ph69 Privacy Policy

This Privacy Policy ("Policy") describes how ph69.asia ("ph69," "we," "us," "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you," "User," "Player") who access or use the ph69 website, mobile-optimized interface, and all associated gaming, betting, and account-management services (collectively, "the Platform" or "the Services").

This Policy applies to all personal data processing activities conducted by ph69 in connection with the Platform, including data collected through account registration, gameplay, financial transactions, customer support interactions, and technical usage of the site.

This Policy is to be read in conjunction with ph69's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of a conflict between this Policy and those documents with respect to data privacy matters, this Policy shall prevail.

ph69 is the operator of the online gaming and sports betting platform available at ph69.asia. ph69 acts as the Personal Information Controller (as defined under Republic Act No. 10173) in respect of all personal data collected from Users of the Platform. This means ph69 determines the purposes for which, and the means by which, your personal data is processed.

ph69 is registered with the National Privacy Commission of the Philippines as a Personal Information Controller as required by the Data Privacy Act of 2012. ph69 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and for handling data subject rights requests.

For all data privacy enquiries, rights requests, and complaints, contact details for the ph69 Data Protection Officer are provided in Section 16 of this Policy.

ph69 collects the following categories of personal data from Users of the Platform. The specific data collected from any individual User will depend on the Services they use and the interactions they have with the Platform.

ph69 does not intentionally collect sensitive personal information as defined under the Data Privacy Act (e.g., health data, political affiliations, religious beliefs) unless specifically required for regulatory compliance purposes, in which case separate and explicit consent will be obtained.

ph69 collects personal data through the following means:

• Directly from you: When you register a ph69 account, complete your player profile, submit identity documents for KYC verification, make a deposit or withdrawal request, contact ph69 support, or participate in a promotional offer;
• Automatically through the Platform: When you access ph69.asia, the Platform automatically collects technical data including your IP address, device identifiers, browser type and version, operating system, pages visited, session duration, and interaction patterns via server logs and first-party cookies;
• From payment service providers: When you initiate a deposit or withdrawal via GCash, Maya, BPI, BDO, or other integrated payment channels, ph69 receives transaction confirmation data from those providers sufficient to reconcile the transaction on the Platform;
• From identity verification service providers: Where ph69 uses third-party KYC technology providers to assist with identity document verification, those providers may process your ID documents and return a verification result to ph69;
• From anti-fraud and AML monitoring systems: Automated systems analyse transaction patterns and gameplay behaviour to detect suspicious activity in compliance with Philippine anti-money laundering obligations.

ph69 uses the personal data we collect for the following purposes:

• Account management: To create, maintain, verify, and administer your ph69 player account, including authentication of login sessions and account security monitoring;
• Provision of Services: To enable your access to casino games, sports betting markets, bingo rooms, crash games, slots, and all other features of the ph69 Platform;
• Payment processing: To process deposits to your ph69 wallet and withdrawal requests from your ph69 wallet to your designated payment method, including verification that payment methods are owned by the registered account holder;
• Identity and age verification (KYC): To verify that you meet the minimum age requirement of 21 years as required by PAGCOR regulations, and to verify your identity before processing withdrawals;
• Legal and regulatory compliance: To meet ph69's obligations under Philippine gaming regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and any other applicable laws, including reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC);
• Responsible gaming: To monitor gaming activity for patterns consistent with problem gambling, to apply responsible gaming tools, and to facilitate self-exclusion requests and other player protection measures;
• Fraud prevention and security: To detect and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in ph69's Terms & Conditions;
• Customer support: To investigate and resolve player queries, complaints, and disputes, and to maintain records of support interactions for quality assurance;
• Platform improvement: To analyse aggregate usage data and identify opportunities to improve the technical performance, user experience, and game library of the ph69 Platform;
• Promotional communications: To send you information about ph69 promotions, bonuses, and offers that are relevant to your account, where you have not opted out of receiving such communications.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, ph69's processing of your personal data is lawful on the following bases, which apply to different categories of processing activity:

