68phjoy Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data 68phjoy collects, how it is used, who it may be shared with, and how you can exercise your rights as a data subject under Philippine law.
Quick Summary: 68phjoy collects personal data necessary to operate a safe, compliant, and personalised gaming platform for Filipino players. We do not sell your personal data to third parties. We comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This document tells you exactly what we collect, why we collect it, and what your rights are.
1 Introduction
68phjoy ("we", "us", "our", or "the Platform") operates an online casino and sports betting platform accessible at https://68phjoy.org, serving registered players based in the Philippines. This Privacy Policy describes how 68phjoy, as the data controller, collects, processes, stores, and protects the personal information of its users ("you", "your", or "the data subject") in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR") as enforced by the National Privacy Commission ("NPC") of the Philippines.
By registering for and using the 68phjoy platform, you acknowledge that you have read, understood, and agreed to the data processing practices described in this Privacy Policy. If you do not agree with any provision of this Policy, you must discontinue use of the Platform and contact our support team to request account closure.
This Privacy Policy should be read together with the 68phjoy Terms & Conditions, which govern your use of the Platform as a whole. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a matter specifically relating to data privacy, this Privacy Policy shall prevail.
2 Personal Data We Collect
68phjoy collects personal data in the following categories. We collect only what is necessary to deliver our services, meet regulatory obligations, and maintain the security and integrity of the Platform.
2.1 Registration & Identity Data
- Full legal name (as it appears on your government-issued ID);
- Date of birth (used to verify the 21+ age requirement under PAGCOR regulations);
- Gender;
- Residential address within the Philippines (including barangay, city/municipality, and province);
- Nationality;
- Government-issued identification number (e.g., PhilSys number, passport number, UMID, LTO licence number, COMELEC Voter's ID, PRC ID number).
2.2 Contact Data
- Email address registered to your 68phjoy account;
- Philippine mobile number (Globe, Smart, DITO, or subsidiary networks) used for OTP authentication and account communications;
- Optional secondary contact details provided voluntarily by you.
2.3 Financial & Transaction Data
- GCash or PayMaya mobile wallet numbers linked to your account;
- Bank account details for BPI, BDO, Metrobank, or UnionBank withdrawals (account name and account number only — 68phjoy does not store full bank login credentials);
- Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used;
- Cryptocurrency wallet addresses used for crypto deposits or withdrawals, where applicable;
- Records of bonus credits applied to your account and wagering activity associated with promotional offers.
2.4 Gaming Activity Data
- Game session logs, including game type, stake amount, outcome, and timestamp;
- Betting history across all game categories (slots, live casino, sports betting, bingo, arcade);
- Responsible gaming settings you have applied to your account, including deposit limits, session time reminders, cooling-off periods, and self-exclusion requests;
- Bonus usage history and wagering progress records.
2.5 Technical & Device Data
- IP address at the time of login and during active sessions;
- Device type (desktop, mobile, tablet), operating system, and browser version;
- Geolocation data at the country or region level, derived from your IP address, used to verify that you are accessing the Platform from an eligible location;
- Session duration and navigation patterns within the Platform;
- Cookies and similar tracking technologies as described in Section 7 of this Policy.
2.6 Communications Data
- Records of your interactions with the 68phjoy customer support team, including live chat transcripts and email correspondence;
- Feedback, complaints, or dispute submissions made through any 68phjoy communication channel;
- Survey responses or voluntary feedback submitted through in-platform prompts.
