Privacy Policy — How 67ph Handles Your Personal Information

This Privacy Policy is published by 67ph Casino ("67ph," "we," "us," or "our") and applies to all personal data collected from individuals who access or use the 67ph.org website and all associated gaming services (collectively, the "Platform").

67ph is committed to protecting the privacy and security of personal data belonging to Filipino players and other users of the Platform. This Privacy Policy describes in detail what personal information we collect, why we collect it, how we use it, how long we retain it, and the choices and rights available to you as a data subject under the Data Privacy Act of 2012 of the Republic of the Philippines (Republic Act No. 10173) and its Implementing Rules and Regulations.

By registering an account on the 67ph platform or by otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not register an account or use the 67ph platform.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, 67ph Casino is the data controller responsible for the personal data of Filipino players and other users of the Platform. As data controller, 67ph determines the purposes and means by which personal data is processed.

67ph is responsible for ensuring that personal data collected through the Platform is processed lawfully, fairly, and transparently in accordance with applicable Philippine data privacy law. Enquiries relating to this Privacy Policy or to the exercise of your data rights may be directed to our Data Protection Officer through the contact information set out in Section 14 of this Policy.

67ph collects the following categories of personal data from Filipino players and users of the Platform:

67ph does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly necessary for identity verification purposes, and only with your explicit consent where required by law.

67ph processes personal data collected from Filipino players for the following specific purposes:

• Account Registration and Management — To create and maintain your 67ph account, verify your identity, and provide access to the Platform's gaming services;
• Age Verification — To confirm that you meet the minimum age requirement of 21 years as mandated by applicable PAGCOR regulations and Philippine law governing online gambling;
• Payment Processing — To process deposits and withdrawals via GCash, PayMaya, and Philippine banking channels, and to maintain accurate transaction records;
• Gaming Services Delivery — To operate and personalise the gaming experience, including game recommendations, lobby configuration, and tournament participation;
• Bonus and Promotions Administration — To credit, track, and administer bonus funds, free spins, cashback awards, and other promotional offers;
• Security and Fraud Prevention — To detect and prevent unauthorised account access, fraudulent transactions, multi-accounting, bonus abuse, and other prohibited conduct;
• Legal and Regulatory Compliance — To comply with applicable Philippine laws including anti-money laundering obligations, tax reporting requirements, and PAGCOR regulatory compliance;
• Customer Support — To investigate and respond to support enquiries, complaints, and disputes submitted through our live chat and email support channels;
• Responsible Gaming Monitoring — To identify patterns of play that may indicate problem gambling behaviour and to facilitate the responsible gaming tools available on the Platform;
• Platform Improvement — To analyse usage data for the purpose of improving platform performance, game selection, and user experience for Filipino players.

67ph does not use your personal data for automated decision-making that produces legal effects concerning you without human review, except as required by fraud prevention systems where immediate automated action is necessary to protect the security of the Platform.

67ph processes personal data on the following legal grounds as recognised under the Data Privacy Act of 2012:

• Contractual Necessity — Processing necessary for the performance of the contract between you and 67ph (the Terms and Conditions), including account management, gaming services, and payment processing;
• Legal Obligation — Processing required for compliance with applicable Philippine laws, including anti-money laundering regulations, age verification requirements, and tax obligations;
• Legitimate Interests — Processing based on 67ph's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your fundamental rights;
• Consent — Where required by law, processing based on your freely given, specific, informed, and unambiguous consent, including consent to receive promotional communications and consent to the processing of any sensitive personal information collected for identity verification purposes.

67ph does not sell, rent, or trade your personal data to third parties. Your personal data may be shared with the following categories of recipients only to the extent necessary for the purposes described in Section 4:

• Payment Processors — GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment service providers, for the processing of deposits and withdrawals;
• Game Suppliers — Licensed third-party game providers (including PG Soft, Pragmatic Play, Microgaming, and others) to the extent necessary to deliver gaming services. Game suppliers receive only the minimum data necessary for game session management and do not receive full identity or financial data;
• Identity Verification Services — Third-party KYC and identity verification service providers engaged to assist with age and identity verification obligations;
• Regulatory and Law Enforcement Authorities — Philippine government agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), and law enforcement authorities, where disclosure is required by applicable law or court order;
• Professional Advisers — Legal counsel, auditors, and other professional advisers under confidentiality obligations, where access to personal data is necessary for the relevant professional engagement.

All third-party service providers who process personal data on behalf of 67ph are bound by data processing agreements that require them to process personal data only as instructed by 67ph, to maintain appropriate security measures, and to comply with applicable data privacy law.

The 67ph platform uses cookies and similar tracking technologies to improve your experience, maintain session continuity, and support platform analytics. The following categories of cookies are used:

• Essential Cookies — Cookies that are strictly necessary for the platform to function, including session management cookies that keep you logged in to your 67ph account during an active session. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — Cookies that collect information about how players use the 67ph platform — which pages are visited most, whether error messages are received — to help improve platform performance. The data collected is aggregated and anonymised.
• Functional Cookies — Cookies that enable the platform to remember your preferences, such as your preferred game lobby view or language setting, to provide a more personalised experience.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the 67ph platform, including the ability to maintain a logged-in session. 67ph does not use third-party advertising or tracking cookies that follow players across other websites.

