phil63 Casino — Privacy Policy

phil63.vip ("phil63," "we," "us," or "our") is committed to protecting the privacy and personal data of all players and visitors who interact with the Platform. This Privacy Policy ("Policy") describes the personal information we collect, the purposes for which it is used, the circumstances under which it may be shared, the security measures we employ to protect it, and the rights you hold as a data subject under applicable Philippine law.

This Policy applies to all personal data processed in connection with your use of phil63.vip, including account registration, identity verification, financial transactions, gameplay activity, customer support interactions, and marketing communications. It applies to all users of the Platform regardless of whether they are located in Metro Manila, Cebu City, Davao, or elsewhere in the Philippines.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, phil63 acts as the Personal Information Controller (PIC) in respect of all personal data collected and processed through phil63.vip.

As the Personal Information Controller, phil63 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing complies with applicable Philippine privacy laws. Third-party service providers engaged by phil63 to process data on our behalf act as Personal Information Processors (PIPs) and are bound by data processing agreements that impose obligations equivalent to those applicable to phil63 under the Data Privacy Act.

For all privacy-related inquiries, requests, and complaints, please contact our designated Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

phil63 collects the following categories of personal data in connection with your use of the Platform:

phil63 collects your personal data through the following means:

• Directly from you: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our customer support team, or respond to a promotional offer.
• Automatically: Technical data collected automatically when you access phil63.vip, including IP address, device identifiers, browser information, and cookie data. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 9.
• From third parties: Identity and address verification data obtained from third-party KYC and anti-fraud service providers; transaction confirmation data from payment service providers including GCash and PayMaya; fraud and AML screening data from specialist compliance service providers.
• From regulatory and law enforcement bodies: Where required by law, data may be received from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities in connection with regulatory supervision or investigation.

phil63 processes your personal data for the following purposes and on the following legal bases under the Data Privacy Act of 2012:

• Account registration and management — necessary for the performance of the contract between you and phil63.
• Identity verification (KYC) — necessary for compliance with PAGCOR licensing conditions and Republic Act No. 9160 (Anti-Money Laundering Act).
• Processing deposits and withdrawals — necessary for the performance of the contract; also required for AML and fraud prevention compliance.
• Providing gaming services — necessary for the performance of the contract; includes game history logging, RNG integrity verification, and responsible gaming limit enforcement.
• Customer support — necessary for the performance of the contract and for phil63's legitimate interest in maintaining service quality.
• Fraud prevention and security monitoring — necessary for compliance with legal obligations and for phil63's legitimate interest in protecting the Platform and its users.
• Responsible gaming monitoring — required by PAGCOR's responsible gaming standards; also serves phil63's legitimate interest in player wellbeing.
• Regulatory reporting — necessary for compliance with PAGCOR's reporting requirements and applicable Philippine law.
• Marketing communications — based on your consent, where you have opted in to receive marketing communications from phil63. You may withdraw this consent at any time through your account settings or by contacting support.
• Platform improvement and analytics — based on phil63's legitimate interest in understanding how the Platform is used in order to improve user experience, subject to appropriate privacy-protective measures including aggregation and pseudonymisation where possible.

phil63 does not sell your personal data to third parties. Your data may be shared with the following categories of recipients, strictly on a need-to-know basis and for the purposes described in this Policy:

• KYC and identity verification providers: Third-party services used to verify your identity, age, and the authenticity of your government-issued ID documents.
• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, InstaPay, and any other payment processor required to execute your deposit or withdrawal instructions.
• Fraud prevention and AML compliance services: Third-party providers that assist phil63 in detecting and preventing fraud, money laundering, and other prohibited activities in compliance with Republic Act No. 9160.
• Game software providers: To the extent necessary for the delivery of specific game titles, game providers may receive limited technical session data. No financial or identity data is shared with game software providers beyond what is strictly necessary.
• Customer support platforms: Third-party platforms used to deliver live chat and support ticketing services on phil63.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government bodies, where disclosure is required by law, court order, or regulatory directive.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

phil63 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following the closure or permanent suspension of your account, as required by PAGCOR regulations and Republic Act No. 9160 for AML record-keeping purposes.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC record-keeping requirements.
• Gameplay data: Retained for a period sufficient to resolve disputes and meet regulatory audit requirements, typically three (3) years.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the interaction relates to an ongoing dispute or regulatory matter.
• Marketing preference data: Retained until you withdraw consent or for a maximum of two (2) years from your last interaction with phil63 marketing, whichever is earlier.
• Technical and cookie data: Session cookies are deleted when your browser session ends. Persistent cookies expire in accordance with the durations set out in Section 9. Server log data is typically retained for 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with the Data Privacy Act and the NPC's Guidelines on Data Disposal.

