Privacy Policy

1. Who We Are (Data Controller)

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for personal data collected through the ph64 platform is ph64, operating the online gaming platform at ph64.org.

ph64 is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates under Philippine law. Our Data Protection Officer (DPO) is responsible for overseeing compliance with applicable data protection obligations. You may contact the DPO through the channels described in Section 15 of this Policy.

2. Personal Data We Collect

ph64 collects the following categories of personal data from players and visitors to the platform:

2.1 Registration and Identity Data

• Philippine mobile number (used as your account identifier);
• Date of birth (for age verification — you must be 21 or older);
• Full legal name (collected at KYC verification stage);
• Government-issued identification document number and copy (PhilSys National ID, UMID, passport, or driver's licence);
• Nationality and country of residence.

2.2 Financial and Transaction Data

• GCash, Maya, or other payment method account details (reference numbers and masked identifiers — full payment credentials are not stored by ph64);
• Deposit and withdrawal transaction records including amounts, timestamps, and payment channel used;
• Wallet balance history;
• Source of funds documentation where required for AML compliance.

2.3 Gaming Activity Data

• Game history, wager amounts, outcomes, and session duration;
• Bonus and promotion redemption records;
• VIP tier and loyalty point history.

2.4 Technical and Device Data

• IP address and geolocation data (country and region level);
• Device type, operating system, and browser version;
• Session identifiers and login timestamps;
• Cookies and similar tracking technologies as described in Section 7.

2.5 Communications Data

• Customer support chat transcripts;
• Email correspondence with ph64 support;
• Records of complaints and their resolutions.

3. How We Collect Your Data

ph64 collects personal data through the following means:

• Direct provision by you — during registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and completion of responsible gaming self-assessments;
• Automated collection — through cookies, session tracking, device fingerprinting, and server log files generated when you access the ph64 platform;
• Payment processors — transaction reference data returned by GCash, Maya, BPI, BDO, and other payment channels upon completion of a deposit or withdrawal;
• Identity verification services — where ph64 uses a third-party KYC service provider to verify government ID documents, that provider returns a verification result and may share limited extracted data with ph64;
• Regulatory bodies — PAGCOR and other competent Philippine authorities may share data with ph64 in connection with regulatory investigations or player protection obligations.

4. How and Why We Use Your Data

ph64 uses the personal data it collects for the following specific purposes:

5. Legal Bases for Processing

Under the Philippine Data Privacy Act and applicable regulations, ph64 relies on the following legal bases when processing your personal data:

• Contract performance — processing necessary to provide you with the online gaming services you have registered for, including account management, game delivery, and payment processing;
• Legal obligation — processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160 as amended), the Anti-Terrorism Financing Act, tax reporting obligations, and other applicable Philippine law;
• Legitimate interests — processing carried out for the purpose of fraud prevention, platform security, responsible gaming monitoring, and improving the ph64 platform, where those interests are not overridden by your rights and interests;
• Consent — where ph64 sends you promotional or marketing communications via SMS, we rely on your explicit consent. You may withdraw consent at any time by contacting support.

6. Sharing Your Personal Data

ph64 does not sell, rent, or trade your personal data. We share your data only in the following circumstances and only with the following categories of recipient:

6.1 Payment Processors

To process deposits and withdrawals, ph64 shares necessary transaction data with GCash (GXI Inc.), Maya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, and other payment service providers. These processors handle your data in accordance with their own privacy policies and applicable Philippine law.

6.2 KYC and Identity Verification Providers

Where ph64 uses a third-party service to assist with KYC document verification, limited personal data (name, ID document images) is transmitted to that provider solely for the purpose of verification. The provider does not retain your data beyond what is required for the verification process.

6.3 Regulatory and Law Enforcement Authorities

ph64 is required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities upon receipt of a valid legal request. ph64 will not disclose data to authorities beyond the scope of a valid legal requirement.

6.4 IT Infrastructure and Security Service Providers

ph64 engages third-party providers for hosting, cloud infrastructure, and cybersecurity services. These providers process data strictly on ph64's instruction and are bound by confidentiality and data processing agreements consistent with Philippine data protection law.

