96phd Casino — Privacy Policy

1 Data Controller

The data controller responsible for the personal data processed through the 96phd platform (accessible at 96phd.vip) is 96phd, operating under PAGCOR regulatory oversight in the Republic of the Philippines.

For all data privacy matters, the 96phd Data Privacy Officer (DPO) can be contacted at the email address set out in Section 16 of this Policy. The DPO is responsible for overseeing compliance with the Data Privacy Act of 2012 and for handling data subject requests in a timely and transparent manner.

This Privacy Policy applies to all personal data collected and processed by 96phd in connection with the registration, use, and management of player accounts on the 96phd platform, as well as data collected through passive interaction with the 96phd website.

2 Scope and Application

This Privacy Policy applies to:

• All registered 96phd account holders, regardless of whether the account is active, dormant, or closed;
• All visitors to the 96phd website at 96phd.vip, including those who have not registered an account;
• Individuals who interact with 96phd through customer support channels, including live chat and email;
• All personal data processed in connection with the above, whether collected directly from you or derived from your activity on the platform.

This Policy does not apply to third-party websites or services linked from or to the 96phd platform. 96phd is not responsible for the privacy practices of third-party providers, including payment processors, game developers, or identity verification services, whose own privacy policies govern the data they collect independently.

3 Personal Data We Collect

96phd collects the following categories of personal data. The specific data points collected depend on the nature of your interaction with the platform:

3.1 Identity and Account Data

Full legal name, date of birth, nationality, government-issued identification number (e.g., PhilSys National ID, UMID, Passport, Driver's License), username, and account password (stored in hashed, non-reversible form).

3.2 Contact Data

Registered mobile number (Philippine mobile format), email address, and, where provided, a residential address in the Philippines.

3.3 Financial and Transaction Data

GCash wallet number or PayMaya account details, BPI/BDO/Metrobank account references (as applicable), deposit history, withdrawal requests, transaction amounts, and payment method records. Full payment card numbers and full bank account numbers are not stored by 96phd — such data is held exclusively by the relevant PCI-compliant payment processor.

3.4 Gaming Activity Data

Games played, wagers placed, wins and losses, session duration, bet history, bonus usage, and responsible gaming tool activations (e.g., deposit limit settings, self-exclusion applications).

3.5 Technical and Device Data

IP address, device type and model, operating system, browser type and version, screen resolution, session timestamps, and cookie identifiers. This data is collected automatically when you access the 96phd platform.

3.6 Communications Data

Records of communications between you and 96phd's support team, including live chat transcripts, support ticket records, and email correspondence. These records are retained for service quality and dispute resolution purposes.

3.7 Verification and Compliance Data

Identity document images, proof of address documentation, source of funds declarations, and any other documents submitted in connection with Know Your Customer (KYC) or Anti-Money Laundering (AML) verification processes required under Philippine law.

4 How We Collect Personal Data

96phd collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit, request a withdrawal, or contact support;
• Automatically — through cookies, server logs, and analytics tools when you browse the 96phd website, whether or not you are logged in to an account;
• From third-party identity verification providers — when 96phd engages a third-party service to verify your identity or address as part of the KYC process;
• From payment processors — GCash, PayMaya, and banking partners share transaction confirmation data with 96phd to facilitate deposit crediting and withdrawal processing;
• From regulatory bodies — PAGCOR and other authorities may provide information relevant to a player's account in the course of regulatory oversight.

5 Purposes of Processing

96phd processes personal data for the following defined purposes:

1. Account creation and management — to register your account, verify your identity, maintain your profile, and provide access to the platform;
2. Gaming and betting services — to process wagers, record game outcomes, calculate winnings, and maintain your gaming history;
3. Payment processing — to facilitate deposits via GCash, PayMaya, and bank transfer, and to process withdrawal requests to your designated payout method;
4. KYC and AML compliance — to verify your identity and assess transaction risk in accordance with the Anti-Money Laundering Act (AMLA) and PAGCOR requirements;
5. Responsible gaming — to monitor gaming patterns, apply player-requested limits, and intervene where problem gambling indicators are detected;
6. Customer support — to respond to your queries, resolve disputes, and maintain records of support interactions;
7. Security and fraud prevention — to detect and prevent unauthorised account access, payment fraud, bonus abuse, and other prohibited conduct;
8. Platform improvement — to analyse usage patterns (in aggregated, anonymised form) and improve the 96phd platform's performance and features;
9. Marketing communications — to send promotional offers, bonus notifications, and game updates, subject to your communication preferences (see Section 13);
10. Legal and regulatory compliance — to meet 96phd's obligations under Philippine law, including PAGCOR reporting requirements and responses to lawful regulatory requests.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, 96phd processes personal data on the following legal bases:

• Contractual necessity — processing required to fulfil the contract between 96phd and the registered player (e.g., account management, game operation, payment processing);
• Legal obligation — processing necessary to comply with applicable Philippine law, including AMLA, PAGCOR regulations, and tax obligations;
• Legitimate interests — processing conducted for the legitimate operational interests of 96phd, including fraud prevention, security monitoring, and platform analytics, where those interests are not overridden by your privacy rights;
• Consent — processing based on your explicit consent, specifically in relation to marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Sharing Your Personal Data

96phd does not sell, rent, or trade personal data. Data is shared with third parties only in the following circumstances:

7.1 Service Providers

96phd engages third-party service providers to support platform operations, including payment processors (GCash/G-Xchange Inc., PayMaya/Maya Philippines Inc., Philippine banking institutions), game software providers, identity verification services, cloud hosting providers, and customer support platform operators. All service providers are required to process personal data only for the specific purposes authorised by 96phd and under binding data processing agreements.