• Performance of a contract: The majority of data processing by ph69 is necessary for the performance of the contractual relationship between ph69 and the User as established by ph69's Terms & Conditions — specifically, to operate the player account, process transactions, and provide gaming services;
• Compliance with a legal obligation: Processing for KYC, AML compliance, regulatory reporting to PAGCOR, and record-keeping as required by Philippine gaming and financial regulation law;
• Legitimate interests: Processing for fraud detection, platform security, abuse prevention, responsible gaming monitoring, and improvement of platform services, where these interests do not override the User's privacy rights;
• Consent: Processing for optional promotional communications, where consent has been given at registration or via account settings. Consent may be withdrawn at any time by updating your communication preferences in your account settings.

ph69 does not share your personal data with third parties except in the following circumstances:

• Payment service providers: ph69 shares transaction-relevant data with integrated payment processors (GCash, Maya, GrabPay, BPI, BDO, 7-Eleven, USDT processors, Coins.ph) solely to facilitate the processing of your deposit and withdrawal requests. These providers act as data processors under instructions from ph69 and are bound by data processing agreements;
• KYC and identity verification providers: Where ph69 uses third-party technology to assist with identity document verification, your KYC documents and verification data are processed by those providers under strict confidentiality and data processing obligations;
• Game software providers: To provide game functionality, certain technical session data is processed by the third-party game providers whose titles are integrated into the ph69 Platform. These providers do not receive your personal identity information;
• Regulatory authorities: ph69 is required by law to report certain information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies. ph69 complies with all lawfully issued requests and legal obligations to disclose to these bodies;
• Law enforcement and legal proceedings: ph69 may disclose personal data to law enforcement authorities or courts where required by a valid legal process, court order, or applicable Philippine law;
• Business transfers: In the event of a merger, acquisition, or sale of ph69's business assets, personal data held by ph69 may be transferred to the acquiring entity, subject to that entity assuming ph69's privacy obligations with respect to that data. Affected Users will be notified of any such transfer.

All third parties with whom ph69 shares personal data are required to process that data in accordance with applicable data privacy law and are subject to contractual obligations that protect the confidentiality and security of your information.

ph69 uses first-party cookies and similar technologies (collectively, "Cookies") on ph69.asia to support the operation of the Platform and to improve the user experience. ph69 does not use third-party advertising tracking cookies or share session data with external advertising networks.

The following types of Cookies are used on ph69.asia:

• Essential / Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and cookies that remember your login state. These cannot be disabled without significantly impairing Platform functionality;
• Functional Cookies: Remember your Platform preferences such as preferred language, game display settings, and interface preferences. These improve your experience but are not strictly necessary for core functionality;
• Performance / Analytics Cookies: Collect aggregated, anonymised data about how the Platform is used — such as pages most frequently visited, common navigation paths, and technical error frequencies — to help ph69 identify areas for improvement. These cookies do not track individual player identity.

You can manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in to and using the ph69 Platform. For detailed information on managing cookies in your specific browser, refer to your browser's help documentation.

ph69 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to meet legal and regulatory obligations, and to resolve disputes or enforce agreements. The following general retention periods apply:

• Active account data: Personal data associated with an active ph69 account is retained for the duration of the account's active status and for a period of at least five (5) years following account closure, in compliance with Philippine gaming and AML record-keeping requirements;
• KYC and identity documents: Retained for a minimum of five (5) years following the last transaction on the account, as required by the Anti-Money Laundering Act (AMLA) and its implementing regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulation and AMLC requirements;
• Support and communications records: Retained for three (3) years following the closure of the relevant support case, unless retention is required for longer due to ongoing legal proceedings;
• Technical and server logs: Retained for a rolling period of twelve (12) months, after which they are automatically purged or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Anonymised data (from which individual identity cannot be reconstructed) may be retained for platform analytics purposes without time limit.

ph69 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and ph69 servers is encrypted using Transport Layer Security (TLS 1.2 or higher), providing 256-bit encryption for all communications;
• Encryption at rest: Sensitive personal data, including identity documents and financial information, is encrypted at rest in ph69's database systems;
• Access controls: Access to personal data within ph69's internal systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular review;
• Password security: Account passwords are hashed using industry-standard algorithms and are never stored in plain text. ph69 staff cannot view or recover your password;
• Two-factor authentication: ph69 offers and encourages two-factor authentication (2FA) for all player accounts as an additional layer of login security;
• Security monitoring: ph69's infrastructure is subject to ongoing security monitoring, vulnerability scanning, and periodic security assessments to identify and address potential weaknesses.

