Privacy Policy – 68plusph Online Gaming Platform

1. Who We Are / Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller for all personal information processed through the 68plusph platform is 68plusph, operating under PAGCOR authorization in the Philippines.

68plusph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and Philippine data privacy law. Contact details for the DPO are provided in Section 14 of this Policy.

2. Data We Collect

2.1 Personal Data Provided Directly by You

When you register for a 68plusph account, complete KYC verification, or contact our support team, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality;
• Contact Data: Email address, Philippine mobile number, residential address (including city, province, and barangay);
• Identity Verification Data: Government-issued ID numbers (e.g., PhilSys number, passport number, driver's license number), ID document images or scans;
• Financial Data: GCash account number, PayMaya account number, bank account details (BPI, BDO, Metrobank, UnionBank), transaction history, deposit and withdrawal records;
• Account Data: Username, encrypted password, account preferences, communication opt-in status.

2.2 Data Collected Automatically

When you access the 68plusph platform, we automatically collect certain technical and behavioral data, including:

• IP address, device type, operating system, browser type and version;
• Pages visited, time spent on each page, navigation path, and referral source;
• Game session data, including games played, wager amounts, win/loss outcomes, and session duration;
• Cookie identifiers and similar tracking technologies (see Section 7).

2.3 Data from Third Parties

68plusph may receive personal data about you from third-party sources including payment processors (GCash, PayMaya), game software providers for game session verification, identity verification service providers, and fraud prevention databases where required by PAGCOR compliance obligations.

3. How We Collect Your Data

68plusph collects your personal data through the following methods:

• Direct provision: Data you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Data gathered automatically through cookies, log files, and analytics tools as you interact with the platform;
• Third-party receipt: Data shared with us by payment processors, KYC service providers, and fraud prevention partners in the course of facilitating transactions and verifying identities.

4. Legal Basis for Processing

68plusph processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the 68plusph Terms & Conditions, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws — including KYC verification, AML transaction monitoring, and AMLC reporting;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing for direct marketing communications, where you have explicitly opted in to receive such communications from 68plusph.

5. How We Use Your Data

68plusph uses your personal data for the following specific purposes:

• To create, manage, and maintain your 68plusph account;
• To verify your identity and age in accordance with PAGCOR requirements and Philippine law;
• To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and 7-Eleven 7-Connect;
• To provide customer support and respond to inquiries, disputes, and complaints;
• To detect, investigate, and prevent fraud, money laundering, cheating, and other prohibited activities;
• To fulfill mandatory AML reporting obligations to the Anti-Money Laundering Council (AMLC);
• To monitor player activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling;
• To send transactional communications (account confirmations, payment notifications, security alerts) — these are not optional as they are necessary for account operation;
• To send promotional communications where you have explicitly opted in — you may withdraw consent at any time;
• To improve the 68plusph platform through aggregate analytics and service performance monitoring.

6. Data Sharing & Disclosure

68plusph does not sell your personal data to third parties. We share your personal data only in the following circumstances and with the following categories of recipients:

• Payment processors (GCash / Maya Philippines / BancNet member banks): Necessary to process your financial transactions;
• KYC and identity verification providers: To verify your identity documents as required by PAGCOR;
• Game software providers: Limited session data is shared with licensed game providers to facilitate game operation and dispute resolution — these providers are contractually obligated to handle data in accordance with applicable privacy law;
• Fraud prevention and AML screening services: Transaction and identity data shared for compliance screening;
• PAGCOR: Regulatory reporting as required under our operating authorization;
• Anti-Money Laundering Council (AMLC): Mandatory reporting of covered and suspicious transactions under the AMLA;
• Law enforcement and courts: Where required by a valid legal order, warrant, or judicial directive from a competent Philippine authority;
• Professional advisers: Lawyers, auditors, and consultants under strict confidentiality obligations.

7. Cookies & Tracking Technologies

7.1 What We Use

68plusph uses cookies and similar technologies (including local storage and session identifiers) to operate and improve the platform. These technologies help us maintain your login session, remember your preferences, detect fraudulent access, and analyze aggregate usage patterns.

7.2 Types of Cookies

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, load balancing, and security tokens. You cannot opt out of these without preventing the platform from working.
• Functional Cookies: Remember your language preferences, game display settings, and other personalization choices.
• Analytics Cookies: Collect aggregate, anonymized data about how Players use the platform to help us improve performance and user experience.

7.3 Managing Cookies

You may configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging into the 68plusph platform. Blocking functional or analytics cookies will not affect your ability to use the platform's core features.

8. Data Retention

68plusph retains your personal data for the following periods:

• Account data and transaction records: Retained for a minimum of five (5) years from the date of account closure or the last transaction, in accordance with AMLA record-keeping requirements;
• KYC identity documents: Retained for five (5) years from the date of verification, as required by PAGCOR and AMLA regulations;
• Customer support communications: Retained for two (2) years from the date of the interaction;
• Marketing preference records: Retained until you withdraw consent, plus one (1) year for audit trail purposes;
• Technical logs and analytics data: Retained in anonymized or aggregated form for up to two (2) years.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with NPC-recommended disposal standards.

9. Data Security

68plusph implements a comprehensive set of technical and organizational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 68plusph servers;
• AES-256 encryption for sensitive data at rest, including payment credentials and identity document scans;
• Access controls: Personal data is accessible only to authorized 68plusph personnel who require it to perform their job functions, governed by a least-privilege access policy;
• Two-factor authentication (2FA) for all internal system access and available to Players for their accounts;
• Regular security audits and penetration testing by independent cybersecurity professionals;
• Incident response procedures: In the event of a personal data breach affecting your rights and interests, 68plusph will notify the National Privacy Commission within 72 hours and affected Players without undue delay, in accordance with NPC Circular 16-03.

10. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 68plusph:

To exercise any of the above rights, submit a written request to the 68plusph Data Protection Officer using the contact details in Section 14. 68plusph will respond within fifteen (15) business days.

11. Children's Privacy

The 68plusph platform is strictly restricted to individuals aged 21 years and older. 68plusph does not knowingly collect, use, or retain personal data from persons under 21 years of age. If 68plusph becomes aware that personal data has been collected from a person under 21, that data will be immediately deleted and the associated account permanently closed. If you are a parent or guardian and believe your child has registered on the platform, please contact us immediately using the details in Section 14.

12. Cross-Border Data Transfers

Some of 68plusph's technology partners and service providers (including game software providers and cloud infrastructure providers) may be located outside the Philippines. Where personal data is transferred to countries that may not provide the same level of data protection as the Philippines, 68plusph ensures that appropriate safeguards are in place — including data processing agreements that impose obligations equivalent to those under the Data Privacy Act of 2012 and NPC regulations.

13. Changes to This Privacy Policy

68plusph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Players by email notification and/or by a prominent notice on the 68plusph platform prior to the effective date. The "Effective Date" at the top of this policy indicates when it was last revised. Continued use of the 68plusph platform following the effective date of a revised Policy constitutes your acknowledgment of the changes.

14. Contact the Data Protection Officer

For any queries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 68plusph, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Data Privacy Request – [Your Account Username]"
• Live Chat: Available 24/7 via the 68plusph platform — ask to be connected to the DPO team

68plusph will acknowledge all data privacy requests within 48 hours and provide a full response within fifteen (15) business days of receipt of a complete and valid request.