7.2 Regulatory and Law Enforcement

96phd is required by Philippine law to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and law enforcement authorities upon lawful request or as required by applicable reporting obligations. Such disclosures do not require individual player consent when mandated by law.

7.3 Corporate Transactions

In the event of a merger, acquisition, asset sale, or corporate restructuring involving 96phd, personal data held may be transferred to the acquiring or successor entity, subject to equivalent privacy protections. Players will be notified of any material change in data controller identity.

7.4 With Your Consent

96phd may share your data with third parties in other circumstances where you have provided explicit, informed consent to such sharing. You may withdraw that consent at any time by contacting the DPO.

8 Cookies and Tracking Technologies

96phd uses cookies and similar tracking technologies to improve platform functionality, maintain session state, and analyse site usage. The following cookie categories are used:

• Strictly necessary cookies — required for the platform to function, including session authentication tokens and security cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies — used to remember your preferences, such as language settings and display options, to improve your experience across sessions.
• Analytics cookies — used to collect aggregated, anonymised data about how players use the platform. This data is used exclusively for internal platform improvement purposes.
• Security cookies — used by 96phd's fraud prevention and device fingerprinting systems to detect anomalous login activity and protect your account.

By continuing to use the 96phd platform after the initial cookie notice is acknowledged, you consent to the use of non-essential cookies as described above. You may withdraw this consent by clearing cookies in your browser settings; however, doing so may affect platform functionality, including session persistence and login experience.

9 Data Retention

96phd retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention standards:

• Active account data — retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with AML and PAGCOR record-keeping requirements.
• Transaction records — retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC and identity documents — retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Support communications — retained for a minimum of two (2) years from the date of the last communication.
• Marketing consent records — retained for three (3) years from the date consent was given or withdrawn, to document compliance.
• Technical and device data (logs) — retained for ninety (90) days in standard operation; longer where relevant to an active security investigation.

Following the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

10 Data Security

96phd implements a multi-layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption: All data in transit between your device and 96phd is encrypted using 256-bit TLS/SSL. Sensitive data at rest, including identity documentation, is encrypted using AES-256 standard encryption.
• Access controls: Access to personal data by 96phd staff is restricted on a role-based, need-to-know basis. Access logs are maintained and reviewed regularly.
• Payment data isolation: Payment card and bank account data is handled exclusively by PCI-DSS-compliant third-party processors. Full payment credentials are never stored on 96phd infrastructure.
• Penetration testing: The 96phd platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Incident response: 96phd maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights, 96phd will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, consistent with RA 10173 requirements.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 96phd:

To exercise any of the above rights, submit a written request to the 96phd Data Privacy Officer at the contact details in Section 16. 96phd will acknowledge your request within three (3) business days and respond substantively within fifteen (15) calendar days, consistent with NPC guidelines. Where a request is complex or voluminous, the response period may be extended by an additional fifteen (15) days with written notice.

12 Children's Privacy and Age Restriction

If 96phd discovers that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be suspended. If you believe that 96phd has inadvertently collected data from a person under 21, please contact the DPO immediately.

Age verification is conducted as part of the KYC process. 96phd reserves the right to withhold withdrawals and restrict account access pending age verification on any account where the player's age cannot be confirmed from the information provided at registration.

13 Marketing Communications

96phd may send you promotional communications about new games, bonuses, seasonal promotions, and platform updates via SMS, email, or in-platform notification. Marketing communications are sent only where you have:

• Explicitly opted in to receive marketing at the time of registration or through your account settings; or
• Previously engaged with 96phd and have not opted out of receiving service-related communications.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your 96phd account settings;
• Clicking the unsubscribe link in any marketing email sent by 96phd; or
• Contacting 96phd support via live chat and requesting removal from all marketing lists.

Opting out of marketing communications does not affect transactional communications — 96phd will continue to send you essential account and transaction notifications regardless of your marketing preference, as these are necessary for the provision of the service.

14 International Data Transfers

The 96phd platform operates primarily within the Philippines, and personal data is primarily stored on servers located in the Philippines or in jurisdictions with equivalent data protection standards. Where personal data is transferred to service providers located outside the Philippines (for example, cloud infrastructure providers or game software developers with servers in other countries), 96phd ensures that:

• The recipient country provides an adequate level of data protection as recognised by the National Privacy Commission, or
• Adequate contractual safeguards are in place through data processing agreements that impose equivalent obligations on the recipient, or
• The transfer is necessary for the performance of the contract between 96phd and the player (e.g., game software operation by an international provider).

96phd does not transfer personal data to international third parties for independent commercial use outside the scope of platform operations.

15 Changes to This Privacy Policy

96phd reserves the right to update this Privacy Policy at any time to reflect changes in Philippine law, PAGCOR regulatory requirements, or 96phd's data processing practices. When material changes are made, 96phd will:

• Update the Effective Date at the top of this Policy;
• Publish the revised Policy on this page;
• Notify registered players via email or in-platform notification where the changes materially affect their data rights or 96phd's processing activities.

Your continued use of the 96phd platform after the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. Where updated processing requires your active consent under Philippine law, 96phd will seek that consent separately before commencing the new processing activity.

16 Contact — Data Privacy Officer

For all data privacy matters, including subject access requests, rectification requests, erasure requests, complaints, and general privacy enquiries, please contact the 96phd Data Privacy Officer:

If you are not satisfied with 96phd's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at www.privacy.gov.ph.