Data Controller
The data controller responsible for the personal data of 62ph platform users is the operator of the 62ph online gaming platform, accessible at 62ph.one (hereinafter referred to as "62ph," "we," "us," or "the Company").
As data controller, 62ph determines the purposes and means by which personal data collected through the 62ph platform is processed. All data processing activities conducted by 62ph are subject to this Privacy Policy and the applicable provisions of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
62ph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data privacy obligations and serving as the point of contact for all player data rights requests and NPC communications. Contact details are provided in Section 17 of this Policy.
Scope of This Privacy Policy
This Privacy Policy applies to all personal data collected, processed, or stored by 62ph in connection with your use of the 62ph platform, including:
- The 62ph website accessible at 62ph.one and all associated pages and subdomains
- The 62ph account registration and login process
- All gaming activity conducted through the 62ph platform, including casino games, sportsbook, and specialty games
- All financial transactions, including deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Coins.ph, and USDT TRC20
- Communications between you and 62ph customer support, including live chat and email
- Participation in promotions, loyalty programs, tournaments, and bonus campaigns
This Privacy Policy does not apply to the privacy practices of third-party game providers, payment processors, or any other external services whose own privacy policies govern the handling of data within their respective systems.
Personal Data We Collect
62ph collects the following categories of personal data from players, depending on the stage of your interaction with the platform:
3.1 Registration Data
When you create a 62ph account, we collect: full legal name, date of birth, Philippine mobile number, email address, and account login credentials (password stored in encrypted form only).
3.2 Identity Verification (KYC) Data
For the purposes of KYC compliance required prior to your first withdrawal, 62ph may collect: copies of government-issued photo identification (PhilSys ID, Passport, Driver's License, UMID, or equivalent), proof of address where required, and any additional documents requested by 62ph's compliance team in connection with regulatory obligations.
3.3 Financial Data
We collect transaction data including deposit and withdrawal amounts, payment method identifiers (e.g., GCash account numbers, bank account names — not full card numbers), and transaction timestamps. 62ph does not store complete credit or debit card numbers.
3.4 Gaming Activity Data
62ph records your gaming activity on the platform, including: game history, bet amounts, game outcomes, session durations, account balance history, and bonus usage records. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.
3.5 Technical & Device Data
When you access the 62ph platform, we automatically collect: IP address, device type and operating system, browser type and version, geographic location (country and region level), session timestamps, pages visited, and referral source. This data is collected through cookies and server logs as described in Section 11.
3.6 Communications Data
We retain records of your communications with 62ph customer support, including live chat transcripts and email correspondence, for quality assurance, dispute resolution, and regulatory compliance purposes.
Sensitive Personal Information: KYC identity documents (government IDs) constitute sensitive personal information under RA 10173 and are afforded the highest level of protection within 62ph's data handling practices. Access to KYC documents is restricted to authorized compliance personnel only.
3.7 Data Types Summary
| Data Category | Examples | Collected At |
|---|---|---|
| Registration Data | Name, mobile number, date of birth | Account registration |
| KYC / Identity Data | Government ID, proof of address | Pre-withdrawal verification |
| Financial Data | Deposit/withdrawal records, GCash reference numbers | Each transaction |
| Gaming Activity | Bet history, game results, session logs | During platform use |
| Technical / Device | IP address, browser, device type | Each platform visit |
| Communications | Support chat transcripts, emails | When contacting support |
How We Collect Personal Data
62ph collects personal data through the following channels and methods:
- Directly from you: Information you voluntarily provide during account registration, the KYC process, deposit and withdrawal requests, contact form submissions, and communications with customer support.
- Automatically through the platform: Technical and device data collected through server logs, cookies, and similar technologies when you access and navigate the 62ph website. See Section 11 for full cookie details.
- From payment providers: Transaction confirmation data from GCash, PayMaya, and other payment processors to verify deposits and process withdrawals.
- From game providers: Gaming outcome and session data generated by third-party game providers whose systems are integrated into the 62ph platform.
- From identity verification services: Where 62ph uses third-party KYC verification tools, data may be shared with and returned from those services solely for the purpose of identity verification.
Purposes of Processing
62ph processes your personal data for the following specific, legitimate purposes:
- Account Management: Creating and maintaining your 62ph account, verifying your identity, managing login credentials and session security.
- Platform Access and Gaming: Enabling your participation in all 62ph Casino games, the sportsbook, bingo, and other platform features available to verified account holders.
- Payment Processing: Processing deposits and withdrawals via GCash, PayMaya, and other accepted payment methods; reconciling transactions; and maintaining financial records.
- Legal and Regulatory Compliance: Fulfilling our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws — including KYC verification, transaction monitoring, suspicious activity reporting, and record retention.
