ph968 Privacy Policy

1. Who We Are

ph968 ("the Company," "we," "us," or "ph968") operates the online casino and sports betting platform accessible at ph968.org. ph968 serves Filipino players across the Philippines, offering casino games, live dealer products, sports betting markets, bingo, and sabong under applicable online gaming frameworks.

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), ph968 acts as the Personal Information Controller (PIC) with respect to the personal data of registered players and site visitors. Our designated Data Protection contact is reachable at [email protected].

2. Personal Data We Collect

ph968 collects personal data through several channels including account registration, KYC verification, payment processing, gameplay activity, customer support interactions, and automatic technical data collection.

ph968 does not collect sensitive personal information beyond what is strictly necessary for identity verification, age compliance, and fraud prevention. We do not collect biometric data beyond ID document photographs required for KYC.

3. How We Use Your Personal Data

ph968 uses collected personal data for the following purposes:

3.1 Account Management

To create and maintain your ph968 account, authenticate your identity at login, process password resets and 2FA verification, and manage account preferences and notification settings.

3.2 Identity Verification & Compliance

To verify that you are 21 years of age or older as required under Philippine gaming regulations, to fulfill KYC obligations prior to withdrawal processing, and to comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) requirements. Identity documents submitted for KYC are reviewed by ph968's compliance team and, where required, by licensed third-party KYC verification providers.

3.3 Payment Processing

To process GCash, PayMaya, BPI, BDO, Metrobank, and USDT deposits and withdrawals, to maintain transaction records for audit and regulatory reporting, and to detect and prevent payment fraud and unauthorized transactions.

3.4 Game Delivery & Responsible Gaming

To deliver casino games, live dealer products, sports betting markets, bingo, and sabong streams; to enforce deposit limits, session controls, and self-exclusion settings you have applied to your account; and to monitor gameplay patterns that may indicate problem gambling requiring intervention.

3.5 Security & Fraud Prevention

To detect and investigate suspicious account activity, multiple account creation, bonus abuse, bot usage, and unauthorized access attempts; to share data with law enforcement where required by Philippine law or regulatory direction.

3.6 Customer Support

To respond to your support requests, maintain records of correspondence for quality assurance and dispute resolution, and provide account-related notifications.

3.7 Marketing Communications

To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out of marketing communications at any time via Account Settings or by contacting [email protected]. Opting out of marketing does not affect transactional communications (account notices, withdrawal confirmations, etc.).

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, ph968 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the ph968 Terms and Conditions, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with Philippine regulatory requirements, AML/CTF laws, tax reporting obligations, and regulatory directions;
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, and platform integrity purposes, where these interests do not override your data rights;
• Consent: Processing for marketing communications and optional analytics features, where we rely on your freely given, specific consent.

5. Data Sharing & Third Parties

ph968 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We share personal data only in the following circumstances:

5.1 Service Providers

ph968 engages third-party service providers including KYC verification providers, payment processors (GCash, PayMaya, banking partners), game content suppliers, cloud infrastructure providers, and customer support platform operators. These providers process data on ph968's behalf under data processing agreements that require them to maintain appropriate security standards and prohibit unauthorized use.

5.2 Regulatory & Law Enforcement

ph968 discloses personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), Anti-Money Laundering Council (AMLC), Bureau of Internal Revenue (BIR), National Privacy Commission (NPC), or any law enforcement authority when required by valid legal process, regulatory direction, or where ph968 reasonably believes disclosure is necessary to prevent imminent harm or criminal activity.

5.3 Corporate Transactions

In the event of a merger, acquisition, or sale of substantially all of ph968's assets, player personal data may be transferred to the acquiring entity, subject to that entity maintaining equivalent data protection standards. Affected players will be notified of any such transfer.

6. Cookies & Tracking Technologies

ph968.org uses cookies and similar tracking technologies to maintain session state, remember login preferences, and analyze platform usage patterns for performance optimization. The following cookie categories are used:

• Strictly Necessary Cookies: Required for basic platform functionality including login session maintenance, security tokens, and game state preservation. Cannot be disabled without breaking core platform features.
• Functional Cookies: Store your preferences such as language settings, preferred lobby view, and "Remember me" login status. Disabled by default; enabled on your request.
• Analytics Cookies: Collect aggregated, anonymized data about how players navigate ph968 to improve platform design and performance. You may opt out of analytics cookies via Account Settings.

ph968 does not use advertising or cross-site tracking cookies. No personal data is shared with advertising networks through cookie technology.

7. Data Retention

ph968 retains personal data for no longer than necessary to fulfill the purposes for which it was collected, subject to overriding legal and regulatory obligations:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

8. Security Measures

ph968 implements technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and ph968 servers;
• Data encryption at rest for all stored personal data, including KYC documents and financial records;
• Access controls restricting employee access to personal data on a strict need-to-know basis;
• Two-Factor Authentication (2FA) available to all players for account login protection;
• Regular security assessments including penetration testing and vulnerability scanning;
• Automatic account lockout after five consecutive failed login attempts to prevent brute-force access.

Despite these measures, no internet transmission is 100% secure. ph968 cannot guarantee the absolute security of data transmitted to ph968.org and encourages players to enable 2FA and use strong, unique passwords on their accounts.

9. Your Data Rights

As a Philippine-resident data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph968:

• Right to be informed: The right to know what personal data ph968 holds about you and how it is used — fulfilled through this Privacy Policy;
• Right of access: The right to request a copy of the personal data ph968 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where processing is no longer necessary, subject to overriding legal retention obligations;
• Right to object: The right to object to processing of your personal data for marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph968 has violated your data rights.

To exercise any of the above rights, contact ph968 at [email protected] with the subject line "Data Rights Request." ph968 will respond within 30 days. Identity verification may be required before processing your request.

10. Children & Minors

ph968 Services are strictly available to individuals who are 21 years of age or older. ph968 does not knowingly collect personal data from persons under 21 years of age. If ph968 discovers that a minor has registered an account, the account will be immediately suspended, all collected data will be deleted to the extent legally permissible, and any deposited funds will be returned to the verified payment source.

11. International Data Transfers

Certain ph968 service providers — including cloud infrastructure providers and game content suppliers — may be located outside the Philippines. Where personal data is transferred internationally, ph968 ensures that adequate data protection safeguards are in place, including contractual data protection clauses consistent with NPC guidelines on cross-border data transfers. ph968 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without appropriate safeguards.

12. Amendments to This Policy

ph968 reserves the right to update this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, or ph968's data processing practices. Material changes will be communicated to registered players via email or a notice on ph968.org at least 7 days before taking effect. The "Last Updated" date at the top of this policy will be revised accordingly. Your continued use of ph968 following the effective date of any revision constitutes acknowledgment of the updated policy.

13. Contact & Data Protection

For questions about this Privacy Policy, to exercise your data rights, or to report a data protection concern, contact ph968: