65ph Privacy Policy

01 Who We Are

65ph operates the online gaming platform accessible at 65ph.asia (the "Platform"). In the context of this Privacy Policy, "65ph," "we," "us," and "our" refer to the entity operating the 65ph Platform under PAGCOR authorization. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), 65ph is the personal information controller with respect to personal data collected from users of the Platform.

65ph is operated under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the regulatory oversight of PAGCOR and, for anti-money laundering purposes, the Anti-Money Laundering Council (AMLC). These regulatory frameworks impose specific data collection, retention, and reporting obligations that take precedence where they conflict with general privacy principles.

02 Data We Collect

65ph collects personal data through several channels: information you provide directly during account registration and KYC verification; data generated automatically through your use of the Platform; and, in limited circumstances, data obtained from third-party service providers acting on our behalf.

2.1 Data You Provide Directly

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — mandatory minimum 21 years under Philippine law);
• Philippine mobile number and/or email address used for account registration and two-factor authentication;
• Residential address (for KYC verification and regulatory compliance);
• Government-issued identification documents (e.g., Philippine passport, PhilSys national ID, UMID, driver's license, voter's ID) and their document numbers;
• Payment method details including GCash-registered mobile number, PayMaya account identifier, bank account details, and cryptocurrency wallet addresses where applicable;
• Any correspondence, chat logs, or documentation submitted to 65ph customer support.

2.2 Data Collected Automatically

• IP address and approximate geographic location derived from it;
• Device type, operating system, browser type and version, and screen resolution;
• Session timestamps, pages visited, game sessions played, wager amounts, and game outcomes;
• Deposit and withdrawal history, transaction amounts, and payment method used for each transaction;
• Login timestamps and device fingerprint data used for security and fraud detection purposes;
• Cookie and tracking data as described in Section 5.

2.3 Data from Third Parties

In connection with KYC and anti-fraud processes, 65ph may receive data about you from third-party identity verification providers, payment processors, and fraud detection services. This data is used solely for the purpose of verifying your identity, preventing fraud, and meeting our regulatory compliance obligations.

03 How We Use Your Data

65ph uses the personal data it collects for the following specific purposes:

04 Legal Basis for Processing

Under the Data Privacy Act of 2012, 65ph processes personal data on the following legal bases:

• Contract Performance: Processing necessary to create and manage your 65ph account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal Obligation: Processing required to comply with mandatory KYC obligations under PAGCOR's licensing conditions, anti-money laundering reporting obligations under the AMLA, and responsible gaming monitoring requirements.
• Legitimate Interest: Processing for fraud prevention, platform security, and aggregate analytics where such interests do not override your fundamental privacy rights.
• Consent: Processing for marketing and promotional communications, where we rely on your freely given, specific, and informed consent. You may withdraw marketing consent at any time without affecting the lawfulness of prior processing.

05 Cookies & Tracking Technologies

65ph uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that enable the Platform to function correctly and improve your experience. The categories of cookies used by 65ph are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Enable enhanced functionality such as remembering your language preference, last-visited game category, and display settings. Disabling these may affect your experience.
• Analytics Cookies: Used to collect anonymized, aggregated data about how players interact with the Platform — which game categories are most visited, average session durations, and device types. This data helps us improve the Platform and is not linked back to individual player accounts.
• Security and Fraud Detection Cookies: Used to detect unusual login patterns, identify devices associated with prior fraudulent activity, and protect player accounts from unauthorized access.

65ph does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing the Platform.

06 Sharing Your Data

65ph does not sell, rent, or trade your personal information. We share data only in the following limited circumstances, and only to the minimum extent required for the stated purpose:

6.1 Service Providers

65ph engages third-party service providers to support specific platform functions, including payment processing (GCash, PayMaya, BPI, BDO, Metrobank, cryptocurrency payment gateways), identity verification and KYC services, customer support platform operators, and cloud infrastructure providers. All third-party service providers are bound by written data processing agreements that prohibit use of your data for any purpose beyond the specific service they are engaged to provide.

6.2 Regulatory and Law Enforcement Authorities

65ph is required by law to share personal data with regulatory authorities including PAGCOR and the AMLC in connection with its licensing obligations and AML reporting requirements. 65ph may also be required to disclose personal data to law enforcement authorities in response to a valid legal order, warrant, or court direction issued under Philippine law. 65ph will endeavor to notify affected players of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 65ph's business, personal data held by 65ph may be transferred to the acquiring entity. Any such transfer will be subject to obligations of confidentiality and the continued protection of player data under terms at least as protective as those in this Privacy Policy. Affected players will be notified prior to their data being subject to a materially different privacy policy.

