phl168 Privacy Policy – Data Protection Statement

1. Introduction and Scope

phl168 (referred to as "we," "us," "our," or "the Platform") operates an online gaming platform serving Filipino players. This Privacy Policy applies to all personal data collected through our website (phl168.cam), mobile applications, customer support channels, and any other services we provide. It covers data collected from registered users, visitors browsing our site, and individuals who contact our support team.

We take your privacy seriously and implement technical, organizational, and security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. As a data controller under Philippine law, we are responsible for ensuring that your data is processed lawfully, fairly, and transparently.

2. Information We Collect

phl168 collects various types of personal information to provide, maintain, and improve our services. The categories of data we collect include:

2.1 Information You Provide Directly

When you register an account, make deposits, contact support, or participate in promotions, you voluntarily provide us with:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued ID numbers (for verification purposes only)
• Contact Information: Email address, mobile phone number, residential address, postal code
• Account Credentials: Username, password (stored in encrypted form), security questions/answers
• Payment Information: GCash account number, PayMaya account number, bank account details, transaction history
• Verification Documents: Scanned copies of government IDs (passport, driver's license, postal ID, voter's ID), proof of address (utility bills, bank statements), selfie photographs for identity verification
• Communication Records: Live chat transcripts, email correspondence, support tickets, feedback forms
• Marketing Preferences: Opt-in/opt-out choices for promotional emails, SMS messages, push notifications

2.2 Information Collected Automatically

When you visit or use phl168, we automatically collect certain technical and usage data:

• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers
• Connection Data: IP address, internet service provider, geographic location (country, region, city based on IP), network connection type (WiFi, cellular data)
• Usage Data: Pages viewed, games played, bet amounts, win/loss records, session duration, click patterns, navigation paths, time spent on each page
• Cookies and Tracking: Session cookies (required for login and functionality), preference cookies (language, theme settings), analytics cookies (Google Analytics for traffic analysis), advertising cookies (for retargeting campaigns if you consent)

2.3 Information from Third Parties

We may receive data from external sources to verify your identity, process payments, or prevent fraud:

• Payment Processors: Transaction confirmation data from GCash, PayMaya, banks, and other payment partners
• Identity Verification Services: Age verification, address verification, and fraud detection data from third-party KYC (Know Your Customer) providers
• Game Providers: Gameplay data, bet history, and game outcomes from software providers like Pragmatic Play, Evolution Gaming, PG Soft, and others
• Publicly Available Sources: Information from public databases to verify identity and comply with anti-money laundering regulations

3. How We Use Your Information

phl168 processes your personal data for the following lawful purposes:

3.1 Account Management and Service Delivery

• Create and maintain your phl168 user account
• Process deposits, withdrawals, and financial transactions
• Provide access to slots, live casino, sports betting, bingo, and other games
• Track gameplay history, wins, losses, and account balances
• Deliver customer support via live chat, email, or phone
• Send transactional notifications (deposit confirmations, withdrawal approvals, password resets, account alerts)

3.2 Legal and Regulatory Compliance

• Verify your identity and age (21+ requirement) to comply with PAGCOR regulations
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Prevent fraudulent activity, money laundering, terrorism financing, and other criminal activity
• Respond to legal requests, court orders, and government inquiries
• Maintain records required by Philippine gaming and tax authorities
• Enforce our Terms & Conditions and investigate violations

3.3 Security and Fraud Prevention

• Detect and prevent unauthorized account access, hacking attempts, and security breaches
• Identify suspicious betting patterns, collusion, bonus abuse, and multi-accounting
• Monitor transactions for signs of money laundering or structured deposits
• Protect our platform, games, and other users from malicious activity

3.4 Marketing and Communication (with your consent)

• Send promotional emails about new games, bonuses, tournaments, and special offers
• Deliver SMS messages with deposit bonuses, free spins, and cashback offers
• Show personalized game recommendations based on your play history
• Conduct surveys to gather feedback on platform improvements
• Retarget advertising to remind you about phl168 when you visit other websites (if you consent to advertising cookies)

You can opt out of marketing communications at any time by clicking "unsubscribe" in emails, replying "STOP" to SMS messages, or adjusting your preferences in account settings.

