ph168 Privacy Policy

1. Introduction and Data Controller Information

ph168 ("ph168", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("you", "your", "User", "Player") of our online gaming platform located at https://ph168.cam and associated mobile applications (collectively, the "Platform"). This Privacy Policy explains how ph168 collects, uses, processes, stores, shares, and protects your personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as applicable Philippine laws and regulations governing online gaming operations under the Philippine Amusement and Gaming Corporation (PAGCOR) framework.

As the data controller, ph168 is responsible for determining the purposes and means of processing your personal data. We process personal information solely for legitimate business purposes related to providing online gaming services, complying with legal obligations under Philippine law, preventing fraud and money laundering, and improving user experience on the Platform. By creating an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and consent to the data processing practices described in this Privacy Policy.

1.1 Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected through the ph168 Platform, including but not limited to information provided during account registration, identity verification processes, payment transactions, customer support interactions, promotional communications, gameplay activities, and any other interactions with ph168 services. This policy covers both automated data collection through cookies, tracking technologies, and analytics tools, as well as information you voluntarily provide to us.

This Privacy Policy does not apply to third-party websites, services, or applications that may be linked from our Platform. We are not responsible for the privacy practices of external websites, payment processors, or game providers, and we encourage you to review their respective privacy policies before providing any personal information to third parties.

2. Personal Data We Collect

ph168 collects various categories of personal information necessary to provide gaming services, verify user identity, process financial transactions, comply with regulatory obligations, prevent fraud, and enhance platform security. The specific types of personal data we collect include:

2.1 Account Registration Information

When you create a ph168 account, we collect the following personal data:

• Full legal name as it appears on government-issued identification documents;
• Date of birth to verify that you meet the minimum age requirement of 21 years old;
• Residential address including street, barangay, city/municipality, province, and postal code;
• Mobile phone number for account verification, two-factor authentication, and customer service communications;
• Email address for account notifications, marketing communications (with your consent), and password recovery;
• Username and encrypted password for account access and authentication;
• Preferred currency (PHP) and language settings;
• Security questions and answers for account recovery purposes.

2.2 Identity Verification and KYC Documentation

To comply with PAGCOR's Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations, as well as the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) as amended, ph168 requires all users to undergo identity verification. We collect and process the following documentation:

• Government-issued photo identification such as Philippine passport, driver's license, Unified Multi-Purpose ID (UMID), Professional Regulation Commission (PRC) ID, Social Security System (SSS) ID, Voter's ID, or Postal ID;
• Proof of address documents dated within the last three months, including utility bills (electricity, water, internet), bank statements, credit card statements, or government correspondence;
• Selfie photographs holding your identification document ("selfie with ID") for biometric verification;
• Proof of payment method ownership such as bank account statements, e-wallet screenshots (GCash, PayMaya), or credit/debit card images showing the cardholder name and last four digits;
• Source of funds documentation if large deposits or suspicious transaction patterns are detected.

2.3 Financial and Transaction Data

ph168 processes financial information to facilitate deposits, withdrawals, and gaming transactions. We collect:

• Payment method details including GCash mobile number, PayMaya account, bank account numbers, credit/debit card information (card number, expiration date, CVV for initial verification only);
• Transaction history including deposit amounts, withdrawal requests, transaction dates and times, payment method used, and transaction status;
• Cryptocurrency wallet addresses for users choosing crypto payment methods;
• Banking information required for wire transfers including bank name, branch, account name, and account number;
• Currency conversion data for transactions involving foreign currencies;
• Bonus and promotional transaction records including bonus claims, wagering progress, and bonus withdrawals.

Note that ph168 does not directly store complete credit card information. Credit card payments are processed through PCI-DSS compliant third-party payment gateways that tokenize card data. We only retain the last four digits of card numbers and expiration dates for reference purposes.

2.4 Gaming Activity and Behavioral Data

To provide gaming services, detect fraud, ensure responsible gaming compliance, and improve user experience, ph168 automatically collects:

• Gameplay history including games played, bet amounts, win/loss records, jackpot wins, and session duration;
• Betting patterns and wagering behavior for responsible gaming monitoring and fraud detection;
• Game preferences, favorite games, and playing frequency;
• Bonuses claimed, wagering requirement progress, and bonus expiration dates;
• Tournament participation, leaderboard rankings, and competition results;
• Login history including timestamps, session duration, and logout events;
• Self-exclusion requests, deposit limits, and responsible gaming tool usage.

