Privacy Policy — 68plusph

This Privacy Policy is issued by 68plusph, the operator of the online gaming platform accessible at 68plusph.com ("the Platform"), and applies to all personal data processed in connection with your use of the Platform and its associated services. 68plusph acts as the data controller in respect of personal information collected directly from users of the Platform.

68plusph is committed to protecting the privacy and confidentiality of personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the directives of the National Privacy Commission (NPC) of the Philippines. We are equally guided in our data practices by our obligations under PAGCOR regulations, which require certain data collection and retention activities as conditions of our operating authorization.

This Policy should be read alongside the 68plusph Terms & Conditions, which govern the general rules for use of the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding data matters, this Privacy Policy shall prevail.

68plusph collects personal data in the following categories, depending on your interaction with the Platform:

68plusph does not collect sensitive personal information (as defined under RA 10173) such as health records, biometric data, or political affiliations, except where specifically required by PAGCOR-mandated identity verification procedures and with your explicit prior consent.

68plusph collects personal data through the following channels and mechanisms:

Information you provide directly when registering a 68plusph Account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, participating in promotions, or submitting feedback. This represents the primary source of personal data held by 68plusph.

When you access the 68plusph Platform, our systems automatically record certain technical data including your IP address, device characteristics, browser type, pages visited, and session duration. This data is collected via server logs, session tracking, and cookies (see Section 9 for full cookie details). This automated collection occurs regardless of whether you are logged into an Account.

In limited circumstances, 68plusph may receive personal data from third-party sources as part of our regulatory compliance and fraud prevention activities. This includes identity verification data from government-authorized verification service providers, and transaction data from payment processors (GCash, PayMaya, BPI, BDO, Metrobank) necessary to reconcile deposits and withdrawals. Any data received from third parties is processed in accordance with this Privacy Policy.

68plusph processes personal data for the following specific, legitimate purposes:

• Account registration and management: Creating and maintaining your 68plusph Account, verifying your identity, authenticating logins, and managing account settings and preferences.
• Service delivery: Enabling access to games, processing wagers, settling bets, crediting winnings, and providing the full functionality of the 68plusph Platform.
• Payment processing: Facilitating deposits and withdrawal transactions via GCash, PayMaya, and other supported Philippine payment methods, and reconciling transaction records.
• Regulatory compliance: Meeting our obligations under PAGCOR regulations, including Know Your Customer (KYC) requirements, age verification (21+), anti-money laundering (AML) obligations, and mandatory gaming activity reporting.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior, maintaining self-exclusion records, enforcing deposit limits, and managing cooling-off periods as requested by Players.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account compromise, bonus abuse, money laundering, and other prohibited conduct on the Platform.
• Customer support: Responding to inquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance and audit purposes.
• Platform improvement: Analyzing aggregated usage data and technical performance data to improve Platform features, game recommendations, and user experience — always using anonymized or pseudonymized data where possible.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Players who have not opted out of marketing communications (see Section 12).

Under the Data Privacy Act of 2012, all processing of personal information requires a lawful basis. 68plusph processes personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our contractual obligations to you under the 68plusph Terms & Conditions — including account management, service delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine law, PAGCOR regulatory requirements, AML legislation, NPC directives, and court or government orders. This includes KYC, age verification, gaming activity records, and mandatory reporting.
• Legitimate interest: Processing necessary for 68plusph's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and general platform improvement, where those interests are not overridden by your data protection rights.
• Consent: Where neither of the above applies — particularly for optional marketing communications and certain cookie categories — 68plusph relies on your freely given, specific, and informed consent, which you may withdraw at any time.

68plusph does not sell, rent, or trade your personal data to third parties for their independent commercial purposes. Personal data is shared with third parties only in the following limited and controlled circumstances:

68plusph engages trusted third-party service providers who process data on our behalf under strict data processing agreements. These include payment processors (GCash operator, PayMaya, BPI, BDO, Metrobank), identity verification service providers, cloud hosting providers, fraud detection systems, and customer support platform providers. All such providers are required to process data only as directed by 68plusph and in compliance with applicable privacy law.

When you play a game supplied by a third-party provider (such as JILI, Pragmatic Play, PG Soft, or others), limited technical data (such as a pseudonymous player ID and session token) is shared with that provider solely to facilitate gameplay, settle outcomes, and handle technical support. Game providers are not permitted to use this data for independent marketing purposes.

68plusph is required by law and PAGCOR regulations to disclose certain personal data and gaming activity records to regulatory authorities, law enforcement agencies, and courts upon valid legal request or as part of our mandatory reporting obligations. Such disclosures are made in strict compliance with applicable legal requirements and are limited to the minimum data necessary.

