phil163 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by phil163 ("phil163," "we," "us," "our"), the operator of the online gaming platform at phil163.org. This Policy describes how phil163 collects, processes, stores, and protects the personal data of individuals who register accounts, access the platform, or otherwise interact with phil163's services ("Players," "you").

This Policy is issued in accordance with and in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the regulations of the National Privacy Commission (NPC) of the Philippines. By registering an account on phil163 or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with the phil163 Terms & Conditions, which govern your overall use of the platform. In the event of a conflict between this Policy and the Terms & Conditions regarding data privacy matters, this Policy shall take precedence.

2. Personal Data We Collect

phil163 collects personal data from players through direct registration, platform usage, and interactions with customer support. The categories of personal data collected include:

Registration Data:

• Full legal name as it appears on a government-issued Philippine ID
• Philippine mobile number (used as the primary account identifier)
• Date of birth (for age verification — must be 21 or older)
• Username and encrypted password
• Email address (optional but recommended for account recovery)

Identity Verification (KYC) Data:

• Government-issued Philippine ID (e.g., PhilSys National ID, driver's licence, passport, SSS/GSIS ID, PRC ID, voter's ID)
• Selfie photograph for identity matching
• Proof of address documentation where required for enhanced verification

Financial Data:

• GCash mobile number or Maya account number linked to the player's wallet
• Bank account details provided for bank transfer withdrawals (BPI, BDO, Metrobank, etc.)
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps

Technical and Usage Data:

• IP address and approximate geolocation derived from IP at the time of login
• Device type, operating system, and browser information
• Session duration, game activity logs, and betting history
• Cookies and session tokens as further described in Section 6

Communications Data:

• Content of live chat conversations with phil163 customer support
• Email correspondence with phil163
• Records of promotional communications you have opted into or out of

3. How We Use Your Personal Data

phil163 processes personal data for the following purposes:

• Account management: Creating, maintaining, and securing your phil163 account, including login authentication and password recovery
• Age and identity verification: Confirming that all players meet the 21+ minimum age requirement and are eligible to use the platform under Philippine law
• Payment processing: Facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods in the Philippines
• Regulatory compliance: Meeting obligations under PAGCOR regulations, the Philippine Anti-Money Laundering Act (RA 9160, as amended), and other applicable Philippine laws
• Customer support: Responding to your enquiries, resolving disputes, and managing account-related requests
• Platform improvement: Analysing aggregate, anonymised usage data to improve game selection, platform performance, and user experience
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling and offering or enforcing responsible gaming interventions where appropriate
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
• Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, collusion, and other prohibited conduct

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, phil163 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms & Conditions agreement between you and phil163, including account management and payment processing
• Legal obligation: Processing required to comply with PAGCOR regulations, the Philippine AMLA, National Privacy Commission requirements, and other applicable laws
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests do not override your data protection rights
• Consent: Processing for marketing communications and non-essential analytics, where your explicit consent has been obtained. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

phil163 does not sell or broker your personal data to third parties. Personal data may be shared in the following limited circumstances:

• Game providers and technology partners: Third-party game developers and platform technology providers who supply services to phil163 may receive anonymised or pseudonymised technical data necessary for game delivery and platform operation. These providers are contractually bound to data protection standards consistent with this Policy.
• Payment service providers: GCash, Maya, and banking partners receive transaction data necessary to process your deposits and withdrawals. These providers are independently regulated financial institutions subject to Bangko Sentral ng Pilipinas (BSP) oversight.
• Regulatory authorities: phil163 is required by law to disclose certain player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities upon valid legal request or pursuant to regulatory reporting obligations.
• Identity verification services: KYC document verification may be conducted through third-party identity verification providers. These providers process identification documents solely for the purpose of verifying player identity and are bound by confidentiality obligations.
• Professional advisers: Legal, financial, and compliance advisers retained by phil163 may have access to player data to the extent necessary to provide professional advice, subject to professional confidentiality obligations.