While ph69 applies rigorous security practices, no internet-based system can guarantee absolute security. ph69 cannot be held responsible for security breaches that result from a User's failure to secure their own login credentials or from circumstances beyond ph69's reasonable control. You are responsible for maintaining the security of your ph69 account password and for notifying ph69 immediately if you suspect unauthorised access.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you hold the following rights with respect to your personal data held by ph69. These are genuine, enforceable rights — not merely statements of intent.

To exercise any of the above rights, contact ph69's Data Protection Officer via the contact details in Section 16. ph69 will acknowledge your request within 3 business days and will provide a substantive response within 30 calendar days, or within such extended timeframe as is permitted by the Data Privacy Act where the request is complex. Rights requests are processed free of charge.

In the event that ph69 declines to act on your rights request, ph69 will provide a written explanation of the reasons for the refusal and will inform you of your right to lodge a complaint with the National Privacy Commission of the Philippines.

ph69 does not knowingly collect personal data from individuals under the age of 21. The ph69 Platform is strictly intended for adults aged 21 years and above in compliance with Philippine gaming regulations administered by PAGCOR. ph69 applies age verification measures at the point of registration and through the KYC process to enforce this requirement.

If ph69 discovers or has reason to believe that personal data has been collected from a person under the age of 21, ph69 will immediately suspend the associated account, initiate an investigation, and where confirmed, delete the associated personal data (subject to any legal retention obligations that override deletion) and notify the relevant regulatory authorities as required by law.

If you believe that ph69 may hold personal data relating to a person under the age of 21, please notify ph69 immediately via the contact details in Section 16. ph69 takes underage gaming and the associated data privacy implications extremely seriously.

ph69 primarily stores and processes personal data on servers located within the Philippines or in jurisdictions that provide an adequate level of data protection. Where ph69 engages third-party service providers (such as game software providers or technology vendors) that process data outside the Philippines, ph69 ensures that appropriate safeguards are in place to protect the transferred data.

Appropriate safeguards for international data transfers include:

• Data processing agreements that incorporate standard contractual clauses providing binding data protection obligations on the recipient;
• Transfers to jurisdictions that the National Privacy Commission has recognised as providing an adequate level of data protection;
• Binding corporate rules where transfers occur within a group of companies that has adopted such rules.

You may request information about the specific safeguards applicable to any particular international transfer of your personal data by contacting ph69's Data Protection Officer at the details provided in Section 16.

The ph69 Platform does not contain links to third-party external websites as a matter of general policy. Game software integrated into the Platform is provided through embedded iframes or APIs and does not redirect Users to third-party websites in the course of normal gameplay.

In the event that any communication from ph69 (such as a support email) references an external resource, ph69 is not responsible for the privacy practices of those third-party sites. Users should review the privacy policies of any third-party site they visit independently of ph69.

ph69 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, ph69's data processing practices, or the Services offered on the Platform. The Effective Date at the top of this Policy will be updated to reflect the date of the most recent version.

Where amendments to this Policy are material — meaning they substantively alter how ph69 processes your personal data or affect your rights as a data subject — ph69 will notify registered Users by email to their registered email address or through an in-Platform notification, with a minimum of 14 days' advance notice prior to the amended Policy taking effect.

Continued use of the ph69 Platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the amended Policy, you should discontinue use of the Platform and may request account closure and data deletion (subject to applicable retention obligations) by contacting ph69 support.

For all data privacy enquiries, rights requests, questions about this Policy, or to report a potential data protection concern, please contact ph69's Data Protection Officer through the following channels. Note that the email address below is provided as plain text only and is not a clickable link.

• Live Chat: Available 24/7 on ph69.asia. For urgent data security concerns such as suspected account compromise, live chat is the fastest channel to reach the ph69 team.
• Email: [email protected] (plain text — not a clickable link). Please include "Data Privacy Request" in your subject line for all formal data subject rights requests.
• Facebook Messenger: Available via the ph69 official page for general enquiries. Formal data subject rights requests should be submitted via email or live chat for proper processing and record-keeping.

ph69 will acknowledge all data privacy communications within three (3) business days and will provide a substantive response within thirty (30) calendar days.