ph867 Privacy Policy
At ph867, the privacy and security of every Filipino player's personal information is something we take very seriously. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines.
Our Privacy Commitments
How ph867 Safeguards Your Information
These cards summarise ph867's core data protection commitments. The full legal text follows in the policy below, which governs in all cases.
SSL Encryption
All data transmitted between your device and ph867's servers is protected by industry-standard TLS/SSL encryption. Your ph867 login credentials and financial details are never sent in plain text over the internet.
Secure Data Storage
Personal information collected by ph867 is stored in access-controlled, encrypted databases. We apply strict internal access policies ensuring that only authorised personnel can view your personal data, and only when necessary.
No Unauthorised Sharing
ph867 does not sell, rent, or trade your personal information to any third party for commercial marketing purposes. Data sharing is limited to regulatory obligations, licensed service providers, and as required under Philippine law.
DPA 2012 Compliance
ph867 processes all personal data in compliance with the Data Privacy Act of 2012 ( Republic Act No. 10173) and the implementing rules issued by the National Privacy Commission (NPC) of the Philippines. You have the right to access, correct, and erase your data.
Defined Retention Periods
ph867 keeps your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by PAGCOR regulations and Philippine anti-money laundering laws. Data is securely deleted or anonymised after the retention period ends.
Breach Notification
In the unlikely event of a personal data breach that poses a real risk of serious harm to you, ph867 will notify the National Privacy Commission and affected players within 72 hours of becoming aware of the breach, consistent with NPC Circular No. 16-03.
1. Introduction
ph867 is a PAGCOR-regulated online gaming platform serving Filipino players across the Philippines. We understand that your personal information is valuable and that you are trusting us with it every time you interact with our platform — whether that is creating an account, making a deposit via GCash or BDO, placing a bet on your favourite live casino game, or simply browsing our slot lobby.
This Policy is crafted in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and all relevant issuances of the National Privacy Commission (NPC) of the Philippines. It also reflects ph867's obligations under PAGCOR's data governance guidelines and the Anti-Money Laundering Act (Republic Act No. 9160, as amended).
We encourage you to read this Policy carefully and in full. If you have any questions about how ph867 handles your personal data, you may reach our Data Protection Officer at the contact details provided in Section 14 of this Policy.
2. Data Controller
ph867 acts as the Personal Information Controller (PIC) with respect to the personal data it collects from players and website visitors, as defined under Section 3(h) of the Data Privacy Act of 2012. ph867 determines the purposes and means of processing personal information in connection with the operation of the ph867 gaming platform.
Where ph867 engages third-party service providers — such as payment processors, KYC verification partners, or game content providers — those providers act as Personal Information Processors (PIPs) and are contractually bound to process personal data only in accordance with ph867's documented instructions and applicable Philippine data privacy law.
3. Personal Data We Collect
ph867 collects the following categories of personal information in the course of operating its platform and fulfilling its regulatory obligations:
3.1 Identity & Contact Data
- Full legal name as it appears on a government-issued ID
- Date of birth (used to verify that you are 21 years of age or older, as required by PAGCOR)
- Nationality and country of residence
- Residential address (barangay, city/municipality, province)
- Valid email address and mobile phone number
3.2 Identity Verification (KYC) Data
- Scanned copies or photographs of government-issued photo IDs (PhilSys National ID, Philippine passport, driver's licence, UMID, SSS/GSIS ID, PRC ID, or Voter's ID)
- Proof of residential address documents (utility bills, bank statements, or official correspondence dated within 90 days)
- Source-of-funds documentation for high-value transactions, as required under PAGCOR AML guidelines
- Selfie photographs or liveness-check data used for biometric identity verification
3.3 Financial Data
- GCash or PayMaya mobile wallet account details (mobile number only — ph867 does not store full wallet credentials)
- Bank account name, bank name, and account number used for withdrawals (BPI, BDO, Metrobank, UnionBank, Security Bank, or other Philippine banks)
- Transaction history including deposit amounts, withdrawal requests, and timestamps
3.4 Gaming & Behavioural Data
- Gaming activity records: games played, wagers placed, winnings, losses, and session durations
- Bonus and promotion participation history
- Responsible gaming tool usage (deposit limits, cooling-off periods, self-exclusion requests)
- Customer support interaction logs (live chat transcripts, email correspondence)
3.5 Technical & Device Data
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser type/version
- Unique device identifiers and mobile advertising IDs (where applicable)
- Platform access timestamps and session logs
- Cookie identifiers and similar tracking technology data (see Section 7)
4. How We Collect Your Data
ph867 collects personal data through the following means:
- Direct collection: Information you provide when creating your ph867 Account, completing KYC verification, submitting withdrawal requests, contacting customer support, or responding to promotions.
- Automated collection: Technical data collected automatically when you browse or interact with the ph867 platform, including IP addresses, device identifiers, and cookies (see Section 7).
- Third-party sources: Identity verification data obtained from licensed KYC and AML screening service providers; fraud-prevention signals from payment processors; and publicly available records used for AML compliance purposes as permitted under applicable Philippine law.