7. Cookies and Tracking Technologies

ph64 uses cookies and similar tracking technologies to operate and improve the platform. When you access ph64.org, certain cookies are placed on your device. These fall into the following categories:

• Strictly Necessary Cookies: Required for the platform to function. They manage your login session, maintain your wallet state across pages, and enable security features. These cannot be disabled without affecting your ability to use the platform.
• Functional Cookies: Remember your preferences such as language settings, preferred game lobby view, and notification preferences.
• Analytics Cookies: Collect anonymised data on how players navigate the platform — which pages are visited most frequently, session duration, and error events. This data is aggregated and does not identify individual players. It is used solely to improve platform design and performance.
• Security Cookies: Used for fraud prevention — including detecting anomalous login patterns, device fingerprinting for trusted device recognition, and bot detection.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the ph64 platform. ph64 does not use third-party advertising cookies or retargeting pixels.

8. Data Retention

ph64 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law — whichever is longer.

• Active account data — retained for the duration of your ph64 account plus five (5) years following account closure, as required under Philippine AML record-keeping obligations;
• KYC and identity documents — retained for a minimum of five (5) years following the end of the business relationship, in compliance with the Anti-Money Laundering Act;
• Financial transaction records — retained for five (5) years from the date of each transaction;
• Customer support records — retained for three (3) years from the date of the most recent interaction;
• Technical logs (IP, device, session data) — retained for twelve (12) months from collection unless required for ongoing security investigations;
• Anonymised analytics data — may be retained indefinitely as it cannot identify any individual.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ph64's internal data disposal procedures.

9. Data Security

ph64 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and ph64 servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Two-factor authentication requirements for ph64 staff accessing internal systems containing player data;
• Regular security audits, penetration testing, and vulnerability assessments;
• Incident response procedures that include mandatory notification to the National Privacy Commission and affected players in the event of a reportable data breach, consistent with the requirements of the Philippine Data Privacy Act.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ph64. To exercise any of these rights, contact ph64 support via the channels in Section 15. We will respond to verified requests within thirty (30) calendar days.

11. Children and Minors

If you are a parent or guardian and believe your child has registered a ph64 account without authorisation, please contact ph64 support immediately via the 24/7 live chat channel or at the email address in Section 15. ph64 will investigate the matter promptly and take appropriate action.

12. Cross-Border Data Transfers

ph64's primary data processing infrastructure is located in the Philippines or in facilities that comply with Philippine data protection standards. Where personal data is transmitted to or processed by service providers operating outside the Philippines — for example, internationally hosted cloud infrastructure or game provider servers — ph64 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose obligations equivalent to those under Philippine law.

ph64 will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without implementing appropriate contractual safeguards or obtaining your explicit consent where required by applicable law.

13. Third-Party Links and Services

The ph64 platform may contain references to or integrations with third-party payment providers (GCash, Maya, BPI, etc.) whose own privacy policies govern the handling of data within their respective platforms. ph64 is not responsible for the privacy practices of these third parties.

When you initiate a GCash or Maya transaction from the ph64 platform, you are redirected to or interact with that provider's interface, and your interaction is governed by that provider's terms and privacy policy. ph64 receives only the transaction result and reference data, not your full payment credentials.

14. Updates to This Privacy Policy

ph64 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via SMS notification or an in-platform alert at least seven (7) calendar days before the updated Policy takes effect, unless immediate implementation is required to comply with a legal obligation.

The current version of this Privacy Policy, together with its effective date, is always available at ph64.org/privacy-policy. Continued use of the ph64 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must close your ph64 account before the effective date of the revised Policy.

The governing language of this Privacy Policy is English. Any translation into Filipino or another language is provided for convenience only and shall not prevail in the event of any inconsistency with the English version.

15. Contact – Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ph64, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the ph64 platform. This is the fastest channel for data access requests and privacy-related queries.
• Email: [email protected] — please mark the subject line "Data Privacy Request" to ensure your message is routed to the Data Protection Officer. Responses are provided within two (2) business days for general inquiries and within thirty (30) calendar days for formal data subject rights requests.

This Privacy Policy was last updated in January 2026 and supersedes all prior versions. ph64 operates as a PAGCOR-licensed online gaming platform serving Filipino players aged 21 and above. All gaming is restricted to adult residents of the Philippines.