Privacy Policy

This Privacy Policy ("Policy") is issued by 68ph ("68ph," "we," "us," or "our") and applies to all personal data collected through the 68ph website, mobile platform, games, customer support channels, and any other services we provide (collectively, the "Platform").

68ph is committed to protecting the privacy and personal data of all users of the Platform, including registered players, visitors, and prospective players. We operate in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission ("NPC") of the Philippines.

By accessing or using the 68ph Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

68ph collects personal data from you in the following ways: directly from you when you register, use the Platform, or contact us; automatically through your use of the Platform; and from third parties such as payment processors and identity verification providers.

68ph does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected (such as government ID numbers for KYC purposes), it is handled with additional security controls and access restrictions.

68ph uses your personal data for the following purposes:

• Account Management: To create, verify, maintain, and administer your 68ph player account, including processing your registration and KYC verification.
• Service Delivery: To provide you with access to the Platform's games, betting markets, live casino, and all other features you use.
• Payment Processing: To process deposits, withdrawals, and other financial transactions through your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, or QR Ph).
• Regulatory Compliance: To comply with our obligations under Philippine law, including anti-money laundering (AMLA) requirements, PAGCOR licensing conditions, and NPC data privacy regulations.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and administer deposit and loss limits set by you.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and abuse of the Platform.
• Platform Improvement: To analyze usage patterns, conduct internal research, and improve the performance, features, and user experience of the 68ph Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about new games or features — but only where you have given your consent or where we have a legitimate interest to do so, and always with an easy opt-out option.

68ph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

Under the Philippine Data Privacy Act of 2012, 68ph processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your 68ph account and deliver the gaming services you have signed up for.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AMLA, PAGCOR regulations, and NPC guidelines.
• Legitimate Interests: Processing is necessary for 68ph's legitimate interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your data protection rights.
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

68ph does not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

5.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (such as GCash and PayMaya network operators), identity verification providers, cloud hosting providers, customer support software vendors, and analytics platforms. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data privacy law.

5.2 Game Software Providers

Certain games on the 68ph Platform are provided by third-party game studios and software providers. These providers may receive limited technical data (such as session tokens and game round identifiers) necessary to deliver the game experience. They do not receive your full identity or financial data.

5.3 Regulatory and Law Enforcement Authorities

68ph may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 68ph's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

68ph uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following categories of cookies:

You can manage your cookie preferences at any time through the cookie settings panel accessible from the footer of the Platform. Please note that disabling certain cookies may affect the functionality of some Platform features. Your browser settings may also allow you to block or delete cookies, though this may impact your ability to log in and use the Platform normally.

68ph does not use cross-site tracking cookies or share cookie data with advertising networks outside the Platform.

68ph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AMLA record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine anti-money laundering regulations.
• Gaming Activity Logs: Retained for three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of lawful processing.
• Technical and Log Data: Retained for up to twelve (12) months, after which it is aggregated or anonymized for analytics purposes.

When personal data is no longer required, 68ph securely deletes or anonymizes it in accordance with our internal data disposal procedures. Anonymized data that can no longer identify you may be retained indefinitely for statistical and research purposes.

68ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the 68ph Platform is encrypted using TLS 1.2 or higher. Sensitive data stored in our systems, including financial records and identity documents, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 68ph is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data privacy training.
• Multi-Factor Authentication: 68ph supports multi-factor authentication (MFA) for player accounts and enforces MFA for all internal staff accessing systems that contain personal data.
• Penetration Testing: The Platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response: 68ph maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players within the timeframes required by the DPA.
• Vendor Security: All third-party service providers who process personal data on our behalf are required to maintain security standards equivalent to or exceeding those applied by 68ph.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 68ph:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data 68ph holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AMLA and other applicable laws.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though we may be able to demonstrate compelling grounds to continue processing.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that 68ph has processed your personal data in violation of the DPA.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 13. We will respond to all verified requests within fifteen (15) business days, or within the timeframe required by applicable law where that is shorter.

The 68ph Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. 68ph does not knowingly collect, process, or retain personal data from any person under the age of 21.

If you are under 21 years of age, you are not permitted to register for or use the 68ph Platform. If you are a parent or guardian and believe that a minor has provided personal data to 68ph, please contact us immediately at the address in Section 13. Upon verification, we will promptly delete the minor's account and all associated personal data.

68ph employs age verification procedures during registration and KYC to prevent underage access to the Platform. Any account found to belong to a person under 21 will be immediately suspended and all associated data handled in accordance with applicable law.

68ph primarily stores and processes your personal data within the Republic of the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and game software studios — may process data in other countries.

Where personal data is transferred outside the Philippines, 68ph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine DPA. These safeguards may include:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those under Philippine law.
• Transfers to countries or organizations that the National Privacy Commission has recognized as providing an adequate level of data protection.
• Binding corporate rules where the recipient is part of the same corporate group as 68ph.

You may request further information about the specific safeguards applied to cross-border transfers of your personal data by contacting our Data Protection Officer.

68ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. The date of the most recent revision is displayed at the top of this page.

When we make material changes to this Policy, we will notify registered players by email and/or by posting a prominent notice on the Platform at least fourteen (14) days before the changes take effect. For non-material changes — such as minor clarifications or corrections — we may update the Policy without prior notice, though the revision date will always be updated.

Your continued use of the 68ph Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should cease using the Platform and contact us to close your account before the changes take effect.

We recommend bookmarking this page and reviewing it periodically to stay informed of how 68ph protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 68ph handles your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.

68ph is committed to resolving all privacy-related concerns fairly and transparently. We aim to acknowledge all written enquiries within two (2) business days and to provide a substantive response within fifteen (15) business days.