phl163 Privacy Policy – Your Data, Our Responsibility

1. Identity of the Data Controller

For the purposes of the Data Privacy Act of 2012, the data controller responsible for your personal information is the operator of phl163, accessible at phl163.cam. phl163 determines the purposes and means of processing personal data collected through its platform. All data-related inquiries, requests, and complaints may be directed to our Data Protection Officer via the contact details provided in Section 13 of this Policy.

2. Personal Data We Collect

phl163 collects personal data that is necessary, adequate, and relevant to the purposes outlined in this Privacy Policy. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (used to verify compliance with the 21+ age requirement)
• Residential address within the Philippines (city, province, ZIP code)
• Philippine mobile telephone number
• Email address
• Username and encrypted password
• Government-issued ID number and document scans (when identity verification is requested)

2.2 Financial and Transaction Data

• GCash or PayMaya/Maya wallet number or account reference
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) submitted for withdrawals
• Credit or debit card details (card number, expiry, CVV processed through our payment gateway — phl163 does not store raw card data)
• Deposit history, withdrawal history, and transaction records in PHP
• Source of funds documentation where requested under anti-money laundering obligations

2.3 Gaming and Betting Activity Data

• Game session records, bet history, wagering amounts, win/loss records
• Sports betting selections, odds accepted, and settlement outcomes
• Bonus and promotional usage records
• Responsible gaming tool settings (deposit limits, loss limits, session timers, self-exclusion status)

2.4 Technical and Device Data

• IP address and approximate geolocation (city/region level)
• Device type, operating system, browser type and version
• Mobile network operator (Globe, SMART, DITO, etc.)
• Session timestamps, page visit data, and navigation patterns
• Cookies and similar tracking technologies (see Section 9)

2.5 Communications Data

• Customer support chat transcripts and email correspondence
• Feedback, complaint records, and dispute communications
• Survey responses and voluntary feedback submissions

3. Lawful Bases for Processing

phl163 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The lawful bases we rely upon are:

Processing Activity	Lawful Basis
Account registration and identity verification	Contractual necessity; Legal obligation (PAGCOR KYC requirements)
Processing deposits and withdrawals	Contractual necessity; Legal obligation (anti-money laundering law)
Providing casino games and sportsbook services	Contractual necessity
Fraud prevention and security monitoring	Legitimate interest; Legal obligation
Responsible gaming monitoring and intervention	Legal obligation (PAGCOR responsible gaming guidelines); Legitimate interest
Sending account-related notifications and alerts	Contractual necessity; Legitimate interest
Sending promotional offers and bonuses	Consent (you may opt out at any time)
Analytics and platform improvement	Legitimate interest; Consent (via cookie acceptance)
Regulatory reporting to PAGCOR and law enforcement	Legal obligation

4. How phl163 Uses Your Personal Data

phl163 uses your personal data strictly for the following purposes:

• Account management: Creating and maintaining your phl163 account, processing identity and age verification, and enabling secure login
• Service delivery: Processing deposits and withdrawals in PHP, settling bets and game outcomes, applying bonuses and promotions
• Security and fraud prevention: Monitoring for suspicious activity, detecting duplicate accounts, investigating reported fraud, and preventing money laundering
• Regulatory compliance: Fulfilling PAGCOR licensing obligations, anti-money laundering reporting requirements under Republic Act No. 9160 (Anti-Money Laundering Act), and any lawful orders from Philippine government agencies
• Responsible gaming: Monitoring player activity for signs of problem gambling behavior, enforcing self-exclusion settings, and complying with responsible gaming obligations
• Customer support: Resolving account inquiries, disputes, technical issues, and complaints
• Platform improvement: Analyzing usage patterns to improve phl163's games, features, and overall user experience
• Marketing communications: Sending promotional offers, bonus notifications, and relevant game announcements — only where you have provided consent and have not opted out

5. Data Sharing and Disclosure

phl163 does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for the specified purpose:

5.1 Service Providers and Data Processors

phl163 engages third-party service providers to assist in platform operations. These providers act as data processors under binding agreements and may only process your data on phl163's documented instructions. Categories of service providers include payment processors (GCash, PayMaya, bank partners), game technology providers (software studios supplying casino games), identity verification providers, cloud infrastructure providers, and customer support tools. All service providers are contractually required to implement appropriate data protection measures.

5.2 Regulatory and Law Enforcement Bodies

phl163 is required by Philippine law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other government agencies upon lawful request or as part of mandatory regulatory reporting. phl163 will comply with such requests without prior notice to the affected user where legally required or permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of phl163's business or assets, your personal data may be transferred to the successor entity. Such a transfer will only occur under terms that maintain equivalent data protection standards. You will be notified of any such transfer via the email address on your account.

