65ph Privacy Policy — How We Handle Your Personal Data
At 65ph, your privacy is not an afterthought. This Privacy Policy explains exactly what personal information 65ph collects, why we collect it, how it is used, who it may be shared with, and what rights you have as a Filipino data subject under Philippine law.
Our Privacy Commitments to You
Six core promises 65ph makes to every registered player regarding the handling of personal information.
Fully Philippine Law Compliant
65ph processes your personal data in strict compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and the implementing rules of the National Privacy Commission of the Philippines.
Purpose Limitation
65ph collects only the personal data necessary for specific, declared purposes — account management, KYC verification, payment processing, and regulatory compliance. We do not collect data speculatively.
Security by Design
Your 65ph account data is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access controls, intrusion detection systems, and regular security audits are maintained continuously.
No Unauthorised Selling of Data
65ph does not sell, rent, or trade your personal information to third-party marketers. Data is shared only with licensed service providers and regulatory authorities as described in this Privacy Policy.
Your Rights Are Respected
As a data subject under Philippine law, you have the right to access, correct, erase, object to, and port your personal data held by 65ph. These rights are exercisable at any time through your account settings or by contacting our DPO.
Defined Retention Periods
65ph does not retain your personal data indefinitely. Retention periods are tied to legal and regulatory obligations — PAGCOR and AMLA requirements set the minimum retention timelines, after which data is securely deleted.
1 About This Privacy Policy
This Privacy Policy ("Policy") describes how 65ph ("65ph," "we," "us," "our") collects, uses, stores, processes, discloses, and protects personal information obtained from players, visitors, and users ("you," "your," "Data Subject") of the online gaming platform accessible at 65ph.cam ("Platform").
This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR") as administered by the National Privacy Commission ("NPC") of the Philippines. It supplements the 65ph Terms and Conditions available at 65ph.cam/terms-conditions.
By registering a 65ph account or continuing to use the 65ph platform, you acknowledge that you have read, understood, and agree to the collection and processing of your personal information as described in this Policy. If you do not agree, you must discontinue use of the Platform and may request account closure in accordance with the Terms and Conditions.
2 Data Controller & Data Protection Officer
For the purposes of the Philippine Data Privacy Act of 2012, 65ph acts as the Personal Information Controller ("PIC") in respect of all personal data collected through the Platform. 65ph has appointed a Data Protection Officer ("DPO") registered with the National Privacy Commission in accordance with NPC Advisory Opinion requirements.
The 65ph Data Protection Officer is responsible for overseeing this Policy, handling data subject rights requests, managing data breach notifications, and ensuring ongoing compliance with the DPA and NPC issuances. You may contact the 65ph DPO directly via the contact details in Section 15 of this Policy.
3 Personal Data We Collect
65ph collects the following categories of personal data from players and platform users. Collection is limited to what is necessary for the specific purposes described in Section 5 of this Policy.
| Data Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Registration & KYC |
| Contact Data | Philippine mobile number, email address, residential address | Registration |
| Verification Documents | National ID, Passport, Driver's License, UMID, Voter's ID | KYC Verification |
| Financial Data | GCash account number, Maya account number, BPI/BDO account name, transaction records | Deposit & Withdrawal |
| Account Activity Data | Login timestamps, game history, bet amounts, win/loss records, bonus usage | Ongoing platform use |
| Technical Data | IP address, device type, browser type, operating system, session duration | Automatic — on access |
| Communications Data | Live chat transcripts, support email content, survey responses | When you contact support |
| Preference Data | Marketing opt-in status, language preference, responsible gaming settings | Account settings |
65ph does not collect sensitive personal information as defined under Section 3(l) of the DPA — such as religious beliefs, health data, political affiliations, or biometric data — unless specifically required by PAGCOR or other applicable Philippine regulatory authority for a stated compliance purpose, in which case separate consent will be sought.
4 How We Collect Your Personal Data
65ph collects personal information through the following means:
- Direct Collection: Information you actively provide when registering a 65ph account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to surveys.
- Automated Collection: Technical and device data collected automatically when you access the 65ph platform, including IP address, browser type, pages visited, session duration, and device identifiers — collected via cookies, server logs, and similar tracking technologies described in Section 7.
- Payment Processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, and other payment service providers when you initiate a financial transaction on the Platform.
- Identity Verification Partners: Confirmation data received from KYC verification service providers who assist 65ph in verifying the authenticity of identity documents submitted by players during registration.
- Regulatory Sources: Data received from PAGCOR, the Anti-Money Laundering Council ("AMLC"), or other Philippine government authorities in connection with regulatory compliance obligations.