- Regulatory sources: Data received from PAGCOR or other Philippine government agencies in connection with regulatory compliance, licensing requirements, or law enforcement cooperation.
5. Purpose & Legal Basis for Processing
ph867 processes your personal data only where we have a valid legal basis to do so under the Data Privacy Act of 2012. The table below sets out the principal purposes for which we process personal data, together with the applicable legal basis for each:
| Purpose of Processing | Legal Basis (DPA 2012) |
|---|---|
| Account registration, identity verification (KYC), and age verification (21+ requirement) | Contractual necessity; legal obligation (PAGCOR / AML regulations) |
| Processing deposits, withdrawals, and managing your Wallet | Contractual necessity; legal obligation |
| Providing access to casino games, sports betting, bingo, and other gaming products | Contractual necessity |
| Anti-money laundering (AML) screening and suspicious transaction reporting to AMLC | Legal obligation (RA 9160 and PAGCOR AML guidelines) |
| Fraud detection, security monitoring, and preventing prohibited conduct | Legitimate interest of ph867; legal obligation |
| Customer support, dispute resolution, and complaints handling | Contractual necessity; legitimate interest |
| Sending service notifications (account changes, security alerts, transaction confirmations) | Contractual necessity; legitimate interest |
| Sending promotional communications and bonus offers (opt-in only) | Consent |
| Responsible gaming monitoring (identifying at-risk gaming behaviour) | Legal obligation (PAGCOR responsible gaming guidelines); legitimate interest |
| Platform analytics, product improvement, and technical troubleshooting | Legitimate interest of ph867 |
| Compliance with PAGCOR regulatory reporting requirements | Legal obligation |
6. Sharing of Personal Data
ph867 does not sell, rent, or trade your personal information to any third party for their own commercial marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
6.1 Regulatory and Government Authorities
- PAGCOR — as part of ph867's regulatory reporting obligations as a licensed online gaming operator in the Philippines.
- Anti-Money Laundering Council (AMLC) — where ph867 is legally required to report covered or suspicious transactions under the AMLA.
- National Privacy Commission (NPC) — in the event of a personal data breach or regulatory investigation.
- Other Philippine government agencies or law enforcement bodies — where required by law, court order, or lawful authority.
6.2 Licensed Service Providers (Personal Information Processors)
- Payment processors and e-wallet providers (GCash, PayMaya) to facilitate deposits and withdrawals
- Philippine banks (BPI, BDO, Metrobank, UnionBank, Security Bank) for withdrawal processing via Instapay/PESONet
- KYC and identity verification technology providers
- AML screening and watchlist service providers
- Cloud hosting and data centre infrastructure providers
- Customer support software providers (live chat platforms)
- Game content providers and aggregators whose games are accessible through the ph867 platform
All such service providers are required to execute a Data Processing Agreement (DPA) with ph867 and may only process your personal data in accordance with ph867's documented instructions. They may not use your data for their own purposes.
6.3 Business Transfers
In the event of a merger, acquisition, reorganisation, or sale of ph867's business assets, personal data held by ph867 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. We will notify affected players of any such transfer where required by applicable Philippine law.
7. Cookies & Tracking Technologies
ph867 uses cookies and similar tracking technologies on its platform to deliver a personalised, secure, and efficient gaming experience for all Filipino players. A cookie is a small text file stored on your device by your web browser when you visit the ph867 website.
7.1 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the ph867 platform to function. These include session authentication cookies that keep you logged in during a gaming session. You cannot opt out of these without ceasing to use the platform.
- Functional Cookies: Remember your preferences (language, currency display, game lobby layout) to personalise your ph867 experience across sessions.
- Analytics Cookies: Collect aggregated, anonymised data about how players navigate and use the ph867 platform. This helps us identify usability issues and improve the overall product.
- Security Cookies: Used for fraud detection and to identify suspicious login activity, protecting your ph867 Account from unauthorised access.
7.2 Managing Cookies
You may control or delete cookies through your browser settings. Please note that disabling certain cookies — particularly strictly necessary cookies — may prevent you from using core features of the ph867 platform, including logging in to your Account. For guidance on managing cookies in your specific browser, please consult your browser's help documentation.
8. Data Retention
ph867 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to applicable minimum retention periods imposed by Philippine law and PAGCOR regulations. The following general retention periods apply:
- Account and KYC data: Retained for a minimum of five (5) years after Account closure, as required by PAGCOR's AML compliance guidelines and the AMLA.
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with AML requirements.
- Customer support records: Retained for three (3) years from the date of the interaction.
- Marketing preference data: Retained until you withdraw consent or close your Account.
- Technical and device logs: Retained for up to twelve (12) months, unless required for ongoing fraud investigations.
Upon expiry of the applicable retention period, ph867 will securely delete or irreversibly anonymise your personal data, unless retention is required by a subsisting legal obligation or ongoing regulatory or legal proceedings.
