68gl Casino – Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 68gl ("the Platform", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of users ("you", "the player", "the data subject") who register for and use the 68gl online gaming platform accessible at 68gl.club.

68gl is committed to handling your personal data in a transparent, lawful, and responsible manner consistent with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. By registering a 68gl account or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

68gl operates as the personal information controller (PIC) for all data collected through the platform. As the PIC, 68gl determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection law.

For all data privacy inquiries, subject access requests, and complaints, you may contact 68gl's designated Data Protection Officer (DPO) through the live chat support channel available in your account dashboard or by written communication to the email address: [email protected] (plain text — not a link).

3. Categories of Personal Data We Collect

3.1 Identity Data

Full legal name, date of birth, nationality, and copies of government-issued Philippine identification documents (e.g., UMID, PhilSys, passport, driver's licence, voter's ID) submitted during the KYC verification process.

3.2 Contact Data

Philippine mobile number (primary account identifier), email address, and residential address (province, city/municipality, barangay). This information is used for account management, transaction notifications, and regulated player communications.

3.3 Financial Data

GCash-registered mobile number and account name, PayMaya account details, bank account name and number (for BPI, BDO, or Metrobank withdrawals), transaction histories including deposits, withdrawals, and bonus activities, and source-of-funds documentation where required by PAGCOR AML compliance obligations.

3.4 Technical and Usage Data

IP address, device type and operating system, browser type and version, session timestamps, pages and game categories visited, game activity records (bets placed, game results, session duration), and crash or error logs.

3.5 Communication Data

Records of all support interactions conducted through the 68gl live chat system, including chat transcripts, support ticket contents, and any attachments submitted by players in connection with support requests.

3.6 Responsible Gaming Data

Records of any deposit limits, session limits, cool-down periods, or self-exclusion requests that you voluntarily set through your 68gl account dashboard. This data is processed to enforce your chosen restrictions and to support 68gl's responsible gaming obligations.

4. How We Collect Your Data

68gl collects personal data through the following means:

• Direct provision: Data you enter during account registration, KYC verification, cashier transactions, live chat support, and promotional claim forms;
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access the 68gl platform;
• Third-party payment providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, and Metrobank when you initiate a deposit or withdrawal;
• Identity verification services: Data returned by third-party KYC and AML screening providers engaged by 68gl to meet regulatory compliance obligations.

5. Legal Basis for Processing

68gl processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and 68gl — account creation, cashier operations, game provision, and customer support;
• Legal obligation: Processing required to comply with PAGCOR regulatory requirements, AML obligations under Republic Act No. 9160 (AMLA), and tax reporting requirements under applicable Philippine law;
• Legitimate interests: Processing necessary for fraud detection, platform security, responsible gaming monitoring, and product improvement — balanced against your rights and interests;
• Consent: Processing for direct marketing communications and optional analytics features, where you have provided explicit consent that you may withdraw at any time.

6. How We Use Your Personal Data

68gl uses your personal data for the following specific purposes:

• To create and maintain your 68gl player account and verify your identity;
• To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank;
• To comply with PAGCOR licensing conditions, AML screening, and age verification requirements;
• To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as defined in our Terms & Conditions;
• To administer bonuses, promotions, and loyalty programmes;
• To enforce responsible gaming restrictions you have set, including deposit limits and self-exclusion;
• To provide 24/7 live chat customer support and resolve disputes;
• To send transactional communications — deposit confirmations, withdrawal notifications, and security alerts — to your registered mobile number and email address;
• To send direct marketing communications about 68gl promotions, where you have consented and subject to your right to opt out at any time;
• To analyse aggregated, anonymised usage data to improve the 68gl platform experience for Filipino players.

7. Data Sharing and Disclosure

68gl may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash (GXI), PayMaya (Maya Bank), BPI, BDO, and Metrobank — for the sole purpose of processing your financial transactions;
• KYC and AML providers: Third-party identity verification and sanctions screening services engaged to meet PAGCOR and AMLA compliance requirements;
• Game software providers: Providers such as JILI, Pragmatic Play, and others who power individual game titles on the 68gl platform — limited to game session data necessary to operate certified fair games;
• IT and infrastructure providers: Cloud hosting, CDN, and security services operating the 68gl platform infrastructure under strict contractual data processing obligations;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies — where 68gl is legally required to disclose player data.

68gl does not transfer your personal data to recipients outside the Philippines except where required by PAGCOR-mandated third-party audit or game certification processes, in which case transfers are governed by appropriate safeguards consistent with the Data Privacy Act.

8. Cookies and Tracking Technologies

68gl uses cookies and similar tracking technologies on the 68gl.club website for the following purposes:

• Essential cookies: Required for the platform to function, including session management and authentication — these cannot be disabled without impairing platform functionality;
• Analytics cookies: Used to understand aggregate usage patterns and improve the platform experience — these may be disabled via your browser settings;
• Security cookies: Used for fraud detection and login anomaly monitoring — disabling these may limit certain platform security features.

68gl does not use third-party advertising cookies or retargeting pixels. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your 68gl account.

9. Data Security

68gl implements industry-standard technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption on all pages handling personal data, including the 68gl login page and cashier;
• Passwords stored using one-way cryptographic hashing — 68gl staff cannot read your password;
• Two-factor authentication (2FA) available for all account holders;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular independent security audits of platform infrastructure;
• Automated anomaly detection for unusual login or transaction patterns.

10. Data Retention

68gl retains your personal data for as long as your account remains active and for such additional periods as are required by applicable law and PAGCOR regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for a minimum of 5 years following account closure, consistent with PAGCOR recordkeeping requirements and AMLA obligations;
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in compliance with BSP and AMLC recordkeeping rules;
• Support communications: Retained for 2 years from the date of the interaction, unless a longer period is required for an ongoing dispute or regulatory inquiry;
• Technical and usage logs: Retained for 12 months on a rolling basis unless retention is extended for fraud investigation or legal proceedings.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

11. Exercising Your Data Rights

As a data subject under Republic Act No. 10173, you have the right to access, correct, erase, object to, and port your personal data held by 68gl, as well as the right to withdraw consent where processing is based on consent. To exercise any of these rights, contact 68gl's Data Protection Officer via:

• Live Chat: Available 24/7 from your 68gl account dashboard — fastest response for urgent requests;
• Email: [email protected] (plain text only — not a clickable link) — written data subject access requests are acknowledged within 3 business days and fulfilled within 30 days.

If you are dissatisfied with 68gl's handling of your data rights request, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines through its official complaint channels.

12. Minors and Age Restriction

68gl is strictly an adults-only platform. The 68gl service is not directed at, and must not be used by, persons under the age of 21 years. 68gl does not knowingly collect or process the personal data of minors. If 68gl becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all personal data associated with the account will be securely deleted, and any deposits will be returned through the original payment channel to the extent possible.

If you believe that a minor may have accessed or registered on the 68gl platform, please report this immediately via the 24/7 live chat support channel in your account dashboard.

13. Changes to This Privacy Policy

68gl reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, 68gl will notify registered players via email to the address on file and via a notice on the platform's login page. The revised Policy will take effect 14 days after notification unless an earlier effective date is required by law. Continued use of the 68gl platform after the effective date constitutes acceptance of the revised Policy.

14. Contact – Data Privacy Inquiries

For all questions, requests, and complaints related to this Privacy Policy and the processing of your personal data by 68gl, please contact us through:

• Live Chat: 24/7 — available directly from your 68gl account dashboard after logging in. Typical response time: under 5 minutes.
• Email: [email protected] — plain text, not a clickable link. Responses within 1 business day for general inquiries; formal data subject requests within 30 days.