3 How We Collect Your Data
68phjoy collects personal data through the following channels and methods:
| Collection Method | Examples |
|---|---|
| Direct submission | Registration form, KYC document upload, deposit/withdrawal requests, support chat, email, feedback forms |
| Automated collection | Platform activity logs, game session data, device fingerprinting, cookies and local storage, IP logging |
| Third-party payment providers | Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and cryptocurrency processors |
| Identity verification services | Confirmation of government ID validity from authorised KYC/AML verification service providers operating under Philippine law |
| Regulatory disclosures | Information received from PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), or other Philippine government bodies in the course of compliance activities |
4 Legal Basis for Processing
Under the Data Privacy Act of 2012, 68phjoy processes your personal data on the basis of one or more of the following lawful grounds:
- Consent: Where you have given clear, informed, and specific consent for a particular processing activity — such as opting in to marketing communications or participating in a promotional survey;
- Contractual necessity: Processing that is necessary to perform our obligations under the Terms & Conditions you have entered into with 68phjoy, including account management, game operation, and payment processing;
- Legal obligation: Processing required to comply with Philippine laws and regulations, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), the Electronic Commerce Act (RA 8792), and lawful directions from the NPC or other competent authorities;
- Legitimate interests: Processing necessary for 68phjoy's legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security, and service improvement analytics;
- Vital interests: Processing strictly necessary to protect life or safety, including responsible gaming interventions where a player may be at risk of serious harm.
5 How We Use Your Personal Data
68phjoy uses the personal data we collect for the following specific purposes:
5.1 Account Management & Service Delivery
To create, verify, maintain, and manage your 68phjoy player account; to process deposits and withdrawals via your chosen Philippine payment method; to provide access to the full range of games and betting markets on the Platform; and to personalise your in-platform experience based on your gaming history and preferences.
5.2 Identity Verification & KYC Compliance
To verify your identity, age, and eligibility to participate in online gambling in the Philippines in compliance with PAGCOR regulations; to satisfy our obligations under the Anti-Money Laundering Act; and to conduct ongoing due diligence checks as required by applicable law.
5.3 Fraud Prevention & Platform Security
To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, account takeovers, and other prohibited conduct described in the 68phjoy Terms & Conditions; to monitor for anomalous betting patterns or transaction behaviour that may indicate abuse of bonus systems or collusion; and to maintain the integrity of our Random Number Generator (RNG) certified game outcomes.
5.4 Responsible Gaming
To monitor your gaming activity for indicators of problem gambling; to honour deposit limits, cooling-off periods, and self-exclusion requests you have applied to your account; and to proactively reach out if our systems identify patterns consistent with compulsive or harmful gambling behaviour, in accordance with our obligations to Filipino players and PAGCOR's responsible gaming framework.
5.5 Customer Support
To respond to your queries, complaints, and dispute submissions through the 68phjoy live chat and email support channels; to maintain records of support interactions for quality assurance and dispute resolution purposes; and to provide follow-up communications where required to resolve open matters.
5.6 Legal & Regulatory Compliance
To fulfil reporting obligations to PAGCOR, the AMLC, the NPC, and other Philippine government authorities; to respond to valid court orders, subpoenas, or regulatory investigations; and to enforce and defend 68phjoy's legal rights under Philippine law.
5.7 Marketing Communications (Consent-Based Only)
Where you have explicitly opted in to receive promotional communications, 68phjoy may use your contact details to send you information about new games, special promotions, deposit bonuses, and platform updates. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting the support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal, nor does it affect your continued use of the Platform.
6 Data Sharing & Third Parties
68phjoy does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary and on the basis of appropriate data processing agreements or legal obligations:
6.1 Payment Service Providers
GCash, PayMaya (Maya), BPI, BDO, Metrobank, UnionBank, and authorised cryptocurrency payment processors receive transaction data necessary to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and applicable Philippine financial regulations.
6.2 KYC & Identity Verification Providers
Authorised third-party identity verification and AML screening service providers may receive your identity document details and personal information for the sole purpose of conducting legally required verification checks. These providers are contractually prohibited from using your data for any purpose beyond the verification service.
6.3 Technology & Infrastructure Providers
Cloud hosting, database management, cybersecurity, and platform analytics providers who supply the technical infrastructure on which 68phjoy operates may have access to personal data as data processors. All such providers are bound by data processing agreements requiring them to maintain security standards equivalent to those required by the DPA.
