ph568 Privacy Policy

1.1 Applicability. This Policy applies to all personal data processed by ph568 in connection with: (a) the registration and maintenance of ph568 player accounts; (b) real-money gaming activities including slots, live casino, sports betting, Tongits Go, Bingo, and arcade games; (c) payment processing, deposits, and withdrawals via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven, Coins.ph, and USDT TRC20; (d) customer support interactions via Live Chat; and (e) marketing communications where applicable consent has been obtained.

1.2 Third-Party Links. The ph568 Platform may reference third-party services (such as GCash or Maya) for payment purposes. Those services are governed by their own privacy policies, and ph568 is not responsible for third-party data practices. This Policy covers only personal data processed directly by ph568.

1.3 Definitions. In this Policy: "Personal Information" means any information from which the identity of an individual can be directly or indirectly established; "Sensitive Personal Information" includes but is not limited to government-issued ID data, biometric data, and financial account details; "Processing" means any operation performed on personal data, including collection, recording, use, storage, disclosure, and deletion.

2.1 Controller Identity. The personal data collected through the ph568 Platform is controlled and processed by ph568, the operator of https://ph568.org. ph568 is the Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012.

2.2 Data Protection Officer. ph568 has designated a Data Protection Officer (DPO) responsible for ensuring compliance with this Policy and applicable Philippine data privacy law. Data privacy inquiries, access requests, and complaints may be directed to the ph568 DPO via the Live Chat support channel or by email to:

ph568 collects personal data from the following categories and sources:

3.1 Data Provided Directly by You

• Registration Data: Full legal name, date of birth, gender, Philippine mobile number (+63 format), email address, and account password (stored in hashed form — never in plaintext).
• KYC Identity Documents: Scanned copies or photographs of Philippine government-issued identification (UMID, SSS ID, Driver's License, Passport, PhilSys ID, or PRC ID) and selfie photographs submitted for identity verification.
• Address Information: Residential address (barangay, city/municipality, province) where required for enhanced KYC or compliance purposes.
• Payment Data: GCash-registered mobile number, Maya account details, BPI/BDO/UnionBank account references (partial — no full account numbers are stored by ph568), and cryptocurrency wallet addresses used for USDT TRC20 transactions.
• Support Communications: Content of Live Chat interactions, email correspondence, and any attachments submitted to ph568 customer support.

3.2 Data Collected Automatically

• Device & Browser Data: IP address, browser type and version, operating system, device model, screen resolution, and device identifiers.
• Session Data: Login timestamps, session duration, game rounds played, bet amounts, game outcomes, and navigation paths within the Platform.
• Location Data: Approximate geographic location derived from IP address for fraud prevention and jurisdictional compliance purposes.
• Cookie Data: Persistent and session cookies as described in Section 9 of this Policy.

3.3 Data Received from Third Parties

• Payment Processors: Transaction confirmation data from GCash, Maya, and Philippine bank payment gateways, including transaction reference numbers, timestamps, and transaction status.
• Fraud Prevention Services: Risk scoring data from third-party fraud detection providers used to assess transaction and account legitimacy.

ph568 processes personal data for the following specific, legitimate purposes:

Under the Data Privacy Act of 2012 (RA 10173), ph568 processes personal data on the following lawful bases:

• Contract Performance: Processing your registration data, payment data, and game history is necessary to perform our obligations under the ph568 Terms and Conditions you accepted upon account creation.
• Legal Obligation: KYC identity verification, AML transaction monitoring, and PAGCOR regulatory reporting are processing activities required by Philippine law, specifically the Anti-Money Laundering Act (RA 9160, as amended) and applicable PAGCOR regulations.
• Legitimate Interests: Fraud detection, account security monitoring, platform abuse prevention, and internal analytics are processed based on ph568's legitimate interest in maintaining a safe, fair, and operationally sound gaming environment.
• Consent: Marketing communications via email or SMS are sent only where you have provided explicit, freely given, and informed consent. You may withdraw marketing consent at any time without affecting your account.

6.1 No Sale of Personal Data. ph568 does not sell, rent, trade, or otherwise commercially transfer your personal data to any third party for their independent marketing or commercial purposes.