68plusph retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Active account data: Retained for the full duration of the account relationship — from registration to account closure.
• Identity and KYC documents: Retained for a minimum of five (5) years following account closure, as required under PAGCOR regulations and Philippine AML obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable tax and AML legislation.
• Gaming activity records: Retained for a minimum of three (3) years from the date of account closure, for regulatory reporting and dispute resolution purposes.
• Customer support records: Retained for a maximum of three (3) years following the resolution of the relevant inquiry or complaint.
• Self-exclusion and responsible gaming records: Retained indefinitely to prevent re-registration by self-excluded Players, unless a defined exclusion period has expired and the Player has completed the formal reactivation process.
• Marketing consent records: Retained for the duration of the account relationship, or until consent is withdrawn, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

68plusph implements a comprehensive set of technical, organizational, and procedural security measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures are reviewed and updated on a regular basis.

• Transport encryption: All data transmitted between your browser and the 68plusph Platform is protected by SSL/TLS encryption (256-bit), as indicated by the HTTPS protocol in your browser.
• Password protection: Account passwords are stored as salted cryptographic hashes. 68plusph never stores or transmits plaintext passwords. Two-factor authentication (2FA) is available to all Players for additional login security.
• Access controls: Access to personal data within 68plusph's systems is restricted on a strict need-to-know basis. All internal data access is logged and audited. Staff with access to personal data are subject to confidentiality obligations.
• Infrastructure security: The 68plusph Platform is hosted on secure cloud infrastructure with firewalls, intrusion detection systems, and regular vulnerability assessments.
• Breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, 68plusph will notify affected individuals and the National Privacy Commission (NPC) within the timeframes prescribed by Philippine law.

While 68plusph takes all reasonable precautions, no online system can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials. If you suspect unauthorized access to your 68plusph Account, contact support immediately via live chat.

The 68plusph Platform uses cookies and similar tracking technologies to operate core platform functions, improve user experience, and analyze platform usage. A cookie is a small data file stored in your browser by websites you visit.

• Strictly Necessary Cookies: Essential for core Platform functionality — including maintaining your login session, storing your account preferences, and enabling the gaming lobby to function correctly. These cannot be disabled without rendering core Platform features unusable.
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data on how users interact with the Platform — which pages are visited most, how long sessions last, and where technical errors occur. This data helps 68plusph improve Platform performance and user experience.
• Functional Cookies: Enhance Platform functionality by remembering your stated preferences (e.g., preferred language, game lobby layout, notification settings) across sessions.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of 68plusph marketing campaigns. These cookies are only set with your explicit consent and can be withdrawn at any time through your browser settings or account preferences.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by 68plusph. To exercise any of these rights, contact 68plusph at [email protected] or via live chat. We will respond within 30 calendar days of receiving a verifiable request.

• Right to be Informed: You have the right to be informed about how your personal data is collected and processed, which this Privacy Policy addresses. You may request a summary of the data we hold about you at any time.
• Right to Access: You have the right to request a copy of the personal data we hold about you, including the categories of data, the purposes of processing, and any third parties to whom it has been disclosed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. Account holders may update most personal information directly from their Account Settings panel.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where consent has been withdrawn (and no other legal basis applies), or where processing is unlawful. This right is subject to our legal retention obligations under PAGCOR regulations and AML legislation.
• Right to Object: You have the right to object to processing based on legitimate interest or for direct marketing purposes. Where you object to marketing, 68plusph will cease processing immediately.
• Right to Data Portability: Where technically feasible, you may request a copy of the personal data you provided to 68plusph in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: If you believe 68plusph has not handled your personal data in compliance with the Data Privacy Act, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint process.

Identity verification is required before processing any data subject request to protect against fraudulent access to another person's data. 68plusph reserves the right to decline requests that are manifestly unfounded or excessive, subject to your right to escalate to the NPC.

If you are a parent or legal guardian and believe that a person under your care has provided personal information to 68plusph, please contact us immediately at [email protected] (email address provided as plain text — not a clickable link) so that we may take appropriate action.

With your consent during registration or at any subsequent point, 68plusph may send you promotional communications about bonuses, game launches, sports betting markets, exclusive offers, and platform news via the following channels: email, SMS to your registered Philippine mobile number, and in-platform notifications.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link present in any 68plusph marketing email;
• Updating your notification preferences in Account Settings → Notifications; or
• Contacting 68plusph support via live chat with a specific request to stop marketing communications.

Withdrawal of marketing consent takes effect within 5 business days of your request. Please note that transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC request notifications — are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are essential to the operation of your Account.

68plusph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, 68plusph will provide advance notice through one or more of the following channels: a prominent notice on the Platform upon next login, an email to your registered address, or an in-app notification.

The updated Privacy Policy will be effective from the date stated at the top of the document. Continued use of the 68plusph Platform following the posting of any updated Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the updated Privacy Policy, you should cease using the Platform and may request voluntary account closure in accordance with the Terms & Conditions.

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 68plusph, please contact us using the details below. Note that all contact details are provided as plain text and are not clickable links.