ph767 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by ph767 in connection with the operation of the ph767 online gaming platform accessible at ph767.club, including all associated services, account management functions, customer support interactions, payment processing, and marketing communications.

The data controller responsible for your personal data under this Policy is the legal entity operating ph767 under a valid PAGCOR license for online gaming in the Republic of the Philippines (referred to throughout this document as "ph767", "the Company", "we", "us", or "our").

This Policy is drafted in compliance with Republic Act 10173, the Data Privacy Act of 2012 of the Philippines (DPA), its Implementing Rules and Regulations (IRR), the issuances of the National Privacy Commission (NPC), and the data governance requirements of PAGCOR applicable to licensed online gaming operators in the Philippines.

This Policy should be read together with the ph767 Terms & Conditions, which governs your overall use of the platform, and the ph767 Responsible Gaming Policy. In the event of any inconsistency between this Policy and the Terms & Conditions on a data privacy matter, this Policy shall prevail.

ph767 collects the following categories of personal data in the course of operating the platform and maintaining player accounts:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued Philippine identification document;
• Date of birth (for age verification — minimum 21 years as required by PAGCOR);
• Registered Philippine mobile number;
• Email address (if provided during registration or account management);
• Current residential address within the Philippines.

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (Passport, UMID, Driver's License, SSS ID, PhilHealth ID, Voter's ID, or similar);
• Proof of current residential address (utility bills, bank statements, or similar documents issued within the past three months);
• Selfie photographs submitted for biometric document verification purposes.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references;
• GCash and Maya account references (mobile numbers registered to your e-wallets);
• Bank account details provided for bank transfer withdrawals (account name and number only — full bank credentials are never collected);
• Wallet balance history and bonus credit and debit records.

2.4 Gaming & Activity Data

• Complete wagering history, including game type, stake, outcome, and timestamp for every bet placed on ph767;
• Session login and logout timestamps and duration;
• Responsible gaming settings and self-imposed limits configured in your account;
• Customer support interaction records, including Live Chat transcripts and email correspondence.

2.5 Technical & Device Data

• IP address at time of login and during active sessions;
• Device type, operating system version, and browser type;
• Geolocation data (country/region level, used to verify Philippine access and compliance with jurisdiction restrictions);
• Session identifiers, authentication tokens, and cookie data (see Section 6).

ph767 collects personal data through the following means:

3.1 Directly from You

The majority of personal data ph767 holds is provided directly by you during the account registration process, KYC identity verification, deposit and withdrawal requests, promotional claim submissions, customer support interactions, and responsible gaming tool configuration.

3.2 Automatically During Platform Use

Technical and device data — including IP addresses, device information, session timestamps, and gaming activity records — is collected automatically through the operation of the ph767 platform. This data is inherent to the provision of the service and cannot be opt-out of without discontinuing use of ph767.

3.3 From Third-Party Payment Providers

When you make a deposit or withdrawal through GCash, Maya, BPI, BDO, or another integrated payment method, ph767 receives transaction confirmation data from the relevant payment provider. This data is limited to what is necessary to confirm the transaction — ph767 does not receive your full payment credentials from any third-party provider.

3.4 From Identity Verification Services

ph767 may use third-party KYC and identity verification service providers to assist in verifying the authenticity of identification documents submitted by players. These providers process identity data solely on ph767's instructions and are bound by data processing agreements that require compliance with the Philippine Data Privacy Act.

Under the Philippine Data Privacy Act, ph767 relies on the following lawful bases for processing your personal data:

ph767 uses your personal data exclusively for the following purposes:

• Account creation and maintenance: To create, manage, and secure your ph767 account, including authentication, password recovery, and account notifications;
• Identity verification: To verify your identity and age (21+) as required by PAGCOR and to comply with the Philippine AMLA and related financial crime prevention legislation;
• Payment processing: To facilitate deposits and withdrawals via GCash, Maya, bank transfer, and other integrated Philippine payment methods;
• Game and transaction records: To maintain accurate records of all wagers and transactions on your account, as required for regulatory compliance and in fulfilment of your entitlement to access your account history;
• Fraud and abuse prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct;
• Responsible gaming: To monitor gaming patterns, administer self-imposed player limits, enforce self-exclusion periods, and fulfil PAGCOR's player protection requirements;
• Customer support: To respond to and resolve your queries, complaints, and requests via Live Chat, email, or other support channels;
• Legal and regulatory compliance: To comply with PAGCOR regulatory obligations, National Privacy Commission requirements, Philippine court orders, law enforcement requests, and applicable tax obligations;
• Platform improvement: To analyse aggregated, anonymised usage data to improve the ph767 platform, identify technical issues, and enhance the player experience;
• Marketing (with consent): To send promotional offers, bonus notifications, and gaming updates to players who have opted in to receive such communications.

ph767 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and analyse usage patterns. The following types of cookies are used:

6.1 Strictly Necessary Cookies

These cookies are essential for the ph767 platform to function. They maintain your authenticated login session, store your regional preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without rendering the platform non-functional.

6.2 Functional Cookies

These cookies remember your preferences and settings — such as your preferred game category, language selection, and responsible gaming notification settings — to provide a more personalised experience on subsequent visits.

6.3 Analytics Cookies

ph767 uses anonymised analytics to understand how players interact with the platform — which pages are most visited, where technical errors occur, and how navigation flows are used. This data is aggregated and does not identify individual players. Analytics cookies can be opted out of through your browser settings.

ph767 does not use third-party advertising cookies or cross-site tracking technologies that share your ph767 activity with external advertising networks. Your gaming behaviour on ph767 is not shared with social media platforms or advertising exchanges.

ph767 does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited circumstances:

7.1 Payment Processors

Transaction data is shared with integrated Philippine payment providers — including GCash, Maya, BPI, BDO, and others — solely to facilitate the processing of deposits and withdrawals. These providers operate under their own privacy policies and are responsible for data they process independently.

7.2 PAGCOR and Regulatory Authorities

ph767 is required by PAGCOR's licensing conditions to submit certain player activity data to PAGCOR on a regular or ad-hoc basis. This reporting is a mandatory condition of ph767's operating license and is not subject to player consent. ph767 may also disclose data to other Philippine regulatory authorities, including the Anti-Money Laundering Council (AMLC), where legally required.

7.3 Law Enforcement

ph767 will disclose personal data to Philippine law enforcement agencies, courts, or other government bodies when required to do so by a valid legal order, subpoena, or court judgment. Where legally permissible, ph767 will notify affected players of such disclosures.

7.4 Identity Verification Service Providers

KYC document data may be shared with licensed third-party identity verification providers operating as data processors on ph767's behalf. These providers are contractually bound to process data only for identity verification purposes and to maintain security standards equivalent to those required by the Philippine Data Privacy Act.

7.5 Professional Advisers

ph767 may share data with legal, financial, or technical advisers under binding confidentiality obligations where necessary for the operation of the business, such as in the context of legal proceedings or regulatory investigations.

ph767 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

Where data must be retained for legal or regulatory purposes after account closure, it is held in restricted-access archives and used only for the specific retention purpose. It is not used for marketing, profiling, or any active platform function during this period.

ph767 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and ph767 servers;
• Encryption at rest for sensitive stored data, including identity documents and financial records;
• Hashed and salted password storage — ph767 staff are technically unable to view your account password in plain text;
• Two-factor authentication (2FA) available and strongly recommended for all player accounts;
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of ph767's platform and infrastructure;
• Automated fraud and anomaly detection systems that monitor for suspicious account activity in real time;
• Secure data deletion procedures for personal data that has reached the end of its retention period.

