Privacy Policy — ph65 Online Casino

This Privacy Policy applies to all personal data collected, stored, and processed by ph65 in connection with the operation of the ph65 online gaming platform at ph65.win. It covers all players, registered users, and visitors to the ph65 website, regardless of the device or method used to access the platform.

ph65 is the personal information controller (PIC) in respect of the personal data described in this Policy. As PIC, ph65 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing complies with the Data Privacy Act of 2012 (RA 10173) and its implementing rules.

This Privacy Policy is to be read together with the ph65 Terms and Conditions, which are available at ph65.win/terms-conditions. Where there is any conflict between this Privacy Policy and the Terms and Conditions on matters relating to personal data, this Privacy Policy shall prevail.

ph65 collects the following categories of personal data in the course of providing its services to registered players and site visitors. All data collected is necessary for one or more of the lawful purposes described in Section 5.

ph65 collects your personal data through the following channels and methods:

• Registration and account setup: When you create a ph65 account, you directly provide identity, contact, and account data through the registration form.
• KYC verification: When ph65 requires identity verification — at account opening, before processing a withdrawal above a certain threshold, or at any time we are legally required to verify your identity — you provide identity documents directly through the secure KYC upload interface on the platform.
• Deposits and withdrawals: Financial data is collected when you initiate a deposit via GCash, PayMaya, or bank transfer, or when you submit a withdrawal request through the ph65 cashier.
• Gameplay activity: Gameplay data is recorded automatically by ph65's platform systems and by the game engines of ph65's third-party game providers as you play games on the platform.
• Customer support interactions: When you contact ph65 support via live chat or email, the content of those communications is recorded and stored as part of your account record.
• Automated technical collection: Technical data — including IP address, device information, and session data — is collected automatically by ph65's web infrastructure when you access the platform, including when you visit the website without logging in.
• Cookies and similar technologies: ph65 uses cookies and related technologies as described in Section 7 of this Policy.

Under the Data Privacy Act of 2012, ph65 must have a recognised lawful basis for each category of personal data processing it carries out. ph65 relies on the following lawful bases:

• Performance of a contract: Processing that is necessary to provide the ph65 service you have registered for — including account management, transaction processing, and game access — is carried out on the basis of the contract between you and ph65 formed when you accept the Terms and Conditions.
• Legal obligation: ph65 is required by Philippine law — including the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and the Tax Code — to collect, retain, and in certain cases disclose specific player data. Processing for these purposes is based on ph65's legal obligations.
• Legitimate interests: ph65 processes certain data — including technical security data, fraud prevention data, and gameplay analytics — on the basis of legitimate interests pursued by ph65, where those interests are not overridden by your privacy rights. ph65 documents its legitimate interest assessments and these are available upon request.
• Consent: Processing for marketing communications (SMS and email promotions) is based on your specific, informed, and freely given consent, provided during account registration or subsequently updated via your account settings. You may withdraw marketing consent at any time.

ph65 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your ph65 account, maintain its security, process login authentication, and manage your account settings and preferences.
• Identity verification (KYC): To verify your identity and age in compliance with PAGCOR requirements and the Anti-Money Laundering Act. This includes verifying that you are at least 21 years of age and that your payment methods are in your name.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other available payment channels in Philippine Peso.
• Providing gaming services: To enable your access to all games on the ph65 platform, record gameplay and transaction history, calculate and credit winnings, and apply promotional bonuses to your account.
• Responsible gaming: To support your responsible gaming tools — including enforcing deposit limits you have set, applying self-exclusion restrictions, and monitoring for patterns that may indicate problem gambling behaviour.
• Fraud prevention and security: To detect and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited activities on the platform.
• Customer support: To provide you with assistance via live chat, investigate your support requests, resolve disputes, and improve our support quality.
• Legal and regulatory compliance: To comply with obligations under PAGCOR regulations, the AMLA, the DPA 2012, and other applicable Philippine laws — including providing data to the AMLC, PAGCOR, or other competent authorities when legally required.
• Platform improvement: To analyse usage patterns and technical performance data to improve the ph65 platform, fix issues, and develop new features. This analysis uses aggregated or anonymised data wherever possible.
• Promotional communications (with consent): To send you information about ph65 promotions, bonuses, and new game launches via SMS or email, where you have given your consent to receive such communications.

ph65 does not sell or rent your personal data to any third party. ph65 shares your personal data only in the following limited circumstances:

• Game technology providers: Game studios (e.g., JILI, PG Soft, Pragmatic Play, Fa Chai) receive limited technical data — including session identifiers, bet amounts, and game results — necessary to deliver game content and calculate outcomes. These providers act as personal information processors under data processing agreements with ph65 and are not permitted to use your data for their own purposes.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment providers receive the payment data necessary to process your specific deposit or withdrawal transaction. ph65 does not retain full payment credentials beyond what is necessary for transaction processing.
• Identity verification services: KYC and identity document verification may be processed by a third-party identity verification service provider operating under a data processing agreement with ph65. These providers verify the authenticity of documents but do not retain the data for their own use.
• PAGCOR and gaming regulators: ph65 provides player data to PAGCOR and relevant gaming authorities as required by our regulatory obligations — including player registration records, transaction data, and suspicious activity reports.
• Anti-money laundering authorities: ph65 is required under the Anti-Money Laundering Act to report certain transactions and suspicious activity to the Anti-Money Laundering Council (AMLC). Such reports include relevant player identity and transaction data.
• Law enforcement and courts: ph65 will disclose personal data to the National Bureau of Investigation (NBI), Philippine National Police (PNP), or courts where required by a lawfully issued subpoena, court order, or equivalent legal process.
• Professional advisers: ph65's legal counsel, auditors, and insurance providers may access limited personal data on a need-to-know basis subject to confidentiality obligations.

