ph767 Privacy Policy

1. Introduction

1.1 ph767 ("ph767," "we," "us," or "our") is committed to protecting the privacy and security of the personal information of Filipino players and platform visitors. This Privacy Policy describes how ph767 collects, uses, stores, shares, and protects personal data in the course of operating its PAGCOR-regulated online casino and sports betting platform.

1.2 ph767 processes personal data as a personal information controller (PIC) as defined under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (the "DPA"), and complies with all applicable implementing rules and regulations issued by the National Privacy Commission (NPC).

1.3 By creating a ph767 account, using the ph767 platform, or providing personal information to ph767 through any channel, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein, where consent is the applicable legal basis for processing.

2. Data Controller Information

2.1 ph767 acts as the personal information controller for all personal data processed in connection with the ph767 platform and services.

2.2 ph767 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and related regulations. The ph767 DPO may be contacted via the contact details provided in Section 13 of this Policy.

2.3 ph767 operates under a PAGCOR license and is subject to regulatory oversight by the Philippine Amusement and Gaming Corporation in addition to the National Privacy Commission.

3. Personal Data We Collect

ph767 collects personal data through account registration, identity verification, platform usage, payment transactions, customer support interactions, and technical means. The categories of personal data collected include:

3.1 Identity and Contact Information

• Full legal name as appearing on government-issued identification;
• Date of birth (for mandatory 21+ age verification);
• Residential address (Philippines);
• Email address and Philippine mobile number;
• Government-issued ID number and document images (UMID, Passport, Driver's License, PhilSys ID).

3.2 Financial Information

• GCash account number registered to your ph767 account;
• PayMaya (Maya) account details;
• Bank account details (BPI, BDO, Metrobank) where applicable;
• Transaction history including deposits, withdrawals, and game wagering records;
• Source of funds information where required by AMLA compliance procedures.

3.3 Platform Usage Data

• Login timestamps, IP addresses, and device identifiers;
• Game session data including games played, bet amounts, and outcomes;
• Responsible gaming tool settings and usage history;
• Customer support communications and ticket history;
• Bonus and promotion participation records.

3.4 Technical Data

• Browser type and version, operating system, and device type;
• Referring URLs and navigation patterns on the ph767 platform;
• Cookie identifiers and session tokens (see Section 7).

4. How ph767 Uses Your Personal Data

ph767 uses collected personal data for the following purposes:

• Account management: Creating, maintaining, and administering your ph767 account;
• Identity verification (KYC): Verifying age (21+) and identity as required by PAGCOR;
• Payment processing: Processing GCash, PayMaya, and bank deposits and withdrawals;
• Regulatory compliance: Meeting obligations under PAGCOR licensing terms, AMLA, and applicable Philippine law;
• Fraud prevention and security: Detecting, preventing, and investigating fraudulent transactions, account compromise, and prohibited conduct;
• Responsible gaming: Implementing and monitoring deposit limits, self-exclusion, and other responsible gaming measures;
• Customer support: Responding to inquiries, complaints, and technical issues submitted via live chat or email;
• Platform improvement: Analyzing usage patterns to improve platform performance, game selection, and user experience;
• Marketing communications: Sending promotional emails and SMS regarding ph767 bonuses and events, where you have provided consent and not opted out.

5. Legal Bases for Processing

ph767 processes your personal data on the following legal bases under the DPA:

• Contract performance: Processing necessary to create and manage your ph767 account and provide the gaming services you have requested;
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA, tax laws, and other applicable Philippine legal requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming enforcement where ph767's legitimate interests are not overridden by your data privacy rights;
• Consent: Processing for marketing communications and non-essential cookies where your explicit consent has been obtained. You may withdraw consent at any time without affecting processing conducted prior to withdrawal.

