Privacy Policy — 63 php1

63 php1 operates as a PAGCOR-licensed online casino and sports betting platform serving Filipino players across the Philippines. In the course of providing gaming services, account management, payment processing, and customer support, we necessarily collect and process personal information about our registered players and website visitors.

As a company serving the Philippine market, 63 php1 is subject to and committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. We are additionally subject to PAGCOR's data handling requirements for licensed gaming operators.

This Policy is intended to be clear, direct, and readable — not buried in legal language that makes it inaccessible to the Filipino players it applies to. We want you to understand exactly what data 63 php1 holds about you, why we hold it, who we share it with (if anyone), and how you can exercise your rights over it.

Terms used in this Policy carry the following meanings:

• "Personal Information" means any information that, alone or in combination with other data, identifies or can identify an individual — as defined under Republic Act No. 10173.
• "Sensitive Personal Information" means personal information about an individual's government-issued ID numbers, financial information, or other categories designated as sensitive under Philippine law.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Subject" means you — the individual whose personal information is being collected and processed by 63 php1.
• "Personal Information Controller (PIC)" means 63 php1, which determines the purposes and means of processing your personal data.
• "Data Protection Officer (DPO)" means the designated officer at 63 php1 responsible for overseeing compliance with this Policy and applicable data privacy laws.
• "NPC" means the National Privacy Commission of the Philippines, the independent regulatory body overseeing data privacy compliance.
• "KYC" means Know Your Customer verification — the identity verification process required by PAGCOR regulations and Philippine anti-money laundering law.

63 php1 collects personal data through several channels: account registration, identity verification, payment processing, gameplay activity, and customer support interactions. The following table summarizes the categories of personal data we collect and the context in which collection occurs.

63 php1 processes your personal data only for specified, legitimate purposes. We do not sell your personal data to third parties. The following are the lawful purposes for which we process personal data:

4.1 Account Management

To create, maintain, authenticate, and administer your 63 php1 account, including processing login events, session management, password recovery, and account security alerts sent to your registered Philippine mobile number.

4.2 Identity Verification (KYC)

To verify that you meet the 21+ age requirement and are a legitimate individual as mandated by PAGCOR regulations and the Anti-Money Laundering Act. This processing is a legal obligation that we cannot fulfill without your identity data.

4.3 Payment Processing

To process deposits via GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and InstaPay, and to execute withdrawal requests to your linked Philippine payment accounts in Philippine Peso (PHP).

4.4 Regulatory Compliance

63 php1 is required by PAGCOR and Philippine anti-money laundering laws to maintain detailed transaction and player records. We are also required to report suspicious transactions to the Anti-Money Laundering Council (AMLC). This processing is a legal obligation.

4.5 Responsible Gaming

To monitor gaming patterns for indicators of problem gambling behavior and to apply any deposit limits, session limits, loss limits, or self-exclusion restrictions that you have set on your 63 php1 account.

4.6 Customer Support

To respond to your queries, process complaints, and resolve disputes relating to your 63 php1 account, transactions, or gameplay.

4.7 Security & Fraud Prevention

To detect and prevent unauthorized access, account fraud, bonus abuse, money laundering, underage gambling, and other activity that violates our Terms & Conditions or Philippine law.

4.8 Platform Improvement

To analyze aggregated, anonymized usage patterns to improve the 63 php1 platform experience, game selection, and interface design. Where analytics processing involves identifiable data, it is conducted under legitimate interest with appropriate safeguards.

Under the Philippine Data Privacy Act of 2012, 63 php1 relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to perform the contract between 63 php1 and you — specifically, to operate your account, process transactions, and provide gaming services.
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and NPC regulations.
• Legitimate Interest: Processing conducted for 63 php1's legitimate interests in fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent as the legal basis for specific processing activities (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

63 php1 shares personal data only with the categories of recipients listed below and only to the extent necessary for each specified purpose. All third parties who receive personal data from 63 php1 are contractually bound to handle it in compliance with RA 10173.