5 Purpose of Processing & Legal Basis
65ph processes your personal data only for specific, legitimate purposes. The following table sets out the primary processing activities, their purposes, and the legal basis under the DPA upon which each activity relies:
| Processing Purpose | Legal Basis (DPA) |
|---|---|
| Account registration and authentication | Performance of contract (Sec. 12[b]) |
| KYC identity verification | Legal obligation — PAGCOR / AMLA (Sec. 12[c]) |
| Processing deposits and withdrawals | Performance of contract (Sec. 12[b]) |
| Anti-money laundering monitoring and reporting | Legal obligation — R.A. 9160 (Sec. 12[c]) |
| Fraud detection and prevention | Legitimate interests (Sec. 12[f]) |
| Responsible gaming monitoring and interventions | Legal obligation / Legitimate interests (Sec. 12[c][f]) |
| Customer support and dispute resolution | Performance of contract (Sec. 12[b]) |
| Platform improvement and analytics | Legitimate interests (Sec. 12[f]) |
| Marketing communications | Consent (Sec. 12[a]) — opt-in only |
| Regulatory reporting to PAGCOR and NPC | Legal obligation (Sec. 12[c]) |
6 Sharing Your Personal Data
65ph does not sell, trade, or rent your personal information to third parties for commercial marketing purposes. Your personal data may be disclosed to the following categories of recipients, strictly to the extent necessary for the stated purpose:
- PAGCOR: As 65ph's licensing authority, PAGCOR may require access to player data for audit, regulatory review, and compliance monitoring purposes. Such disclosure is mandatory under 65ph's operating license.
- Anti-Money Laundering Council (AMLC): 65ph is required under Republic Act No. 9160 and its amendments to report covered and suspicious transactions to the AMLC. This may include player identity and transaction records.
- Payment Service Providers: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, Metrobank, and other licensed payment processors receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own BSAP-regulated privacy frameworks.
- KYC Verification Partners: Licensed third-party identity verification providers who assist 65ph in verifying documents submitted during the KYC process.
- Game Content Providers: Third-party game studios whose titles are offered on the 65ph platform may receive anonymised or pseudonymised gameplay data for game performance analytics.
- IT Infrastructure Providers: Cloud hosting, cybersecurity, and technology service providers engaged by 65ph who access data solely for platform operation and maintenance purposes under strict contractual data processing agreements.
- Courts and Law Enforcement: Where required by valid legal process, court order, or directive from any competent Philippine government authority.
7 Cookies & Tracking Technologies
The 65ph platform uses cookies and similar tracking technologies to support platform functionality, improve player experience, and collect analytical data. The following categories of cookies are used on 65ph.cam:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing your ability to use the 65ph platform.
- Functional Cookies: Remember your preferences — such as language selection and responsible gaming settings — across sessions. Disabling these may reduce platform functionality.
- Analytical Cookies: Collect anonymised data about how players use the 65ph platform — pages visited, features used, and error logs — to help us improve the product. No personally identifiable information is included in analytical data sets.
- Marketing Cookies: Used only where you have provided explicit opt-in consent to receive personalised marketing communications from 65ph. You may withdraw this consent at any time through your account settings.
You may manage cookie preferences through your browser settings. Note that disabling all cookies may affect your ability to log in or use certain features of the 65ph platform. 65ph does not use third-party advertising network cookies or tracking pixels for external advertising campaigns.
8 Data Security Measures
65ph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- 256-bit Transport Layer Security (TLS) encryption for all data transmitted between your device and the 65ph platform.
- AES-256 encryption for personally identifiable data and financial records stored at rest on 65ph servers.
- Role-based access controls ensuring that 65ph staff can only access player data necessary for their specific job function.
- Multi-factor authentication required for all 65ph administrative system access.
- Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms.
- Intrusion detection and prevention systems monitoring the 65ph infrastructure continuously.
- Secure data centre facilities with physical access controls, CCTV, and environmental monitoring.
9 Data Retention Periods
65ph retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
- Account and Identity Data: Retained for the duration of your active 65ph account plus five (5) years following account closure, in compliance with PAGCOR licensing requirements and AMLA record-keeping obligations under Republic Act No. 9160.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under AMLA implementing regulations.
- KYC Verification Documents: Retained for five (5) years following the end of the player relationship or the date of last transaction, whichever is later.
- Game Activity and Betting Records: Retained for three (3) years from the date of activity for platform integrity and dispute resolution purposes.
- Customer Support Communications: Retained for two (2) years from the date of the last communication in each support case.
- Technical and Device Logs: Retained for ninety (90) days, after which they are aggregated and anonymised.
- Marketing Consent Records: Retained for three (3) years from the date of consent or until you withdraw consent, whichever is earlier.