6. Data Sharing and Disclosure

6.1 ph767 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6.2 ph767 may share personal data with the following categories of recipients, each of whom is bound by appropriate data processing agreements or legal obligations:

• PAGCOR: As required by ph767's gaming license terms, including player identity and transaction data for regulatory audit purposes;
• Anti-Money Laundering Council (AMLC): Transaction reports required under the Anti-Money Laundering Act and its implementing regulations;
• Payment processors: GCash (Mynt), PayMaya (Maya Philippines), BPI, BDO, Metrobank, and card processors — solely to the extent necessary to process your transactions;
• Game providers: Game studios and content providers may receive session data necessary to deliver game functionality (e.g., bet resolution, RNG certification). These providers do not receive identity or payment data;
• Technology and service providers: Cloud infrastructure, customer support platforms, fraud detection, and analytics services operating under data processing agreements;
• Law enforcement and courts: Where disclosure is required by lawful order, subpoena, or applicable Philippine law.

6.3 In the event of a merger, acquisition, or sale of ph767's business assets, personal data may be transferred as part of the transaction, subject to the incoming party's assumption of equivalent data protection obligations.

7. Cookies and Tracking Technologies

7.1 ph767 uses cookies and similar tracking technologies to operate the platform, maintain login sessions, remember your preferences, and analyze platform usage. Cookies are small text files stored on your device by your browser.

7.2 ph767 uses the following categories of cookies:

• Strictly necessary cookies: Required for login session management, security tokens, and core platform functionality. These cannot be disabled without affecting platform operation;
• Functional cookies: Remember your language preferences, game lobby layout, and responsible gaming settings;
• Analytics cookies: Collect aggregated data about platform usage patterns to improve performance. These are subject to your consent;
• Marketing cookies: Used to show relevant ph767 promotions within the platform. Subject to your consent.

7.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the ph767 platform. Disabling analytics or marketing cookies will not prevent you from using ph767's services.

8. Data Security

8.1 ph767 implements technical and organizational security measures appropriate to the risk of processing personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph767 servers;
• Encryption of sensitive stored data including payment information and government ID documents;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the ph767 platform;
• Secure password hashing — ph767 staff cannot retrieve your plain-text password;
• Two-factor authentication available for all player accounts.

8.2 In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, ph767 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals as required by the DPA and NPC regulations.

9. Data Retention

9.1 ph767 retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law:

• Account data: Retained for the duration of your ph767 account and for a period of five (5) years following account closure, as required by PAGCOR licensing terms and AMLA record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years in compliance with AMLA requirements;
• KYC documents: Retained for the period required by PAGCOR and applicable AML regulations following the date of account closure or last transaction;
• Customer support records: Retained for three (3) years from the date of last interaction;
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter for accountability purposes.

9.2 Upon expiry of applicable retention periods, personal data is securely deleted or anonymized using appropriate technical measures.

10. Your Data Rights

As a data subject under the Philippine Data Privacy Act, you have the following rights in respect of your personal information held by ph767:

To exercise any of these rights, submit a written request to ph767's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." ph767 will respond within thirty (30) days of receipt. Certain rights are subject to exceptions where data retention is required by law (e.g., AMLA transaction records).

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph767 has not handled your personal data in accordance with the DPA.

11. Children's Privacy

11.1 The ph767 platform is strictly intended for individuals who are at least twenty-one (21) years of age, as required by PAGCOR. ph767 does not knowingly collect personal data from individuals under the age of 21.

11.2 If ph767 becomes aware that personal data has been collected from an individual under 21 years of age, ph767 will promptly close the relevant account, void associated transactions, and securely delete or anonymize the personal data collected in connection with that account.

11.3 If you have reason to believe that a minor has registered a ph767 account, please contact ph767 customer support immediately at [email protected].

12. Updates to This Privacy Policy

12.1 ph767 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or ph767's data processing practices. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

12.2 Where changes to this Privacy Policy are material — including changes to the categories of data collected, purposes of processing, or your data rights — ph767 will provide advance notice via your registered email address or a prominent notice on the ph767 platform prior to the changes taking effect.

12.3 Your continued use of ph767 services following the effective date of a revised Privacy Policy constitutes acknowledgment of the updated Policy.

13. Contact & Data Protection Officer

For all privacy-related inquiries, data subject rights requests, and data breach notifications, please contact ph767's Data Protection Officer:

• Email: [email protected] (subject: "Privacy / DPO Inquiry")
• Live Chat: Available 24/7 via the ph767 platform
• Response Time: ph767 acknowledges privacy requests within 5 business days and responds substantively within 30 days