67ph Privacy Policy

1. Data Controller

The data controller responsible for personal data processed through the 67ph platform is 67ph, the operator of the online gaming platform accessible at https://67ph.app. 67ph operates under the PAGCOR regulatory framework for online gaming in the Republic of the Philippines.

For all privacy-related queries, requests to exercise data subject rights, or concerns regarding this Privacy Policy, please contact 67ph's Data Protection Officer (DPO) via the contact details provided in Section 12 of this Policy.

2. Personal Data We Collect

67ph collects personal data in three primary ways: directly from you during registration and account use; automatically through your use of the platform; and from third parties such as payment processors and identity verification services.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you access and use the 67ph platform, we automatically collect the following technical and behavioral data:

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session duration, login timestamps, and page navigation data
• Game activity logs — bets placed, game titles accessed, outcomes, session lengths
• Transaction logs — all deposits, withdrawals, bonus credits, and adjustments
• Cookie and similar tracking technology data (see Section 5)

2.3 Data From Third Parties

67ph may receive personal data about you from the following third-party sources where permitted by applicable Philippine law:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank) — transaction confirmation and account name verification
• Identity verification service providers — validation of KYC document authenticity
• PAGCOR and regulatory authorities — self-exclusion register checks and regulatory notifications
• Anti-fraud and AML screening services — sanctions list and politically exposed person (PEP) screening

3. How 67ph Uses Your Personal Data

67ph processes your personal data for specific, legitimate purposes in accordance with the Philippine Data Privacy Act. We do not process personal data for any purpose incompatible with the purposes disclosed below without your prior consent.

• Account Management: Creating, maintaining, and securing your 67ph account; processing logins; verifying identity; communicating account status and updates.
• Gaming Services: Operating games, calculating and crediting winnings, maintaining game history, applying bonuses and promotions to your account.
• Financial Transactions: Processing GCash and bank deposits; executing withdrawal requests; maintaining transaction records; verifying payment method ownership.
• Regulatory Compliance: Meeting PAGCOR reporting obligations; complying with the Anti-Money Laundering Act (RA 9160); responding to lawful government and regulatory inquiries; maintaining records as required by law.
• KYC and Age Verification: Verifying that all 67ph players are 21 years of age or older as required by PAGCOR; confirming the authenticity of identification documents submitted.
• Responsible Gaming: Monitoring gameplay patterns for indicators of problem gambling; implementing deposit limits, cooling-off periods, and self-exclusion requests; maintaining the self-exclusion register.
• Fraud and Security: Detecting unauthorized account access; preventing bonus abuse; investigating suspicious financial activity; protecting the integrity of the 67ph platform.
• Customer Support: Responding to your queries and complaints via live chat and email; maintaining support interaction records for quality assurance and dispute resolution.
• Marketing (with consent): Sending promotional emails and SMS messages about 67ph offers, bonuses, and new game launches where you have opted in to receive such communications. You may opt out at any time.
• Platform Improvement: Analyzing anonymized and aggregated usage data to improve 67ph's platform features, game lobby, and user experience.

4. Data Sharing and Disclosure

67ph does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. We share personal data only in the following specific circumstances:

4.1 Service Providers

67ph engages trusted third-party service providers who process personal data on 67ph's behalf under binding data processing agreements that restrict their use of your data to the provision of contracted services only. These include: payment processors (GCash, PayMaya, banking institutions), identity verification providers, cloud hosting and data center operators, customer support platform providers, and anti-fraud technology providers.

4.2 Regulatory and Legal Disclosure

67ph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, and courts of competent jurisdiction where required to do so by applicable Philippine law, court order, or regulatory directive. 67ph cannot provide advance notice of such disclosures where doing so would be prohibited by law or would compromise an ongoing investigation.

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring affecting 67ph, personal data held by 67ph may be transferred to the acquiring or surviving entity, provided that such entity agrees to honor the obligations of this Privacy Policy with respect to your personal data. 67ph will notify affected players of any such transfer as required by the Philippine Data Privacy Act.

5. Cookies and Tracking Technologies

The 67ph platform uses cookies and similar tracking technologies to maintain session state, personalize your experience, and analyze platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the 67ph platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cannot be disabled without rendering the platform inoperable.
• Functional Cookies: Store your preferences such as language settings, game lobby view preferences, and responsible gaming limit display options. These improve your 67ph experience but are not essential to core functionality.
• Analytics Cookies: Collect anonymized, aggregated data about how players navigate the 67ph platform — which pages are visited most frequently, how long sessions last, and which game categories are most accessed. This data is used to improve the platform.
• Security Cookies: Help 67ph detect and prevent fraudulent login attempts, unusual account activity, and bot traffic. These are essential for account and platform security.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your 67ph account. 67ph does not use third-party advertising or retargeting cookies.

