phil163 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") sets out how phil163 ("the Operator", "we", "us", "our") collects, uses, stores, and discloses personal data obtained from individuals ("Players", "you") who access or use the phil163 online casino platform at phil163.app.

1.2 phil163 is committed to protecting the privacy and personal data of all players, particularly those based in the Philippines. We operate in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

1.3 Please read this Policy carefully alongside our Terms & Conditions. If you do not agree with how phil163 handles personal data as described herein, you should not register an account or use the Platform.

2. Data Controller

2.1 For the purposes of applicable data protection law, phil163 acts as the personal information controller in respect of the data collected through the Platform.

2.2 Our designated Data Protection Officer (DPO) can be reached through our support channel at [email protected]. Please mark your correspondence "Attention: Data Privacy" for prompt routing to the relevant team.

3. Personal Data We Collect

3.1 phil163 collects personal data at various points throughout your relationship with the Platform. The categories of data collected include:

3.1 Registration Data

• Full legal name as it appears on government-issued ID;
• Date of birth (for age verification purposes);
• Mobile number and email address;
• Residential address;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification (PhilSys ID, passport, LTO driver's licence, SSS/GSIS card, or similar);
• Selfie or liveness verification image;
• Proof of address documents where required.

3.3 Financial Data

• GCash account number, PayMaya (Maya) account details, or bank account details used for deposits and withdrawals;
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers;
• Source of funds declarations where required by AML compliance obligations.

3.4 Gameplay and Behavioural Data

• Games played, bet amounts, win/loss records, and session durations;
• Bonus and promotional activity;
• Responsible gaming tool usage (deposit limits set, self-exclusion requests).

3.5 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser;
• Login timestamps and session identifiers;
• Cookie identifiers and browsing behaviour on the Platform.

3.6 Communications Data

• Content of live chat, email, or support ticket correspondence with phil163;
• Survey responses and feedback submissions.

4. How We Use Your Personal Data

4.1 phil163 uses the personal data collected for the following purposes:

• Account management: Creating, maintaining, and securing your phil163 player account;
• Identity and age verification: Confirming you meet the 21+ age requirement and verifying your identity in accordance with PAGCOR guidelines;
• Payment processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other supported methods;
• Anti-money laundering (AML) compliance: Monitoring transactions and fulfilling reporting obligations under applicable Philippine financial crime laws;
• Fraud and abuse prevention: Detecting, investigating, and preventing unauthorized account access, bonus abuse, collusion, and other prohibited conduct;
• Customer support: Responding to your queries, complaints, and requests via live chat or email;
• Responsible gaming: Administering deposit limits, self-exclusion requests, and other player protection tools;
• Platform improvement: Analyzing aggregate gameplay and usage data to improve platform features, game selection, and user experience;
• Marketing communications: Sending promotional offers, bonus notifications, and product updates — subject to your communication preferences and applicable opt-out rights.

5. Legal Basis for Processing

5.1 Under the Philippine Data Privacy Act, phil163 processes personal data on the following legal bases:

• Contractual necessity: Processing required to create and maintain your account, process payments, and deliver gaming services;
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and NPC directives;
• Legitimate interests: Fraud prevention, platform security, and responsible gaming enforcement;
• Consent: Marketing communications and non-essential cookies, where your opt-in consent has been obtained. You may withdraw consent at any time.

6. Cookies and Tracking Technologies

6.1 phil163 uses cookies, web beacons, and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognize your browser and improve your experience.

6.2 The categories of cookies we use include:

• Strictly Necessary: Essential for login sessions, security tokens, and basic platform functionality. These cannot be disabled.
• Performance / Analytics: Aggregate statistics on how players navigate the Platform, helping us identify areas for improvement.
• Functional: Remember your language preferences, display settings, and last-used game lobby.
• Marketing: Used to deliver relevant promotional content within the Platform. Only activated with your consent.

6.3 You may control or disable non-essential cookies through your browser settings. Disabling certain cookies may affect Platform functionality.

