoring purposes, subject to legal hold requirements;
- Marketing Preference Data: Retained for the duration of your opt-in consent and for up to two (2) years following your opt-out to manage suppression lists.
Upon expiry of the applicable retention period, ph968 will securely delete or anonymize personal data in accordance with its data disposal procedures.
Data Security
ph968 takes the security of your personal data seriously and implements appropriate technical and organizational measures to protect it against unauthorized access, disclosure, alteration, loss, or destruction.
Security Measures in Place
- SSL/TLS encryption on all connections between your device and the ph968 Platform;
- Encrypted storage of passwords — ph968 does not store passwords in plain text;
- Two-factor authentication (2FA) available for player accounts via SMS OTP to registered Philippine mobile numbers;
- Access controls limiting employee access to personal data to those with a documented operational need;
- Regular security audits and penetration testing of ph968's Platform infrastructure;
- Secure, access-controlled storage of KYC documents and sensitive personal information;
- Payment data is handled exclusively through certified payment processors — ph968 does not store full card numbers or complete bank account credentials on its own servers.
In the event of a personal data breach that is reasonably likely to result in serious harm to affected individuals, ph968 will notify the National Privacy Commission and affected data subjects in accordance with the timelines and procedures required under the Data Privacy Act of 2012 and NPC Circular No. 16-03. ph968 maintains an incident response plan for this purpose.
Cookies & Tracking Technologies
9.1 Use of Cookies. ph968 uses cookies and similar tracking technologies on its Platform. Cookies are small text files placed on your device when you visit a website. They serve a variety of functions including enabling core Platform functionality, maintaining your login session, supporting security features, and analyzing Platform usage patterns.
Types of Cookies Used by ph968
- Strictly Necessary Cookies: Required for the Platform to function — including session management, login state maintenance, and security token storage. These cannot be disabled without breaking core functionality;
- Functional Cookies: Remember your preferences such as language settings and game display options. These improve your experience but are not essential;
- Analytics Cookies: Collect anonymized data about how players navigate the Platform to help ph968 understand usage patterns and improve the Platform. No personally identifiable information is included in analytics data;
- Security Cookies: Used by ph968's fraud detection systems to identify anomalous access patterns and protect your account.
9.2 Cookie Management. You may manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive notifications before cookies are placed. Note that blocking strictly necessary cookies will impair your ability to use the ph968 Platform, including maintaining your login session. ph968 does not respond to browser-based "Do Not Track" signals at this time.
Children's Privacy
The ph968 Platform is strictly intended for individuals aged 21 years and above. ph968 does not knowingly collect, store, or process personal data from any person under the age of 21. The 21-year minimum age requirement for ph968 is not merely a preference — it reflects the legal minimum age for casino-style gaming under Philippine gaming regulations enforced by PAGCOR.
If ph968 discovers or is notified that it has inadvertently collected personal data from a person under the age of 21, ph968 will take immediate steps to close the associated account, delete the personal data concerned, and, where applicable, notify the National Privacy Commission. Parents or guardians who believe a minor has registered on ph968 should contact ph968 support immediately at [email protected].
Exercising Your Data Subject Rights
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to personal data held by ph968. To exercise any of these rights, contact ph968's Data Protection Officer as described in Section 14 of this Policy.
Your Rights and How to Exercise Them
- Right to be Informed: The right to know that ph968 is collecting your personal data and to understand the purposes and manner of processing — fulfilled by this Privacy Policy;
- Right to Access: Request a copy of the personal data ph968 holds about you. ph968 will respond within fifteen (15) working days of a verified request;
- Right to Correction: Request correction of inaccurate or incomplete personal data. Some updates may be made directly in your account settings;
- Right to Erasure or Blocking: Request deletion or blocking of personal data where it is no longer necessary for the purpose collected, subject to ph968's legal retention obligations;
- Right to Object: Object to processing based on legitimate interest, including direct marketing. ph968 will honor opt-out requests promptly;
- Right to Data Portability: Request that ph968 provide your personal data in a commonly used, structured, machine-readable format where technically feasible;
- Right to Damages: File a complaint and claim damages for any actual harm suffered as a result of ph968's violation of your data privacy rights;
- Right to File a Complaint: Lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) if you believe ph968 has violated your data privacy rights.
ph968 may need to verify your identity before processing a data subject rights request to ensure that personal data is not disclosed or altered in response to a fraudulent request. ph968 will not charge a fee for handling reasonable data rights requests.
International Data Transfers
12.1 Cross-Border Processing. Some of ph968's third-party service providers, including cloud infrastructure providers and certain game studios, may process personal data outside the Philippines. When personal data is transferred outside the Philippines, ph968 ensures that such transfers are made in compliance with the cross-border data transfer requirements of the Data Privacy Act of 2012 and applicable NPC regulations.
12.2 Safeguards. ph968 implements appropriate safeguards for international data transfers including: data processing agreements that incorporate applicable data protection standards, transfer to jurisdictions that the NPC has recognized as providing equivalent data protection, or implementation of standard contractual clauses that bind the recipient to process the data in accordance with Philippine data protection requirements.
Regardless of where your data is processed, ph968 contractually requires all international processors to maintain data protection standards that are at least equivalent to those required under the Philippine Data Privacy Act of 2012. Your rights as a Filipino data subject apply regardless of where your data is technically stored or processed.
Updates to This Privacy Policy
ph968 may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable Philippine law, NPC guidance, or operational changes. Material changes to this Policy will be communicated to registered ph968 players via email notification to the registered address and/or via a prominent notice on the ph968 Platform prior to the change taking effect.
The "Last Updated" date at the top of this Policy indicates when the most recent revisions were made. ph968 encourages all players to review this Privacy Policy periodically. Your continued use of the ph968 Platform following notification of a Policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should discontinue use of the Platform and may request account closure through ph968 support.
Contact & Data Protection Officer
ph968 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about ph968's data handling practices, please contact the ph968 DPO.
ph968 Data Protection Officer
Email (plain text — not a link):
Subject line suggested: "Privacy Policy – Data Subject Request" or "Privacy Policy – DPO Inquiry"
ph968's DPO aims to acknowledge all privacy inquiries within three (3) Philippine business days and to provide a substantive response within fifteen (15) Philippine business days of receiving a verified request. Response times for complex requests may be extended by a further thirty (30) days with prior notification to you.
If you are not satisfied with ph968's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the independent authority responsible for enforcing the Data Privacy Act of 2012 in the Philippines. Contact information for the NPC is publicly available on the NPC's official website. ph968 encourages players to first raise concerns directly with ph968's DPO before escalating to the NPC, as this will generally produce a faster resolution.
Play with Confidence
on ph968
Your personal data is protected under the Philippine Data Privacy Act. Your funds are secured through verified local payment methods. Your gaming experience is built for Filipino players — by design, not by accident. Log in to ph968 today.
Your data is handled in accordance with RA 10173 – Philippine Data Privacy Act of 2012. 21+ only.