2.5 Technical and Device Information

When you access the ph168 Platform, we automatically collect technical data including:

• IP address, geolocation data, and ISP information to verify Philippine residency and detect VPN/proxy usage;
• Device information including device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution;
• Unique device identifiers and mobile advertising IDs for fraud prevention;
• Browser cookies, local storage data, and session tokens;
• Referral sources, UTM parameters, and marketing campaign identifiers;
• Platform usage data including pages visited, clickstream data, navigation paths, and time spent on pages;
• Error logs, crash reports, and diagnostic information for technical troubleshooting.

2.6 Communications and Customer Support Data

When you contact ph168 customer support or interact with our communications, we collect:

• Live chat transcripts, email correspondence, and telephone call recordings (with prior notice and consent);
• Customer service tickets including issue descriptions, resolution status, and agent notes;
• Feedback, complaints, and dispute resolution communications;
• Social media messages and interactions on our official Facebook, Twitter, or Instagram pages;
• Marketing email engagement data including open rates, click-through rates, and unsubscribe requests;
• SMS marketing responses and mobile push notification preferences.

3. Legal Basis and Purposes for Data Processing

ph168 processes your personal data based on the following legal grounds as recognized under the Data Privacy Act of 2012:

Legal Basis	Purpose of Processing
Consent	Processing data for marketing communications, promotional offers, newsletter subscriptions, and optional features where you have provided explicit consent.
Contract Performance	Processing necessary to provide gaming services, process transactions, manage your account, and fulfill our obligations under the Terms and Conditions.
Legal Obligation	Processing required to comply with PAGCOR regulations, AML/CTF laws, tax reporting obligations, data retention requirements, and law enforcement requests.
Legitimate Interest	Processing for fraud prevention, security monitoring, platform improvement, analytics, and business operations, balanced against your privacy rights.

3.1 Specific Processing Purposes

ph168 uses your personal data for the following specific purposes:

• Account Management: Creating and maintaining your ph168 account, authenticating your identity, managing login credentials, and providing customer support;
• Service Provision: Enabling gameplay, processing bets and wagers, calculating and paying out winnings, managing bonuses and promotions, and facilitating all gaming activities;
• Payment Processing: Processing deposits and withdrawals, verifying payment method ownership, preventing payment fraud, and reconciling financial transactions;
• Regulatory Compliance: Verifying age and identity, conducting KYC/AML checks, reporting suspicious transactions to AMLC, maintaining required records, and responding to regulatory inquiries;
• Fraud Prevention: Detecting and preventing fraudulent activities, identifying duplicate accounts, monitoring for collusion and cheating, and protecting platform integrity;
• Responsible Gaming: Monitoring gambling behavior, enforcing deposit limits and self-exclusion, identifying problem gambling indicators, and providing responsible gaming tools;
• Marketing and Communications: Sending promotional offers, bonus notifications, and platform updates (with consent), personalizing marketing messages, and conducting customer satisfaction surveys;
• Platform Improvement: Analyzing user behavior, conducting A/B testing, improving game selection, optimizing user interface, and developing new features;
• Security and Technical Operations: Protecting against cyberattacks, maintaining system security, performing backups, troubleshooting technical issues, and ensuring platform availability.

4. Data Sharing and Third-Party Disclosure

ph168 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data with trusted service providers and partners who assist us in operating the Platform, and only to the extent necessary to fulfill the purposes described in this Privacy Policy. All third-party service providers are contractually obligated to maintain confidentiality and implement appropriate security measures to protect your data.

4.1 Categories of Third-Party Recipients

We may share your personal data with the following categories of third parties:

• Payment Service Providers: GCash, PayMaya, banks, payment gateways, and cryptocurrency exchanges to process deposits and withdrawals;
• Game Providers: Third-party gaming software providers such as Pragmatic Play, Evolution Gaming, and Microgaming to deliver game content and verify gameplay integrity;
• Identity Verification Services: KYC verification platforms that authenticate government-issued IDs and verify document authenticity;
• Fraud Detection Services: Third-party fraud prevention tools that analyze transaction patterns and detect suspicious activities;
• Cloud Hosting Providers: Infrastructure providers that host our servers, databases, and backup systems;
• Analytics and Marketing Tools: Google Analytics, Facebook Pixel, and email marketing platforms to analyze platform usage and deliver targeted advertising (subject to your consent);
• Customer Support Platforms: Live chat software, ticketing systems, and CRM platforms to manage customer service interactions;
• Legal and Professional Advisors: Lawyers, accountants, auditors, and consultants who provide professional services to ph168;
• Regulatory Authorities: PAGCOR, National Privacy Commission (NPC), Anti-Money Laundering Council (AMLC), Bureau of Internal Revenue (BIR), and other government agencies when legally required;
• Law Enforcement: Philippine National Police (PNP), National Bureau of Investigation (NBI), and other law enforcement agencies pursuant to valid legal process such as subpoenas, court orders, or search warrants.

