ph668 Privacy Policy

This Privacy Policy is issued by ph668 (referred to herein as "ph668", "we", "us", or "the Company") and applies to all personal data collected through or in connection with the ph668 online gaming platform accessible at ph668.co, including all associated subdomains and mobile interfaces (the "Platform").

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a natural person, including but not limited to names, mobile numbers, addresses, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, transmission, disclosure, and deletion.
• "Data Subject" means the registered ph668 player or any individual whose Personal Data is processed by ph668.
• "Data Controller" means ph668, being the entity that determines the purposes and means of Processing Personal Data.
• "Third Party" means any entity other than ph668 and the Data Subject.
• "NPC" means the National Privacy Commission of the Philippines, the regulatory authority responsible for administering Republic Act No. 10173 (the Data Privacy Act of 2012).

This Privacy Policy applies to all individuals who access or use the ph668 Platform, whether as registered members or visitors. By accessing the ph668 Platform, you acknowledge that you have read and understood this Privacy Policy.

ph668 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

2.1 Registration and Identity Data

• Full legal name (as appearing on a Philippine government-issued ID);
• Date of birth (for age verification — ph668 requires players to be 21 years or older);
• Mobile number (Philippine mobile number, used for account access and OTP verification);
• Email address;
• Residential address;
• Username and password (stored in hashed, encrypted form — never in plain text).

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys ID, passport, driver's licence, UMID, SSS/GSIS ID);
• Selfie photographs taken for liveness verification;
• Proof of address documents where required;
• Source of funds declarations for high-value transaction compliance.

2.3 Financial and Transaction Data

• GCash account identifiers (mobile number linked to GCash);
• Maya account identifiers;
• Bank account numbers for BPI, BDO, UnionBank, and other linked banks;
• Transaction history including deposits, withdrawals, and gaming activity;
• Cryptocurrency wallet addresses (for USDT TRC20 transactions).

2.4 Technical and Usage Data

• IP address and approximate geolocation;
• Device identifiers (device type, operating system, browser type and version);
• Session duration and login timestamps;
• Game play history (games played, bet amounts, outcomes);
• Platform navigation and interaction data (pages visited, features used);
• Cookie and similar tracking technology data (see Section 7).

2.5 Communications Data

• Records of customer support interactions (live chat transcripts, email correspondence);
• Feedback and survey responses submitted by players;
• Complaints and dispute resolution records.

ph668 collects Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawal requests, contact support, or participate in promotions;
• Automatically — through your use of the ph668 Platform, via cookies, log files, device fingerprinting, and analytics tools (see Section 7);
• From third-party payment processors — GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, and Coins.ph may share transaction confirmation data with ph668 as part of payment processing;
• From identity verification providers — third-party KYC and anti-fraud service providers used to verify the authenticity of identity documents and detect fraudulent activity;
• From regulatory bodies — ph668 may receive information from PAGCOR or other regulators in connection with compliance obligations;
• From fraud detection services — data shared by fraud prevention networks to identify accounts or transactions associated with known fraudulent patterns.

ph668 uses the Personal Data it collects for the following purposes:

Under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules, ph668 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ph668 — specifically, to provide the gaming services, process payments, and manage your account;
• Legal obligation: Processing required to comply with applicable laws, including PAGCOR regulations, AML requirements, tax obligations, and NPC data privacy requirements;
• Legitimate interests: Processing conducted in ph668's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — where such interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications and certain non-essential analytics, where you have provided explicit, freely given consent that can be withdrawn at any time.

ph668 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. ph668 may share Personal Data with the following categories of recipients, solely to the extent necessary for the stated purpose:

6.1 Payment Service Providers

Transaction data is shared with GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and relevant cryptocurrency network nodes as strictly necessary to process deposits and withdrawals. Each payment provider is bound by their own data privacy policies and applicable Philippine financial regulations.

6.2 KYC and Identity Verification Providers

ph668 uses third-party identity verification services to process KYC documentation. These providers are contractually bound to process data solely for verification purposes and are prohibited from retaining or using your identity documents for any other purpose.

6.3 Regulatory Authorities

ph668 is required to disclose certain information to PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent Philippine authorities when required by law, regulation, or valid legal process.

6.4 Fraud Prevention Networks

ph668 participates in industry fraud prevention initiatives and may share anonymized or pseudonymized signals with shared fraud detection services to protect all players on the ph668 Platform.

