63ph Privacy Policy —
Your Data Your Rights Our Promise
Protected by Philippine Law

1. Introduction

1.1 This Privacy Policy ("Policy") describes how 63ph ("we," "us," "our," or "63ph") collects, uses, stores, shares, and protects the personal data of users ("you," "your," or "Data Subject") who access or use the 63ph website and gaming platform located at https://63ph.one (the "Platform").

1.2 63ph is the Personal Information Controller (PIC) as defined under the Philippine Data Privacy Act of 2012 (RA 10173). This means we determine the purposes and means by which your personal data is processed. We have appointed a Data Protection Officer (DPO) who oversees our compliance with applicable data privacy laws and serves as your primary point of contact for privacy-related concerns.

1.3 By registering an account, accessing the Platform, or otherwise providing your personal data to 63ph, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the 63ph Platform.

1.4 This Policy should be read together with our Terms & Conditions, which govern your use of the 63ph Platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

2. Data We Collect

2.1 63ph collects the following categories of personal data from registered players and Platform visitors:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Nationality and country of residence;
• Email address and mobile phone number;
• Residential address (barangay, city/municipality, province, ZIP code);
• Government-issued ID numbers (e.g., PhilSys National ID, SSS, UMID, passport, driver's license).

2.2 Financial Data

• GCash or PayMaya mobile wallet number;
• Bank account details (bank name, account number) for withdrawal processing;
• Debit card details where applicable (card type, last four digits, expiry date — full card numbers are never stored by 63ph);
• Transaction history including deposits, withdrawals, and bonus credits.

2.3 Gaming & Behavioral Data

• Game play history, bet amounts, win/loss records, and session durations;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, self-exclusion status);
• Customer support interaction records.

2.4 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Cookies and similar tracking technology data (see Section 7);
• Login timestamps and session activity logs.

3. How We Collect Data

3.1 Directly from You. The majority of personal data we hold is provided directly by you during the account registration process, KYC verification, deposit and withdrawal transactions, customer support interactions, and when you update your account profile.

3.2 Automatically. When you access the 63ph Platform, certain technical data is collected automatically through cookies, web beacons, and server logs. This includes your IP address, device identifiers, browser type, and pages visited. See Section 7 for full details on our cookie practices.

3.3 From Third Parties. 63ph may receive personal data about you from the following third-party sources:

• Identity verification providers used to conduct KYC checks and confirm the authenticity of government-issued IDs;
• Payment processors such as GCash, PayMaya, and partner banks, who share transaction confirmation data;
• PAGCOR and regulatory databases used to check self-exclusion lists and compliance records;
• Fraud prevention and AML screening services used to detect suspicious activity.

3.4 63ph does not purchase personal data from data brokers or any third-party marketing lists.

4. How We Use Your Data

4.1 63ph processes your personal data for the following purposes:

4.2 63ph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

4.3 Marketing Communications. If you have opted in to receive promotional communications from 63ph, we may send you emails or SMS messages about new games, promotions, and platform updates. You may withdraw your consent and unsubscribe at any time by updating your account notification preferences or by contacting our support team.

5. Legal Basis for Processing

5.1 Under the Philippine Data Privacy Act of 2012, 63ph processes your personal data on the following legal bases:

• Consent (Section 12(a), RA 10173): Where you have given clear, informed, and freely given consent for a specific processing purpose, such as receiving marketing communications or optional profiling for personalized game recommendations.
• Contract Performance (Section 12(b), RA 10173): Where processing is necessary to fulfill our contractual obligations to you under the 63ph Terms & Conditions, including account management, game provision, and payment processing.
• Legal Obligation (Section 12(c), RA 10173): Where processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate Interest (Section 12(f), RA 10173): Where processing is necessary for the legitimate interests of 63ph, such as fraud prevention, platform security, and responsible gaming monitoring, provided such interests are not overridden by your fundamental rights and freedoms.

