phil63 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phil63 ("phil63," "we," "us," or "our") collects, processes, stores, and protects personal data about individuals ("you," "Player," or "User") who access or use the phil63 online casino platform at phil63.app (the "Platform"). This Policy applies to all players registered with phil63 and to any person who visits our Platform, regardless of location.

phil63 is committed to protecting the privacy and personal data of every Filipino player in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC) of the Philippines. By creating an account or using the phil63 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

phil63 is the personal information controller responsible for your data collected through the Platform. For all data privacy matters, inquiries, and requests, you may reach our Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy. Our DPO is registered with the National Privacy Commission as required under the DPA.

3. Personal Data We Collect

phil63 collects only the personal data necessary for the lawful operation of the Platform and delivery of services to Philippine players. The categories of data we collect include:

4. How We Collect Personal Data

phil63 collects personal data through the following means:

• Direct Interactions — Data you provide when creating your phil63 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies — Data collected automatically when you use the Platform, including through cookies, web beacons, pixel tags, and similar tracking technologies embedded in the Platform.
• Third-Party Sources — Identity verification data from KYC service providers; payment transaction data from GCash, PayMaya, and banking partners; fraud and AML screening data from licensed compliance service providers.

5. Purposes of Processing & Legal Basis

phil63 processes your personal data only for specific, legitimate purposes, each supported by a lawful basis under the DPA:

1. Contract performance — Processing necessary to operate your player account, manage deposits and withdrawals, and deliver game services pursuant to our Terms and Conditions.
2. Legal obligation — Processing required to comply with applicable laws, including KYC identity verification, anti-money laundering (AML) obligations under Republic Act No. 9160 (AMLA) as amended, and PAGCOR regulatory requirements.
3. Legitimate interests — Fraud detection, platform security, responsible gaming monitoring, service analytics, and customer support quality improvement — provided these interests are not overridden by your data protection rights.
4. Consent — Marketing communications and promotional messaging, where you have expressly opted in. You may withdraw this consent at any time by updating your account notification preferences.

6. Disclosure & Data Sharing

phil63 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• KYC & Identity Verification Providers — Licensed third-party service providers that assist with identity document verification and age confirmation.
• Payment Processing Partners — GCash (G-Xchange, Inc.), PayMaya (Maya Bank), and banking partners involved in processing your PHP deposits and withdrawals.
• Game Technology Providers — JILI Games and other certified game suppliers who may receive anonymized session data for game performance purposes.
• AML & Fraud Prevention Services — Compliance technology providers used to screen transactions and player activity for suspicious patterns, as required under Philippine AML legislation.
• Regulatory & Law Enforcement Authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and any other competent Philippine authority when legally required to do so.
• IT Infrastructure & Cloud Service Providers — Hosting, data storage, and cybersecurity providers that process data on phil63's behalf under strict data processing agreements.

All third-party data processors engaged by phil63 are contractually bound to handle your personal data solely for the purposes specified, to maintain appropriate security standards, and to comply with the DPA.

7. Data Retention

phil63 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law:

• Account and KYC records: five (5) years from account closure, as required under AMLA.
• Financial transaction records: five (5) years from the date of each transaction.
• Player support communications: two (2) years from the date of last interaction.
• Marketing consent records: retained until consent is withdrawn, plus an additional two (2) years for record-keeping purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

8. Cookies & Tracking Technologies

The phil63 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain your login session, analyze Platform usage, and deliver relevant promotional content. The types of cookies used include:

• Strictly Necessary Cookies — Required for the Platform to function correctly, including session management and security tokens. These cannot be disabled.
• Analytics Cookies — Collect anonymized data about how players navigate the Platform, helping us identify and fix performance issues.
• Functional Cookies — Remember your preferences (e.g., language settings, game lobby configuration) to improve your experience.
• Marketing Cookies — Track your engagement with promotions and are used to display relevant offers. You may opt out of marketing cookies through your browser settings without affecting Platform functionality.

9. Data Security

phil63 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, multi-factor authentication for account access, regular security audits and penetration testing, strict access controls limiting employee access to personal data on a need-to-know basis, and encrypted storage of sensitive data at rest. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, phil63 will notify the National Privacy Commission and, where required, affected players within the timeframes prescribed by the DPA and NPC regulations.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, every Filipino player has the following rights with respect to their personal data held by phil63:

1. Right to be Informed — You have the right to be informed about how your personal data is collected and processed. This Policy fulfils that obligation.
2. Right to Access — You may request a copy of all personal data that phil63 holds about you.
3. Right to Rectification — You may request correction of any inaccurate or incomplete personal data in your account.
4. Right to Erasure — You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations under AMLA and other applicable laws.
5. Right to Object — You may object to processing of your data for direct marketing purposes at any time by updating your account preferences.
6. Right to Data Portability — You may request that phil63 provide your personal data in a structured, commonly used, machine-readable format.
7. Right to File a Complaint — If you believe your data privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within fifteen (15) working days, as required by the NPC.

11. Children's Privacy

The phil63 Platform is strictly for individuals aged 21 years and above, in compliance with PAGCOR regulations on online gambling in the Philippines. phil63 does not knowingly collect personal data from any person under the age of 21. Age is verified through the KYC process at registration. If phil63 discovers that personal data has been collected from an individual under 21 years of age, such data will be deleted immediately and the associated account permanently closed. If you are a parent or guardian and believe your child has registered on the Platform, please contact us immediately using the details in Section 14.

12. International Data Transfers

Some of the third-party service providers engaged by phil63 — including game technology providers and cloud infrastructure partners — may be located outside of the Philippines. Where personal data is transferred internationally, phil63 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose DPA-equivalent protections on recipient parties, prior to any such transfer. phil63 does not transfer personal data to countries or organizations that do not provide an adequate level of protection for your data without first implementing the safeguards required by the NPC.

13. Updates to This Privacy Policy

phil63 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the NPC. Material changes will be communicated to registered players via SMS to their registered Philippine mobile number and/or a prominent notice on the Platform, with a minimum of seven (7) days' notice before the revised Policy takes effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

14. Contact Our Data Protection Officer

For any data privacy inquiries, requests to exercise your rights, or complaints regarding phil63's handling of your personal data, please contact our Data Protection Officer:

Data Protection Officer — phil63
Email: [email protected]
Subject Line: "DPA Privacy Request — [Your Name]"

We are committed to responding to all privacy-related inquiries within fifteen (15) working days of receipt. For unresolved complaints, you also have the right to contact the National Privacy Commission through its official channels.