6.2 Authorized Data Processors. ph568 shares personal data with third-party service providers acting as authorized data processors on ph568's behalf, including:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (Paymaya Philippines, Inc.), Bancnet, and Philippine banking partners — for deposit and withdrawal processing.
• KYC Verification Providers: Third-party identity verification platforms used to validate government ID documents submitted during account verification.
• Game Technology Providers: JILI Technology, PG Soft, Pragmatic Play, Microgaming, and other game software licensors may receive anonymized game session identifiers as part of game content delivery and RNG certification.
• Fraud Detection Services: Third-party risk analytics platforms that assess transaction and login risk based on device and behavioral signals.
• Cloud Infrastructure Providers: Hosting and cloud storage providers that process data on ph568's behalf under data processing agreements that require equivalent data protection standards.

All ph568 third-party data processors are bound by contractual obligations to process personal data only for specified purposes, implement appropriate security measures, and comply with applicable Philippine data privacy law.

6.3 Mandatory Legal Disclosures. ph568 may disclose personal data to government authorities, law enforcement, the Anti-Money Laundering Council (AMLC), or PAGCOR where legally required — including in response to valid court orders, subpoenas, or regulatory demands. ph568 will notify affected users of such disclosures to the extent permitted by law.

ph568 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, regulatory, and accounting obligations. The following retention periods apply:

Upon expiry of the applicable retention period, ph568 will securely delete or anonymize personal data in a manner that prevents reconstruction of the original data.

ph568 implements industry-standard technical and organizational security measures appropriate to the nature and sensitivity of the personal data processed, including:

• Encryption in Transit: All data transmitted between your device and ph568's servers is encrypted using 256-bit TLS/SSL — the same standard used by BSP-regulated Philippine banks and major e-wallet providers including GCash and Maya.
• Encryption at Rest: Sensitive personal data, including KYC identity documents and financial records, is encrypted at rest using AES-256 encryption in ph568's secure cloud infrastructure.
• Password Security: Account passwords are stored exclusively as salted cryptographic hashes using industry-standard algorithms. ph568's systems cannot read or recover your plaintext password.
• Access Controls: Access to personal data within ph568's systems is restricted on a need-to-know basis. Internal access is subject to role-based permissions, multi-factor authentication, and comprehensive audit logging.
• Two-Factor Authentication: ph568 offers SMS-based OTP two-factor authentication for player accounts, providing an additional layer of protection against unauthorized account access.
• Intrusion Detection: ph568's infrastructure is protected by automated intrusion detection and prevention systems that monitor for anomalous access patterns and unauthorized data access attempts on a 24/7 basis.
• Data Breach Response: ph568 maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk of serious harm, ph568 will notify the National Privacy Commission (NPC) within 72 hours of discovery and notify affected data subjects without undue delay.

9.1 What Are Cookies. Cookies are small text files stored on your device by your browser when you visit the ph568 Platform. ph568 uses cookies and similar tracking technologies to provide core Platform functionality, maintain session security, remember your preferences, and analyze usage patterns.

9.2 Types of Cookies Used by ph568:

• Strictly Necessary Cookies: Required for Platform operation — maintaining your login session, remembering your language preference, and enabling secure payment flows. These cookies cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymized data about how players interact with ph568 — which games are played most frequently, how long login sessions last, and which pages generate support inquiries. This data is used exclusively for internal Platform improvement.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and account takeover attempts. These cookies help ph568 identify whether a login is coming from a familiar device.
• Preference Cookies: Store optional settings you configure within your ph568 account, such as game display preferences or notification settings.

9.3 Cookie Control. You can manage cookie preferences through your browser's settings. Most modern Philippine mobile browsers (Chrome on Android, Safari on iOS) allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to log in to ph568 or complete payment transactions.