5.4 Protection of Rights

phl163 may disclose personal data where necessary to enforce its Terms & Conditions, protect the rights and safety of phl163, its users, and the general public, or to investigate or prevent fraud, security threats, or illegal activity.

6. International Data Transfers

Some phl163 service providers may be located outside of the Philippines. Where personal data is transferred internationally, phl163 ensures that adequate safeguards are in place as required by the Data Privacy Act of 2012 and NPC guidance. These safeguards include contractual clauses ensuring equivalent data protection standards and, where applicable, transfer impact assessments. phl163 does not transfer personal data to jurisdictions that do not provide adequate data protection standards without implementing appropriate supplementary measures.

7. Data Retention

phl163 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account registration data: Retained for the duration of the account plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and anti-money laundering law
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act
• Customer support records: Retained for three (3) years from the date of the interaction
• Technical and device data: Retained for twelve (12) months unless required for an ongoing investigation or legal proceeding
• Marketing consent records: Retained until consent is withdrawn, plus a period of two (2) years for compliance documentation purposes

Upon expiry of the applicable retention period, phl163 will securely delete or anonymize your personal data such that it can no longer be attributed to an identified individual.

8. Data Security

phl163 implements technical and organizational security measures appropriate to the risk level of the personal data processed. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phl163 platform
• Encryption of sensitive data fields (passwords, payment details) at rest using industry-standard algorithms
• Two-factor authentication (2FA) available for all phl163 accounts via SMS OTP
• Access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security assessments and penetration testing of the phl163 platform
• Incident response procedures with notification obligations to the NPC and affected users in the event of a personal data breach
• Staff training on data protection obligations and the Data Privacy Act of 2012

While phl163 takes all reasonable precautions, no online platform can guarantee absolute security. You play an important role in protecting your account by using a strong, unique password and enabling 2FA.

9. Cookies and Tracking Technologies

phl163 uses cookies and similar technologies on the phl163.cam website. Cookies are small text files stored on your device that help the platform recognize returning users, maintain session states, and gather analytics data. The categories of cookies used by phl163 are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences (such as language, currency display, and responsible gaming settings) to improve your experience on return visits.
• Analytics Cookies: Collect anonymized data about how users navigate the platform, which pages are visited most frequently, and where users encounter difficulty. This data is used solely to improve phl163.
• Marketing Cookies: Used where you have consented to receive personalized promotional offers based on your game preferences and activity patterns.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the phl163 platform. Withdrawing consent for marketing cookies will not affect your access to games or your account.

10. Your Rights Under the Data Privacy Act of 2012

As a data subject under Philippine law, you hold the following rights with respect to your personal data held by phl163:

• Right to be Informed: The right to know what personal data phl163 collects, why it is processed, and how it is used — as fulfilled by this Privacy Policy.
• Right to Access: The right to request a copy of the personal data phl163 holds about you, including information about how it has been processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your phl163 account settings.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is unlawfully processed, is no longer necessary for its original purpose, or where consent has been withdrawn. Note that this right is subject to overriding legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another service where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, or where processing is based on legitimate interest.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phl163 has violated your data privacy rights.

To exercise any of these rights, please contact phl163's Data Protection Officer using the contact details in Section 13. phl163 will respond to all valid requests within fifteen (15) business days. Identity verification will be required before processing data access or deletion requests to protect your account security.

11. Children's Privacy

phl163 services are strictly for individuals who are 21 years of age or older as required by PAGCOR regulations governing casino-style online gambling in the Philippines. phl163 does not knowingly collect personal data from individuals under 21 years of age. If phl163 becomes aware that an account has been created by or on behalf of a person under the minimum age, the account will be immediately closed and all associated data will be securely deleted, subject to any mandatory legal retention obligations. If you believe a minor has created a phl163 account, please contact us immediately.

12. Changes to This Privacy Policy

phl163 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform operations. The "Last Updated" date at the top of this document indicates the date of the most recent revision. Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — phl163 will provide advance notice via the email address registered to your account or via a prominent notice on the platform. Continued use of phl163 services following notification of material changes constitutes acceptance of the updated Privacy Policy.

13. Contact — Data Protection Officer

For all matters relating to this Privacy Policy, including data subject rights requests, privacy complaints, or general data protection inquiries, please contact the phl163 Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the phl163 platform support widget
• Response Time: phl163 commits to acknowledging all privacy-related communications within three (3) business days and resolving valid requests within fifteen (15) business days

For complaints that cannot be resolved directly with phl163, you may contact the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012 and protecting the data privacy rights of Filipino citizens.

Acknowledgment: By registering for a phl163 account or using any phl163 service, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not consent, you must refrain from using phl163 services and may request account closure with data deletion subject to applicable legal retention obligations.