Data Privacy & Security

PH67 Privacy Policy – How We Protect Your Personal Data

At PH67, your personal information is handled with the utmost care. This Privacy Policy explains exactly what we collect, why we collect it, and how we keep it safe — in plain language, para sa lahat ng Pilipino.

Last updated: June 2025  |  Applicable in the Philippines  |  English (PH)

Your data, your rights. This Privacy Policy applies to all users of PH67 (ph67.best) and governs how we handle personal data in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

We Take Your Privacy Seriously

When you sign up and play on PH67, you're trusting us with some of your personal information. We don't take that lightly. This PH67 Privacy Policy is here to be upfront with you about exactly what data we collect, how we use it, who (if anyone) we share it with, and what your rights are as a player in the Philippines.

PH67 is fully committed to complying with the Data Privacy Act of 2012 (RA 10173) and the regulations set by the National Privacy Commission (NPC) of the Philippines. We process your personal data only for legitimate purposes, and we never sell your information to third parties for marketing. Simple as that.

Whether you're depositing via GCash, placing bets on your favourite football team, or spinning jackpot slots — every interaction on our platform involves some form of data. Understanding how that data flows through our system gives you control and confidence as a PH67 player.

Our Six Privacy Commitments

Data Encryption

All data you submit — from registration to payment — is protected with industry-standard SSL/TLS encryption in transit and AES-256 at rest.

No Selling of Data

PH67 never sells, rents, or trades your personal information to advertisers or third-party marketers. Your data is not a product we profit from.

Player Control

You have the right to access, correct, and request deletion of your personal data held by PH67 at any time — no hassle, walang paligoy-ligoy.

NPC Compliance

We operate under the Philippine Data Privacy Act (RA 10173) and follow NPC guidelines to ensure your data is lawfully and ethically handled.

Limited Retention

We only keep your data for as long as it is legally required or operationally necessary. Once it's no longer needed, it's securely deleted or anonymised.

Breach Notification

In the unlikely event of a data breach, PH67 will notify affected players and the NPC within the timelines required by Philippine law.

1. What Personal Data We Collect

PH67 collects personal data in several ways — directly from you when you register or use our services, and automatically through your use of the platform. Here's a clear breakdown:

1.1 Information You Provide Directly

  • Registration Data: Full name, date of birth, gender, email address, mobile number, and username.
  • Identity Verification (KYC): Government-issued ID (e.g., PhilSys ID, UMID, passport, driver's licence), proof of address (e.g., utility bill, bank statement), and selfie/photo for identity confirmation.
  • Payment Information: GCash number, Maya (PayMaya) account, linked bank account details (BDO, BPI, UnionBank), or card details for Visa/Mastercard. Note: PH67 does not store full card numbers — payments are processed via secure, PCI-DSS compliant payment gateways.
  • Support Communications: Any messages, complaints, or queries you send to our customer support team.

1.2 Data We Collect Automatically

  • Device & Browser Data: IP address, browser type and version, operating system, device model, and screen resolution.
  • Usage Data: Pages visited, games played, time spent on the platform, betting history, deposit and withdrawal records, and session timestamps.
  • Cookies and Similar Technologies: PH67 uses cookies and local storage to maintain your session, remember preferences, and analyse platform usage. See Section 7 for our full Cookie Policy.
  • Geolocation Data: Approximate location data derived from your IP address to verify that you are accessing PH67 from within the Philippines, as required by our operating licence.
ph67
Secure on Any Device

Whether you're playing from Bohol or Batanes, your data is protected by the same encryption standards across all devices.

ph67
Built for Filipino Players

Our privacy practices are designed specifically around Philippine law and the real needs of local players.

ph67
Safe Mobile Payments

GCash, Maya, and other local payment data are handled through PCI-DSS compliant gateways — never stored in plain form.

2. How PH67 Uses Your Personal Data

PH67 only processes your personal data for specific, legitimate purposes. We do not use your data in ways that are excessive, unrelated, or contrary to the reason it was originally collected. The table below summarises our main processing activities:

Purpose Data Used Legal Basis
Account registration and management Name, email, mobile number, date of birth Contractual necessity
Identity verification (KYC/AML) Government ID, selfie, address proof Legal obligation (AMLA, RA 9160)
Processing deposits and withdrawals Payment account details, transaction history Contractual necessity
Customer support and dispute resolution Account data, communications history Legitimate interest
Fraud detection and platform security IP address, device data, usage logs Legitimate interest / legal obligation
Responsible gaming monitoring Betting history, deposit frequency, session data Legitimate interest / legal obligation
Marketing communications (with consent) Email, mobile number Consent (opt-in only)
Platform analytics and improvement Anonymised usage data, cookies Legitimate interest

We want to be crystal clear: PH67 does not use your data to make automated decisions that significantly affect you without human oversight. If any profiling activity is used, for example to flag unusual betting patterns for responsible gaming purposes, a member of our team will review the case before any action is taken.