67ph implements a comprehensive set of technical and organisational security measures to protect the personal data of Filipino players against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• SSL/TLS encryption for all data transmitted between player devices and 67ph servers;
• Encryption at rest for sensitive personal and financial data stored in 67ph systems;
• Role-based access controls restricting staff access to personal data on a need-to-know basis;
• Two-factor authentication for all administrative access to systems containing personal data;
• Regular security audits, vulnerability assessments, and penetration testing;
• Incident response procedures for the detection, containment, and notification of data security incidents in accordance with the NPC Circular on Personal Data Breach Management.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 67ph will notify the National Privacy Commission (NPC) and affected individuals within the timeframes required by applicable law.

While 67ph takes all reasonable precautions to protect your data, no security system is completely impenetrable. You are also responsible for maintaining the security of your 67ph account login credentials — please refer to Section 4 of the 67ph Terms and Conditions for your account security obligations.

67ph retains personal data for the period necessary to fulfil the purpose for which it was collected, and for the periods required by applicable Philippine law. The following general retention periods apply:

• Account and identity data — Retained for the duration of your 67ph account and for a period of five (5) years after account closure, in compliance with Anti-Money Laundering Act record-keeping requirements;
• Financial transaction data — Retained for a minimum of five (5) years from the date of the transaction, or longer where required by applicable tax or regulatory law;
• Gaming activity data — Retained for a period of three (3) years from the date of the gaming activity for dispute resolution, responsible gaming monitoring, and regulatory audit purposes;
• Support communications — Retained for a period of two (2) years from the date of the communication, unless the communication relates to an ongoing dispute or regulatory matter;
• Device and technical data — Retained in anonymised or aggregated form for platform analytics. Identifiable technical data (e.g., IP logs) is retained for a maximum of twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 67ph's data destruction procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes.

As a Filipino data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 67ph:

• Right to be Informed — The right to be informed that your personal data is being processed and the purpose for which it is being used, as described in this Privacy Policy;
• Right of Access — The right to request a copy of the personal data that 67ph holds about you, together with information about how it is being processed;
• Right to Rectification — The right to request correction of any inaccurate or incomplete personal data held about you;
• Right to Erasure ("Right to be Forgotten") — The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to 67ph's legal obligation to retain certain data for regulatory compliance purposes;
• Right to Object — The right to object to the processing of your personal data where processing is based on legitimate interests, including the right to object to processing for direct marketing purposes;
• Right to Data Portability — The right to receive your personal data in a structured, commonly used, machine-readable format for the purpose of transferring it to another service provider;
• Right to Lodge a Complaint — The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 67ph has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please submit a written request to 67ph through our support channels (see Section 14). 67ph will respond to data rights requests within thirty (30) days of receipt. Some requests may be subject to identity verification before they can be actioned.

The 67ph platform is not intended for use by individuals under 21 years of age, and 67ph does not knowingly collect personal data from minors. If 67ph becomes aware that personal data has been collected from an individual under the age of 21, the associated account will be suspended immediately and the data will be deleted in accordance with applicable law.

If you are a parent or guardian and believe that a minor has registered a 67ph account or provided personal data to 67ph without your knowledge, please contact our support team immediately using the contact details in Section 14. We will take prompt action to investigate and address the situation.

67ph uses gaming activity data and responsible gaming tool data to support our responsible gaming obligations. Specifically, 67ph may use automated monitoring of gaming activity patterns to identify behaviour that may be indicative of problem gambling — such as significantly increased deposit frequency, rapid escalation of bet sizes, or repeated reversal of withdrawal requests.

Where such patterns are identified, 67ph may proactively contact the affected player to provide information about responsible gaming tools and support resources. This use of data is based on 67ph's legitimate interest in promoting responsible gambling among Filipino players and our obligations under applicable regulatory guidelines.

Responsible gaming data — including self-exclusion records, deposit limit settings, and cool-off period history — is retained for the full duration of the applicable exclusion or limit period and for a minimum of five (5) years thereafter, to prevent circumvention through new account registration and to demonstrate regulatory compliance.

67ph reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes to this Policy will be communicated to registered players via the contact information on file and will be posted on this page with an updated "Last Updated" date.

Your continued use of the 67ph platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If the revised Policy is materially different in a way that requires fresh consent, 67ph will seek such consent from affected players before continuing to process their personal data under the revised terms.

For questions, concerns, or requests relating to this Privacy Policy, the exercise of your data rights, or 67ph's data processing practices, please contact the 67ph Data Protection Officer through the following channels:

• Live Chat: Available 24/7 through the support icon on the 67ph platform
• Email: [email protected]

Please include "Privacy Request" or "Data Rights Request" in the subject of your communication to ensure it is directed to the appropriate team. 67ph aims to acknowledge all privacy-related enquiries within 72 hours and to resolve substantive requests within 30 days.

If you are not satisfied with 67ph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.