3.5 Analytics and Improvement

• Analyze user behavior to improve website design, navigation, and mobile performance
• Identify popular games and features to guide content decisions
• Test new features, layouts, and promotions (A/B testing)
• Monitor platform performance, load times, and error rates
• Generate aggregated, anonymized statistics for business reporting (no personally identifiable data)

4. Legal Basis for Processing Your Data

Under the Philippine Data Privacy Act, we must have a lawful basis to process your personal information. phl168 relies on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our Terms & Conditions and provide gaming services you requested (account creation, deposits, gameplay, withdrawals).
• Legal Obligation: We must process certain data to comply with PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA), Tax Code, and other Philippine laws.
• Consent: For marketing communications, advertising cookies, and certain data processing activities, we rely on your explicit opt-in consent. You can withdraw consent at any time.
• Legitimate Interest: We process data to prevent fraud, improve our services, and ensure platform security, provided it does not override your fundamental rights and freedoms.

5. How We Share Your Information

phl168 does not sell your personal data to third parties. However, we may share your information with the following categories of recipients for legitimate business purposes:

5.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, banks, and payment gateways receive transaction details to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, PG Soft, Jili, CQ9, and other software providers receive gameplay data to deliver casino games.
• KYC/AML Verification Services: Third-party identity verification and fraud detection companies process your documents to verify age and identity.
• Cloud Hosting Providers: Data storage and server infrastructure providers host our platform and databases.
• Customer Support Tools: Live chat software, email platforms, and CRM systems process support communications.
• Analytics Providers: Google Analytics and similar tools process anonymized usage data to generate traffic reports.

All third-party service providers are contractually obligated to protect your data and use it only for the specific purposes we authorize. They are prohibited from selling or sharing your information with others.

5.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, law enforcement, courts, and regulators when required by law or to:

• Comply with court orders, subpoenas, or legal process
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Cooperate with PAGCOR audits, investigations, and compliance reviews
• Respond to lawful requests from Philippine National Police, National Bureau of Investigation, or other authorities
• Protect our legal rights, enforce our Terms & Conditions, or defend against legal claims

5.3 Business Transfers

If phl168 is acquired by another company, merges with another entity, or undergoes bankruptcy proceedings, your personal data may be transferred to the successor entity as part of the business assets. We will notify you via email and platform announcement if such a transfer occurs, and the new entity will remain bound by this Privacy Policy.

5.4 With Your Consent

We may share your data with other parties if you explicitly consent to such sharing (e.g., social media integrations, third-party promotions, referral programs).

6. How Long We Keep Your Data

phl168 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal obligations. Specific retention periods include:

• Active Accounts: Data is retained for the duration of your account's active status plus any applicable dispute resolution period.
• Closed Accounts: After you close your account, we retain certain data for up to 5 years to comply with PAGCOR record-keeping requirements, tax audits, and anti-money laundering regulations.
• Transaction Records: Financial transaction data (deposits, withdrawals, bets, wins) is retained for 5 years as required by Philippine Anti-Money Laundering Act.
• Identity Verification Documents: Scanned IDs and verification documents are retained for 5 years after account closure for compliance purposes.
• Marketing Data: If you opt out of marketing, we retain only the minimum information needed to honor your opt-out preference (email address on suppression list).
• Support Communications: Live chat logs and email correspondence are retained for 2 years for quality assurance and dispute resolution.

After retention periods expire, personal data is securely deleted or anonymized so it can no longer identify you.

