phil63 Privacy Policy

1. Introduction

phil63 ("we," "our," or "the Company") operates the online gaming platform accessible at phil63.cam. This Privacy Policy describes our practices for collecting, using, storing, disclosing, and protecting the personal information of players and visitors ("you" or "Data Subject") who interact with our platform and services.

This policy is issued in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It applies to all personal data processed by phil63 in connection with the delivery of our online casino, sports betting, and related gaming services.

By registering an account on phil63 and using our services, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this policy, you should discontinue use of the platform immediately.

2. Personal Data We Collect

phil63 collects the minimum personal data necessary to deliver, maintain, and improve our services. The categories of personal data we collect include the following:

2.1 Identity and Contact Information

• Full legal name (first, middle, and last name)
• Date of birth (for age verification purposes)
• Residential address (including barangay, city, province, and ZIP code)
• Valid email address
• Mobile phone number (Philippine mobile number preferred)
• Nationality and country of residence

2.2 Identity Verification Documents (KYC)

• Government-issued photo identification (Philippine passport, driver's license, UMID, SSS ID, PhilHealth ID, or Voter's ID)
• Proof of residential address (utility bill, bank statement, or government-issued document dated within 3 months)
• Selfie or live facial verification image (for enhanced KYC)
• Proof of payment method ownership (for fraud prevention)

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (GCash account number, Maya account, bank account number — partial only; full card/account numbers are never stored)
• Transaction amounts, timestamps, and reference numbers
• Account balance history

2.4 Gaming Activity Data

• Bet history, wagering records, and game session logs
• Wins, losses, and net gaming revenue attributable to your account
• Bonus and promotional participation records
• Responsible gaming tool settings (deposit limits, self-exclusion records)

2.5 Technical and Device Data

• IP address and approximate geolocation (country, city)
• Device type, operating system, and browser information
• Session timestamps, login history, and activity logs
• Cookie identifiers and tracking technology data (see Section 6)

Data Category	Legal Basis for Processing	Retention Period
Identity & Contact	Contractual necessity; Legal obligation	Duration of account + 5 years
KYC Documents	Legal obligation (AML compliance)	Duration of account + 7 years
Financial Transactions	Legal obligation; Legitimate interest	Duration of account + 7 years
Gaming Activity	Contractual necessity; Legitimate interest	Duration of account + 5 years
Technical & Device	Legitimate interest; Security	13 months from collection

3. How We Collect Your Data

phil63 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting customer support
• Automated collection: Technical data collected automatically through cookies, web beacons, and server logs as you interact with the platform (see Section 6)
• Third-party sources: Identity verification data received from accredited KYC/AML service providers; fraud prevention signals from payment processors; publicly available information used for compliance checks
• Responsible gaming monitoring: Behavioral data collected to identify problem gambling patterns and enforce responsible gaming measures

4. How We Use Your Personal Data

phil63 processes your personal data strictly for the following purposes:

• Account administration: Creating and managing your phil63 account, verifying your identity, and maintaining your player profile
• Service delivery: Processing deposits and withdrawals, crediting winnings, applying bonuses, and providing access to casino games and sports betting features
• Legal and regulatory compliance: Meeting anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, PAGCOR reporting obligations, and data retention mandates under Philippine law
• Fraud prevention and security: Detecting unauthorized access, preventing fraudulent transactions, and protecting the integrity of the platform
• Responsible gaming: Monitoring gaming behavior to identify at-risk players, enforcing self-exclusion measures, and providing access to responsible gaming tools
• Customer support: Responding to inquiries, resolving disputes, and providing assistance via live chat and email
• Platform improvement: Analyzing aggregated, anonymized usage data to enhance the platform's features, performance, and user experience
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — only if you have opted in to receive such communications. You may opt out at any time.

5. Disclosure and Sharing of Your Data

phil63 does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

5.1 Service Providers and Data Processors

We engage trusted third-party service providers to perform functions on our behalf, including payment processing (GCash, Maya, BPI, BDO, UnionBank, Metrobank), identity verification and KYC services, fraud detection and cybersecurity, customer support software, and cloud hosting infrastructure. These providers are contractually bound to process your data only as instructed by phil63 and in accordance with applicable privacy laws.

5.2 Regulatory and Legal Authorities

phil63 may disclose personal data to Philippine government agencies, regulators (including PAGCOR and the Anti-Money Laundering Council), law enforcement authorities, and courts when required to do so by law, court order, or regulatory requirement. We will notify you of any such disclosure where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving phil63, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data going forward.

6. Cookies and Tracking Technologies

phil63 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and understand how players interact with our site. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for basic platform functionality such as session management, login state, and security. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and last-visited game categories.
• Analytics Cookies: Help us understand traffic patterns and user behavior in aggregate. Data collected is anonymized and used solely for internal platform improvement.
• Security Cookies: Used for fraud detection, bot prevention, and account security monitoring.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality. phil63 does not use third-party advertising or behavioral targeting cookies.

7. Data Security Measures

phil63 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• End-to-end 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data stored at rest (including KYC documents and financial records)
• Role-based access controls limiting data access to authorized personnel only
• Multi-factor authentication (MFA) for internal systems access
• Regular penetration testing and vulnerability assessments by independent security auditors
• 24/7 security monitoring and intrusion detection systems
• Staff privacy and data security training conducted semi-annually
• Incident response procedures aligned with NPC breach notification requirements

In the event of a personal data breach that poses a real risk of serious harm to you, phil63 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players as soon as practicable.

8. Data Retention

phil63 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The general retention periods we apply are set out in the table in Section 2.

When your account is closed, your personal data enters a retention-only phase during which it is no longer actively used for gaming purposes but is kept to satisfy AML, tax, and regulatory obligations. At the end of the applicable retention period, your data is securely and irreversibly deleted or anonymized.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by phil63:

• Right to be informed: The right to know what personal data we collect, how it is used, and with whom it is shared — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to erasure: The right to request deletion of your personal data, subject to legal retention obligations.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated.

To exercise any of these rights, contact our Data Protection Officer via live chat on the platform or email at [email protected]. We will respond to all verifiable requests within 10 business days.

10. Minors and Age Policy

phil63 strictly prohibits participation by individuals under 21 years of age, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from anyone under 21. If we become aware that a registered account belongs to a person under the minimum age, we will immediately suspend the account, refund any remaining real-money balance (net of any fraudulently obtained bonuses), and delete all personal data associated with that account.

If you believe that a minor may have registered an account on phil63, please contact our support team immediately so that we can investigate and take appropriate action.

11. Changes to This Privacy Policy

phil63 reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or a prominent notice on the platform at least 15 days before the changes take effect. The updated policy will be effective as of the "Last Updated" date indicated at the top of this document. Continued use of phil63 following notification of changes constitutes acceptance of the revised Privacy Policy.

12. Contact Our Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact phil63's designated Data Protection Officer (DPO):

• Email: [email protected]
• Live Chat: Available 24/7 directly on the phil63 platform
• Response Time: Within 10 business days for formal data subject requests

If you are not satisfied with our response, you have the right to escalate your concern to the National Privacy Commission of the Philippines at privacy.gov.ph.