67ph Privacy Policy

1. Introduction

This Privacy Policy (hereinafter "Policy") describes how 67ph (hereinafter "67ph," "we," "our," or "us"), the operator of the online gaming platform at 67ph.club and any associated mobile applications (collectively, the "Platform"), collects, uses, stores, shares, and protects the personal information of registered players and visitors (hereinafter "you," "User," or "Player").

67ph is committed to protecting the privacy and personal data of all Filipino players who use our Platform. This Policy is drafted in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and applicable regulations issued by the National Privacy Commission (NPC) of the Philippines. It is also consistent with the anti-money laundering and Know Your Customer (KYC) obligations imposed on licensed gaming operators by PAGCOR and the Bangko Sentral ng Pilipinas (BSP).

2. Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 67ph acts as the Personal Information Controller (PIC) with respect to the personal data of Platform users. As the PIC, 67ph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with the DPA, applicable PAGCOR licensing conditions, and this Policy.

3. Categories of Personal Data We Collect

67ph collects personal data in the following categories, depending on the nature of your interaction with the Platform:

3.1 Identity and Registration Data

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for mandatory 21+ age verification);
• Gender;
• Philippine mobile number (primary account identifier and OTP delivery);
• Username and encrypted password hash;
• Email address (if provided during registration or verification).

3.2 Identity Verification (KYC) Documents

• Scanned or photographed copies of government-issued Philippine ID (e.g., Philippine passport, PhilSys National ID, driver's licence, SSS/GSIS card, PRC ID, UMID);
• Selfie photographs for liveness verification;
• Proof of residential address (utility bill, bank statement, or barangay clearance);
• Source-of-funds documentation where required under Anti-Money Laundering (AML) compliance obligations.

3.3 Financial Transaction Data

• GCash or Maya (PayMaya) registered mobile number and transaction reference IDs;
• BPI, BDO, UnionBank, or other bank account details used for deposits and withdrawals;
• USDT TRC20 wallet addresses (for cryptocurrency transactions);
• Deposit amounts, withdrawal amounts, timestamps, and currency conversion records;
• Running account balance history.

3.4 Gaming and Behavioural Data

• Game history, bet amounts, win/loss records, and session durations;
• Games accessed, bonus promotions claimed, and wagering requirement fulfilment records;
• Mine loyalty program points earned and redeemed;
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status).

3.5 Technical and Device Data

• IP address and approximate geolocation;
• Device type, model, and operating system;
• Browser type and version;
• Session tokens and authentication logs;
• Crash reports and performance diagnostics (anonymised where possible).

3.6 Communications Data

• Live chat transcripts with 67ph customer support agents;
• Email correspondence submitted to 67ph support channels;
• Voluntary feedback, survey responses, and promotional opt-in preferences.

4. How We Collect Your Personal Data

67ph collects personal data through the following means:

• Directly from you — during account registration, KYC submission, deposit and withdrawal requests, live chat interactions, email correspondence, and voluntary surveys;
• Automatically — via cookies, web beacons, server logs, and in-app analytics tools as you interact with the Platform (see Section 10 for details on cookies);
• From third-party payment processors — GCash, Maya, BPI, BDO, UnionBank, and cryptocurrency processing services, who share transaction confirmation and verification data with 67ph;
• From identity verification service providers — third-party KYC and liveness verification platforms used to validate government-issued Philippine IDs;
• From game providers — JILI Games, Pragmatic Play, PG Soft, Evolution Gaming, and other studios transmit game session data to 67ph for record-keeping, RTP verification, and dispute resolution purposes.

5. How We Use Your Personal Data

67ph processes personal data for the following specific purposes:

Purpose	Data Categories Used
Account creation and management	Identity, registration, and contact data
Age verification (21+) and KYC compliance	Identity, KYC documents, date of birth
Processing deposits and withdrawals in Philippine Peso	Financial transaction data, identity data
Anti-Money Laundering (AML) monitoring and reporting	Financial, identity, and gaming data
Game provision, game history, and dispute resolution	Gaming, behavioural, and technical data
Customer support and complaint handling	Communications, identity, and account data
Fraud detection and platform security	Technical, financial, and behavioural data
Responsible gaming tool management	Gaming, identity, and contact data
PAGCOR regulatory reporting obligations	Identity, financial, and gaming data
Marketing communications (with your consent)	Contact data and gaming preferences
Platform analytics and improvement	Technical and behavioural data (anonymised)

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, all personal data processing by 67ph is grounded in one or more of the following legal bases:

• Consent — where you have expressly consented to processing, such as opting in to receive promotional communications from 67ph;
• Contractual necessity — processing required to fulfil the services outlined in the 67ph Terms & Conditions, including account management, deposits, withdrawals, and game provision;
• Legal obligation — processing necessary for compliance with PAGCOR licensing requirements, AML/CTF obligations under R.A. 9160 (as amended), BSP e-payment regulations, and NPC-mandated data retention standards;
• Legitimate interests — processing carried out in the legitimate interests of 67ph (such as fraud prevention and platform security), where those interests are not overridden by your rights and freedoms under the DPA.

