Privacy Policy — PH968

1 Introduction

ph968 ("ph968," "we," "us," or "our") is committed to protecting the privacy and personal data of all players and users of the ph968 online gaming platform ("Platform"). This Privacy Policy describes how ph968 collects, uses, stores, shares, and protects personal data in connection with your use of the ph968 website, mobile application, and all associated services.

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. ph968 acts as the data controller in respect of the personal data it collects from players and users in the Philippines.

This Privacy Policy should be read together with the ph968 Terms & Conditions, which govern your use of the Platform. Capitalized terms not defined in this Privacy Policy have the meanings given to them in the ph968 Terms & Conditions.

2 Personal Data We Collect

ph968 collects the following categories of personal data from players and users of the Platform:

ph968 does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by applicable Philippine law or regulatory obligations (for example, responsible gaming assessments).

3 How We Collect Your Data

ph968 collects personal data through the following means:

• Direct interactions: Data you provide when registering a ph968 account, completing KYC verification, making deposits or withdrawals, contacting ph968 support, or responding to surveys and promotions.
• Automated technologies: Technical and usage data collected automatically when you access the ph968 Platform, including through cookies, web beacons, pixel tags, and server logs. See Section 7 for more detail on cookies.
• Third-party payment providers: Transaction confirmation data received from GCash, PayMaya, BDO, BPI, Metrobank, and other payment processors when you make deposits or withdrawals on ph968.
• Identity verification services: Data received from third-party KYC and age verification providers engaged by ph968 to verify player identity and age in compliance with Philippine regulations.
• Fraud prevention and security providers: Risk signals and fraud indicators received from third-party security services used by ph968 to protect the integrity of the Platform.

4 How We Use Your Personal Data

ph968 uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your ph968 player account, including processing your registration and verifying your identity and age.
• Service delivery: To provide you with access to ph968 games, process your deposits and withdrawals in Philippine Peso (₱), and deliver the features and functionality of the Platform.
• Legal and regulatory compliance: To comply with ph968's obligations under Philippine law, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and responsible gaming regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on ph968.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance related to your ph968 account.
• Responsible gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion on ph968.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the ph968 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and updates about ph968, where you have consented to receive such communications. You may opt out at any time through your account settings.
• Legal claims: To establish, exercise, or defend legal claims involving ph968 where necessary.

ph968 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or as otherwise permitted by applicable Philippine law.

5 Legal Basis for Processing

ph968 processes your personal data on the following legal bases under the Data Privacy Act of 2012 of the Philippines:

• Contractual necessity: Processing that is necessary to perform the contract between you and ph968 — that is, to provide you with the ph968 gaming services you have registered for.
• Legal obligation: Processing that is required for ph968 to comply with its obligations under Philippine law, including AML, KYC, and gaming regulatory requirements.
• Legitimate interests: Processing that is necessary for ph968's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

ph968 does not sell, rent, or trade your personal data. ph968 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, to the extent necessary to process your deposits and withdrawals.
• Identity and age verification providers: Third-party KYC service providers engaged by ph968 to verify player identity and confirm that players meet the 21+ age requirement under Philippine law.
• Fraud prevention and security providers: Third-party services used by ph968 to detect and prevent fraudulent activity, cheating, and money laundering on the Platform.
• IT and hosting providers: Cloud infrastructure and technology service providers that host and support the ph968 Platform, subject to strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine government agencies, regulatory bodies, and law enforcement authorities where ph968 is required by law to disclose personal data, or where disclosure is necessary to protect the rights, property, or safety of ph968, its players, or the public.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by ph968 in connection with legal, compliance, or financial matters, subject to professional confidentiality obligations.

7 Cookies & Tracking Technologies

ph968 uses cookies and similar tracking technologies on the Platform to enhance your experience, analyze usage, and support security functions. The following types of cookies are used by ph968:

• Strictly necessary cookies: Essential for the operation of the ph968 Platform, including maintaining your login session and enabling core security features. These cookies cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Used by ph968 to collect anonymized data about how players use the Platform, which pages are visited most frequently, and where errors occur. This data helps ph968 improve the Platform experience.
• Functional cookies: Used to remember your preferences on ph968, such as your preferred language, display settings, and responsible gaming tool configurations.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of ph968 marketing campaigns, where you have consented to receive marketing communications.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph968 Platform. ph968's use of cookies does not involve the collection of sensitive personal information.

8 Data Security

ph968 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ph968 Platform.
• Encryption of sensitive data at rest, including financial data and identity verification documents.
• Role-based access controls limiting ph968 staff access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of ph968 systems.
• Multi-factor authentication requirements for ph968 administrative systems.
• Incident response procedures for detecting, reporting, and responding to personal data breaches in accordance with the Data Privacy Act of 2012.

While ph968 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. ph968 cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your ph968 account credentials and for notifying ph968 immediately if you suspect any unauthorized access to your account.

9 Data Retention

ph968 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your ph968 account and for a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine anti-money laundering regulations.
• Gaming activity data: Retained for a minimum of three (3) years from the date of the relevant gaming activity.
• Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

When personal data is no longer required, ph968 will securely delete or anonymize it in accordance with our internal data retention and disposal procedures. Anonymized data that can no longer be linked to an individual may be retained by ph968 for statistical and analytical purposes without time limit.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in respect of your personal data held by ph968:

• Right to be informed: The right to be informed of how ph968 collects and processes your personal data, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data ph968 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data ph968 holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph968's legal retention obligations.
• Right to object: The right to object to ph968's processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph968 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact ph968 support. ph968 will respond to all data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012. ph968 may request proof of identity before processing any data subject request.

11 Children's Privacy and the 21+ Requirement

The ph968 Platform is strictly intended for adults aged 21 years and older. ph968 does not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is a hard legal requirement under Philippine gaming regulations, and ph968 enforces it through mandatory age verification during the registration process.

If ph968 becomes aware that personal data has been collected from a person under the age of 21, ph968 will immediately close the relevant account, delete the associated personal data to the extent permitted by law, and report the matter to the relevant Philippine authorities where required.

If you are a parent or guardian and believe that your child has registered on ph968 or provided personal data to ph968, please contact ph968 support immediately so that we can take appropriate action.

12 Third-Party Links

The ph968 Platform may contain links to third-party websites or services, such as payment provider portals. ph968 is not responsible for the privacy practices or content of any third-party websites. This Privacy Policy applies solely to the ph968 Platform and the personal data collected by ph968.

ph968 encourages you to review the privacy policies of any third-party websites you visit in connection with your use of ph968, including the privacy policies of GCash, PayMaya, and any other payment providers you use to transact on ph968.

13 Changes to This Privacy Policy

ph968 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. Where changes are material, ph968 will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision to this Privacy Policy is indicated at the top of this page. ph968 recommends that you review this Privacy Policy periodically to stay informed of how we protect your personal data. Your continued use of the ph968 Platform following notification of any changes constitutes your acceptance of the revised Privacy Policy.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or ph968's handling of your personal data, please contact the ph968 Data Privacy team. ph968 is committed to addressing all privacy-related inquiries promptly and transparently.

ph968 aims to respond to all privacy-related inquiries within fifteen (15) business days. For urgent data security matters, please mark your message as urgent and the ph968 team will prioritize your request.