As a Data Subject under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data processed by ph568:

• Right to Be Informed: You have the right to know whether ph568 holds personal data about you, the purposes for which it is processed, the recipients of that data, and the retention period applicable.
• Right to Access: You have the right to request a copy of the personal data ph568 holds about your account, in a readable format. ph568 will respond to access requests within 15 business days.
• Right to Correction: You have the right to request correction or updating of inaccurate or incomplete personal data held by ph568. Account details can be updated directly through account settings for most fields; KYC document corrections require contacting support.
• Right to Erasure or Blocking: You have the right to request deletion or blocking of your personal data where processing was unlawful, the purpose for processing has been fulfilled, or consent has been withdrawn — subject to ph568's legal retention obligations under Philippine AML and PAGCOR regulations.
• Right to Data Portability: You have the right to request a structured, machine-readable copy of personal data you provided to ph568, for the purpose of transmitting it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though ph568 may demonstrate compelling grounds for processing that override your objection.
• Right to Damages: You have the right to seek compensation for any damages suffered as a result of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data processed by ph568.

10.1 How to Exercise Your Rights. To exercise any of the rights listed above, contact the ph568 Data Protection Officer via Live Chat or at [email protected] with the subject line "Data Privacy Request." ph568 will verify your identity before processing the request, and respond within 15 business days.

11.1 Age Restriction. The ph568 Platform is strictly restricted to individuals who are 21 years of age or older, in compliance with PAGCOR regulations. ph568 does not knowingly collect personal data from individuals under the age of 21.

11.2 Discovery of Underage Data. If ph568 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 — whether through misrepresentation during registration or otherwise — ph568 will: (a) immediately suspend and close the account; (b) void all transactions associated with the account; (c) securely delete all personal data collected from the underage individual, subject to any applicable legal hold obligations; and (d) return any confirmed deposit balance to the payment method used.

12.1 International Processing. Some of ph568's authorized data processors — including game technology providers and cloud infrastructure services — may process personal data in jurisdictions outside the Philippines. Where such cross-border processing occurs, ph568 ensures that equivalent data protection standards are maintained through contractual data processing agreements that require adherence to RA 10173 standards and, where applicable, align with international data protection frameworks.

12.2 Data Transfer Safeguards. ph568 implements the following safeguards for cross-border data transfers: (a) standard contractual data protection clauses binding international processors to Philippine data protection standards; (b) technical encryption of data in transit to prevent interception during international transfer; and (c) ongoing due diligence on the data protection frameworks of jurisdictions where authorized processors operate.

12.3 Payment Data. All GCash, Maya, and Philippine bank payment data is processed exclusively through licensed Philippine payment processors and does not leave Philippine jurisdiction except where required for USDT TRC20 cryptocurrency transactions on the public Tron blockchain.

13.1 Internal Complaints Process. If you have a concern about how ph568 has handled your personal data, you are encouraged to first raise it directly with ph568. Contact the ph568 Data Protection Officer via Live Chat or at [email protected] with the subject line "Data Privacy Complaint." ph568 will acknowledge receipt within 48 hours and provide a substantive response within 15 business days.

13.2 NPC Escalation. If you are dissatisfied with ph568's resolution of your data privacy complaint, you may escalate the matter to the National Privacy Commission of the Philippines, which has jurisdiction to investigate and adjudicate data privacy complaints against Personal Information Controllers operating in the Philippines.

13.3 Continued Use. Your continued use of the ph568 Platform while a data privacy complaint is being processed does not waive any of your rights under RA 10173 or this Policy.

14.1 Right to Amend. ph568 reserves the right to update or amend this Privacy Policy at any time to reflect changes in: applicable Philippine law or NPC guidance; ph568's data processing activities or technology infrastructure; payment processing arrangements; or regulatory requirements from PAGCOR or the AMLC.

14.2 Notification of Material Changes. Material changes to this Privacy Policy will be communicated to registered ph568 account holders via email to the registered address and/or via a platform notification displayed upon next login. The effective date of the amended Policy will be clearly indicated at the top of the document.

14.3 Acceptance. Continued use of the ph568 Platform following the effective date of an amended Privacy Policy constitutes your acknowledgement and acceptance of the updated Policy. If you do not agree with material changes, you may request account closure, subject to the terms of the ph568 Terms and Conditions.

14.4 Current Version. The current and binding version of this Privacy Policy is the version published at https://ph568.org/privacy-policy. The date of last update is indicated at the head of this document.