phil168 Privacy Policy

1 Introduction

phil168 ("phil168," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the phil168 online gaming platform (the "Platform"). This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you access or use the Platform, including our website, mobile applications, and any related services.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It should be read together with our Terms & Conditions, which govern your use of the Platform.

If you have any questions about this Privacy Policy or how phil168 handles your personal data, please contact our Data Protection Officer at the details provided in Section 14 of this Policy.

2 Personal Data We Collect

phil168 collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include:

phil168 does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive personal information is collected (such as government ID details), it is handled with the highest level of care and protection.

3 How We Collect Your Data

phil168 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-Party Sources: Information received from payment processors (such as GCash or Maya) to verify transactions, or from identity verification service providers engaged to assist with KYC compliance.
• Publicly Available Sources: In limited circumstances, phil168 may supplement your information with data from publicly available sources for fraud prevention or regulatory compliance purposes.

4 How We Use Your Personal Data

phil168 uses your personal data only for legitimate, specified purposes. The primary purposes for which we process your data are:

• Account Management: To create, maintain, and administer your phil168 player account, including verifying your identity and age (21+ requirement) in accordance with PAGCOR regulations.
• Service Delivery: To provide you with access to the games, promotions, and other features available on the phil168 Platform.
• Financial Transactions: To process deposits and withdrawals via GCash, Maya, bank transfer, and debit card, and to maintain accurate transaction records.
• Regulatory Compliance: To comply with our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws and regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Responsible Gaming: To monitor gaming behaviour and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Marketing & Promotions: To send you information about phil168 promotions, bonuses, and new features, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform Improvement: To analyse usage patterns and improve the functionality, performance, and user experience of the phil168 Platform.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, phil168 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your player account and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC directives.
• Legitimate Interests: Processing is necessary for phil168's legitimate interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

phil168 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions.
• Identity Verification Providers: Third-party KYC service providers engaged to assist with age and identity verification in compliance with PAGCOR requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities, where disclosure is required by law or court order.
• Technology Service Providers: Cloud hosting, data analytics, and cybersecurity providers who process data on our behalf under strict data processing agreements.
• Game Content Providers: Licensed game developers and studios whose games are available on the phil168 Platform, to the extent necessary for game operation and fairness auditing.

7 Data Retention

phil168 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing conditions and AMLA requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Preferences: Retained until you withdraw your consent or opt out of marketing communications.
• Technical & Usage Data: Retained for up to two (2) years for analytics and security purposes, after which it is anonymised or deleted.

When personal data is no longer required, phil168 will securely delete or anonymise it in accordance with our data disposal procedures.

8 Cookies & Tracking Technologies

phil168 uses cookies and similar tracking technologies to enhance your experience on the Platform, to analyse usage patterns, and to support security functions. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Performance & Analytics Cookies: Used to collect anonymised information about how players use the Platform, helping us identify areas for improvement. These are only set with your consent.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to personalise your experience.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phil168 Platform. For more information about the specific cookies we use, please contact our Data Protection Officer.

9 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phil168:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data phil168 holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission if you believe your data rights have been violated.

10 Children's Privacy

The phil168 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations and Philippine law governing casino-style gambling. phil168 does not knowingly collect personal data from individuals under the age of 21.

If phil168 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, return any deposits, and delete the personal data in question. If you believe that a minor has registered an account on the phil168 Platform, please contact us immediately at the details provided in Section 14.

11 Security Measures

phil168 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the phil168 Platform.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform.
• Multi-factor authentication options for player accounts to prevent unauthorised access.
• Continuous monitoring of the Platform for suspicious activity and potential security incidents.

While phil168 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phil168 login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

12 International Data Transfers

phil168 primarily stores and processes personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game content suppliers.

Where such transfers occur, phil168 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to handle your data in accordance with standards equivalent to those required by the Data Privacy Act of 2012. phil168 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or a lawful basis for doing so.

13 Changes to This Privacy Policy

phil168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features of the Platform. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how phil168 protects your personal data. Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.

14 Contact & Complaints

phil168 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or complaints regarding the handling of your personal data, please contact our DPO:

If you are not satisfied with phil168's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC can be reached through its official website and handles complaints relating to violations of the Data Privacy Act of 2012.

phil168 takes all privacy complaints seriously and will investigate and respond to all verified complaints within fifteen (15) business days of receipt.