6. Data Retention

67ph retains personal data for the period necessary to fulfil the purpose for which it was collected and to meet applicable legal and regulatory obligations. Key retention periods applicable to 67ph player data are:

• Account and KYC records: Retained for a minimum of five (5) years following permanent account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of ten (10) years from the date of each transaction in accordance with BIR and AMLC record-keeping requirements.
• Game activity logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support communications: Retained for three (3) years from the date of last interaction.
• Marketing consent records: Retained for the duration of your account plus two (2) years, or until consent is withdrawn, whichever is earlier.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents re-identification.

7. Data Security

67ph implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, destruction, or loss. These measures include:

• TLS 1.2 or higher encryption for all data transmitted between your device and 67ph's servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
• Role-based access controls limiting internal access to personal data to authorized personnel only
• Multi-factor authentication requirements for 67ph staff accessing systems that process personal data
• Regular security vulnerability assessments and penetration testing of the 67ph platform
• Incident response procedures for detecting, reporting, and containing personal data breaches

8. Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 67ph. To exercise any of these rights, contact 67ph's Data Protection Officer as described in Section 12.

• Right to Be Informed: The right to know what personal data 67ph collects about you and how it is processed — fulfilled by this Privacy Policy.
• Right of Access: The right to request a copy of the personal data 67ph holds about you and information about how it is processed.
• Right to Correction (Rectification): The right to request correction of inaccurate or incomplete personal data held by 67ph.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to 67ph's overriding legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes. You may withdraw marketing consent at any time via account settings or by contacting support.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe 67ph has processed your personal data in violation of the Data Privacy Act.

67ph will respond to data subject rights requests within thirty (30) days of receipt. Complex requests may require an additional thirty (30) days, in which case 67ph will notify you of the extension and the reasons for it.

9. Minors and Age Restriction

The 67ph platform is strictly for individuals who are 21 years of age or older, as mandated by PAGCOR regulations. 67ph does not knowingly collect personal data from persons under 21 years of age.

If 67ph becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted from 67ph's systems as promptly as reasonably practicable, and the associated account will be permanently suspended in accordance with 67ph's Terms and Conditions and applicable PAGCOR guidelines.

If you are a parent or guardian and you believe a minor in your care has registered a 67ph account, please contact 67ph support immediately via live chat or at [email protected]. 67ph takes underage gambling violations extremely seriously.

10. Cross-Border Data Transfers

67ph's primary data processing infrastructure is located in the Philippines or in jurisdictions that provide an adequate level of personal data protection as determined by the National Privacy Commission. Where 67ph engages service providers located outside the Philippines (such as global cloud infrastructure providers), such transfers are conducted pursuant to appropriate contractual safeguards including standard contractual clauses or binding corporate rules as recognized under the Data Privacy Act framework.

67ph will not transfer your personal data to jurisdictions that do not provide adequate protections without first obtaining your explicit consent or implementing appropriate legal safeguards as required by Philippine law.

11. Changes to This Privacy Policy

67ph reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or platform functionality. When material changes are made, 67ph will notify registered players by email, in-platform notification, or by posting a prominent notice on the 67ph website prior to the effective date of the changes.

The date at the top of this Privacy Policy indicates when it was last reviewed and updated. We encourage you to review this Privacy Policy periodically. Your continued use of the 67ph platform following the posting of a revised Privacy Policy constitutes your acknowledgment of the changes.

12. Contact & Data Protection Officer

For any privacy-related queries, to exercise your data subject rights, or to report a potential privacy concern related to the 67ph platform, please contact 67ph's Data Protection Officer through the following channels:

• Live Chat: The fastest channel — available 24/7 via the live chat facility on the 67ph platform. Use the subject line "Privacy / DPO Request" so your message is routed to the correct team.
• Email: [email protected] — for formal written privacy requests, data subject rights exercises, and complaints. Please include your full name, registered email address, and a description of your request.

67ph's DPO will acknowledge receipt of your privacy request within three (3) business days and provide a substantive response within thirty (30) days as required by the Philippine Data Privacy Act. If you are not satisfied with 67ph's response, you have the right to file a complaint with the National Privacy Commission of the Philippines.