7. Sharing Your Personal Data

7.1 phil163 does not sell or rent your personal data. We may share your data with the following categories of third parties strictly for the purposes described in this Policy:

• Payment service providers: GCash (Globe Fintech), PayMaya (Maya), BPI, BDO, Metrobank, UnionBank, and other processors necessary to execute your transactions;
• Game content providers: Licensed game studios and live dealer platform providers who supply games to the phil163 lobby, where integration requires session data;
• KYC and identity verification partners: Third-party identity verification services engaged to perform document authentication;
• Regulatory authorities: PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other Philippine government bodies, when required by law or regulatory directive;
• IT and security service providers: Cloud hosting, fraud detection, and cybersecurity vendors operating under contractual data processing agreements.

7.2 All third-party processors engaged by phil163 are contractually obligated to process personal data only as directed by phil163, maintain appropriate security measures, and comply with applicable Philippine data protection laws.

8. International Data Transfers

8.1 Some of the third-party service providers engaged by phil163 may process personal data outside the Philippines. Where such transfers occur, phil163 implements contractual safeguards consistent with NPC guidance on cross-border data flows to ensure your data receives an adequate level of protection.

8.2 Your personal data will never be transferred to a jurisdiction without appropriate safeguards in place.

9. Data Retention

9.1 phil163 retains personal data for the periods set out in the retention table in Section 3, or for longer periods where required by applicable law — for example, financial records subject to AML legislation are retained for a minimum of ten (10) years.

9.2 When your account is closed, personal data is retained in an archived state for the required retention period, after which it is securely deleted or anonymized.

10. Your Data Subject Rights

10.1 Under the Philippine Data Privacy Act, you hold the following rights in respect of your personal data held by phil163:

• Right to be Informed: The right to know what personal data phil163 holds about you and how it is processed;
• Right of Access: Request a copy of the personal data phil163 holds about your account;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal retention obligations;
• Right to Data Portability: Request your personal data in a structured, commonly used format;
• Right to Object: Object to the processing of your data for direct marketing purposes or on grounds relating to your particular situation;
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior processing.

10.2 To exercise any of these rights, contact the phil163 Data Privacy team at [email protected] with the subject line "Data Privacy Request". We will respond within thirty (30) calendar days.

11. Security Measures

11.1 phil163 implements a range of technical and organizational security measures to protect personal data, including:

• 256-bit SSL/TLS encryption on all data in transit;
• Encrypted storage of sensitive data at rest;
• Role-based access controls limiting data access to authorized personnel only;
• Regular security assessments and penetration testing;
• Multi-factor authentication for internal system access;
• Incident response procedures for detecting and responding to data breaches within the timeframes required by NPC regulations.

11.2 In the event of a personal data breach that poses a risk to your rights and freedoms, phil163 will notify the NPC within seventy-two (72) hours and will notify affected players as required by law.

12. Third-Party Links

12.1 The phil163 Platform does not include links to external third-party websites. All links on the Platform route to internal pages of phil163.app. This Policy does not apply to any third-party services accessed independently outside the Platform.

13. Minors and Age Restriction

13.1 phil163 does not knowingly collect personal data from individuals under the age of 21. If phil163 becomes aware that personal data has been collected from a minor, the account will be immediately closed, all data will be deleted to the extent permitted by law, and any funds will be returned less any applicable costs.

13.2 21+ Gambling is strictly for adults aged 21 and above only.

14. Changes to This Policy

14.1 phil163 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered players via email and/or on-site notification.

14.2 The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

15. Contact and Complaints

15.1 For privacy-related questions, data access requests, or complaints, please contact the phil163 Data Protection Officer:

• Email: [email protected] — Subject: "Data Privacy Request"
• Live Chat: 24/7 on the Platform — mention "Data Privacy" to your agent

15.2 If you believe your data privacy rights have been violated and have not received a satisfactory response from phil163, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through its official channels.