Privacy Policy

This Privacy Policy applies to all personal data collected, used, stored, or otherwise processed by 62ph in connection with the operation of the 62ph Platform at 62ph.win, including all sub-pages, services, live dealer integrations, payment processing flows, and customer support interactions.

62ph acts as the Data Controller for personal data collected directly from Players and Platform visitors. Where 62ph engages third-party Data Processors, those parties are bound by written Data Processing Agreements that impose obligations consistent with this Policy and applicable Philippine law.

This Policy does not apply to third-party websites, applications, or services that may be linked from the 62ph Platform. 62ph is not responsible for the privacy practices of third-party operators and encourages Players to review the privacy policies of any external service they use.

62ph collects personal data in three principal ways: data provided directly by the Player, data generated automatically through Platform use, and data obtained from third-party verification providers. The table below summarises the categories of data collected.

62ph uses personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your 62ph account; processing login requests; enforcing the one-account-per-person rule; and communicating essential account updates;
• Payment Processing: Facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods; preventing duplicate transactions; and maintaining financial records as required by applicable law;
• Identity & Age Verification (KYC): Confirming that Players are aged 21 or above and are who they claim to be, in compliance with applicable regulatory requirements;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct; monitoring login activity for unauthorised access;
• Regulatory Compliance: Meeting obligations under Philippine law including AML reporting, data privacy compliance, and age verification requirements;
• Responsible Gaming: Monitoring usage patterns to identify potential problem gambling indicators; applying Player-requested deposit limits, loss limits, and self-exclusion instructions;
• Customer Support: Responding to inquiries, resolving disputes, and processing account-related requests via live chat and email;
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game performance, page load speeds, and the overall 62ph user experience;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where the Player has provided explicit consent through account settings, and only via the channels consented to.

Under the Philippine Data Privacy Act of 2012, 62ph relies on the following lawful bases for processing personal data:

• Contract Performance: Processing necessary to provide the gaming platform services you have registered to use — including account management, game access, and payment processing;
• Legal Obligation: Processing required to comply with applicable Philippine law — including AML obligations, KYC requirements, and financial record-keeping regulations;
• Legitimate Interest: Processing for fraud prevention, Platform security, responsible gaming monitoring, and improvement of 62ph services — where 62ph's legitimate interest is not overridden by your rights and interests;
• Consent: Processing for marketing communications and optional data uses where 62ph has obtained your clear, specific, and informed consent. You may withdraw consent at any time through your account settings or by contacting 62ph support without affecting the lawfulness of processing prior to withdrawal.

62ph uses cookies and similar technologies (such as session tokens, local storage, and web beacons) to operate and improve the Platform. The following cookie categories are used:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing Platform functionality;
• Functional Cookies: Store user preferences such as language settings, last-used game category, and display preferences to improve the experience across sessions;
• Analytics Cookies: Collect anonymised data about Platform usage — pages visited, session duration, error frequency — to help 62ph improve service quality. No individually identifiable data is collected for analytics purposes;
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and session hijacking.

62ph does not use third-party advertising cookies or cross-site tracking technologies for targeted advertising. Cookie preferences for non-essential categories can be managed from the cookie consent banner on your first visit to the Platform, or subsequently through your browser settings.

62ph does not sell personal data. We share personal data with third parties only in the following circumstances:

• Payment Processors: GCash (GXI), Maya (PayMaya Philippines), BancNet member banks, InstaPay, and other licensed payment service providers — limited to data necessary to process the specific transaction;
• KYC & Identity Verification Providers: Certified third-party identity verification services used to perform document authentication and biometric checks during the KYC process;
• Live Dealer & Game Providers: Game studios including Evolution Gaming, Pragmatic Play, PG Soft, and Jili Games — limited to session tokens and anonymised player identifiers required to operate the game session. Full personal details are not shared with game providers;
• Fraud & AML Prevention Services: Certified anti-money laundering screening and fraud detection providers who process transactional data under binding data processing agreements;
• Legal & Regulatory Authorities: Philippine government agencies, the National Privacy Commission, law enforcement, and other regulatory bodies — where disclosure is required by applicable law, court order, or regulatory direction;
• Business Continuity: Where 62ph undergoes a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity, subject to the same privacy obligations set out in this Policy.

Some 62ph Data Processors — including live dealer game providers and certain fraud prevention services — may process personal data outside the Philippines. Where such international transfers occur, 62ph ensures that adequate safeguards are in place, including:

• Transfers to jurisdictions recognised as providing adequate data protection under applicable Philippine regulatory guidance;
• Standard contractual clauses approved by the National Privacy Commission or equivalent authority, binding the recipient to obligations consistent with the Data Privacy Act;
• Binding corporate rules where the recipient is part of the same corporate group as 62ph.

62ph will not transfer personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards. You may request information about specific international transfers by contacting 62ph's Data Protection Officer at the address set out in Section 16.

62ph retains personal data for the duration necessary to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. 62ph conducts periodic data audits to ensure retention schedules are being followed across all processing systems.

Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to personal data that 62ph processes about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request." 62ph will respond within thirty (30) calendar days.

62ph implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data in transit is protected by 256-bit TLS encryption. Passwords are stored using bcrypt hashing with unique per-user salts. Payment credentials are tokenised and not stored in raw form on 62ph systems;
• Access Controls: Personal data access is restricted to 62ph staff who require it to perform their job functions. Access is governed by role-based permissions, regularly reviewed and audited;
• Two-Factor Authentication: Available to all Players for account login; mandatory for 62ph administrative system access;
• Intrusion Detection: 62ph systems are monitored for suspicious activity, including brute-force login attempts, unusual transaction patterns, and unauthorised data access;
• Physical Security: Server infrastructure is hosted in ISO 27001-certified data centres with physical access controls, redundant power, and environmental monitoring;
• Penetration Testing: 62ph engages independent security researchers to conduct regular penetration testing of Platform infrastructure and applications;
• Staff Training: All 62ph staff with access to personal data complete mandatory data privacy training upon onboarding and annually thereafter.

62ph enforces age verification at registration through mandatory date-of-birth declaration and, upon the first withdrawal request, through KYC document verification. Registration attempts where the declared age is below 21 are automatically rejected by the Platform. If you believe that a minor has accessed or attempted to access the 62ph Platform, please report this immediately to [email protected].

62ph sends marketing communications — including promotional offers, bonus announcements, VIP programme updates, and game launch notifications — only to Players who have provided explicit consent through their account settings. Consent is obtained separately for each communication channel (SMS, email, in-platform notifications).

You may withdraw marketing consent at any time by:

• Updating your communication preferences in your 62ph account settings under Profile → Notifications;
• Using the unsubscribe link included in every marketing email; or
• Contacting 62ph support via live chat or at [email protected].

Withdrawal of marketing consent does not affect your ability to use the Platform, and 62ph will continue to send essential account communications (deposit confirmations, withdrawal notifications, security alerts, and KYC updates) which are not marketing in nature and are necessary for account operation.

In the event of a personal data breach that is likely to result in a real risk to the rights and freedoms of affected data subjects, 62ph will:

• Notify the National Privacy Commission of the Philippines within seventy-two (72) hours of becoming aware of the breach, where feasible;
• Notify affected Players without undue delay where the breach is likely to result in a high risk to their personal data rights — including the nature of the breach, categories and approximate number of data subjects affected, likely consequences, and measures taken or proposed to address the breach;
• Maintain an internal register of all personal data breaches, including those that do not require notification to the Commission, for audit and compliance purposes.

62ph maintains a documented Data Breach Response Plan, reviewed and updated annually. Staff are trained to identify and report potential breaches to the Data Protection Officer within 24 hours of discovery.

62ph reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, Platform features, or data processing practices. Material changes will be communicated to Players via:

• A prominent notice on the 62ph Platform for a minimum of fourteen (14) days before the changes take effect; and/or
• An email or in-platform notification to registered Players' contact details.

Minor updates — such as corrections of typographical errors or clarifications of existing provisions — may take effect immediately upon publication. The effective date of the current version is indicated at the top of this document. Continued use of the Platform after the effective date constitutes acknowledgment of the updated Policy.

The most current version of this Privacy Policy is always available at 62ph.win/privacy-policy.

For any questions, concerns, or requests regarding this Privacy Policy or 62ph's personal data processing practices, please contact:

• Data Protection Officer (DPO): [email protected] — Subject line: "Privacy / DPO Request"
• General Support: 24/7 live chat via the 62ph Platform
• Response Time: Data subject rights requests are responded to within 30 calendar days; general privacy inquiries within 5 business days

If you believe that 62ph has not adequately addressed your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the National Privacy Commission's official website.