07 International Data Transfers

The 65ph Platform is operated primarily within the Philippines, and personal data is stored on servers located in the Philippines or in data centers that maintain equivalent data protection standards. Where certain service providers — including cloud infrastructure providers or game software suppliers — operate in jurisdictions outside the Philippines, 65ph ensures that appropriate safeguards are in place for any transfer of personal data to those jurisdictions.

Such safeguards include data processing agreements containing standard contractual clauses approved by the National Privacy Commission of the Philippines, and where applicable, transfers only to jurisdictions that the NPC has determined provide an adequate level of data protection.

08 Data Retention

65ph retains personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to mandatory minimum retention periods imposed by Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required under PAGCOR licensing conditions and AMLA implementing rules.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLC requirements.
• Customer support records: Retained for three (3) years from the date of each support interaction, or for the duration of any associated dispute, whichever is longer.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent to demonstrate compliance.
• Analytics data: Aggregated and anonymized analytics data may be retained indefinitely as it no longer constitutes personal data.

On expiry of the applicable retention period, personal data is securely deleted from active systems. Where complete deletion is not technically feasible within a reasonable timeframe (e.g., encrypted data in backup systems), the data is rendered inaccessible and scheduled for deletion in the next regular backup purge cycle.

09 Security Measures

65ph implements a layered security architecture to protect personal data against unauthorized access, disclosure, alteration, and destruction. Measures in place include:

• Encryption in transit: All data transmitted between your device and 65ph's servers is encrypted using TLS 1.3.
• Encryption at rest: Personal data stored on 65ph's servers is encrypted using AES-256.
• Password security: Account passwords are stored as bcrypt hashes with unique per-account salts. 65ph never stores passwords in plain text.
• Access controls: Access to personal data within 65ph is restricted to authorized personnel on a strict need-to-know basis. All access is logged and regularly audited.
• Two-factor authentication: SMS-based 2FA is available to all players and is actively encouraged. All administrative access to systems containing personal data requires 2FA.
• Anomaly detection: 65ph employs automated systems to detect unusual access patterns, login anomalies, and other indicators of potential unauthorized access.
• Penetration testing: 65ph engages third-party security specialists to conduct regular penetration tests and security audits of the platform and its supporting infrastructure.

10 Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to the personal data that 65ph holds about you:

• Right to be Informed: The right to be notified of the fact that your personal data is being or will be processed, including the purpose and extent of processing.
• Right to Access: The right to obtain a copy of the personal data 65ph holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data held by 65ph.
• Right to Erasure / Blocking: The right to request deletion or suspension of your personal data where processing is no longer necessary, or where the data was collected unlawfully. Note that this right is subject to overriding mandatory retention requirements under PAGCOR licensing and AMLA regulations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, or where processing is based on legitimate interest.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Complain: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that 65ph has processed your personal data in breach of the Data Privacy Act.

To exercise any of the above rights, please contact the 65ph Data Protection Officer as described in Section 14. 65ph will respond to all valid data subject requests within fifteen (15) calendar days of receipt. Where a request requires additional time to process, 65ph will notify you of the extended timeline and the reasons for the delay.

11 Marketing & Promotional Communications

65ph sends promotional communications — including bonus offers, game notifications, and platform updates — only to players who have opted in to receive such communications at the time of registration or through their account settings. You may withdraw your marketing consent at any time by:

• Updating your notification preferences in the 65ph account settings panel;
• Clicking the unsubscribe link included in any promotional email from 65ph; or
• Contacting 65ph customer support via live chat and requesting removal from marketing communications.

Withdrawal of marketing consent will be processed within five (5) business days. Following withdrawal, you may continue to receive transactional and account-related communications (e.g., deposit confirmations, withdrawal notifications, security alerts) as these are necessary for the operation of your account and do not require separate consent.

12 Minors

Parents and guardians are strongly encouraged to use device-level parental control software to prevent minors from accessing online gambling platforms. If you believe that a minor has registered a 65ph account using false age information, please contact 65ph support immediately so that appropriate action can be taken.

13 Changes to This Privacy Policy

65ph reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or the structure of the Platform. When material changes are made, 65ph will:

• Update the "Last Updated" date at the top of this Privacy Policy;
• Publish the updated policy on the 65ph platform;
• Where changes are significant, provide advance notice to players via their registered email address or in-platform notification prior to the changes taking effect.

Your continued use of the 65ph platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any material change to this Privacy Policy, you should discontinue use of the platform and may request voluntary account closure in accordance with the Terms and Conditions.

14 Contact & Data Protection Officer

65ph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. For any questions, concerns, data subject rights requests, or formal privacy-related complaints, please contact the 65ph DPO through the following channels:

• Live Chat: Available 24/7 within the 65ph platform. For privacy-related matters, please state that your query is directed to the Data Protection Officer.
• Email: [email protected] — responses to privacy requests within 15 calendar days.

If you are not satisfied with 65ph's response to a privacy concern or data subject rights request, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC) through its official channels.