php65 Privacy Policy

This Privacy Policy ("Policy") is issued by the php65 online gaming platform, accessible at php65.cam ("php65," "we," "us," or "our"). It describes how php65 collects, uses, stores, shares, and protects the personal information of all individuals ("Users," "you," or "your") who access or use the php65 website, account system, games, or any associated service.

This Policy is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines. php65 also processes personal data in alignment with PAGCOR's data handling requirements applicable to Philippine online gaming operators.

This Policy applies to all personal data processed by php65 regardless of how it is collected — whether through account registration, payment processing, customer support interactions, website browsing, or any other interaction with the php65 platform.

php65 collects the following categories of personal data in connection with operating the platform and fulfilling its legal obligations:

php65 collects personal data through the following methods:

• Direct Collection: Information you provide voluntarily when creating a php65 Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a promotion;
• Automated Collection: Technical data collected automatically when you access the php65 platform, including IP address, device identifiers, session data, and browsing behavior on our platform, via server logs and analytics tools;
• Payment Processors: Transaction confirmation data received from GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other approved payment partners when you make a deposit or receive a withdrawal;
• Identity Verification Providers: Confirmation data received from third-party KYC verification service providers used to authenticate government-issued Philippine ID documents submitted during KYC;
• Third-Party Game Providers: Aggregated game session data transmitted by licensed game studios (such as Pragmatic Play, PG Soft, Evolution Gaming, and Jili) in connection with game delivery on the php65 platform.

php65 uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and securing your php65 Account, including processing login requests, managing account settings, and enforcing account security measures such as OTP two-factor authentication;
• Age Verification: Verifying that all Account holders are at least 21 years of age in compliance with PAGCOR regulations and Philippine gambling law;
• Payment Processing: Processing deposits and withdrawals to and from your php65 Account via GCash, Maya, and other approved Philippine payment methods;
• AML and Fraud Prevention: Monitoring transactions and gaming activity for indicators of money laundering, fraud, or other prohibited conduct in compliance with the Philippine AMLA and PAGCOR requirements;
• Customer Support: Responding to your support inquiries, resolving disputes related to your Account or transactions, and communicating important account-related information;
• Responsible Gaming: Monitoring gaming behavior patterns to identify potential problem gambling indicators and administering responsible gaming tools such as deposit limits and self-exclusion;
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve the php65 platform's performance, security, and user experience;
• Legal Compliance: Fulfilling php65's obligations under Philippine law, including the DPA, AMLA, and PAGCOR regulations, and cooperating with lawful requests from Philippine regulatory authorities and law enforcement agencies.

Under the Philippine Data Privacy Act of 2012, php65's processing of your personal data is based on one or more of the following lawful grounds:

• Contractual Necessity: Processing necessary to fulfil php65's contractual obligations to you as an Account holder, including account management, payment processing, and game delivery;
• Consent: Processing based on your explicit consent at the time of registration or as specifically requested for optional data processing activities, such as receiving promotional communications;
• Legal Obligation: Processing required for php65 to comply with mandatory legal obligations under Philippine law, including KYC record retention requirements under the AMLA, PAGCOR regulatory requirements, and NPC data protection obligations;
• Legitimate Interest: Processing necessary for php65's legitimate interests in operating a secure, fair, and compliant online gaming platform — specifically for fraud prevention, platform security, and responsible gaming monitoring — where such interests are not overridden by your fundamental rights.

php65 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. php65 shares personal data only in the following limited, necessary circumstances:

• Payment Service Providers: GCash (GXI), Maya Philippines, GrabPay, BancNet, BPI, BDO, Metrobank, and other approved payment partners — to process deposits and withdrawals from your php65 Account. Each provider's own privacy policy governs their handling of your data;
• KYC Verification Providers: Licensed third-party identity verification service providers engaged to authenticate Philippine government-issued IDs submitted during KYC. These providers are contractually bound to process data solely for verification purposes;
• Licensed Game Providers: Game studios including Pragmatic Play, PG Soft, Evolution Gaming, Jili, and others — to deliver game content and process game session data. These providers receive only the minimum data required for game operation;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and Philippine law enforcement agencies, where disclosure is required by law or in response to a lawful regulatory or judicial order;
• Professional Advisors: Lawyers, auditors, and other professional advisors retained by php65, subject to professional confidentiality obligations.