ph65 uses cookies and similar browser-based storage technologies on its website. Cookies are small text files stored on your device by your browser. They help ph65 provide a functional, secure, and personalised experience.

ph65 uses the following types of cookies:

• Strictly necessary cookies: These are required for the ph65 platform to function. They maintain your login session, remember your account settings, and enable core security features. You cannot opt out of strictly necessary cookies while using the ph65 platform.
• Functional cookies: These remember your preferences — such as your preferred language, game view settings, and whether you have acknowledged certain notifications — to improve your experience when you return to ph65.
• Analytics cookies: ph65 uses privacy-respecting analytics tools to understand how players use the platform — which pages are visited, how long sessions last, and where technical issues occur. This data is aggregated and does not identify you personally.
• Security cookies: These support ph65's fraud detection and session security systems, helping identify unusual login patterns and protect your account from unauthorised access.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the ph65 platform, including your ability to stay logged in across pages. ph65 does not use third-party advertising cookies or cross-site tracking cookies.

ph65 retains personal data only for as long as necessary for the purposes described in this Policy and to comply with applicable Philippine legal requirements. The following general retention principles apply:

• Active account data: Personal data associated with an active ph65 account is retained for the duration of the account's existence. Account data remains accessible to you via your account dashboard for the periods stated (transaction history: 90 days on-dashboard; full records retained by ph65 for compliance purposes).
• Closed account data: After you close your ph65 account, ph65 retains your personal data for a minimum of five (5) years, as required by PAGCOR regulations and the Anti-Money Laundering Act. This retention is necessary to respond to regulatory inquiries, resolve disputes, and comply with audit requirements.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following the last transaction on your account, as required by AMLA implementing rules.
• Financial transaction records: Records of all deposits, withdrawals, and gameplay transactions are retained for a minimum of five (5) years for AML compliance and tax purposes.
• Support communications: Live chat and email support records are retained for three (3) years from the date of the communication.
• Marketing data: If you withdraw consent to marketing communications, your marketing opt-out preference is retained indefinitely so that ph65 can honour your decision and does not inadvertently re-add you to marketing lists.

After the applicable retention period expires, ph65 securely deletes or anonymises the personal data in accordance with its data disposal procedures.

ph65 implements appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, and unauthorised access. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and ph65 servers, including login credentials, payment data, and personal information.
• Passwords stored as salted cryptographic hashes — ph65 staff cannot access or read your password in plain text.
• Role-based access controls ensuring that ph65 staff can only access the minimum personal data necessary for their specific job function.
• Regular security assessments and penetration testing of the ph65 platform infrastructure.
• Two-factor authentication (2FA) options for player accounts to add a layer of protection against unauthorised login.
• Automated fraud detection systems that monitor for unusual account activity patterns that may indicate a security compromise.
• Data processing agreements with all third-party service providers who handle ph65 player data on ph65's behalf, requiring them to maintain equivalent security standards.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph65. These rights may be exercised by contacting ph65 through the channels described in Section 14.

The ph65 platform is strictly for persons who are 21 years of age or older, in accordance with PAGCOR's minimum age requirements for casino-style gambling in the Philippines. ph65 does not knowingly collect personal data from persons under the age of 21.

Age verification is conducted as part of the ph65 registration and KYC process. Where ph65 discovers that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, the data will be deleted to the extent permitted by legal retention obligations, and the matter will be reported to PAGCOR.

Registered ph65 players are required by the Terms and Conditions to prevent minors from accessing their ph65 accounts. ph65 strongly encourages all players to use device passwords, PIN locks, and session log-outs to prevent minor household members from accessing the platform through a shared device.

The ph65 platform integrates third-party game content, payment processing services, and operational support tools. Each of these third parties operates under its own privacy practices and, where they process ph65 player data on ph65's behalf, under data processing agreements with ph65.

ph65 is not responsible for the privacy practices of third-party game studios in respect of data those studios collect directly and independently from their own platforms. If a game studio operates its own player account system outside of the ph65 environment, any data you provide directly to that studio is governed by that studio's own privacy policy, not this one.

This Privacy Policy does not apply to any third-party websites or services that may be accessible via links on the ph65 platform. ph65 does not operate such external sites and is not responsible for their data practices. Players who visit external sites do so at their own risk and should review the applicable privacy policies of those sites independently.

ph65 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law, or operational changes to the ph65 platform. When we make material changes to this Policy, we will update the effective date shown at the top of this page and, where practicable, notify registered players via their registered email address or through the ph65 platform interface.

We encourage you to review this Privacy Policy periodically to stay informed about how ph65 protects your personal data. Your continued use of the ph65 platform after the effective date of an updated Policy constitutes your acknowledgment of the updated terms. If you disagree with a material change to this Policy that affects your data rights, you should contact ph65 to discuss your options, including closing your account and requesting data deletion to the extent permitted by law.

The version number and effective date at the top of this document identify the current version. Previous versions of this Policy are available upon request from ph65's Data Protection Officer.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights under the DPA 2012, or wish to make a formal privacy complaint, you may contact ph65 through the following channels:

ph65 is committed to resolving all data privacy concerns fairly and promptly. We take every privacy concern seriously and treat all formal data subject requests with confidentiality and respect.