1. Data Controller
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for your personal data is ph766, operating under the ph766.vip domain and within a PAGCOR-authorized gaming framework.
All inquiries regarding this Privacy Policy, requests to exercise data subject rights, or data-related complaints should be directed to the ph766 Data Protection Officer (DPO) at [email protected].
2. Personal Data We Collect
ph766 collects personal data in the following categories:
2.1 Registration Data
- Full legal name as it appears on a government-issued ID
- Date of birth (for age verification purposes โ players must be 21+)
- Residential address (street, city, province, postal code)
- Email address and mobile number
- Username and encrypted password
2.2 Identity Verification (KYC) Data
- Copies of government-issued identification documents (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS card)
- Proof of address documents (utility bills, bank statements)
- Payment method verification (GCash or PayMaya account confirmation, bank account details)
2.3 Financial Transaction Data
- Deposit history, withdrawal requests, transaction amounts and timestamps
- GCash, PayMaya, BPI, BDO, or Metrobank payment references (reference numbers only โ ph766 does not store complete bank account or card numbers)
2.4 Gaming Activity Data
- Game history including bets placed, outcomes, wager amounts, and session durations across all ph766 games
- Bonus and promotional credit activity
- VIP tier and loyalty point balances
2.5 Technical and Device Data
- IP address and geolocation data (country/region level)
- Device type, operating system, browser type and version
- Session timestamps and login/logout records
- Cookie identifiers and session tokens (see Section 6)
2.6 Communications Data
- Records of your communications with ph766 support via live chat, email, or other channels
- Feedback, complaints, and dispute correspondence
ph766 does not collect sensitive personal information as defined under Section 3(l) of RA 10173, except where strictly required for age verification, identity verification, or compliance with PAGCOR regulations and Philippine anti-money laundering laws.
3. How We Use Your Personal Data
ph766 processes your personal data for the following specific purposes:
- Account management: Creating, maintaining, verifying, and securing your ph766 player account.
- KYC and age verification: Confirming that you meet the 21+ age requirement mandated by PAGCOR, and verifying your identity as required by Philippine AML regulations.
- Payment processing: Processing deposits and withdrawals via GCash, PayMaya, and linked bank accounts; preventing payment fraud.
- Platform provision: Delivering game services, maintaining your wallet balance, processing bonus credits, and operating the VIP program.
- Legal and regulatory compliance: Meeting obligations under PAGCOR authorization, RA 9160 (Anti-Money Laundering Act), RA 10173 (Data Privacy Act), and other applicable Philippine laws.
- Responsible gaming: Monitoring play patterns to identify at-risk behavior and applying player protection tools including deposit limits and self-exclusion.
- Customer support: Handling inquiries, resolving disputes, and providing technical assistance.
- Security and fraud prevention: Detecting and preventing fraud, money laundering, account compromise, and abuse of the platform.
- Marketing communications: Sending promotional offers, bonus notifications, and platform updates โ only where you have provided consent and only to the extent permitted by law. You may unsubscribe at any time.
- Platform improvement: Analyzing aggregated and anonymized usage data to improve games, features, and user experience.
4. Legal Basis for Processing
ph766 processes your personal data on the following legal bases as recognized under RA 10173:
- Contractual necessity: Processing required to fulfill the ph766 Terms & Conditions you accepted upon registration, including account management, game delivery, and payment processing.
- Legal obligation: Processing required to comply with PAGCOR regulations, Philippine AML law (RA 9160), and tax reporting obligations.
- Legitimate interests: Processing for fraud prevention, security monitoring, and platform integrity โ where these interests do not override your fundamental rights.
- Consent: Marketing communications and optional data processing activities for which you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5. Data Sharing and Disclosure
ph766 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:
- Game providers: HRG Live, MG Live, and slot game providers receive game session data required to deliver their games. These providers are bound by data processing agreements that restrict their use of your data.
- Payment processors: GCash, PayMaya, and partner banks receive payment transaction data necessary to process deposits and withdrawals. All payment partners comply with Bangko Sentral ng Pilipinas (BSP) data security requirements.
- KYC and AML service providers: Regulated identity verification services process your KYC documents to fulfill PAGCOR and AML compliance requirements.
- Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies as required by law.
- Law enforcement: Philippine law enforcement agencies where ph766 is legally compelled to disclose data pursuant to a valid court order, subpoena, or legal process.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of ph766, your data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy implications.
ph766 will never sell, rent, or trade your personal data to advertisers, data brokers, or any other commercial third parties for marketing purposes.
6. Cookies and Tracking Technologies
ph766 uses cookies and similar technologies to operate the platform effectively. The types of cookies we use are:
- Strictly necessary cookies: Required for platform operation โ session authentication, security tokens, and login state management. These cannot be disabled without breaking core platform functionality.
- Functional cookies: Remember your preferences such as language settings, table limits, and interface customizations.
- Analytics cookies: Collect aggregated, anonymized data on how players navigate and use ph766 to enable platform improvements. No personally identifiable data is transmitted to analytics services.
You may configure your browser to reject non-essential cookies. Note that disabling strictly necessary cookies will impair your ability to use the ph766 platform, including the ph766 Login function.
7. Data Retention
ph766 retains personal data for the following periods:
- Active account data: Retained for the duration of your active ph766 account relationship.
- Financial and transaction records: Retained for a minimum of five (5) years after the transaction date, as required by PAGCOR regulations and Philippine AML law.
- KYC documents: Retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later.
- Support communications: Retained for three (3) years from the date of the communication.
- Closed account data: Upon account closure, ph766 retains data for five (5) years in order to comply with legal obligations, after which it is securely deleted or anonymized.
8. Data Security
ph766 implements appropriate technical and organizational security measures to protect your personal data, including:
- SSL/TLS encryption for all data transmitted between your device and ph766 servers
- Encrypted storage of passwords using industry-standard hashing algorithms
- Role-based access controls restricting internal access to personal data on a need-to-know basis
- Regular security assessments, vulnerability scanning, and penetration testing
- Multi-factor authentication for administrative access to platform systems
- Incident response procedures for data breach detection, containment, and NPC notification
In the event of a personal data breach that is likely to result in harm to affected individuals, ph766 will notify the National Privacy Commission and affected data subjects within seventy-two (72) hours of discovering the breach, in accordance with NPC Circular 16-03.
9. Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph766:
- Right to be informed: The right to know that your data is being collected and processed, which is fulfilled by this Privacy Policy.
- Right to access: The right to obtain a copy of your personal data held by ph766 and information about how it is being processed.
- Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account details directly through your ph766 account settings.
- Right to erasure / right to be forgotten: The right to request deletion of your personal data, subject to ph766's legal retention obligations. Note that financial and KYC records must be retained for legal compliance purposes and cannot be deleted on request.
- Right to object: The right to object to processing based on legitimate interests, including profiling and direct marketing. If you object to marketing communications, you will be removed from all marketing lists.
- Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.
To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request." ph766 will acknowledge your request within five (5) business days and respond substantively within thirty (30) calendar days.
10. Children's Privacy
ph766 does not knowingly collect personal data from individuals under the age of 21. The platform employs age verification measures during registration to enforce this restriction. If ph766 becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately closed and all associated data will be securely deleted, with funds handled in accordance with PAGCOR guidelines.
If you are a parent or guardian and believe your child has registered on ph766, please contact us immediately at
[email protected].
11. Cross-Border Data Transfers
ph766 operates primarily within the Philippines and stores player data on servers located within or accessible from the Philippines. Where personal data is transferred to service providers located outside the Philippines โ such as certain game providers or cloud infrastructure partners โ ph766 ensures that appropriate safeguards are in place, including contractual clauses that impose data protection standards equivalent to those required by Philippine law and consistent with NPC guidelines on cross-border data transfers.
12. Policy Updates
ph766 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. Material changes will be communicated to registered players by email and/or by a prominent notice on the platform at least seven (7) days before the effective date of the change. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Continued use of ph766 after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.
13. Contact & Data Protection Officer
If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the ph766 Data Protection Officer:
ph766 Data Protection Officer
Email: [email protected]
Live Chat: Available 24/7 on the ph766 platform
Response time: Within 5 business days for written requests
You also have the right to file a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your rights under the Data Privacy Act have been violated.