While ph767 employs industry-standard security measures, no online platform can guarantee absolute security. Players are responsible for maintaining the security of their own devices and ph767 login credentials. If you suspect that your ph767 account has been compromised, contact support immediately via Live Chat.

Under the Philippine Data Privacy Act of 2012, you have the following rights as a data subject. ph767 respects and facilitates the exercise of each of these rights:

Age verification is a mandatory step in the ph767 KYC process. Where ph767 discovers or has reasonable grounds to suspect that personal data belonging to an individual under 21 years of age has been collected — whether through deliberate misrepresentation or otherwise — the following steps will be taken immediately:

• The associated ph767 account will be suspended pending investigation;
• All personal data collected will be reviewed and, where not required for legal or PAGCOR reporting obligations, deleted;
• Any real-money gaming activity conducted will be investigated and may be reported to PAGCOR;
• Any deposited funds may be refunded subject to verification of the source of funds and identity of the depositor.

If you have reason to believe that an individual under 21 years of age has registered a ph767 account, please contact ph767 support immediately at [email protected].

ph767 processes and stores the majority of player data within the Philippines or in data centres operating under contractual arrangements that require equivalent data protection standards. Where personal data is transferred outside the Philippines — for example, to cloud infrastructure providers or KYC verification services with overseas processing capabilities — ph767 ensures that such transfers comply with the cross-border transfer requirements of the Philippine Data Privacy Act.

Cross-border transfers are permitted only where:

• The receiving jurisdiction provides an adequate level of data protection as determined by the NPC; or
• Appropriate safeguards are in place through data processing agreements containing standard contractual clauses approved by the NPC; or
• The transfer is necessary for the performance of a contract between you and ph767 (e.g., processing an international payment).

Players may request information about the specific cross-border transfers relevant to their personal data by contacting ph767's Data Protection Officer.

ph767 will only send you promotional offers, bonus notifications, and gaming updates where you have provided explicit, opt-in consent to receive such communications. Consent is obtained during the account registration process or through your account notification preferences after login.

You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in your ph767 account settings;
• Clicking the unsubscribe link in any marketing email from ph767; or
• Contacting ph767 support via Live Chat or at [email protected] with a request to be removed from marketing communications.

Withdrawal of marketing consent does not affect the lawfulness of marketing communications sent before withdrawal, nor does it affect ph767's ability to send you essential account and transactional communications (such as deposit confirmations, withdrawal notifications, security alerts, and KYC requests) that are necessary for the operation of your account.

In the event of a personal data breach that is likely to result in significant harm or negative consequences to any ph767 player, ph767 will:

• Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with the NPC's breach notification regulations;
• Notify affected players without undue delay where the breach is likely to result in significant harm, providing clear information about the nature of the breach, the categories and approximate number of data subjects and personal data records affected, and the measures being taken to address the breach;
• Take immediate steps to contain the breach, assess the impact, and implement remedial measures to prevent recurrence.

ph767 maintains an internal breach response protocol and incident register as required by the NPC's data breach management guidelines.

ph767 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. When material changes are made, ph767 will:

• Update the "Last Updated" date at the top of this document;
• Publish the revised Privacy Policy on ph767.club;
• Where practicable, notify registered players via in-platform notification or to their registered email address.

Your continued use of ph767 following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Privacy Policy, you should discontinue your use of ph767 and may request account closure. We encourage you to review this Privacy Policy periodically.

ph767 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act. You may contact the DPO for any privacy-related queries, data subject rights requests, or concerns regarding ph767's data practices:

• Email: [email protected] — use the subject line "Privacy / DPO" for privacy-related correspondence;
• Live Chat: Available 24/7 via ph767.club — our support team can escalate privacy matters to the DPO;
• Postal Address: As registered with PAGCOR — details available upon verified request to the DPO.

If your concern is not resolved to your satisfaction by the ph767 DPO, you have the right to escalate to the National Privacy Commission of the Philippines, which has jurisdiction over data privacy complaints against entities operating in the Philippines.