ph63 Casino – Privacy Policy

1. Introduction

1.1 ph63 operates ph63.win as an online casino and sports betting platform primarily serving players in the Philippines. In the course of providing these services, ph63 necessarily collects and processes certain personal information about its players, prospective players, and website visitors.

1.2 ph63 is committed to handling personal data responsibly, transparently, and in full compliance with the Republic Act No. 10173, Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations (IRR), and the guidelines issued by the National Privacy Commission (NPC).

1.3 This Policy sets out: what personal data ph63 collects and why; the legal bases on which ph63 processes that data; how long ph63 retains it; with whom ph63 may share it; the security measures ph63 applies to protect it; and the rights available to you as a data subject under Philippine law.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, ph63 is the personal information controller in respect of all personal data collected through the ph63.win platform and associated services.

2.2 Questions, requests, and complaints relating to the processing of your personal data by ph63 may be directed to ph63's Data Protection Officer (DPO) at: [email protected]. ph63 aims to acknowledge all privacy-related inquiries within 5 business days and to resolve them within 30 calendar days.

3. Personal Data We Collect

3.1 ph63 collects the following categories of personal information in the course of operating its platform:

3.2 ph63 does not collect sensitive personal information as defined under the DPA (e.g., health records, political opinions, religious beliefs) unless specifically required for regulatory compliance or responsible gaming purposes, in which case your explicit consent will be obtained.

4. How ph63 Collects Your Data

4.1 ph63 collects personal data through the following means:

• Direct registration: Information you provide when creating your ph63 account, completing KYC verification, or contacting support;
• Automated collection: Technical and usage data collected automatically when you access ph63.win, including through cookies and similar tracking technologies (see Section 7);
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard when you deposit or withdraw;
• Third-party verification providers: Identity and address verification data from KYC/AML compliance partners engaged by ph63;
• Public sources: Publicly available information used to verify your identity or to comply with anti-money laundering obligations.

5. Purposes of Processing & Legal Basis

5.1 ph63 processes your personal data for the following purposes, each supported by a lawful basis under the DPA:

5.2 Where ph63 relies on your consent as the legal basis for processing (such as marketing communications), you may withdraw that consent at any time by updating your preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing & Disclosure

6.1 ph63 does not sell your personal data to third parties. ph63 may share your personal information with the following categories of recipients, strictly for the purposes described in Section 5:

• Payment processors: GCash (G-Xchange Inc.), PayMaya (Maya Bank Inc.), BPI, BDO, Metrobank, Visa, Mastercard — for the purpose of processing your financial transactions;
• KYC/AML service providers: Third-party identity verification and compliance partners engaged to fulfil ph63's regulatory obligations;
• Game content providers: Software providers whose games are hosted on ph63 may receive anonymised session data for technical and RNG audit purposes;
• IT and hosting providers: Cloud infrastructure and cybersecurity service providers engaged by ph63 under strict data processing agreements;
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities where disclosure is required by law;
• Legal and professional advisers: Lawyers, auditors, and accountants engaged by ph63, subject to professional confidentiality obligations.

6.2 All third-party processors engaged by ph63 are required to process personal data only as instructed by ph63, to maintain appropriate security measures, and to comply with Philippine data protection law.

7. Cookies & Tracking Technologies

7.1 ph63.win uses cookies and similar technologies (including local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and collect analytics data that helps ph63 improve the user experience.

7.2 The following types of cookies are used on ph63.win:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language, game filters, and notification settings.
• Analytics cookies: Collect aggregated, anonymised data about how players use ph63.win, which games are most popular, and where technical issues occur. Used solely to improve ph63's services.
• Marketing cookies: Used only where you have provided consent. These help ph63 show you relevant promotions on the ph63 platform itself. ph63 does not use third-party advertising networks.

7.3 You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into ph63.

8. Data Retention

8.1 ph63 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following retention periods apply:

• Account and KYC data: Retained for the duration of your account plus a minimum of 5 years after account closure, in compliance with AMLA record-keeping requirements;
• Transaction and game history: Retained for 5 years from the date of each transaction, as required by Philippine financial regulations;
• Support communications: Retained for 3 years from the date of the communication;
• Technical and usage logs: Retained for 12 months from collection, unless a longer period is required for security investigation purposes;
• Marketing consent records: Retained for the duration of your account plus 2 years to demonstrate compliance with consent requirements.

8.2 Where personal data is no longer required, ph63 will securely delete or anonymise it in accordance with industry-standard data disposal procedures.

9. Data Security

9.1 ph63 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and ph63.win;
• Encryption of sensitive data fields (passwords, financial identifiers) at rest using industry-standard algorithms;
• Role-based access controls limiting ph63 staff access to personal data on a strictly need-to-know basis;
• Regular penetration testing and security audits by independent third parties;
• Multi-factor authentication requirements for all ph63 administrative systems;
• Incident response procedures compliant with NPC breach notification requirements.

9.2 In the event of a personal data breach affecting your rights and freedoms, ph63 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

10. Your Rights as a Data Subject

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph63:

• Right to be informed: The right to know that your personal data is being collected, the purposes for processing, and the identity of the data controller — as set out in this Policy;
• Right of access: The right to request a copy of the personal data ph63 holds about you, and information about how it is processed;
• Right to rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to erasure / right to be forgotten: The right to request deletion of your personal data where it is no longer necessary, subject to ph63's legal retention obligations;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to object: The right to object to processing based on legitimate interests, including processing for direct marketing;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (privacy.gov.ph) if you believe ph63 has processed your data unlawfully.

10.2 To exercise any of the above rights, please contact ph63's DPO at [email protected]. ph63 will respond within 30 calendar days. ph63 may need to verify your identity before processing your request.

11. Children & Minors

11.1 ph63 does not knowingly collect personal information from any person under the age of 21. ph63's services are strictly intended for adult players as defined by PAGCOR regulations. If ph63 becomes aware that it has collected personal data from a person under 21, that data will be deleted promptly and the relevant account closed.

11.2 If you are a parent or guardian and believe that a person under 21 in your care has registered on ph63, please contact [email protected] immediately. ph63 will investigate and take appropriate action within 24 hours.

12. International Data Transfers

12.1 ph63's primary operations and data processing infrastructure are based within the Philippines. In certain limited circumstances, personal data may be transferred to or accessed by service providers located outside the Philippines (for example, cloud hosting or cybersecurity partners).

12.2 Where such transfers occur, ph63 ensures that appropriate safeguards are in place — including contractual clauses requiring the recipient to maintain data protection standards at least equivalent to those required under Philippine law — before any personal data is transferred internationally.

13. Changes to This Privacy Policy

13.1 ph63 may update this Privacy Policy from time to time to reflect changes in our data practices, new services, or changes in applicable law. Material changes will be communicated to registered players via email or through a prominent notice on ph63.win at least 14 days before taking effect.

13.2 The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of ph63 following the effective date of any revision constitutes acceptance of the updated Policy.

14. Contact & Data Protection Officer

14.1 For any questions, concerns, or requests relating to this Privacy Policy or ph63's data processing activities, please contact ph63's designated Data Protection Officer:

• Email: [email protected]
• Response time: Acknowledgement within 5 business days; resolution within 30 calendar days
• Live chat: Available 24/7 via ph63.win for urgent privacy concerns

14.2 If you are not satisfied with ph63's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.