ph668 is committed to protecting the personal data of every Filipino player on the platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you hold as a data subject under Philippine law.
Your Privacy Matters at ph668: This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. ph668 acts as the personal information controller in respect of all personal data collected through the ph668 platform. By registering an account on ph668, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy ("Policy") describes how ph668 ("we," "us," or "our") collects, processes, stores, and protects the personal data of individuals who visit, register on, or otherwise interact with the ph668 online gaming platform, accessible at ph668.org ("the Platform").
This Policy applies to all personal data collected through:
This Policy does not apply to third-party websites or services that may be referenced from ph668 communications, where those third parties operate their own independent privacy frameworks.
ph668 acts as the personal information controller ("PIC") in respect of all personal data collected and processed through the ph668 platform. As PIC, ph668 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with the Data Privacy Act of 2012 and this Policy.
Where ph668 engages third-party service providers — such as game software providers, payment processors, or analytics vendors — to assist in the delivery of Platform services, those providers act as personal information processors ("PIP") under instructions from ph668. ph668 contractually requires all PIPs to implement adequate data protection measures consistent with Philippine data privacy standards.
ph668 collects personal data through several channels. The categories of personal data collected are set out in the table below:
| Category | Data Elements | Collection Point |
|---|---|---|
| Registration Data | Full name, date of birth, mobile number, email address, username, password (hashed) | Account registration form |
| Identity Verification (KYC) | Government-issued ID type and number, ID document scan or photo, selfie photo for liveness check | KYC verification flow (pre-withdrawal) |
| Financial Data | GCash or PayMaya mobile number, bank account name and number (for BPI/BDO/Metrobank transfers), transaction amounts and timestamps | Deposit and withdrawal requests |
| Gameplay Data | Games accessed, bets placed, win/loss amounts, bonus usage, session duration and timestamps | Automatically captured during platform use |
| Technical Data | IP address, device type and OS, browser type and version, screen resolution, geolocation (city/region level) | Automatically captured on each platform session |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, language preference | Support interactions |
| Preference Data | Marketing communication preferences, responsible gaming settings (deposit limits, self-exclusion status) | Account settings and responsible gaming tools |
Identity documents submitted during KYC verification may constitute sensitive personal information under the Data Privacy Act of 2012. ph668 handles such information with heightened security measures, restricts access to authorized compliance personnel only, and does not retain document images beyond the period required to complete verification, unless retention is required by applicable law or regulatory obligation.
ph668 uses the personal data it collects for the following purposes:
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, ph668 processes your personal data on one or more of the following lawful bases:
ph668 does not disclose your personal data to third parties except in the following circumstances:
ph668 engages trusted third-party service providers to assist in delivering Platform services. These include game software providers, payment processing intermediaries, KYC verification technology providers, cloud hosting infrastructure providers, and live chat software vendors. All such providers are contractually bound to process your data only under ph668's instructions and to implement data security standards consistent with the Data Privacy Act of 2012.
ph668 may disclose your personal data to government agencies, law enforcement authorities, financial intelligence units, or other regulatory bodies where required to do so by applicable Philippine law, court order, or lawful request. This includes compliance reporting obligations under the Anti-Money Laundering Act (AMLA) and its amendments.
In the event of a merger, acquisition, or sale of all or substantially all of ph668's assets, your personal data may be transferred as part of that transaction. ph668 will notify affected Members of any such transfer and the implications for the handling of their personal data.
ph668 uses cookies and similar web tracking technologies on the Platform to enable core functionality, improve user experience, and support security and analytics operations. The categories of cookies ph668 uses are as follows:
ph668 does not use third-party advertising cookies or behavioral tracking cookies that would allow external advertisers to build profiles of your browsing behavior for their own commercial purposes.
ph668 implements a layered security framework to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Key security measures include:
In the event of a personal data breach that is likely to result in harm to affected individuals, ph668 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected Members as required under the Data Privacy Act of 2012 and its Implementing Rules and Regulations.
ph668 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applied by ph668 are as follows:
Following the expiry of applicable retention periods, ph668 will securely delete or anonymize the relevant personal data so that it can no longer be associated with an identifiable individual.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you hold the following rights in respect of your personal data processed by ph668:
ph668 does not knowingly collect personal data from individuals under the age of twenty-one (21). The Platform is intended exclusively for adults who meet the minimum age requirement under Philippine gaming regulations. Registration on ph668 requires confirmation that the registering individual is at least 21 years of age, and the KYC verification process is designed to identify and prevent underage registration.
If ph668 discovers that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation during registration or otherwise — ph668 will immediately close the relevant account, forfeit any associated balances in accordance with its Terms & Conditions, and securely delete the personal data of the underage individual, subject to any mandatory record-keeping obligations that may apply.
The ph668 Platform may contain references to third-party services, including payment gateway landing pages, identity verification portals, and game provider interfaces. When you interact with third-party services that are operated independently of ph668, those services are governed by their own privacy policies, which ph668 does not control and is not responsible for.
ph668 recommends that you review the privacy policies of any third-party services you access in connection with your use of the Platform. The fact that ph668 works with a particular third-party provider does not constitute an endorsement of that provider's privacy practices.
ph668 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform features, or business practices. The effective date of the current version is stated at the top of this document.
Where amendments are material — for example, changes to the categories of data collected, new third-party sharing arrangements, or changes to your data subject rights — ph668 will provide reasonable notice to registered Members by posting a prominent notification on the Platform and, where practicable, by sending a notification to the Member's registered mobile number or email address.
Your continued use of the ph668 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised Policy. ph668 maintains a record of prior versions of this Policy, which are available upon written request to the Data Protection Officer.
For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph668, please contact the ph668 Data Protection Officer (DPO) through the following channels:
Formal data subject rights requests submitted in writing will be acknowledged within two (2) business days of receipt. ph668 will endeavour to provide a substantive response within fifteen (15) business days, which may be extended by a further ten (10) business days for complex requests, with notice provided to the requesting individual.
These are the practical, real-world commitments behind ph668's privacy framework — not just policy language.
Every data exchange between your device and ph668 — login credentials, KYC documents, payment details, gameplay data — is encrypted end-to-end using 256-bit SSL/TLS. No plain-text transmission of your personal data, ever.
ph668 operates in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules. A designated Data Protection Officer oversees all personal data processing activities on the Platform.
ph668 never sells, rents, or commercially transfers your personal data to unaffiliated third parties for their own marketing purposes. Your data stays within the ph668 ecosystem, used only to run and improve the Platform.
Access, correct, delete, or export your ph668 personal data at any time. Data subject rights requests are processed by the ph668 DPO team and acknowledged within two (2) business days of receipt.
ph668 keeps data only as long as necessary — defined by Philippine legal requirements and Platform operational needs. KYC documents are retained for AML compliance and securely destroyed after the required period.
In the event of a data breach likely to cause harm, ph668 will notify the National Privacy Commission within 72 hours and inform affected Members as required by the Data Privacy Act of 2012 — no silent breaches.
ph668 keeps your personal data secure so you can focus on what matters — slots, live casino, bingo, and lottery. Create your account in minutes and play with confidence.