All third parties with whom phil163 shares personal data are required to implement appropriate technical and organisational data protection measures. phil163 does not transfer personal data to recipients in jurisdictions that do not provide adequate data protection standards without implementing appropriate safeguards.

6. Cookies and Tracking Technologies

phil163 uses cookies and similar session technologies to operate the platform effectively. The following types of cookies are used:

• Essential cookies: Required for platform functionality, including maintaining your login session, remembering your language preference, and enabling secure page navigation. These cannot be disabled without impairing platform functionality.
• Security cookies: Used to detect and prevent fraudulent activity, including CSRF tokens and session integrity checks.
• Analytics cookies: Aggregate, anonymised data on how players navigate the platform — used to identify areas for improvement. No personally identifiable information is included in analytics data.

phil163 does not load third-party advertising cookies, social media tracking pixels, or any cookies designed to build advertising profiles of our players. You may configure your browser to refuse or delete cookies; however, disabling essential cookies will affect platform functionality and may prevent login.

7. Data Retention

phil163 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention guidelines:

• Active account data: Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, as required by Philippine AML regulations
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with BSP and AMLC record-keeping requirements
• KYC documentation: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later
• Support communications: Retained for two (2) years from the date of the communication, or longer if the communication relates to an ongoing dispute
• Marketing consent records: Retained for the duration of the consent and for three (3) years thereafter as evidence of consent

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual.

8. Security Measures

phil163 implements the following technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data in transit between players and phil163's servers
• AES-256 encryption for sensitive data at rest, including payment details and identity documents
• Bcrypt hashing for all stored passwords — phil163 employees cannot view your plain-text password
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication on all administrative systems
• Regular third-party penetration testing and vulnerability assessments
• 24/7 intrusion detection monitoring and automated threat response systems

In the event of a personal data breach that creates a risk to player rights, phil163 will notify affected players and the National Privacy Commission within seventy-two (72) hours of discovery, in accordance with NPC Circular 16-03.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, all registered phil163 players have the following rights with respect to their personal data:

• Right to be informed: The right to know what personal data phil163 holds about you, for what purpose, and how it is being processed — as set out in this Policy
• Right of access: The right to request a copy of all personal data phil163 holds about you
• Right to rectification: The right to request correction of inaccurate or incomplete personal data
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format
• Right to object: The right to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact phil163's Data Protection Officer at [email protected] (plain text — not a clickable link). phil163 will respond to verified data subject requests within fifteen (15) business days.

10. Children's and Minors' Privacy

phil163 is strictly prohibited to persons under the age of 21. phil163 does not knowingly collect personal data from minors. If phil163 discovers that personal data from a person under 21 has been collected in breach of platform eligibility rules, the account will be immediately suspended, all associated personal data will be deleted (subject to regulatory retention requirements), and any funds associated with the account will be handled in accordance with applicable regulations. If you believe a minor has accessed phil163, please contact support immediately at [email protected].

11. Third-Party Links and Services

The phil163 platform may contain links to third-party services — for example, payment gateway interfaces provided by GCash or Maya. When you navigate to a third-party service, you leave the phil163 platform and your interaction with that service is governed by the third party's own privacy policy. phil163 has no control over and assumes no responsibility for the data practices of third-party services. We encourage you to review the privacy policies of any third-party services you access in connection with using phil163.

12. Amendments to This Policy

phil163 reserves the right to amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or regulatory guidance. When material changes are made, phil163 will notify registered players via the platform notification system and/or by SMS to your registered Philippine mobile number. The updated Policy will be effective from the date of publication. Continued use of phil163 following notification of changes constitutes your acceptance of the revised Policy. The version date at the top of this Policy indicates when it was last updated.

13. Contact and Data Protection Officer

For any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact the phil163 Data Protection Officer:

• Email: [email protected] (plain text — do not click; copy manually if needed)
• Live Chat: Available 24/7 via the phil163 platform

If you believe phil163 has not adequately addressed your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines via the NPC's official channels.