- Customer Support: Responding to your queries, resolving disputes, processing responsible gaming requests, and maintaining communication records for quality assurance.
- Fraud Prevention and Security: Detecting and preventing unauthorized access, fraud, money laundering, and other prohibited activities on the platform.
- Platform Improvement: Analyzing anonymized usage data to improve the 62ph platform, optimize the user experience, and develop new features.
- Promotions and Loyalty: Administering bonus programs, the VIP loyalty program, and tournament events for which you are an active participant.
- Marketing Communications: Sending promotional communications about 62ph offers where you have provided consent to receive such communications. You may withdraw this consent at any time.
Legal Bases for Processing
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 62ph processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to fulfill the contract between you and 62ph — specifically, to operate your account, process transactions, and provide gaming services as described in the 62ph Terms & Conditions.
- Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing requirements, AMLA obligations, and NPC reporting requirements.
- Legitimate Interest: Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for marketing communications and non-essential cookies, where your freely given, specific, and informed consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
Data Sharing with Third Parties
62ph does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared with third parties only in the following limited circumstances:
7.1 Service Providers
62ph engages third-party service providers to support platform operations, including: payment processors (GCash/GXI, PayMaya/PLDT, BPI, BDO, Metrobank), KYC verification service providers, cloud infrastructure and hosting providers, customer support platform operators, and email and communication service providers. These providers process data only on 62ph's instructions and are contractually bound by data processing agreements that require them to protect your data to the same standard required by this Privacy Policy.
7.2 Game Providers
Third-party game providers integrated into the 62ph Casino platform (such as Evolution Gaming, JILI Gaming, PG Soft, Pragmatic Play, and others) receive limited player session data necessary for the delivery of game services — typically a session token and wallet balance. These providers operate under their own terms of service and data processing agreements with 62ph.
7.3 Regulatory and Law Enforcement Authorities
62ph is required by Philippine law to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies where legally compelled to do so by court order, regulatory directive, or statutory obligation. 62ph will notify affected players of such disclosures to the extent permitted by law.
7.4 Business Transfers
In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all assets of 62ph, player data may be transferred to the successor entity, subject to that entity's agreement to be bound by a privacy policy that affords substantially equivalent protections to this Policy. Affected players will be notified of any such transfer.
No Third-Party Marketing: 62ph categorically does not share your personal data with advertisers, data brokers, or third-party marketers. Your data stays within 62ph's controlled environment.
International Data Transfers
Some of 62ph's third-party service providers — including certain game providers and cloud infrastructure vendors — may be located or operate servers in countries outside the Philippines. Where personal data is transferred internationally, 62ph ensures that appropriate safeguards are in place to protect your data to a standard consistent with the Data Privacy Act of 2012 and the standards established by the National Privacy Commission.
Such safeguards include: data processing agreements incorporating standard contractual clauses, transfer to jurisdictions assessed by the NPC as providing adequate data protection, or equivalent protective measures as recognized under applicable Philippine regulations.
Data Retention
62ph retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following retention periods apply as general guidelines:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years post-closure | PAGCOR compliance, AMLA |
| KYC / Identity Documents | Duration of account + 5 years post-closure | AMLA, PAGCOR KYC requirements |
| Financial Transaction Records | Minimum 5 years from transaction date | AMLA, BIR tax regulations |
| Gaming Activity Logs | 3 years from session date | PAGCOR game audit requirements |
| Customer Support Records | 3 years from last interaction | Dispute resolution, legitimate interest |
| Marketing Consent Records | Duration of consent + 3 years | Data Privacy Act compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 62ph's data disposal procedures. Anonymized and aggregated data that cannot be used to identify any individual may be retained indefinitely for analytical purposes.
Security Measures
62ph implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption in Transit: All data transmitted between your device and the 62ph platform is protected by 256-bit SSL/TLS encryption.
- Encryption at Rest: Sensitive personal data, including passwords and KYC documents, is stored in encrypted form using industry-standard algorithms.
- Access Controls: Access to personal data within 62ph is granted only to authorized personnel on a strict need-to-know basis. Employee access is governed by role-based access control policies.
- Authentication: Internal systems require multi-factor authentication for personnel with access to personal data. Player accounts support SMS-based two-factor authentication.
- Security Monitoring: 62ph employs continuous monitoring for unauthorized access attempts, anomalous login patterns, and potential data breaches.
- Vendor Security: Third-party service providers are required to maintain security standards commensurate with 62ph's requirements as a condition of their engagement.
- Regular Audits: 62ph conducts regular internal security reviews and, where required by PAGCOR, participates in external audits of platform security practices.
While 62ph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. Players are strongly encouraged to use strong, unique passwords and to enable two-factor authentication on their 62ph accounts.