3. Who We Share Your Data With

PH67 does not sell or rent your personal data. We only share it with carefully selected third parties where it is necessary to provide our services or comply with legal requirements:

  • Payment Processors: GCash, Maya, GrabPay, Coins.ph, and banking partners process your transaction data. These providers operate under their own NPC-compliant privacy policies and PCI-DSS standards.
  • Identity Verification Providers: Third-party KYC service providers help us verify your identity as required by AMLA regulations. They are bound by strict data processing agreements.
  • Cloud Infrastructure Providers: PH67 operates on secure cloud servers. Our hosting providers have access to encrypted server data but are contractually prohibited from accessing or using it independently.
  • Regulators and Law Enforcement: We may disclose your data to PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, or law enforcement agencies when legally required to do so.
  • Analytics Partners: Aggregated, anonymised usage data may be shared with analytics tools to help us improve the platform. No personally identifiable information is included in these data sets.
All third-party service providers engaged by PH67 are required to sign a Data Sharing Agreement (DSA) and adhere to standards consistent with RA 10173 and its Implementing Rules and Regulations (IRR).

4. How Long We Keep Your Data

PH67 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Philippine law. Here's our general data retention schedule:

  • Account data: Retained for the duration of your active account plus 5 years after account closure (as required by the AMLA for AML compliance).
  • Transaction records: Retained for a minimum of 5 years from the date of the transaction, as mandated by Philippine financial regulations.
  • KYC documents: Retained for 5 years after account closure or the end of the business relationship.
  • Support communications: Retained for 3 years from the date of the last communication.
  • Marketing preferences: Retained until you withdraw consent or close your account.
  • Anonymised analytics data: May be retained indefinitely as it does not constitute personal data.

When your data is no longer required, it is securely deleted or anonymised using industry-standard methods. You may also request early deletion of certain data types — subject to our legal retention obligations — by contacting our Data Protection Officer (DPO).

5. Cookies and Tracking Technologies

PH67 uses cookies and similar technologies to make the platform work properly and to improve your experience. Here's what each type does:

Essential Cookies

These are required for the platform to function. They manage your login session, maintain security tokens, and ensure bets are processed correctly. You cannot opt out of essential cookies without affecting platform functionality.

Preference Cookies

These remember your settings — like your preferred language, display options, and notification preferences — so you don't have to reconfigure them every time you log in.

Analytics Cookies

We use anonymised analytics to understand which games are most popular, how players navigate the platform, and where technical issues occur. This data helps us make PH67 better for everyone. You may opt out of analytics cookies via your browser settings.

You can manage cookie preferences in your browser settings at any time. Please note that disabling certain cookies may affect the functionality of PH67.

6. Your Data Privacy Rights

Under the Philippine Data Privacy Act (RA 10173), you have the following rights as a data subject. PH67 is committed to honouring these rights promptly and without unnecessary obstacles:

Right to Access Request a copy of the personal data PH67 holds about you, including how it is used.
Right to Rectification Ask us to correct any inaccurate or incomplete personal data in your account.
Right to Erasure Request deletion of your personal data where there is no compelling reason for us to continue processing it.
Right to Object Object to the processing of your data for marketing purposes or where processing is based on legitimate interest.
Right to Portability Receive your personal data in a structured, machine-readable format and transfer it to another controller.
Right to Complain Lodge a complaint directly with the National Privacy Commission (NPC) if you believe your rights have been violated.

To exercise any of these rights, send a written request to our Data Protection Officer at privacy@ph67.best. We will acknowledge your request within 72 hours and respond in full within 15 business days as required under Philippine law.

7. How We Secure Your Data

PH67 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. These include:

  • SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
  • AES-256 Encryption at Rest: Sensitive data stored in our databases — including personal identifiers and KYC documents — is encrypted at rest.
  • Two-Factor Authentication (2FA): Players are strongly encouraged (and in some cases required) to enable 2FA on their PH67 accounts.
  • Access Controls: Only authorised PH67 personnel with a verified business need can access personal data. Access is logged and regularly audited.
  • Regular Security Assessments: PH67 conducts regular penetration testing and vulnerability assessments to identify and address potential security weaknesses.
  • Incident Response Plan: We have a documented breach response plan. In the event of a confirmed data breach, affected players and the NPC will be notified within 72 hours of discovery.

Despite our best efforts, no system is 100% immune to threats. We encourage players to use strong, unique passwords, enable 2FA, and never share login credentials with anyone — even people claiming to represent PH67.

8. Children's Privacy

PH67 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. If we discover that a minor has created an account or provided personal information, we will immediately delete the account and all associated data, and any deposits will be returned to the funding source.

If you are a parent or guardian and believe your child has accessed or registered on PH67, please contact us immediately at privacy@ph67.best so we can take prompt action.

9. Changes to This Privacy Policy

PH67 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other legitimate operational reasons. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page.
  • Send an email notification to all registered players for significant changes.
  • Display an in-platform banner notifying players of the update.

We encourage you to review this Privacy Policy periodically. Continued use of PH67 after any update constitutes your acknowledgement of the revised policy.

10. Contact Our Data Protection Officer

If you have any questions, concerns, or requests related to this Privacy Policy or how PH67 handles your personal data, please get in touch with our dedicated Data Protection Officer:

PH67 Data Protection Officer
Email: privacy@ph67.best
General Support: support@ph67.best
Response time: within 72 hours on business days

You also have the right to escalate concerns to the National Privacy Commission (NPC) of the Philippines if you are not satisfied with our response. Visit the NPC's official website for guidance on how to file a complaint.

Play Safe & Secure

Ready to Join PH67?

Your data is protected, your winnings are real, and the games are waiting. Register now and enjoy a safe, fair, and fun gaming experience built for Filipinos.