• PAGCOR: As our licensing authority, PAGCOR receives player and transaction data as required by Philippine gaming regulations and license conditions.
• Anti-Money Laundering Council (AMLC): Suspicious or threshold-crossing transactions are reported to AMLC as required by Philippine anti-money laundering law.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and card network processors receive the minimum personal and financial data necessary to execute deposits and withdrawals.
• Identity Verification Service Providers: KYC verification providers may process identity documents and selfie data on behalf of 63 php1. These providers are bound by data processing agreements and handle data solely for verification purposes.
• Platform Infrastructure Providers: Cloud hosting and IT infrastructure providers who operate under strict data processing agreements and do not access player data for any purpose other than infrastructure maintenance.
• Law Enforcement & Courts: Where required by a lawful court order, subpoena, or official Philippine government or law enforcement request, 63 php1 will disclose personal data as legally required.

63 php1 retains personal data for only as long as necessary to fulfill the purposes for which it was collected, subject to applicable legal retention requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure to meet PAGCOR and AMLC record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure in compliance with Philippine anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years in compliance with AMLC requirements and PAGCOR licensing conditions.
• Support Communications: Retained for two (2) years from the date of the interaction, unless retention is required for ongoing dispute resolution.
• Technical and Usage Logs: Retained for ninety (90) days for security monitoring purposes, then deleted or anonymized.

Following the expiry of the applicable retention period, 63 php1 will securely delete or anonymize your personal data so that it can no longer be associated with you as an identifiable individual.

63 php1 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures are designed to protect against unauthorized access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your device and the 63 php1 Platform is protected by 256-bit SSL/TLS encryption — the same standard used by Philippine banks for online banking.
• Encryption at Rest: Sensitive personal data stored in 63 php1 systems — including identity documents and financial account references — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within 63 php1 is restricted to authorized personnel on a strict need-to-know basis. Access is logged and audited regularly.
• Two-Factor Authentication: Account login on 63 php1 supports two-factor authentication using OTP sent to your registered Philippine mobile number, reducing the risk of unauthorized account access.
• Intrusion Detection: 63 php1 operates continuous intrusion detection and monitoring systems to identify and respond to security incidents promptly.
• Incident Response: In the event of a personal data breach, 63 php1 will notify the National Privacy Commission and affected Data Subjects as required by RA 10173 and NPC Circular 16-03.

63 php1 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyze platform usage patterns. Cookies are small data files placed on your device by the 63 php1 website.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the basic operation of the 63 php1 Platform, including session management and login authentication. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences — such as language and display settings — to provide a more personalized experience.
• Analytics Cookies: Used to collect anonymized data about how players use the 63 php1 Platform, which helps us improve site performance and user experience. No personally identifying information is transmitted via analytics cookies.

9.2 Cookie Control

You can control cookie behavior through your browser settings. Note that disabling strictly necessary cookies will prevent core 63 php1 functions from working correctly, including login and session maintenance. Disabling functional or analytics cookies does not affect your ability to play or transact on the Platform.

As a Data Subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by 63 php1. These rights can be exercised by contacting our Data Protection Officer using the contact information in Section 15:

If you have reason to believe that a person under the age of 21 has accessed or registered on the 63 php1 Platform, please contact our Data Protection Officer immediately using the contact details in Section 15. Protecting minors from gambling-related harm is a core responsibility of 63 php1 as a PAGCOR-licensed operator.

Certain service providers and infrastructure partners of 63 php1 may be located outside of the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, 63 php1 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under Republic Act No. 10173.

These safeguards include data processing agreements that incorporate the standard contractual clauses approved by the National Privacy Commission, or confirmation that the recipient jurisdiction maintains a comparable level of data protection. Any cross-border transfer of sensitive personal information is subject to additional scrutiny and documented justification.

If you have a complaint about how 63 php1 handles your personal data, we encourage you to contact our Data Protection Officer in the first instance using the details in Section 15 of this Policy. We will investigate your complaint and respond within a reasonable period.

If you are dissatisfied with our response, or if you wish to raise a complaint directly with the Philippine regulatory authority, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC can be reached through its official government channels.

63 php1 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC regulations, or PAGCOR requirements. Where changes are material, we will provide reasonable notice to registered players through in-platform notification or by email to your registered address before the updated Policy takes effect.

The "Effective Date" at the top of this Policy indicates when the current version came into force. We recommend reviewing this Policy periodically. Your continued use of the 63 php1 Platform after the effective date of any updated Policy constitutes your acknowledgment of the changes.

All data rights requests, privacy complaints, questions about this Policy, or requests relating to the processing of your personal data by 63 php1 should be directed to our Data Protection Officer. Please include your full registered name and account mobile number or email in all correspondence to enable prompt identification and response.