4.2 International Data Transfers

Some of our service providers and game developers are located outside the Philippines. When we transfer your personal data internationally, we ensure adequate safeguards are in place through Standard Contractual Clauses, data processing agreements, and verification that recipient countries provide adequate data protection as recognized by the National Privacy Commission. All international data transfers comply with the requirements of the Data Privacy Act of 2012.

5. Data Security Measures

ph168 implements industry-standard technical, physical, and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• Encryption: All data transmitted between your device and ph168 servers is encrypted using TLS 1.2 or higher. Personal data stored in our databases is encrypted at rest using AES-256 encryption;
• Access Controls: Role-based access controls (RBAC) limit employee access to personal data on a need-to-know basis. All access is logged and monitored;
• Authentication: Multi-factor authentication (MFA) is required for employee access to sensitive systems. Players can enable 2FA on their accounts for enhanced security;
• Firewall Protection: Enterprise-grade firewalls protect our servers from unauthorized access and cyber attacks;
• Intrusion Detection: 24/7 security monitoring and intrusion detection systems identify and respond to potential security threats in real-time;
• Regular Audits: Independent security audits and penetration testing are conducted annually to identify and remediate vulnerabilities;
• Employee Training: All ph168 employees undergo regular data privacy and security training and are bound by confidentiality agreements;
• Incident Response: We maintain an incident response plan to quickly address data breaches and notify affected users as required by law;
• Data Minimization: We collect only the minimum amount of personal data necessary for specified purposes and delete data that is no longer needed;
• Backup and Recovery: Regular encrypted backups ensure data availability and integrity in case of system failure or disaster.

6. Data Retention

ph168 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus five (5) years after account closure as required by PAGCOR and AML regulations;
• Transaction Records: Retained for five (5) years after the transaction date in compliance with tax and financial record-keeping requirements;
• KYC Documents: Retained for five (5) years after account closure to comply with AML/CTF regulations;
• Gaming Activity: Retained for three (3) years for dispute resolution and regulatory audit purposes;
• Communication Records: Retained for two (2) years for customer service quality assurance and dispute resolution;
• Marketing Consent: Retained until you withdraw consent or for two (2) years of inactivity, whichever comes first;
• Security Logs: Retained for one (1) year for security monitoring and incident investigation.

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized to prevent identification. If legal obligations require extended retention, we will continue to store your data only for the minimum period required by law.

7. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data:

7.1 Right to Be Informed

You have the right to be informed about how ph168 collects, uses, and processes your personal data. This Privacy Policy serves to fulfill our obligation to provide clear and transparent information about our data processing practices.

7.2 Right to Access

You have the right to access your personal data held by ph168. You may request a copy of your account information, transaction history, and other personal data we process about you. To submit an access request, contact [email protected] with your account details.

7.3 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You can update your account information directly through your ph168 account settings or by contacting customer support. For changes to verified information (name, date of birth), we may require supporting documentation.

7.4 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when the processing is unlawful. However, we may retain certain data to comply with legal obligations, resolve disputes, or enforce our terms.

7.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. You can opt out of marketing communications by clicking the unsubscribe link in emails or by contacting customer support. You may also object to processing based on legitimate interests by providing specific grounds relating to your particular situation.

7.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance from ph168, where technically feasible.

7.7 Right to File a Complaint

If you believe ph168 has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. NPC contact information: Email: [email protected] | Website: https://privacy.gov.ph | Telephone: (02) 8234-2228

To exercise any of these rights, please submit a written request to our Data Protection Officer at [email protected]. We will respond to your request within fifteen (15) days or as required by the Data Privacy Act of 2012.

8. Updates to This Privacy Policy

ph168 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When material changes are made, we will notify you by email (to the address registered on your account) and by posting a prominent notice on the Platform. The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revisions were made. Your continued use of the ph168 Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

9. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or ph168's data processing practices, please contact:

Data Protection Officer
ph168 Online Gaming Platform
Email: [email protected]
Customer Support: Available 24/7 via live chat