ph963 Privacy Policy — How We Collect, Use, and Protect Your Personal Information

1.1  This Privacy Policy ("Policy") describes how ph963 ("the Platform", "we", "us", "our") collects, uses, processes, stores, shares, and protects the personal information of individuals who access, register on, or otherwise interact with the ph963 website located at ph963.vip and its associated services.

1.2  This Policy applies to all personal data processed by ph963 in connection with your use of the Platform, including data provided during account registration, identity verification, payment transactions, customer support interactions, and general gameplay activity.

1.3  This Policy is to be read in conjunction with ph963's Terms and Conditions, which govern the contractual relationship between ph963 and registered players. In the event of any conflict between this Policy and the Terms and Conditions on privacy-related matters, this Policy shall prevail.

1.4  This Policy does not apply to third-party websites or services that may be referenced on the ph963 Platform. ph963 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external entities. We encourage you to review the privacy policies of any third-party service you use in connection with ph963.

1.5  This Policy is written and maintained in English. In the event of any translation, the English version shall be the authoritative version.

2.1  ph963 acts as the Personal Information Controller (PIC) with respect to the personal data it collects and processes in connection with the operation of the ph963 Platform. As PIC, ph963 is responsible for determining the purposes and means by which your personal data is processed.

2.2  ph963 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and related implementing rules and regulations. The DPO can be reached through the contact details provided in Section 15 of this Policy.

2.3  Where ph963 engages third-party processors — such as payment processors, KYC verification providers, and cloud infrastructure services — ph963 ensures that appropriate data processing agreements are in place requiring those processors to handle personal data only on ph963's documented instructions and in compliance with applicable data privacy law.

3.1  ph963 collects personal data from you directly, automatically through your use of the Platform, and in some cases from third-party sources such as identity verification providers. The categories of personal data we collect include:

3.2  Sensitive Personal Information. ph963 may collect sensitive personal information within the meaning of the Data Privacy Act where it is strictly necessary — for example, identification documents submitted during KYC verification may contain information such as nationality or physical characteristics. ph963 handles all sensitive personal information with heightened security measures and processes it only for the specific purpose for which it was collected.

3.3  Voluntary Information. You may, from time to time, provide additional information voluntarily — such as when completing player surveys, providing feedback, or participating in promotions. This information is processed only for the stated purpose of the activity for which it was provided.

4.1  ph963 processes your personal data only for specific, legitimate, and declared purposes. The primary purposes for which ph963 processes your personal data are:

• Account Registration and Management: To create, maintain, and administer your ph963 player account, including authenticating your identity upon login and managing your account settings.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR licensing requirements and applicable anti-money laundering regulations in the Philippines.
• Payment Processing: To process your deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, USDT TRC20, and Coins.ph, and to maintain accurate financial records of all transactions on your account.
• Gaming Services: To provide access to ph963's game catalog, track game activity and outcomes, calculate and credit winnings, apply bonus credits, and maintain complete and accurate records of all wagering activity.
• Responsible Gaming Compliance: To enforce deposit limits, loss limits, session controls, cool-off periods, and self-exclusion restrictions that you or ph963 have placed on your account, and to detect patterns of play that may indicate problem gambling.
• Customer Support: To identify you when you contact ph963 support, to understand and resolve your queries, complaints, or disputes, and to maintain records of support interactions.
• Legal and Regulatory Compliance: To comply with applicable Philippine law, PAGCOR regulatory requirements, and anti-money laundering obligations, including record-keeping and mandatory reporting duties.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct on the Platform.
• Platform Improvement: To analyze aggregated usage data to improve the functionality, performance, and user experience of the ph963 Platform.
• Promotional Communications: Where you have provided consent or where a legitimate interest applies, to send you information about ph963 promotions, bonuses, and new games relevant to your interests. You may opt out of marketing communications at any time.

4.2  ph963 will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your separate consent or establishing another lawful basis for such processing.

5.1  ph963 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Performance of Contract: Processing is necessary for the performance of the player account agreement between you and ph963 — including account operation, game access, payment processing, and customer support.
• Legal Obligation: Processing is required to comply with a legal obligation to which ph963 is subject — including KYC identity verification, PAGCOR regulatory reporting, anti-money laundering record-keeping, and age verification requirements.
• Legitimate Interests: Processing is necessary for ph963's legitimate interests in maintaining platform security, preventing fraud and money laundering, improving the Platform, and detecting prohibited conduct, provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: For processing activities not covered by the above bases — particularly direct marketing communications — ph963 relies on your consent. You may withdraw this consent at any time by contacting ph963 customer support or by using the unsubscribe function in any marketing communication.