6.5 Technology Service Providers

ph668 uses third-party cloud hosting, platform infrastructure, and analytics providers. These providers process Personal Data as Data Processors under binding data processing agreements that require them to implement appropriate security measures and process data only on ph668's documented instructions.

ph668 uses cookies and similar tracking technologies on the ph668 Platform. Cookies are small text files stored on your device that help us provide a functional and personalized gaming experience.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and cookies that remember your preferred language and region settings. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Store your preferences such as game display settings, responsible gaming tool configurations, and customer support chat preferences. Disabling these cookies may affect your experience.
• Analytics Cookies: Used to understand how players interact with the ph668 Platform — which pages are most visited, where players encounter difficulties, and how game categories perform. Data is aggregated and does not identify individual players. Consent-based.
• Security and Fraud Prevention Cookies: Used for device fingerprinting to detect suspicious login attempts, multiple account detection, and bot protection. These are necessary for account security.

7.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain cookies, or be notified when a cookie is set. Note that disabling strictly necessary cookies will prevent you from using certain features of the ph668 Platform, including logging into your account.

ph668 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in accordance with ph668's data destruction procedures. Where data is anonymized rather than deleted, the resulting data no longer constitutes Personal Data and may be retained indefinitely for statistical and analytical purposes.

ph668 implements a layered security framework to protect Personal Data against unauthorized access, disclosure, alteration, and destruction. Security measures in place include:

• Encryption in transit: All data transmitted between your device and the ph668 Platform is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Sensitive Personal Data stored in ph668 databases, including identity documents and financial account identifiers, is encrypted at rest using AES-256 encryption;
• Password security: Player passwords are stored exclusively as salted cryptographic hashes; ph668 does not store or have access to plain-text passwords;
• Access controls: Access to Personal Data within ph668 systems is restricted on a strict need-to-know basis. All internal access is logged and regularly audited;
• Two-factor authentication: SMS OTP verification is required for account logins from new devices;
• Penetration testing: ph668 conducts regular security assessments and penetration tests of its Platform infrastructure;
• Data breach response: ph668 maintains a documented incident response procedure. In the event of a data breach that is likely to pose a risk to your rights and freedoms, ph668 will notify affected Data Subjects and the NPC within 72 hours of becoming aware of the breach, as required by RA 10173.

Under Republic Act No. 10173 (the Philippine Data Privacy Act of 2012), you have the following rights regarding your Personal Data held by ph668:

To exercise any of these rights, submit a written request to ph668's Data Protection Officer at [email protected], clearly identifying yourself and the right you wish to exercise. ph668 will respond within thirty (30) calendar days of receiving a valid request. Identity verification may be required before requests are processed.

If ph668 becomes aware that Personal Data has been collected from an individual under the age of 21, we will promptly delete such data and close the associated account. ph668 employs age verification measures at registration and during KYC to enforce this requirement.

If you are the parent or guardian of a minor and believe your child has registered a ph668 account, please contact [email protected] immediately. We will investigate and take appropriate action within 48 hours of receiving your report.

ph668 may send you marketing communications about promotions, bonuses, new games, and platform features where you have provided explicit consent to receive such communications. Marketing messages may be sent via SMS, email, or in-app notifications, to the contact details registered on your ph668 account.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email;
• Replying "STOP" to any marketing SMS message;
• Adjusting your notification preferences in your ph668 account settings;
• Contacting ph668 support at [email protected].

Withdrawal of marketing consent will not affect the sending of transactional and account-related communications — ph668 will continue to send messages related to your account status, security alerts, deposit confirmations, withdrawal updates, and KYC notifications regardless of your marketing preferences.

The ph668 Platform may contain references to third-party payment services (GCash, Maya, BPI, BDO, UnionBank). When you interact with these services, you will be subject to their respective privacy policies in addition to this ph668 Privacy Policy. ph668 is not responsible for the privacy practices of third-party payment providers or any other third-party services.

ph668 recommends that you review the privacy policies of all third-party services you interact with in connection with your use of the ph668 Platform. ph668's game content is provided by licensed third-party game studios including Pragmatic Play and PG Soft; these providers do not have direct access to your ph668 Personal Data beyond anonymized session identifiers used for game performance tracking.

ph668 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Privacy Policy will be communicated to registered ph668 players via the email address or mobile number on file, and by prominent notice on the Platform, at least seven (7) days prior to the changes taking effect.

The date of the most recent update is displayed at the top of this page. Your continued use of the ph668 Platform following the effective date of any update constitutes your acknowledgment of the revised Privacy Policy. The current version of this Privacy Policy is always available at ph668.co/privacy-policy.

If you do not agree with any changes to this Privacy Policy, you must cease using the ph668 Platform. You may request account closure and the return of your Real Money Funds by contacting ph668 support.

ph668 has designated a Data Protection Officer (DPO) as required by the Philippine Data Privacy Act of 2012. The DPO is responsible for overseeing ph668's compliance with RA 10173 and its Implementing Rules, and for handling data subject requests and privacy complaints.

If you are dissatisfied with ph668's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the competent supervisory authority for data privacy matters in the Philippines under RA 10173.