9. Security Measures
ph867 implements a comprehensive set of technical, organisational, and administrative security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security programme includes:
- Transport Layer Security (TLS 1.2/1.3): All data transmitted between your device and ph867's servers is encrypted in transit using industry-standard TLS protocols.
- Data Encryption at Rest: Sensitive personal data stored in ph867's databases is encrypted using AES-256 encryption.
- Access Controls: Strict role-based access controls ensure that only authorised ph867 personnel can access personal data, and only to the extent required for their job function.
- Multi-Factor Authentication (MFA): Internal ph867 systems containing personal data require MFA for all staff access. Players are also strongly encouraged to enable MFA on their ph867 Accounts.
- Regular Security Audits: ph867's platform and infrastructure are subject to regular penetration testing and vulnerability assessments conducted by independent security specialists.
- Incident Response Plan: ph867 maintains a documented data breach response plan consistent with NPC Circular No. 16-03, including defined escalation procedures and player notification protocols.
While ph867 applies all reasonable security measures, no internet-based system is completely immune from security risks. We encourage all players to use strong, unique passwords for their ph867 Accounts and to never share login credentials with any third party.
10. Your Data Privacy Rights
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you — as a data subject — have the following rights with respect to your personal data held by ph867. These rights are not absolute and may be subject to limitations under applicable Philippine law:
Data Privacy Act 2012
Your Rights as a ph867 Player
Right to be Informed
You have the right to be informed whether ph867 is processing your personal data, and to receive a copy of this Privacy Policy describing how that data is used.
Right to Access
You may request a copy of the personal data ph867 holds about you, including information on the sources from which we collected it and the third parties with whom it has been shared.
Right to Rectification
If any personal data ph867 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update most information directly through your Account settings.
Right to Erasure
Subject to applicable retention obligations under PAGCOR and AML regulations, you may request that ph867 delete your personal data where it is no longer necessary for the purpose for which it was collected.
Right to Object
You have the right to object to ph867's processing of your personal data where that processing is based on legitimate interest, including objecting to receiving direct marketing communications.
Right to Data Portability
Where technically feasible, you may request that ph867 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
Right to Withdraw Consent
Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time through your Account settings or by contacting our Data Protection Officer.
Right to Lodge a Complaint
If you believe ph867 has not handled your personal data in accordance with the DPA 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
11. Minors & Age Policy
The ph867 platform is strictly intended for persons who are 21 years of age or older, consistent with PAGCOR's age restriction for online gaming in the Philippines. ph867 does not knowingly collect or process the personal data of individuals below the age of 21.
During registration, all applicants are required to provide their date of birth and, upon request, submit a valid government-issued photo ID confirming their age. If ph867 discovers that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. Parents or guardians who believe that their child has registered on the ph867 platform should contact our Data Protection Officer immediately.
12. Cross-Border Data Transfers
ph867 primarily stores and processes personal data within the Philippines. In some cases, however, personal data may be transferred to or processed by third-party service providers located outside the Philippines — for example, international game content providers or cloud infrastructure providers with data centres in other countries.
Where such transfers occur, ph867 ensures that adequate safeguards are in place to protect your personal data at a level at least equivalent to the protections afforded under the Data Privacy Act of 2012. These safeguards may include contractual clauses approved by the NPC, adequacy decisions, or the service provider's certification under a recognised data protection framework.
ph867 will not transfer personal data outside the Philippines to a jurisdiction that does not provide an adequate level of data protection without your prior consent or without the appropriate safeguards in place, except where the transfer is required to fulfil a legal obligation or to protect your vital interests.
13. Changes to This Privacy Policy
ph867 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in Philippine law, new NPC guidance, or updates to our platform and services. When we make material changes to this Policy, we will post a notice on the ph867 platform and, where appropriate, send an email notification to the address registered on your Account.
The effective date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed of how ph867 is protecting your personal information. Your continued use of the ph867 platform following the effective date of any amended Policy constitutes your acceptance of the updated terms.
If you do not agree with any material change to this Policy, you must discontinue your use of the ph867 platform and contact our Data Protection Officer to discuss the closure of your Account and the handling of your personal data.
14. Contact & Data Protection Officer
ph867 has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012 and NPC Circular No. 17-01. Our DPO is responsible for overseeing ph867's data protection programme, ensuring compliance with the DPA 2012, and serving as the primary point of contact for data subjects and the National Privacy Commission.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph867, please contact us using the details below. Our support team and Data Protection Officer are available to assist you every day of the year.
Website: ph867.net
Email: [email protected]
Live Chat: Available 24/7 via the ph867.net platform
Subject Line: "Data Privacy Request" or "DPO Inquiry"
National Privacy Commission (NPC) of the Philippines
For complaints or escalations: www.privacy.gov.ph (external regulatory body — not a ph867 link)
Ready to Play at ph867?
Join thousands of Filipino players enjoying live casino, JILI slots, bingo, and sports betting — all secured by the privacy protections described in this Policy.
21+ only • PAGCOR Regulated • Play Responsibly • ph867.net