6.1  ph963 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or any commercial entity for advertising or marketing purposes.

6.2  ph963 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Processors: GCash (Mynt – Globe Fintech Innovations, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, UnionBank, and other payment service providers integrated into the ph963 Cashier, for the purpose of processing deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Third-party providers engaged to perform identity verification, age verification, and document authentication as required by PAGCOR and anti-money laundering regulations.
• Game Providers: Licensed third-party game providers (such as Evolution Gaming, Pragmatic Play, PG Soft, JILI, and others) may receive limited session and authentication data necessary to facilitate your access to their games hosted on the ph963 Platform. These providers are bound by their own applicable data protection obligations.
• Cloud Infrastructure and Hosting Providers: Providers of server infrastructure, database hosting, and content delivery network services used to operate the ph963 Platform securely and reliably.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission of the Philippines, and other government authorities, where disclosure is required by law, court order, or regulatory directive.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by ph963, subject to professional confidentiality obligations.

6.3  Where ph963 shares personal data with third-party processors, appropriate contractual safeguards are implemented to ensure that such processors handle your data only on ph963's documented instructions, implement adequate security measures, and comply with applicable data privacy obligations.

7.1  ph963 uses cookies and similar tracking technologies on the ph963.vip website to operate and improve the Platform. Cookies are small text files stored on your device when you visit a website. ph963 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential to the operation of the ph963 Platform. They enable core functions such as user authentication, session management, and security features. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: These cookies enable the Platform to remember your preferences — such as language settings, game lobby filters, and responsible gaming tool configurations — to provide you with a more personalized experience.
• Analytics Cookies: ph963 uses analytics tools to collect aggregated, anonymized data about how players use the Platform — including pages visited, session duration, navigation paths, and error events. This data is used to improve Platform performance and user experience.
• Security Cookies: These cookies support ph963's fraud detection and account security systems by helping identify unusual access patterns or suspicious activity on your account.

7.2  You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the ph963 Platform from functioning correctly. Continued use of the ph963 Platform without changing your cookie settings constitutes acceptance of ph963's use of cookies as described in this Section.

8.1  ph963 implements a comprehensive set of technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and ph963's servers is protected by Transport Layer Security (TLS) encryption. The padlock icon visible in your browser's address bar confirms that your connection to ph963.vip is encrypted.
• Password Hashing: Account passwords are stored in hashed form using industry-standard cryptographic algorithms. ph963's systems do not store your password in plaintext at any point.
• Access Controls: Access to systems containing personal data is restricted to authorized ph963 personnel on a role-based, need-to-know basis. Access rights are reviewed periodically and revoked promptly when no longer required.
• Data Minimization at Infrastructure Level: Production systems are configured to expose the minimum amount of personal data necessary for each authorized function.
• Security Monitoring: ph963's systems are monitored continuously for unauthorized access attempts, anomalous activity, and potential security incidents.
• Vendor Security Assessments: Third-party processors handling personal data on ph963's behalf are subject to security assessments and contractual security obligations.

8.2  Despite ph963's security measures, no data transmission over the internet or electronic storage system is completely secure. In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected data subjects, ph963 will notify the National Privacy Commission and affected individuals in accordance with the breach notification requirements of the Data Privacy Act of 2012.

8.3  You are also responsible for the security of your ph963 account. You must keep your login credentials confidential and must notify ph963 immediately if you suspect unauthorized access to your account.

9.1  ph963 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, to satisfy applicable legal and regulatory retention requirements, and to resolve disputes or enforce agreements. The following general retention guidelines apply:

• Account Data & KYC Records: Retained for a minimum of five (5) years following account closure or last active use, as required by PAGCOR regulations and the Anti-Money Laundering Act (R.A. 9160, as amended).
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with AMLC and PAGCOR record-keeping obligations.
• Gaming Activity Logs: Retained for three (3) years following account closure, or longer where required for the resolution of an active dispute or regulatory inquiry.
• Customer Support Records: Retained for two (2) years following the resolution of the relevant support case, or longer where the matter is connected to an ongoing legal or regulatory proceeding.
• Marketing Consent Records: Retained for as long as your marketing consent remains active and for a reasonable period thereafter as evidence of the consent provided.

9.2  Upon expiry of the applicable retention period, ph963 will securely delete or anonymize your personal data in accordance with its data disposal procedures, unless applicable law requires continued retention.