7. Sharing and Disclosure of Personal Data

67ph does not sell or rent your personal data to any third party. We disclose your personal data only to the following categories of recipients, strictly for the purposes outlined in this Policy:

8. Data Retention

67ph retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. Specific retention periods include:

• Account and KYC records: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR licensing conditions and AML regulations under R.A. 9160;
• Financial transaction records: Retained for a minimum of five (5) years from the transaction date, in compliance with BSP regulations and AML reporting obligations;
• Game session records: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Customer support communications: Retained for two (2) years from the date of closure of the relevant support ticket;
• Technical and server logs: Retained for twelve (12) months for security and fraud detection purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Players who request account closure may still have their data retained for the periods above as required by law — account closure does not remove the legal obligation to retain records.

9. Data Security Measures

67ph implements a multi-layered approach to data security, designed to protect player personal and financial information against unauthorised access, disclosure, alteration, and destruction. Security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 67ph servers;
• Encrypted storage for all sensitive personal data at rest, including KYC documents and financial records;
• Bcrypt password hashing — your raw password is never stored; only a one-way cryptographic hash is retained;
• Role-based access controls ensuring that 67ph staff access only the data strictly necessary for their job function;
• Anomaly detection systems that flag and investigate unusual access patterns, including unrecognised login locations or bulk data queries;
• Regular security audits and penetration testing conducted by independent cybersecurity professionals;
• Two-factor authentication (2FA) available to all players and mandatory for internal staff systems.

10. Cookies and Tracking Technologies

67ph uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences, detect fraud, and analyse Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without preventing you from using the Platform.
• Functional Cookies: Remember your language preference, game lobby layout, responsible gaming settings, and whether you have dismissed certain notifications. Disabling these may reduce Platform functionality.
• Analytics Cookies: Collect anonymised data on how players navigate the Platform — which pages are visited most, which game categories are popular, and where players encounter technical errors. This data is used to improve the Platform experience for all players.
• Security Cookies: Used to detect and prevent bot activity, credential stuffing attacks, and other forms of automated abuse against the Platform.

By using the 67ph Platform, you consent to the use of strictly necessary and security cookies. For functional and analytics cookies, you may manage your preferences via the cookie settings available on the Platform. Please note that refusing certain cookies may affect your experience.

11. Your Data Protection Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by 67ph:

To exercise any of the above rights, please contact the 67ph Data Protection Officer via live chat or at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request." 67ph will respond to verified requests within 15 working days in accordance with NPC guidelines. Some rights are subject to limitations where processing is required for legal compliance — for example, AML retention obligations may limit the right to erasure for financial records.

12. Minors and Age Restriction

If you are a parent or guardian and believe that your child under 21 has registered on the 67ph Platform or provided personal data to us, please contact our Data Protection Officer immediately via live support or at [email protected] (plain text — not a clickable link). We will investigate and respond within 48 hours.

13. International Data Transfers

Certain third-party service providers engaged by 67ph — including game studios, cloud infrastructure providers, and KYC platforms — may process personal data on servers located outside the Republic of the Philippines. In all such cases, 67ph ensures that appropriate safeguards are in place before the transfer of data, including:

• Execution of data processing agreements that impose DPA-equivalent data protection standards on the recipient;
• Verification that the recipient country or organisation provides an adequate level of protection for personal data as assessed against the standards of the DPA and NPC guidelines;
• Contractual clauses that restrict the recipient's use of Philippine player data to the specific purpose for which the transfer was made.

14. Amendments to This Privacy Policy

67ph reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidelines, or our data processing practices. When material changes are made, we will notify registered players via the Platform, in-app notification, or email (if provided). The effective date of the current version is displayed at the top of this page.

Continued use of the 67ph Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you must cease using the Platform and may request account closure. We recommend reviewing this page periodically to stay informed about how 67ph protects your personal data.

15. Contact and Data Protection Officer

For all privacy-related inquiries, data rights requests, or concerns about how 67ph handles your personal data, please contact our designated Data Protection Officer:

You also have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data rights under R.A. 10173 have been infringed. Information on filing a complaint with the NPC is available through official Philippine government channels.