ph967 Privacy Policy

ph967 is committed to protecting the privacy and personal data of all registered players and website visitors. We understand that when you share your personal information with us — your name, mobile number, payment details — you are extending a degree of trust, and we take that seriously.

This Policy describes, in plain and specific terms: the categories of personal data ph967 collects; the specific purposes for which we use that data; the legal bases that authorize our processing; the circumstances under which we may share data with third parties; the security measures we have in place to protect your information; the duration for which we retain different categories of data; and your rights as a data subject under Philippine law.

ph967 processes personal data solely for the purposes set out in this Policy. We do not engage in any form of automated decision-making that produces legal or similarly significant effects on individual players without human oversight and, where applicable, without your explicit consent.

2.1 Controller Identity. For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, ph967 acts as the personal information controller in respect of all personal data collected through the ph967 Platform and associated services.

2.2 Data Protection Officer. ph967 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Policy. You may contact the DPO with any privacy-related inquiries or requests at [email protected], marking your subject line "Data Privacy — DPO Inquiry." ph967 will acknowledge all DPO inquiries within seventy-two (72) hours.

2.3 Regulatory Registration. ph967 complies with the registration requirements of the National Privacy Commission (NPC) of the Philippines for personal information controllers processing personal data subject to the Data Privacy Act of 2012.

3.1 Categories of Personal Data. ph967 collects the following categories of personal data from registered players and platform visitors:

3.2 Sensitive Personal Information. Philippine law provides heightened protection for "sensitive personal information," which includes government-issued ID numbers and financial account details. ph967 collects sensitive personal information only to the extent strictly necessary for identity verification, payment processing, and regulatory compliance, and applies additional safeguards to this category of data as described in Section 9.

3.3 Data Not Collected. ph967 does not collect biometric data (facial images or fingerprints) for routine account purposes. Where biometric verification is required by PAGCOR for enhanced KYC processes, this is conducted through PAGCOR's designated systems and is subject to separate notification to the player at the time of collection.

ph967 collects personal data through the following means:

• Direct collection: Information you provide when registering a ph967 account, completing KYC verification, making deposits or withdrawals, contacting support, or updating account settings.
• Automated technical collection: Technical data collected automatically when you access the ph967 Platform, including via cookies, server logs, and session tracking technologies (see Section 8).
• Payment providers: Transaction references and payment status information received from GCash, PayMaya, and banking partners when you make deposits or withdrawals. ph967 does not receive full payment credentials from these providers.
• KYC/identity verification partners: Verification status and identity document validation results from third-party KYC service providers engaged by ph967 for the purpose of regulatory compliance.
• PAGCOR and regulatory sources: Information relating to self-exclusion registrations or player restrictions maintained in PAGCOR's regulatory systems, which ph967 is required to consult as part of responsible gaming compliance.

ph967 uses personal data collected from players only for the specific purposes listed below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected.

Account Management & Service Delivery

• Creating, maintaining, and managing your ph967 account.
• Processing deposits and withdrawals through GCash, PayMaya, and banking channels.
• Providing access to ph967's game library, including live casino, slots, sports betting, bingo, crash games, and virtual sports.
• Delivering customer support, responding to inquiries, and resolving disputes.

Regulatory Compliance & Legal Obligations

• Verifying player identity and age (KYC) as required by PAGCOR regulations — all ph967 players must be at least 21 years old.
• Complying with Philippine Anti-Money Laundering Act (AMLA) obligations, including monitoring for unusual transaction patterns and reporting as required by law.
• Maintaining transaction records as required by PAGCOR and Philippine tax regulations.
• Consulting PAGCOR's player exclusion registers to prevent self-excluded individuals from accessing real-money gaming.

Security & Fraud Prevention

• Detecting, investigating, and preventing unauthorized account access, payment fraud, multi-accounting, and bonus abuse.
• Verifying that each player account is used only by the registered account holder.
• Monitoring for unusual gaming patterns that may indicate fraud, collusion, or exploitation of software errors.

Responsible Gaming

• Maintaining player-set deposit limits, session timers, cooling-off periods, and self-exclusion statuses.
• Identifying players who may be showing indicators of problem gambling behavior, in order to proactively offer responsible gaming resources.

Platform Improvement & Communications

• Analyzing aggregate, anonymized gameplay and usage data to improve ph967's game library, platform performance, and user experience.
• Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts) to your registered mobile number and email.
• Sending promotional communications (bonus offers, new game announcements) only where you have opted into marketing communications.

Under the Philippine Data Privacy Act of 2012, ph967 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill ph967's obligations under the Player Agreement (Terms & Conditions) — including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics, where ph967's legitimate interests are not overridden by individual players' privacy interests.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. This consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

7.1 ph967 does not sell personal data. ph967 does not sell, rent, or otherwise transfer personal data to third-party marketers or data brokers under any circumstances.

7.2 Authorized Third-Party Processors. ph967 shares personal data with the following categories of third parties strictly to the extent necessary for the purposes described in this Policy:

• Payment service providers: GCash, PayMaya, BPI, BDO, and Metrobank — for deposit and withdrawal processing. These providers receive only the transaction data necessary to execute the relevant payment.
• KYC and identity verification services: Third-party providers engaged to verify government-issued Philippine ID documents during the KYC process. These providers act as personal information processors under the Data Privacy Act and are bound by data processing agreements.
• Game software providers: Third-party game developers (including those providing live casino streams and RNG game engines) receive session and wager data necessary to operate games and resolve game outcome disputes.
• Cloud infrastructure and security services: ph967's hosting and security infrastructure providers, who process technical and operational data subject to binding contractual confidentiality and security obligations.