5.2 Where 63ph relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

6.1 63ph does not sell your personal data to third parties. We share your data only in the following circumstances and with the following categories of recipients:

• PAGCOR and Philippine Regulatory Authorities: We are required by law to share certain player data with PAGCOR for licensing compliance, audit purposes, and regulatory reporting. This includes player identity data, transaction records, and responsible gaming information.
• Philippine Law Enforcement and Government Agencies: We will disclose personal data to the appropriate authorities where required by a valid court order, subpoena, or other lawful legal process, or where we are obligated to do so under the Anti-Money Laundering Act or other applicable Philippine legislation.
• Payment Processors: We share necessary financial and identity data with GCash, PayMaya, and partner banks solely for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: We share identity documents and personal data with accredited third-party verification services to fulfill our KYC obligations under PAGCOR regulations.
• Technology and Platform Service Providers: We engage third-party service providers who assist in operating the 63ph Platform (e.g., cloud hosting, cybersecurity, customer support software). These providers act as Personal Information Processors (PIPs) under RA 10173 and are contractually bound to process your data only on our instructions and in accordance with applicable data privacy laws.
• Game Content Providers: Game providers whose titles are available on 63ph may receive limited technical and gaming data necessary to deliver their games and ensure fair play compliance.

6.2 All third parties with whom 63ph shares personal data are required to maintain appropriate technical and organizational security measures and to process your data only for the specified purposes.

7. Cookies & Tracking Technologies

7.1 The 63ph Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze Platform usage. A cookie is a small text file placed on your device when you visit a website.

7.2 Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your 63ph account and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations to provide a more personalized experience.
• Analytics Cookies: Help us understand how players use the Platform — which pages are visited most, where users encounter difficulties, and how the Platform can be improved. Data collected is aggregated and anonymized where possible.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, unauthorized account access, and bot traffic on the Platform.

7.3 Managing Cookies. You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your 63ph account and using core Platform features. For all other cookie types, you may adjust your preferences through the cookie settings panel available on the Platform.

7.4 63ph does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertisements on external websites.

8. Data Retention

8.1 63ph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

8.2 The following retention periods apply as a general guide:

8.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data disposal procedures. Where anonymization is not technically feasible, data is securely destroyed.

9. Data Security

9.1 63ph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the 63ph Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial information and government ID data, is encrypted using AES-256 encryption;
• Access Controls: Access to personal data is restricted to authorized 63ph personnel and service providers on a strict need-to-know basis. All staff with access to personal data undergo regular data privacy training;
• Two-Factor Authentication: 63ph supports two-factor authentication (2FA) for player accounts to reduce the risk of unauthorized access;
• Regular Security Audits: The Platform undergoes regular penetration testing and security audits by qualified cybersecurity professionals;
• Incident Response: 63ph maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours and affected data subjects without undue delay, as required by RA 10173.

9.2 While 63ph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your 63ph account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

10. Your Rights

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 63ph. To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request."

10.2 63ph will respond to all verified data privacy requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

10.3 We may need to verify your identity before processing a data privacy request to ensure that personal data is not disclosed to unauthorized parties. We will not charge a fee for reasonable requests, but may charge a reasonable administrative fee for manifestly unfounded or excessive requests.

11. Children's Privacy

11.1 The 63ph Platform is strictly intended for persons aged 21 years and older, as required by PAGCOR regulations governing online gaming in the Philippines. 63ph does not knowingly collect personal data from individuals under the age of 21.

11.2 If 63ph becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data in question, and report the matter to PAGCOR as required by our licensing obligations.

11.3 If you are a parent or guardian and believe that your child under 21 has registered an account on 63ph, please contact us immediately at [email protected] so that we can take appropriate action without delay.

12. Cross-Border Data Transfers

12.1 Some of 63ph's third-party service providers — including cloud infrastructure providers and game content suppliers — may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, 63ph ensures that appropriate safeguards are in place to protect your data in accordance with RA 10173 and NPC guidelines on cross-border data transfers.

12.2 Such safeguards may include: (a) contractual data processing agreements incorporating NPC-approved standard contractual clauses; (b) transfers to countries recognized by the NPC as providing an adequate level of data protection; or (c) other legally recognized transfer mechanisms under Philippine data privacy law.

12.3 You may request information about the specific safeguards applied to cross-border transfers of your personal data by contacting our Data Protection Officer.

13. Policy Updates

13.1 63ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this page will be revised accordingly.

13.2 Where material changes are made to this Policy — particularly changes that affect your rights or the way we use your personal data — we will notify registered players via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

13.3 Your continued use of the 63ph Platform after the effective date of any updated Policy constitutes your acknowledgment of the changes. We encourage you to review this Policy periodically to stay informed about how 63ph protects your personal data.

14. Contact & Data Protection Officer

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way 63ph handles your personal data, please contact our Data Protection Officer (DPO):

14.2 If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.

14.3 For responsible gaming concerns, self-exclusion requests, or account closure, please contact our player welfare team at the same email address with the subject line "Responsible Gaming Request." Our dedicated team is available 24 hours a day, 7 days a week.