phil63 implements technical, physical, and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Key measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and phil63.vip is encrypted using 256-bit TLS encryption. The padlock in your browser's address bar confirms this encryption is active.
• Access controls: Access to personal data is restricted on a need-to-know basis. Internal systems use role-based access controls, multi-factor authentication, and activity logging for all staff access to player data.
• Data storage security: Personal data at rest is stored in encrypted databases hosted on secure, access-controlled infrastructure. KYC documents are stored in a separate, higher-security tier with additional access restrictions.
• Pseudonymisation and minimisation: Where technically feasible, personal data used for analytics and internal reporting is pseudonymised or aggregated to reduce privacy risk.
• Incident response: phil63 maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk to your rights and interests, phil63 will notify the NPC and affected data subjects in accordance with the Data Privacy Act's 72-hour notification requirement.
• Third-party security assessments: Material third-party service providers that process personal data on phil63's behalf are subject to security assessments prior to engagement and periodic reviews.

phil63.vip uses cookies and similar tracking technologies to operate the Platform effectively, to improve your experience, and to support our security and fraud prevention obligations. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without affecting Platform functionality. No consent is required for strictly necessary cookies under the Data Privacy Act.
• Functional Cookies: Used to remember your preferences, such as your preferred language and responsible gaming settings. These persist for up to 12 months.
• Analytics Cookies: Used to understand how visitors interact with the Platform in aggregate — for example, which game categories are most visited, page load performance, and browser error rates. Analytics data is aggregated and does not identify individual users.
• Security Cookies: Used to detect and prevent fraud, bot access, and account takeover attempts. These are operational security measures and are treated as strictly necessary.

Phil63 does not use third-party advertising or behavioural targeting cookies. You can manage or delete cookies through your browser settings, noting that disabling strictly necessary cookies will affect your ability to use the Platform.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phil63:

To exercise any of the above rights, contact phil63's Data Protection Officer at the address in Section 14. Requests will be acknowledged within 3 business days and resolved within 15 business days in accordance with NPC guidelines. Note that some rights are subject to legal limitations where data must be retained for AML or PAGCOR compliance purposes — phil63 will explain any such limitations clearly when responding to your request.

The phil63 Platform is strictly for individuals who are 21 years of age or older, as required by PAGCOR's regulations governing online gaming in the Philippines. phil63 does not knowingly collect personal data from any person under the age of 21.

Age verification is conducted as part of the KYC process. If phil63 becomes aware that personal data has been collected from a person under 21, that data will be promptly deleted, the associated account will be permanently suspended, and any balance held will be handled in accordance with PAGCOR's guidelines for underage accounts.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to phil63, please contact our Data Protection Officer immediately using the contact information in Section 14.

Some of the third-party service providers used by phil63 — including certain KYC verification, fraud screening, and cloud infrastructure providers — may process personal data outside the Philippines. Where such cross-border transfers occur, phil63 ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act and the NPC's Guidelines on Cross-Border Data Transfers.

Safeguards used by phil63 for cross-border transfers include: contractual clauses that impose data protection obligations on the recipient equivalent to those under the Data Privacy Act; transfers only to recipients in jurisdictions with adequate data protection laws as recognised by the NPC; and transfer impact assessments for high-risk processing contexts.

A list of the categories of third-country recipients to whom data may be transferred is available upon written request to the DPO.

phil63 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, PAGCOR regulatory requirements, or our data processing practices. When material changes are made, phil63 will notify registered players via email or in-platform notification before the changes take effect.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. The current version of this Policy is always accessible at phil63.vip/privacy-policy. We encourage you to review this Policy periodically. Continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy.

phil63 has designated a Data Protection Officer (DPO) as required by Section 21(c) of the Data Privacy Act of 2012. The DPO is responsible for overseeing phil63's compliance with data protection law and for serving as the point of contact for all data subject inquiries and regulatory communications.

To exercise your data subject rights, report a privacy concern, or submit a formal privacy complaint, please contact the DPO:

Email: [email protected]
Subject line: Privacy Inquiry / Data Subject Request
Response time: Within 3 business days (Philippine Standard Time)

If you are not satisfied with phil63's response to a privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph or via the NPC's official complaint procedure.

This Privacy Policy was last updated on January 1, 2026. Previous versions are available upon written request to the DPO.