10.1  As a data subject whose personal information is processed by ph963, you have the following rights under the Data Privacy Act of 2012:

• Right to Be Informed: You have the right to be informed of the existence of processing of your personal data, the purposes for which it is processed, and the recipients to whom it may be disclosed.
• Right to Access: You have the right to request confirmation from ph963 as to whether your personal data is being processed and, if so, to receive a copy of that data along with information about the nature, scope, and purposes of the processing.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by ph963. You may update certain account information directly through your ph963 Account Settings; other corrections may require submission of supporting documentation.
• Right to Erasure / Right to be Forgotten: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (where consent was the basis for processing), or where processing is unlawful. This right is subject to ph963's legal and regulatory retention obligations, which may require us to retain certain data notwithstanding your request.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on ph963's legitimate interests, or where your data is being used for direct marketing purposes. You may opt out of direct marketing communications at any time.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that such data be transmitted to another personal information controller where technically feasible.

10.2  To exercise any of the rights described above, please submit a written request to ph963's Data Protection Officer at the contact address provided in Section 15. ph963 will acknowledge your request within five (5) business days and will respond to your request within fifteen (15) business days of receipt, subject to any extensions permitted by applicable law.

10.3  You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that ph963's processing of your personal data violates the Data Privacy Act of 2012 or its Implementing Rules and Regulations.

11.1  ph963 does not knowingly collect, process, or retain personal data from individuals who are under 21 years of age. Age verification is conducted as part of the KYC process, and accounts where the account holder is found to be underage will be immediately closed and all associated data processed in accordance with applicable legal requirements.

11.2  If ph963 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will take immediate steps to delete that data from its systems, except where retention is required by applicable Philippine law.

11.3  If you are a parent or guardian and believe that your child under the age of 21 has registered an account on ph963, please contact ph963's Data Protection Officer immediately using the contact details in Section 15. ph963 will investigate and take appropriate action promptly.

12.1  In connection with the operation of the ph963 Platform, your personal data may be transferred to and processed in countries other than the Philippines — for example, where ph963 uses cloud infrastructure providers or game providers with servers located outside the Philippines.

12.2  Where such cross-border transfers occur, ph963 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012 and the regulations of the National Privacy Commission. These safeguards may include contractual data transfer agreements with the recipient entities that impose data protection obligations equivalent to those applicable in the Philippines.

12.3  ph963 will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent for such transfer.

13.1  ph963 is subject to the Anti-Money Laundering Act of 2001 (R.A. 9160), as amended by R.A. 9194, R.A. 10167, R.A. 10365, and R.A. 11521, and to the implementing regulations of the Anti-Money Laundering Council (AMLC) applicable to PAGCOR-licensed gaming operators.

13.2  In compliance with these obligations, ph963 is required to: collect and verify the identity of all players (KYC); monitor transactions for patterns indicative of money laundering or terrorist financing; maintain records of all covered and suspicious transactions; and report covered transactions and suspicious transactions to the AMLC as required.

13.3  The processing of your personal data for AML compliance purposes is mandatory and cannot be waived or objected to under data subject rights. ph963 is legally prohibited from disclosing to you whether a suspicious transaction report has been filed in relation to your account.

13.4  In addition to AMLC reporting, ph963 may be required to disclose your personal data to PAGCOR, the Bureau of Internal Revenue (BIR), or other Philippine government authorities in the exercise of their lawful regulatory, investigative, or enforcement powers.

14.1  ph963 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulations, or the National Privacy Commission's guidance.

14.2  When material changes are made to this Policy, ph963 will provide notice through one or more of the following means: a notification displayed upon your next login to ph963; an SMS notification to your registered Philippine mobile number; or an update to the "Last Updated" date at the top of this page.

14.3  We recommend that you review this Privacy Policy periodically. Your continued use of the ph963 Platform following the effective date of any revised Policy constitutes your acknowledgment of the revised terms. The current version of this Policy is always available at ph963.vip/privacy-policy.

15.1  If you have any questions, concerns, or requests relating to this Privacy Policy or to ph963's processing of your personal data, or if you wish to exercise any of your data subject rights, please contact ph963's Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link) — please include "Data Privacy Request" in your message subject
• Live Chat: Available 24/7 through the ph963.vip Platform interface — identify yourself and state that you are submitting a data privacy request
• Mailing Address: Data Protection Officer, ph963, Philippines

15.2  ph963 aims to acknowledge all data privacy requests within five (5) business days and to provide a substantive response within fifteen (15) business days. Where the complexity of the request requires additional time, ph963 will inform you of the extended timeline and the reason for the delay.

15.3  If you are not satisfied with ph963's response to your data privacy request or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines.