ph168 Privacy Policy

1. Overview & Data Controller

1.1 ph168 is the data controller responsible for the personal information collected through the ph168 platform. As data controller, ph168 determines the purposes and means of processing your personal data.

1.2 ph168 is committed to handling your personal data with the utmost care, transparency, and in full compliance with the Data Privacy Act of 2012 and the regulations of the National Privacy Commission (NPC) of the Philippines.

1.3 This Policy applies to all personal data collected through the ph168 website at ph168.club, the ph168 mobile platform, customer support interactions, and any other ph168 service channels.

1.4 This Policy should be read together with the ph168 Terms & Conditions, which govern your use of the ph168 platform.

2. Personal Data We Collect

2.1 ph168 collects the following categories of personal data from players:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Nationality and country of residence
• Email address and mobile phone number
• Residential address (barangay, city/municipality, province)

2.2 Identity Verification (KYC) Data

• Government-issued photo ID (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, Voter's ID)
• Proof of address documents
• Selfie or facial image for identity verification purposes
• Source of funds documentation where required by anti-money laundering regulations

2.3 Financial Data

• GCash account number or PayMaya (Maya) account details
• Philippine bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or other eligible banks)
• Debit card details (card number masked, expiry date)
• Transaction history including deposits, withdrawals, and bonus activity

2.4 Gaming & Behavioral Data

• Game history, bet amounts, win/loss records, and session duration
• Responsible gaming settings and self-exclusion requests
• Bonus and promotion usage history
• Customer support interaction records

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Login timestamps and session activity logs
• Cookie identifiers and similar tracking technologies

3. How We Collect Your Data

3.1 Directly from you — when you register a ph168 account, complete KYC verification, make deposits or withdrawals, contact customer support, or participate in promotions.

3.2 Automatically — through cookies, web beacons, and similar technologies when you access the ph168 platform. See Section 9 for details on our cookie practices.

3.3 From third parties — including identity verification service providers, payment processors (GCash, PayMaya, Philippine banks), fraud prevention services, and regulatory databases where required by law.

4. Purposes of Processing

4.1 ph168 processes your personal data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your ph168 player account
Identity Verification	Verifying your identity and age (21+) as required by PAGCOR regulations
Payment Processing	Processing deposits and withdrawals via GCash, PayMaya, and Philippine banks
Regulatory Compliance	Complying with PAGCOR licensing requirements, AML obligations, and NPC regulations
Fraud Prevention	Detecting and preventing fraud, money laundering, and prohibited conduct
Customer Support	Responding to your inquiries and resolving disputes
Responsible Gaming	Monitoring gaming behavior and enforcing responsible gaming tools and limits
Marketing	Sending promotional offers and updates (only with your consent; you may opt out at any time)
Platform Improvement	Analyzing usage patterns to improve ph168 services and user experience

5. Legal Basis for Processing

5.1 Under the Data Privacy Act of 2012, ph168 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfill our obligations under the ph168 Terms & Conditions (e.g., account management, payment processing)
• Legal obligation — processing required to comply with PAGCOR regulations, AML laws, and NPC requirements
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring
• Consent — processing for marketing communications, where you have given explicit consent

6. Data Sharing & Disclosure

6.1 ph168 does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the stated purposes:

• PAGCOR and regulatory authorities — as required by our gaming license and applicable Philippine law
• Payment service providers — GCash, PayMaya, and Philippine banks, for processing transactions
• Identity verification providers — third-party KYC service providers operating under strict data processing agreements
• Game software providers — to the extent necessary to deliver game services; providers are bound by confidentiality obligations
• Law enforcement — where required by court order, subpoena, or applicable Philippine law
• Professional advisors — lawyers, auditors, and accountants bound by professional confidentiality obligations

6.2 All third-party service providers who process personal data on behalf of ph168 are required to enter into data processing agreements that comply with the Data Privacy Act of 2012 and ensure appropriate data protection standards.

7. Data Retention

7.1 ph168 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations.

7.2 In accordance with PAGCOR requirements and Philippine AML regulations, ph168 retains transaction records and KYC documentation for a minimum of five (5) years following the closure of your account or the completion of the relevant transaction.

7.3 Marketing data is retained until you withdraw your consent or request deletion, whichever is earlier.

7.4 When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, ph168 will securely delete or anonymize the data.

8. Data Security

8.1 ph168 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction.

8.2 Security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph168 servers
• Encryption of sensitive data at rest, including financial information and identity documents
• Two-factor authentication (2FA) for player account access
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits and penetration testing
• Incident response procedures for data breach detection and notification

9. Cookies & Tracking Technologies

9.1 ph168 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage, and deliver relevant content.

9.2 The types of cookies used by ph168 include:

• Essential cookies — required for the platform to function (e.g., session management, login state). These cannot be disabled.
• Analytics cookies — used to understand how players use ph168, helping us improve the platform experience.
• Preference cookies — used to remember your settings and preferences across sessions.
• Marketing cookies — used to deliver relevant promotional content. These are only set with your consent.

9.3 You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may affect the functionality of the ph168 platform.

10. Your Data Privacy Rights

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph168:

• Right to be informed — the right to know what personal data ph168 collects and how it is used
• Right of access — the right to request a copy of the personal data ph168 holds about you
• Right to rectification — the right to request correction of inaccurate or incomplete personal data
• Right to erasure — the right to request deletion of your personal data, subject to legal retention obligations
• Right to object — the right to object to processing based on legitimate interests, including direct marketing
• Right to data portability — the right to receive your personal data in a structured, machine-readable format
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission (NPC) of the Philippines

10.2 To exercise any of these rights, please contact ph168's Data Protection Officer (DPO) using the contact details in Section 14. ph168 will respond to verified requests within thirty (30) days.

11. Minors & Age Restriction

11.1 The ph168 platform is strictly for users who are 21 years of age or older, in accordance with Philippine law. ph168 does not knowingly collect personal data from individuals under the age of 21.

11.2 If ph168 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account and delete the data in question, subject to any legal obligations to retain records of the violation.

11.3 If you are a parent or guardian and believe that your child has provided personal data to ph168, please contact us immediately at the details provided in Section 14.

12. International Data Transfers

12.1 ph168 primarily processes personal data within the Philippines. Where data is transferred to service providers located outside the Philippines (for example, cloud infrastructure or game software providers), ph168 ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with the requirements of the Data Privacy Act of 2012.

12.2 ph168 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards and, where required, obtaining your consent.

13. Changes to This Privacy Policy

13.1 ph168 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. The updated Policy will be posted on this page with a revised effective date.

13.2 Where changes are material, ph168 will notify registered players via email or platform notification at least seven (7) days before the changes take effect. Your continued use of the ph168 platform after the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact & Data Protection Officer

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ph168, please contact our Data Protection Officer:

• Email: [email protected]
• Support Channel: Live chat available 24/7 on the ph168 platform
• Response Language: English and Filipino

14.2 You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.