ph967 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how ph967 ("ph967," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal information of individuals ("you," "Player," or "User") who access or use the ph967 platform at ph967.vip, including all associated gaming services, customer support channels, promotional programs, and payment processing functions.

This Policy applies to all personal data processed by ph967 in connection with the provision of its online casino and sports betting services to players located in the Philippines and, where applicable, other jurisdictions. It covers data collected through the ph967 website, any mobile-optimized interfaces, live chat support, email correspondence, and payment verification processes.

By registering a ph967 account, accessing the platform, or submitting any personal information to ph967, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the ph967 platform.

This Policy should be read together with ph967's Terms & Conditions, which govern your use of the platform as a whole.

2. Data Controller

ph967 is the data controller for all personal information collected through the ph967 platform. As a PAGCOR-licensed online gaming operator, ph967 is subject to Philippine data privacy law and to the data protection requirements imposed by PAGCOR as part of its licensing conditions.

ph967 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules of the National Privacy Commission. The DPO's contact details are provided in Section 14 of this Policy.

3. Personal Data We Collect

ph967 collects personal data in the following categories. We collect only what is necessary for the specific purpose identified at the time of collection.

3.1 Registration & Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (to verify the 21+ age requirement under Philippine law)
• Philippine mobile number and email address
• Username and encrypted password credential
• Government-issued ID type and document number (submitted during KYC verification)
• Residential address

3.2 Financial & Transaction Data

• GCash or Maya account number associated with deposits and withdrawals
• Bank account details for bank transfer transactions (BPI, BDO, Metrobank)
• Deposit and withdrawal history, including amounts, timestamps, and reference numbers
• QR Ph transaction identifiers and GrabPay account identifiers where applicable

3.3 Gaming Activity Data

• Game session records including game type, wager amounts, results, and session duration
• Bonus claim and wagering history
• Sports betting selections and settlement records
• Self-exclusion and responsible gaming tool usage history

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Cookie identifiers and session tokens (see Section 7)
• Login timestamps and login frequency data

3.5 Communications Data

• Live chat transcripts and email correspondence with ph967 support
• Complaint and dispute records
• Responses to voluntary surveys or feedback requests

4. How ph967 Uses Your Personal Data

ph967 processes personal data for the following purposes:

• Account management: Creating, maintaining, and securing your ph967 player account, including password recovery and session management.
• Age and identity verification: Verifying that you meet the 21+ age requirement and that you are who you say you are, as required by PAGCOR licensing conditions.
• Payment processing: Processing deposits and withdrawals through GCash, Maya, and other supported Philippine payment methods, including compliance with anti-money laundering (AML) requirements.
• Platform provision and game delivery: Operating the casino games, sports betting, and all other features available on the ph967 platform.
• Regulatory compliance: Meeting ph967's obligations under PAGCOR licensing requirements, the Philippine Anti-Money Laundering Act, and the Data Privacy Act of 2012.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct.
• Responsible gaming: Monitoring for indicators of problem gambling, applying deposit limits and self-exclusion restrictions, and complying with responsible gaming requirements.
• Customer support: Responding to support requests, complaints, and dispute resolution communications.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to registered players who have not opted out of such communications.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game selection, and user experience.

ph967 does not engage in automated decision-making that produces legal or similarly significant effects on individual players without human review, except as described in this Policy with respect to fraud detection and account security.

5. Legal Basis for Processing

ph967 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing necessary for the performance of the player agreement between you and ph967, including account registration, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing requirements, AML obligations, and tax reporting obligations.
• Legitimate interests: Processing necessary for ph967's legitimate business interests, including fraud prevention, platform security, and business analytics, where those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where consent has been obtained at the time of registration or subsequently. You may withdraw consent at any time by contacting ph967 support.

6. Data Sharing and Disclosure

ph967 does not sell your personal data. ph967 may share personal data with the following categories of recipients for the purposes described in this Policy:

• Payment service providers: GCash (G-Xchange Inc.), Maya (Voyager Innovations), and other Philippine payment operators, to process deposits and withdrawals.
• Game providers: Third-party gaming software providers (e.g., JILI Technology, Pragmatic Play, PG Soft) who supply the games available on ph967. Game providers receive only the technical data necessary to operate game sessions.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where disclosure is required by law or regulatory mandate.
• IT service providers: Cloud infrastructure, cybersecurity, and data processing vendors who process data on ph967's behalf under binding data processing agreements.
• Identity verification services: Third-party KYC vendors who assist with identity document verification and age verification.
• Legal and compliance advisors: Where disclosure is necessary for legal proceedings, regulatory investigations, or the enforcement of ph967's Terms & Conditions.

