ph963 Privacy Policy

1 Who We Are

This Privacy Policy is issued by ph963 ("ph963," "we," "us," or "our"), the operator of the ph963 online gaming platform accessible at ph963.net (the "Platform"). ph963 acts as the personal information controller in respect of the personal data collected through the Platform, as defined under the Data Privacy Act of 2012 (Republic Act No. 10173).

This policy applies to all personal data collected from registered players, prospective players, and visitors to the ph963 Platform, regardless of the device or method used to access it. It covers data collected through the website, mobile applications, customer support interactions, and any other channel through which you interact with ph963.

2 Personal Data We Collect

ph963 collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Residential address in the Philippines;
• Email address and mobile number;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

• Copies of valid Philippine government-issued identification (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID, PRC ID, voter's ID);
• Selfie or liveness check images submitted during verification;
• Proof of payment method (e.g., screenshot of GCash account or bank account details).

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references;
• GCash account reference numbers, bank account details (account name and last digits only), or debit card details (card type and last four digits only);
• Bonus and promotional credit history;
• Account balance history.

2.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, outcomes, and session duration;
• Responsible gaming tool usage (deposit limits, session limits, self-exclusion records);
• Bonus wagering progress.

2.5 Technical and Device Data

• IP address and approximate geolocation (country and region level);
• Device type, operating system, and browser information;
• Session identifiers and authentication tokens;
• Platform usage logs and error reports.

2.6 Communications Data

• Records of your interactions with ph963 customer support, including live chat transcripts and email correspondence;
• Feedback and survey responses submitted voluntarily.

3 How We Collect Your Data

ph963 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically — through cookies, web beacons, and server logs when you access and use the Platform (see Section 7 for details);
• From third-party service providers — including identity verification providers, payment processors (GCash, PayMaya, banks), and fraud detection services, where necessary to verify your identity or process transactions;
• From publicly available sources — where permitted by law, such as public records used to verify identity or detect fraud.

4 Why We Use Your Personal Data

ph963 uses your personal data for the following purposes:

ph963 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have given explicit consent.

5 Legal Basis for Processing

ph963 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to register your account, verify your identity, process transactions, and provide gaming services under our Terms and Conditions;
• Legal obligation — processing required to comply with applicable Philippine laws and regulations, including anti-money laundering obligations, PAGCOR-aligned operational requirements, and tax reporting;
• Legitimate interests — processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights;
• Consent — processing for optional purposes such as marketing communications and non-essential cookies, where you have given clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

6.1 Service Providers

ph963 shares personal data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Identity verification and KYC providers;
• Payment processors — GCash, PayMaya (Maya), and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank);
• Cloud hosting and infrastructure providers;
• Customer support platform providers;
• Fraud detection and cybersecurity service providers;
• Game content providers whose games are available on the Platform.

All service providers are contractually required to process your data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws.

6.2 Regulatory and Legal Disclosure

ph963 may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies — including PAGCOR and the Anti-Money Laundering Council (AMLC) — where required or permitted by Philippine law, including in response to lawful requests, court orders, or to protect the rights, property, or safety of ph963, its players, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ph963's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

6.4 No Sale of Data

ph963 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Full stop.

7 Cookies and Tracking Technologies

7.1 What We Use

ph963 uses cookies and similar tracking technologies (such as web beacons and local storage) on the Platform. These technologies help us operate the Platform, remember your preferences, keep your session secure, and understand how players use our services.

7.2 Types of Cookies

• Strictly necessary cookies — essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core Platform functionality;
• Functional cookies — remember your preferences such as language settings and responsible gaming tool configurations;
• Analytics cookies — help us understand how players navigate the Platform so we can improve the user experience. Data collected is aggregated and anonymised where possible;
• Marketing cookies — used to deliver relevant promotional content. These are only set with your consent and can be withdrawn at any time through your cookie preferences.

7.3 Managing Cookies

You can manage your cookie preferences through the cookie settings panel available on the Platform. You may also configure your browser to block or delete cookies, though doing so may affect the functionality of the Platform. Withdrawing consent for non-essential cookies will not affect your ability to use core Platform features.

8 Data Retention

ph963 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

When personal data is no longer required, ph963 will securely delete or anonymise it in accordance with our data disposal procedures. Anonymised data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

9 Data Security

ph963 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit — all data transmitted between your device and the ph963 Platform is encrypted using TLS (Transport Layer Security) protocols;
• Encryption at rest — sensitive personal data stored on ph963 servers is encrypted using AES-256 or equivalent standards;
• Access controls — access to personal data is restricted to authorised ph963 personnel and service providers on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Regular security assessments — ph963 conducts periodic vulnerability assessments and penetration testing to identify and remediate security weaknesses;
• Incident response — ph963 maintains a documented data breach response plan and will notify affected players and the National Privacy Commission in accordance with legal requirements in the event of a qualifying breach.

10 Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph963:

• Right to be informed — you have the right to know what personal data ph963 collects about you and how it is used, as set out in this Privacy Policy;
• Right of access — you may request a copy of the personal data ph963 holds about you, along with information about how it is processed;
• Right to rectification — you may request correction of any inaccurate or incomplete personal data. You can update most account information directly through your account settings;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph963's legal retention obligations;
• Right to data portability — you may request a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to object — you may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to ph963's overriding legal obligations;
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph963 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact ph963's Data Protection Officer using the contact details in Section 14. ph963 will respond to all data rights requests within thirty (30) days of receipt, or within such extended period as permitted by law where the request is complex or numerous.

11 Children's Privacy and the 21+ Requirement

ph963 is strictly an adult gaming platform. Under Philippine gaming regulations, players must be at least 21 years of age to register and use the Platform. ph963 does not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step in the ph963 registration and KYC process. Where ph963 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, ph963 will immediately close the associated account, delete the personal data collected, and return any deposits to the payment source where technically feasible.

If you are a parent or guardian and believe that a minor has registered on ph963, please contact our support team immediately at the email address provided in Section 14.

12 Cross-Border Data Transfers

ph963 primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting providers or international game content providers — ph963 ensures that such transfers are made in compliance with the Data Privacy Act of 2012 and its implementing rules.

Specifically, ph963 ensures that cross-border transfers are made only to countries or organisations that provide an adequate level of data protection, or where appropriate safeguards are in place, such as binding contractual clauses that impose data protection obligations equivalent to those applicable in the Philippines.

13 Updates to This Privacy Policy

ph963 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes to this policy, we will notify registered players by email and/or by posting a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy periodically. Your continued use of the Platform following the effective date of any update constitutes your acknowledgment of the revised policy.

If you disagree with any changes to this Privacy Policy, you may close your account and request deletion of your personal data, subject to ph963's legal retention obligations as described in Section 8.

14 Contact Us and Data Protection Officer

ph963 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us through the following channels:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the ph963 Platform
• Response Time: ph963 aims to respond to all privacy-related enquiries within 5 business days and to formal data rights requests within 30 days.

If you are not satisfied with ph963's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.