6.4 Game Content Providers
Licensed game software providers whose content is available on the 68phjoy platform may receive anonymised or pseudonymised game session data necessary for game functionality, RTP auditing, and technical support. Identifiable personal data is not shared with game providers beyond what is strictly required for game delivery.
6.5 Regulatory & Law Enforcement Authorities
PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), the National Bureau of Investigation (NBI), the Philippine National Police (PNP), and other competent Philippine government authorities may receive personal data where disclosure is required by law, court order, or valid regulatory direction. 68phjoy will notify you of such disclosures where permitted by law to do so.
7 Cookies & Tracking Technologies
68phjoy uses cookies and similar technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you access a website. The following categories of cookies are used on the 68phjoy platform:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, enforce security controls, store your responsible gaming settings, and ensure the Platform functions correctly | No — essential to Platform operation |
| Functional | Remember your language preference, display settings, and game lobby layout preferences | Yes — disabling may affect personalisation |
| Performance / Analytics | Collect anonymised data on how players navigate the Platform, which games are most accessed, and where technical errors occur — used to improve Platform performance | Yes — via cookie preferences |
| Marketing | Track which promotional offers have been viewed or actioned, and support consent-based re-engagement campaigns for opted-in players | Yes — opt out via account settings |
You can manage your cookie preferences through your browser settings or through the 68phjoy cookie preference centre accessible from the Platform footer. Please note that disabling strictly necessary cookies will prevent you from accessing the Platform. 68phjoy does not use third-party advertising network cookies or allow external ad networks to place cookies on the Platform.
8 Data Retention
68phjoy retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:
- Account data and KYC records: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR licensing conditions and AML record-keeping obligations under RA 9160;
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with BIR and AMLC record-keeping requirements;
- Game session logs: Retained for a minimum of one (1) year from the date of each session for dispute resolution purposes; aggregated anonymised data may be retained indefinitely for platform analytics;
- Customer support records: Retained for three (3) years from the date of the most recent interaction in a support thread;
- Marketing consent records: Retained until you withdraw consent and for a further two (2) years to demonstrate compliance with consent management obligations;
- Self-exclusion records: Retained indefinitely to ensure that self-excluded individuals cannot re-register on the Platform, even after the nominal exclusion period has lapsed.
Upon expiry of the applicable retention period, 68phjoy will securely delete or anonymise personal data in a manner that prevents reconstruction of identifiable information. Where anonymisation rather than deletion is used, the resulting data no longer constitutes personal data under the DPA and is not subject to data subject rights.
9 Data Security
68phjoy implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- Encryption in transit: All data transmitted between your device and the 68phjoy platform is encrypted using TLS (Transport Layer Security) protocols;
- Encryption at rest: Sensitive personal data stored in our databases is encrypted using industry-standard encryption algorithms;
- Access controls: Access to personal data is restricted to 68phjoy personnel and authorised processors who have a legitimate need to access such data for their job function, on a strict least-privilege basis;
- Two-Factor Authentication: SMS OTP-based two-factor authentication is available to all registered players and is strongly recommended;
- Penetration testing and vulnerability scanning: 68phjoy conducts regular security assessments of the Platform to identify and remediate vulnerabilities;
- Incident response: 68phjoy maintains a data breach response plan. In the event of a personal data breach that poses a real risk of serious harm, 68phjoy will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects where required by NPC guidelines.
10 Your Rights as a Data Subject
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 68phjoy. These rights may be exercised by contacting the 68phjoy Data Privacy Officer through the contact details provided in Section 14 of this Policy.
To exercise any of the above rights, please submit a written request to the 68phjoy Data Privacy Officer via email at the address listed in Section 14. We will acknowledge receipt of your request within five (5) business days and will respond substantively within fifteen (15) business days, as required by NPC guidelines. Requests that are complex or voluminous may take up to thirty (30) business days; we will inform you if this extended period applies.
11 Children's Privacy & Age Restriction
If 68phjoy discovers or has reasonable grounds to believe that an account has been registered by or on behalf of an individual under 21 years of age, the account will be immediately suspended pending investigation. Any personal data collected in connection with an underage account will be permanently deleted following the conclusion of any required regulatory reporting, to the maximum extent permitted by law.
Parents and guardians who believe that their child or ward under the age of 21 has registered on the 68phjoy platform are encouraged to notify us immediately through the live chat support channel so that appropriate action can be taken without delay.
12 Third-Party Links & Integrations
The 68phjoy platform may display informational references or in-game elements provided by third-party game content licensors. While 68phjoy takes care to work only with reputable and regulated providers, we are not responsible for the privacy practices of third-party game developers, payment gateway interfaces, or any other external services you may access in connection with your use of the Platform.
This Privacy Policy applies solely to personal data collected and processed by 68phjoy through the 68phjoy platform. If you have concerns about how a third-party service provider handles your data, you should refer to that provider's privacy policy directly.
13 Changes to This Privacy Policy
68phjoy may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, we will notify registered players through an in-platform notification displayed upon login, an email to your registered email address, or a prominent notice on the 68phjoy Privacy Policy page.
The effective date at the top of this Policy indicates when the current version entered into force. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how 68phjoy protects your personal data.
If a proposed change to this Privacy Policy would require your fresh consent under the DPA — for example, a new processing purpose that is not covered by the current version — 68phjoy will seek that consent separately before the new processing activity commences.
14 Contact & Data Privacy Officer
If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 68phjoy, please contact our designated Data Privacy Officer (DPO) through the following channels:
- Live Chat: Available 24/7 through the 68phjoy platform — for general privacy queries and urgent data concerns
- Email (DPO): [email protected] — for formal data subject rights requests, complaints, and written privacy enquiries. Please include "Data Privacy Request" in the subject line.
- Response Time: Initial acknowledgement within 5 business days; substantive response within 15 business days
If you are not satisfied with 68phjoy's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which oversees enforcement of the Data Privacy Act of 2012.
68phjoy's Data Protection Commitments
Every Filipino player on the 68phjoy platform deserves to know exactly how their data is protected. Here are the six core commitments we stand by.
End-to-End Encryption
All data you submit to 68phjoy — from your registration details to your GCash wallet number — travels over TLS-encrypted connections. Data stored in our systems is encrypted at rest using industry-standard algorithms, ensuring your information is never exposed in plaintext.
DPA-Compliant KYC
Our Know-Your-Customer process strictly follows the requirements of the Data Privacy Act of 2012. Identity documents submitted for KYC are processed only by authorised personnel and approved verification partners, then retained only for the minimum period required by PAGCOR and AMLC regulations.
No Data Selling — Ever
68phjoy will never sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used only for the purposes disclosed in this Privacy Policy: running your account, processing payments, and keeping the platform secure for all Filipino players.
Full Control Over Your Data
You can access, correct, and in many cases delete the personal data 68phjoy holds about you. Your marketing communication preferences can be updated at any time from your account dashboard, and our Data Privacy Officer is available to assist with any formal data subject rights request.
Clear Retention Limits
We do not hold your data indefinitely. Retention periods are set in line with PAGCOR licensing conditions, the Anti-Money Laundering Act, and NPC guidelines. When data is no longer required, it is securely deleted or irreversibly anonymised — not simply archived.
Breach Notification Ready
In the unlikely event of a personal data breach, 68phjoy's incident response plan ensures we notify the National Privacy Commission within 72 hours and inform affected players promptly, in full compliance with NPC Circular 16-03 and the DPA's breach notification requirements.
Experience Safe, Regulated Gaming at 68phjoy
Now that you know how 68phjoy protects your personal data, explore the full platform. From slots and live casino to sports betting and bingo — all PAGCOR-regulated, all designed with Filipino players in mind. Your privacy is always protected.