7.3 Regulatory and Law Enforcement Disclosure. ph967 is required by Philippine law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies where lawfully required. Such disclosures do not constitute unauthorized sharing of personal data and are not subject to player consent.

7.4 Cross-Border Data Transfers. Some of ph967's technology and service providers may process data outside the Philippines. Where this occurs, ph967 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act's requirements for cross-border data transfers, including contractual data protection clauses.

8.1 Cookies ph967 Uses. ph967 uses the following categories of cookies on the Platform:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, login persistence (where the player selects "Keep me signed in"), and security token verification. These cannot be disabled without making the Platform unusable.
• Functional cookies: Remember your preferences such as language, game display settings, and responsible gaming tool configurations. These improve your ph967 experience without tracking you across other sites.
• Analytics cookies: Aggregate, anonymized data on how players navigate and use the ph967 Platform — used for internal performance analysis and improvement. ph967 uses privacy-respecting analytics tooling and does not share this data with third-party advertising networks.

8.2 No Advertising Trackers. ph967 does not use third-party advertising or retargeting cookies. Your activity on ph967 is not shared with social media platforms or ad networks for behavioral targeting purposes.

8.3 Managing Cookies. You may control and delete cookies through your browser settings. Disabling functional cookies may affect your ph967 experience — for example, your game preferences may not be saved between sessions. Disabling strictly necessary cookies will prevent you from logging in to your ph967 account. Disabling analytics cookies has no impact on functionality.

8.4 Mobile Data. When you access ph967 on a mobile device, the Platform may collect device type, operating system version, and mobile network carrier information (Globe, Smart, DITO) to optimize the mobile experience. This technical data is processed in accordance with this Policy.

9.1 Technical Safeguards. ph967 implements the following technical security measures to protect player personal data:

• 256-bit SSL/TLS encryption for all data in transit between player devices and ph967 servers.
• Encryption at rest for sensitive personal information, including identity document data and financial account references stored on ph967 databases.
• Multi-factor authentication for internal ph967 system access by staff, including OTP-based verification for access to player data systems.
• Role-based access controls ensuring that ph967 staff access only the player data strictly necessary for their specific job function.
• Regular security audits and vulnerability assessments of ph967's platform and data systems.
• Intrusion detection systems monitoring for unauthorized access attempts in real time.

9.2 Organizational Safeguards. ph967 staff who handle personal data are subject to confidentiality obligations, regular data privacy training, and background screening procedures. Access to sensitive player data is logged and audited on an ongoing basis.

9.3 Data Breach Response. In the event of a personal data breach affecting ph967 players, ph967 will notify the National Privacy Commission within seventy-two (72) hours of discovery, as required by the Data Privacy Act. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms, providing specific information about the nature of the breach and the steps taken to address it.

9.4 Player Responsibility. ph967's security measures protect your data on our systems. You are responsible for maintaining the security of your ph967 login credentials — particularly your password and OTP codes. Never share these with anyone, including individuals claiming to represent ph967 support. ph967 support agents will never ask for your password.

10.1 Retention Periods. ph967 retains different categories of personal data for different periods, based on the purpose of processing and applicable legal requirements:

10.2 Post-Retention Disposal. Upon expiry of the applicable retention period, ph967 will securely delete or anonymize personal data in accordance with industry best practices, such that the data can no longer be attributed to any identifiable individual.

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by ph967. To exercise any of these rights, contact ph967's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request."

12.1 Minimum Age. ph967's real-money gaming services are restricted to individuals who are at least twenty-one (21) years of age, as required by PAGCOR. ph967 does not knowingly collect personal data from individuals under this age.

12.2 Age Verification. ph967 employs KYC verification measures to confirm the age of all registered players before processing any withdrawal. Where ph967 has reasonable grounds to suspect that a player is under 21, their account will be suspended pending age verification, and no real-money activity will be permitted until age is confirmed.

12.3 Discovery of Underage Data. If ph967 discovers that it has inadvertently collected personal data from an individual under 21 years of age, ph967 will delete such data promptly, close the associated account, and return any real-money deposits at its discretion. Any winnings accumulated during the period will be forfeited.

13.1 Updates. ph967 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this Policy will be revised whenever a material change is made.

13.2 Notification. ph967 will notify registered players of material changes to this Privacy Policy via the contact details on file — typically by email and by a notification within the ph967 Platform. Where a change requires your consent (for example, a new processing purpose that relies on consent as its legal basis), ph967 will seek that consent before the change takes effect.

13.3 Continued Use. Continued use of the ph967 Platform after a Privacy Policy update has been published and notified constitutes acceptance of the updated Policy for processing based on contractual necessity and legitimate interests. For consent-based processing, explicit re-consent will be sought where required.

For any questions, concerns, or requests relating to this Privacy Policy or ph967's handling of your personal data, please contact ph967's Data Protection Officer using the details below:

• Email: [email protected] (subject line: "Data Privacy Inquiry")
• Live Chat: Available 24/7 on the ph967 Platform — average response time 3–5 minutes
• Operating Hours: 24 hours a day, 7 days a week, including Philippine public holidays

If you are not satisfied with ph967's response to your data privacy inquiry or request, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC), the competent supervisory authority for data protection matters under Republic Act No. 10173.