All third-party service providers who process personal data on behalf of ph967 are bound by contractual data protection obligations no less stringent than those applicable to ph967 itself.

7. Cookies and Tracking Technologies

ph967 uses cookies and similar tracking technologies on ph967.vip for the following purposes:

• Essential cookies: Session authentication, login state management, and security tokens. These are required for the platform to function and cannot be disabled.
• Functional cookies: Remembering language preferences, game display settings, and other user preferences to personalize your experience on ph967.
• Analytics cookies: Aggregated, anonymized data on page views, session duration, and navigation patterns used to improve ph967's platform performance. No personally identifiable information is included in analytics data.
• Security cookies: Fraud detection signals, device fingerprinting for suspicious login detection, and rate-limiting tokens.

You may disable non-essential cookies through your browser settings. Disabling essential cookies will impair your ability to log in to and use the ph967 platform.

8. Data Retention

ph967 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable Philippine law and PAGCOR licensing conditions:

• Account and identity data: Retained for the duration of the account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations under Republic Act No. 9160.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity data: Retained for a minimum of three (3) years from the date of the game session, subject to any longer period required by PAGCOR audit requirements.
• Support and communications data: Retained for a minimum of two (2) years from the date of the last communication.

Upon expiry of applicable retention periods, ph967 will securely delete or anonymize personal data in a manner that prevents reconstruction of the original data.

9. Security Measures

ph967 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and ph967 servers
• Encryption of sensitive data fields at rest, including KYC document data and financial account identifiers
• Role-based access controls limiting internal employee access to personal data to those with a documented operational need
• Two-factor authentication for all ph967 administrative systems
• Regular penetration testing and vulnerability assessments by qualified third-party security professionals
• Real-time intrusion detection and fraud monitoring systems
• Regular staff training on data protection and security practices

Notwithstanding these measures, no information system is completely immune to security risks. In the event of a data breach affecting your personal information, ph967 will notify the National Privacy Commission and affected players in accordance with the notification requirements of the Data Privacy Act of 2012.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph967:

• Right to be informed: The right to know that ph967 is processing your personal data and to receive this Privacy Policy.
• Right of access: The right to request a copy of the personal data ph967 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): The right to request deletion of personal data where retention is no longer necessary, subject to overriding legal obligations including AML and PAGCOR record-keeping requirements.
• Right to object: The right to object to certain types of processing, including direct marketing communications.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used electronic format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph967 has not handled your personal data in accordance with applicable law.

To exercise any of these rights, contact ph967's Data Protection Officer as described in Section 14. ph967 will respond to verified requests within thirty (30) days.

11. Children's Privacy and the 21+ Requirement

ph967's platform is strictly restricted to individuals aged 21 years or older, as required by PAGCOR regulations and Philippine law. ph967 does not knowingly collect personal data from individuals under the age of 21. If ph967 discovers that personal data has been submitted by a person under 21 years of age, such data will be immediately deleted, the associated account will be closed, and any deposited funds will be returned in accordance with applicable law.

If you are a parent or guardian and believe that a person under 21 has submitted personal data to ph967, please contact the Data Protection Officer immediately using the details in Section 14.

12. International Data Transfers

ph967 primarily processes personal data within the Philippines. In certain limited circumstances — for example, where cloud infrastructure or game servers are hosted in other jurisdictions — personal data may be transferred outside the Philippines. Any such transfers are made only to jurisdictions that provide an adequate level of data protection or under appropriate contractual safeguards, as required by the National Privacy Commission's rules on cross-border data transfers.

13. Changes to This Privacy Policy

ph967 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR requirements, or ph967's data processing practices. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the ph967 platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

14. Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph967, please contact our Data Protection Officer:

• Live Chat: Available 24/7 on the ph967 platform — select "Privacy / Data Request" when initiating the chat
• Email: [email protected] — please use the subject line "Privacy Policy Inquiry" or "Data Subject Request"

ph967 does not accept privacy-related requests via telephone. All formal data subject access requests and complaints must be submitted via live chat or email. ph967 will acknowledge all requests within five (5) business days and respond substantively within thirty (30) days.

Players who are not satisfied with ph967's response to a privacy complaint may escalate their concern to the National Privacy Commission of the Philippines (NPC), the independent regulatory authority responsible for the implementation of Republic Act No. 10173.