7. How We Protect Your Data

phl168 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data (passwords, payment details) is encrypted at rest in our databases.
• Access Controls: Personal data is accessible only to authorized phl168 employees and contractors who need it to perform their job functions. Access is logged and monitored.
• Two-Factor Authentication: We offer optional 2FA for your account to prevent unauthorized login attempts.
• Firewall Protection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems.
• Regular Security Audits: Third-party security firms conduct periodic penetration testing and vulnerability assessments.
• Data Minimization: We collect only the data necessary for specific purposes and delete or anonymize data when no longer needed.
• Employee Training: All phl168 staff receive data privacy and security training and sign confidentiality agreements.

While we implement robust security measures, no system is completely immune to cyber threats. You are responsible for maintaining the confidentiality of your password and promptly notifying us if you suspect unauthorized account access.

8. Cookies and Tracking Technologies

phl168 uses cookies and similar tracking technologies to enhance your user experience, analyze traffic, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize your browser and remember your preferences.

8.1 Types of Cookies We Use

• Essential Cookies: Required for login, session management, and core platform functionality. Cannot be disabled without breaking the site.
• Preference Cookies: Remember your language selection, theme, and display settings.
• Analytics Cookies: Collect anonymized data about page views, popular games, and user behavior (Google Analytics).
• Advertising Cookies: Enable retargeting ads on third-party sites (only if you consent via cookie banner).

8.2 Managing Cookies

You can control cookie settings through our cookie consent banner (displayed on first visit) or through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies will prevent you from logging in or using core features of phl168.

To opt out of Google Analytics tracking, install the Google Analytics Opt-Out Browser Add-on. To opt out of interest-based advertising, visit the Digital Advertising Alliance opt-out page.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format within 30 days.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. Update your profile in account settings or contact support.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements (we must retain certain records for 5 years under AMLA and PAGCOR regulations).
• Right to Object: Object to processing of your data for marketing purposes. Opt out via email unsubscribe links or account settings.
• Right to Data Portability: Receive your personal data in a machine-readable format and transmit it to another service provider.
• Right to Withdraw Consent: Withdraw consent for marketing communications or optional data processing at any time without affecting the lawfulness of processing based on consent before withdrawal.
• Right to Lodge a Complaint: File a complaint with the Philippine National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, contact our Data Protection Officer at [email protected] or submit a request via live chat. We will respond within 30 days (or sooner if required by law). Certain requests may require identity verification to prevent unauthorized disclosure of personal data.

10. International Data Transfers

phl168 primarily stores and processes data within the Philippines. However, some third-party service providers (cloud hosting, game providers, payment processors) may transfer data outside the Philippines to jurisdictions that may not offer the same level of data protection as Philippine law.

When we transfer data internationally, we ensure that appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the National Privacy Commission
• Data processing agreements requiring service providers to maintain Philippine-equivalent data protection standards
• Encryption and security measures during data transmission

By using phl168, you consent to such international transfers as necessary to provide gaming services.

11. Children's Privacy (21+ Requirement)

phl168 is strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors. Our registration process requires age verification, and we conduct ongoing monitoring to detect underage accounts.

If we discover that we have inadvertently collected data from a person under 21, we will immediately delete that data and close the account. Parents or guardians who believe their child has created an account should contact us immediately at [email protected].

12. Changes to This Privacy Policy

phl168 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Displaying a prominent notice on the phl168 homepage
• Sending an email to your registered email address
• Showing a pop-up notification when you next log in

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Continued use of phl168 after changes become effective constitutes acceptance of the updated policy. If you do not agree with changes, you must stop using the platform and close your account.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Data Protection Officer (DPO)
phl168
Email: [email protected]
Alternative Contact: [email protected]
Live Chat: Available 24/7 via phl168.cam website
Response Time: 7 business days for privacy inquiries

Philippine National Privacy Commission (NPC):
If you believe your data privacy rights have been violated, you may file a complaint with the NPC:
Website: privacy.gov.ph
Hotline: 1-8888 (press 5)
Email: [email protected]