php65 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by Philippine law:

• Active Account Data: Retained for the duration of your active php65 Account and for a period of five (5) years following permanent account closure, in compliance with PAGCOR record-keeping requirements and Philippine AMLA obligations;
• KYC and Identity Verification Records: Retained for a minimum of five (5) years from the date of account closure or the last transaction, as mandated by Philippine AMLA regulations administered by the Anti-Money Laundering Council;
• Transaction Records: Financial transaction data is retained for five (5) years from the date of the transaction in compliance with Philippine banking and AML record-keeping obligations;
• Technical and Log Data: Retained for a period of ninety (90) days for operational security purposes, unless retained for longer as part of an ongoing fraud or security investigation;
• Support Communications: Customer support correspondence is retained for two (2) years from the date of the interaction, for dispute resolution and service quality purposes.

Upon expiry of the applicable retention period, php65 will securely delete or anonymize personal data in accordance with industry-standard data destruction practices.

php65 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data it processes, including:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and php65's servers is encrypted in transit using 256-bit SSL/TLS protocols;
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial account details, is encrypted at rest in php65's data storage systems;
• Access Controls: Access to personal data within php65's internal systems is restricted on a strict need-to-know basis, with role-based access controls and authentication requirements for all staff with data access;
• OTP Two-Factor Authentication: Account login from unrecognized devices requires OTP verification via your registered Philippine mobile number, reducing the risk of unauthorized account access;
• Anomaly Detection: php65's security systems monitor for unusual login patterns, access attempts, and transaction anomalies in real time;
• Security Testing: php65 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities.

php65 uses cookies and similar tracking technologies on its platform for the following purposes:

• Essential Cookies: Necessary for the php65 platform to function — maintaining your authenticated login session, remembering your preferences, and enabling core platform features. These cannot be disabled without impairing platform functionality;
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats to your php65 Account;
• Analytics Cookies: Aggregated, anonymized data collected to understand how Users interact with the php65 platform — such as which game categories are most visited and how the mobile experience performs on Philippine Android devices. php65 uses this data only to improve the platform;
• Functional Cookies: Optional cookies that remember your display preferences and language settings across sessions.

You may control non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain php65 platform features.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by php65. To exercise any of these rights, please contact php65 at [email protected] with your request and sufficient identity verification information.

php65 does not knowingly collect personal data from individuals under 21 years of age. If php65 discovers or is notified that personal data has been collected from an individual who does not meet the minimum age requirement, php65 will immediately:

• Suspend the associated Account pending investigation;
• Permanently close the Account upon confirmation of underage status;
• Securely delete all personal data associated with the underage Account, subject to any mandatory retention obligations under Philippine law;
• Return any real-money balance to the original source payment method after deducting any applicable processing costs.

If you believe that a minor has registered a php65 Account, please contact php65 immediately at [email protected] with relevant details so that appropriate action can be taken promptly.

php65 may share your personal data with licensed game providers and platform service providers whose systems may be located outside the Philippines. Where such cross-border transfers of personal data occur, php65 ensures that adequate safeguards are in place to protect your data in compliance with the Philippine DPA's provisions on cross-border data flows.

These safeguards include contractual data processing agreements requiring recipient third parties to maintain data protection standards equivalent to those required under Philippine law, and limiting data access to only what is necessary for the specific service being provided.

php65 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The effective date at the top of this Policy will be updated to reflect the date of any material revision.

Where amendments materially affect your rights or how php65 processes your personal data, php65 will provide advance notice to registered Account holders via email to the address on file or through an in-platform notification prior to the revised Policy taking effect.

Your continued use of the php65 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you must cease using the php65 platform and may request Account closure by emailing [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or php65's handling of your personal data, you may contact php65's Data Protection Officer (DPO) through the following channel:

• Email: [email protected] — please include "Privacy / DPO Request" in the subject line of your email to ensure it is routed directly to the Data Protection Officer
• Live Chat: Via your logged-in php65 Account dashboard (available 24/7)

All data rights requests and privacy complaints submitted to php65 will be acknowledged within five (5) business days and resolved within the timeframes specified under the Philippine Data Privacy Act. For complaints that cannot be resolved directly with php65, you retain the right to escalate to the National Privacy Commission of the Philippines.