Upon expiry of the applicable retention period, 65ph will securely delete or anonymise personal data in accordance with NPC-approved data disposal procedures.
10 Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 65ph. These rights may be exercised at any time by submitting a written request to the 65ph Data Protection Officer using the contact details in Section 15:
Right to Access
Request a copy of all personal data 65ph holds about you, the purposes for which it is processed, and the recipients with whom it has been shared.
Right to Rectification
Request correction of any inaccurate, incomplete, or outdated personal data held in your 65ph account without undue delay.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to mandatory PAGCOR and AMLA retention requirements.
Right to Object
Object to the processing of your personal data for direct marketing purposes or processing based on 65ph's legitimate interests where your interests override ours.
Right to Data Portability
Receive a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another controller where technically feasible.
Right to Restriction
Request that 65ph restrict the processing of your personal data while a correction request or objection is being assessed and resolved.
Right re: Automated Decisions
Request human review of any significant decisions made by 65ph's automated systems solely on the basis of your personal data, such as account risk assessments.
Right to File a Complaint
If you believe 65ph has violated your data privacy rights, you may file a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.
11 Children's Privacy
The 65ph platform is strictly intended for individuals aged twenty-one (21) years and above, in accordance with PAGCOR regulations governing casino-style online gambling in the Philippines. 65ph does not knowingly collect, process, or store personal data of minors under the age of 21.
If 65ph becomes aware that personal data has been collected from an individual below the age of 21, that account will be immediately suspended, all associated balances forfeited in accordance with the Terms and Conditions, and the personal data deleted from 65ph's systems within thirty (30) days, subject only to mandatory legal retention obligations. Parents or guardians who believe a minor has registered on the 65ph platform should contact the DPO immediately using the contact details in Section 15.
12 Cross-Border Data Transfers
Where 65ph engages third-party service providers — including game content providers, cloud infrastructure operators, or KYC verification partners — who are located outside the Philippines, personal data may be transferred internationally. Such transfers are conducted only where adequate data protection standards are ensured through one of the following safeguards:
- The recipient country has been recognised by the NPC as providing an adequate level of data protection;
- Standard contractual clauses approved by the NPC have been incorporated into the data processing agreement with the recipient; or
- The transfer is necessary for the performance of a contract to which the Data Subject is a party.
A list of countries to which 65ph transfers personal data internationally, and the safeguards in place, is available upon written request to the 65ph DPO.
13 Marketing Communications
65ph will send you marketing communications — including promotional offers, bonus notifications, and platform news — only where you have provided explicit opt-in consent during registration or through your account settings. Marketing consent is entirely optional and is not a condition of using the 65ph platform.
You may withdraw marketing consent at any time by:
- Updating your communication preferences in the "Notifications" section of your 65ph account settings;
- Clicking the unsubscribe link included in any marketing email sent by 65ph; or
- Submitting a written opt-out request to the 65ph DPO via email.
Withdrawal of marketing consent will be processed within five (5) business days. Please note that withdrawal of marketing consent does not affect service communications — 65ph will continue to send you transactional messages such as deposit confirmations, withdrawal notifications, and security alerts regardless of marketing opt-out status, as these are necessary for account operation.
14 Changes to This Privacy Policy
65ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC regulatory guidance, PAGCOR requirements, or 65ph's internal data processing practices. Material changes to this Policy will be communicated to registered players by email and through a prominent notice on the 65ph platform at least fourteen (14) days before the changes take effect.
The "Effective Date" at the top of this Policy indicates the date on which the current version came into force. The most current version of this Privacy Policy is always accessible at 65ph.cam/privacy-policy. Your continued use of the 65ph platform following the effective date of an amended Policy constitutes your acceptance of the revised terms. Where changes require fresh consent under the DPA, 65ph will seek such consent separately before continuing to process the relevant data.
15 Contact Us & Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights, you may contact the 65ph Data Protection Officer through the following channels:
- Email: [email protected] (mark your subject line: "Data Privacy Request — [Your Name]")
- Live Chat: Available 24 hours a day, 7 days a week from within your 65ph account dashboard or directly at 65ph.cam
- FAQ: Guidance on common privacy questions is available at 65ph.cam/faq
65ph will acknowledge receipt of data subject rights requests within three (3) business days and provide a substantive response within fifteen (15) business days, or such longer period as permitted under the DPA where the request is complex or voluminous. If you are not satisfied with 65ph's response, you have the right to escalate your complaint directly to the National Privacy Commission of the Philippines.
Your Data Is Safe at 65ph
Now that you know how 65ph protects your personal information, you can enjoy the platform with confidence. Join over 500,000 Filipino players on the only PAGCOR-regulated casino built from the ground up for the Philippines. For players aged 21 and above only.