Cookies & Similar Technologies
62ph uses cookies, session tokens, and similar browser-based technologies to operate the platform and improve your experience. Cookies are small text files stored on your device when you visit the 62ph website.
11.1 Types of Cookies Used
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential / Session Cookies | Maintain your login session, store language preferences, prevent session tampering | No — required for platform operation |
| Functional Cookies | Remember game preferences, display settings, and last-visited sections | Yes — via browser settings |
| Analytics Cookies | Measure platform usage, identify popular features, support platform improvements (anonymized data) | Yes — via browser settings |
| Security Cookies | Detect fraudulent or unauthorized access, support two-factor authentication flows | No — required for account security |
11.2 Managing Cookies
You may control cookie preferences through your browser's privacy settings. Most modern browsers (Chrome, Safari, Firefox, Edge) allow you to view, block, or delete cookies. Note that disabling essential session cookies will prevent you from logging in to your 62ph account. 62ph does not use third-party advertising cookies or cross-site tracking technologies.
Minors and Age Verification
The 62ph platform is strictly restricted to persons who are 21 years of age or older, in accordance with PAGCOR regulations governing online gambling in the Philippines. 62ph does not knowingly collect or process personal data from individuals under the age of 21.
Age verification is conducted as part of the account registration and KYC process. If 62ph becomes aware that personal data has been collected from a person under the age of 21, the account will be immediately closed and all associated personal data will be deleted from active systems, subject to any minimum retention obligations required by law in connection with the investigation of underage registration.
If you believe a minor has registered a 62ph account, please contact our support team immediately at [email protected]. 62ph takes underage gambling prevention seriously and will take immediate action upon receiving such a report.
Exercising Your Privacy Rights
To exercise any of the data rights described in this Privacy Policy — including access, rectification, deletion, objection, or withdrawal of consent — please submit your request through one of the following channels:
- Live Chat: Available 24/7 through the 62ph website at 62ph.one
- Email: [email protected]
Please include in your request: your full name as registered on your 62ph account, your registered mobile number, a clear description of the right you wish to exercise and the specific data it relates to, and a copy of a valid ID for identity verification purposes.
62ph will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or where 62ph receives a high volume of requests, this period may be extended by a further 30 days, with notice provided to you within the initial 30-day period.
62ph reserves the right to decline requests that are manifestly unfounded, excessive, or repetitive, or where fulfilling the request would conflict with 62ph's legal obligations under Philippine law. Where a request is declined, 62ph will provide a written explanation of the reasons.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 62ph will comply with its breach notification obligations under the Data Privacy Act of 2012 and NPC Circular No. 16-03 (Personal Data Breach Management).
Specifically, 62ph will:
- Notify the National Privacy Commission within 72 hours of becoming aware of a breach that is likely to result in a real risk of serious harm to affected data subjects.
- Notify affected players without undue delay where the breach is likely to result in a high risk to their rights and freedoms, providing clear information about the nature of the breach, the data affected, and the steps 62ph is taking in response.
- Maintain internal breach records documenting the facts of the breach, its effects, and the remedial actions taken.
Third-Party Links and Services
The 62ph platform integrates third-party services including game providers, payment gateways, and customer support tools. These third parties operate their own privacy policies and data practices, which govern any personal data processed within their respective systems.
62ph is not responsible for the privacy practices of third-party service providers. Players are encouraged to review the privacy policies of relevant third-party providers — particularly payment providers such as GCash and PayMaya — to understand how those services handle personal data.
Updates to This Privacy Policy
62ph reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this Policy will be revised accordingly.
Where updates to this Privacy Policy are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — 62ph will provide advance notice to registered users via the registered contact details on file or through a prominent notice on the platform, with not less than fourteen (14) days' notice where practicable.
Your continued use of the 62ph platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not agree with any revision, you may request account closure by contacting 62ph customer support.
Contact & Data Protection Officer
For all privacy-related inquiries, data rights requests, or concerns about 62ph's data handling practices, please contact our Data Protection Officer through the following channels:
- Data Protection Officer (DPO) — 62ph
- Email: [email protected]
- Subject line for DPO inquiries: "Data Privacy Request — [Your Registered Mobile Number]"
- Live Chat: Available 24/7 at 62ph.one — please identify your inquiry as a data privacy matter at the start of the chat
- Response time: Acknowledgment within 24 hours; full response within 30 calendar days
National Privacy Commission
If you are not satisfied with 62ph's response to a data privacy complaint or request, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. The NPC is the regulatory authority responsible for enforcing the Data Privacy Act of 2012 and its implementing regulations.
Reminder: 62ph support staff will never ask for your account password, SMS OTP codes, or GCash PIN through any channel, including email or live chat. Any communication requesting such information is not from 62ph and should be reported to us immediately.