pinoy168 Privacy Policy

1Introduction

pinoy168 ("we", "us", "our") operates the online gaming platform accessible at pinoy168.asia (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you", "your") who access or use our Platform.

This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it, and the rights you have in relation to your personal data. This policy applies to all personal data collected through the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and marketing communications.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the pinoy168 Platform. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2Personal Data We Collect

pinoy168 collects personal data that is necessary to provide our services, comply with legal obligations, and improve the Platform experience. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name, date of birth, and gender
• Residential address (including city, province, and postal code)
• Email address and mobile phone number
• Username and encrypted password
• Government-issued identification documents (for KYC verification, e.g., Philippine passport, driver's licence, SSS/GSIS ID, PhilSys ID)

2.2 Financial Data

• GCash or PayMaya account details (mobile number associated with the account)
• Bank account details for bank transfer transactions (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank)
• Debit card details (card number, expiry date — stored in tokenised form only)
• Transaction history, including deposit and withdrawal records

2.3 Technical & Usage Data

• IP address, device type, operating system, and browser type
• Pages visited, features used, and time spent on the Platform
• Game history, betting patterns, and session data
• Login timestamps and geographic location data (derived from IP address)

2.4 Communications Data

• Records of customer support interactions (live chat transcripts, email correspondence)
• Responses to surveys, promotions, or feedback requests
• Marketing preferences and communication opt-in/opt-out records

3How We Use Your Personal Data

pinoy168 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your pinoy168 account, including verifying your identity and eligibility to use the Platform.
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver the features and functionality of the Platform.
• Legal Compliance: To comply with PAGCOR licensing requirements, the Philippine Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable laws and regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Responsible Gaming: To monitor gameplay patterns and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Marketing & Promotions: To send you information about pinoy168 promotions, bonuses, and new features — but only where you have given your consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform Improvement: To analyse usage patterns and improve the design, functionality, and content of the Platform.

4 Legal Basis for Processing

pinoy168 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 (RA 10173):

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide the gaming services you have registered for and to manage your account.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including PAGCOR licensing conditions, AMLA reporting obligations, and tax requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5Cookies & Tracking Technologies

pinoy168 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and deliver relevant content. The types of cookies we use include:

5.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable core features such as user authentication, session management, and security. Essential cookies cannot be disabled without significantly impairing your ability to use the Platform.

5.2 Analytics Cookies

We use analytics cookies to understand how players interact with the pinoy168 Platform — which pages are visited most frequently, how long sessions last, and where users encounter difficulties. This data is used in aggregate and anonymised form to improve the Platform.

5.3 Preference Cookies

Preference cookies remember your settings and choices on the Platform, such as your preferred language, display settings, and notification preferences, so you do not have to re-enter them each time you visit.

5.4 Marketing Cookies

With your consent, pinoy168 may use marketing cookies to deliver personalised promotional content relevant to your interests. You may withdraw consent for marketing cookies at any time through your account settings or browser controls.

6Data Sharing & Disclosure

pinoy168 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, and banking partners), identity verification providers, cloud hosting services, and customer support platforms. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

6.2 Regulatory & Legal Authorities

pinoy168 is required by law to disclose certain personal data to regulatory and law enforcement authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies, where required by applicable law or court order.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of pinoy168's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Privacy Policy.

6.4 With Your Consent

We may share your personal data with third parties in other circumstances where you have given your explicit consent to such sharing.

7Data Security

pinoy168 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal data stored on our servers, including financial information and identity documents, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised pinoy168 personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorised access.
• Regular Security Audits: Our systems and security practices are regularly reviewed and tested by internal and external security professionals.
• Incident Response: We maintain a documented data breach response plan and will notify affected players and the National Privacy Commission in the event of a breach, as required by RA 10173.

While pinoy168 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are also responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

8Data Retention

pinoy168 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and AMLA obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years as required by the Anti-Money Laundering Act and tax regulations.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Communications with our support team are retained for three (3) years from the date of the interaction.
• Marketing Data: Marketing preferences and consent records are retained until you withdraw your consent or for three (3) years from your last interaction with our marketing communications, whichever comes first.
• Technical Logs: Server logs and technical usage data are retained for up to twelve (12) months for security and operational purposes.

When personal data is no longer required, pinoy168 will securely delete or anonymise it in accordance with our data disposal procedures.

9Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by pinoy168:

A brief description of each right:

• Right to be Informed: You have the right to be told how your personal data is being collected and used before it is collected.
• Right to Access: You may request a copy of the personal data pinoy168 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Block: You may request that the processing of your personal data be suspended pending resolution of a dispute about its accuracy or the lawfulness of its processing.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Damages: You have the right to claim compensation for any damages suffered as a result of inaccurate, incomplete, outdated, or unlawfully obtained personal data.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

10Children's Privacy

The pinoy168 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform.

If pinoy168 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to pinoy168, please contact us immediately using the details in Section 14.

We employ age verification measures at the point of registration and reserve the right to request proof of age at any time. Protecting minors from gambling-related harm is a core commitment of pinoy168.

11International Data Transfers

The pinoy168 Platform is operated primarily within the Philippines. However, some of our service providers and technology partners may be located in other countries, which means your personal data may be transferred to and processed in jurisdictions outside the Philippines.

Where such transfers occur, pinoy168 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under Philippine law. We will not transfer your personal data to a country that does not provide an adequate level of data protection without your consent or without implementing appropriate safeguards.

12Third-Party Links

The pinoy168 Platform may contain links to third-party websites or services. This Privacy Policy applies only to the pinoy168 Platform and does not cover the privacy practices of any third-party websites or services that you may access through links on our Platform.

We encourage you to review the privacy policies of any third-party websites you visit. pinoy168 is not responsible for the privacy practices or content of third-party websites.

13Updates to This Privacy Policy

pinoy168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the features of the Platform. When we make material changes to this policy, we will notify registered players by email or through a prominent notice on the Platform.

The updated Privacy Policy will display a revised "Last Updated" date at the top of this page. Your continued use of the pinoy168 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.

If you do not agree with any changes to this Privacy Policy, you must stop using the Platform and may request account closure in accordance with our Terms & Conditions.

14Contact Us & Data Protection Officer

pinoy168 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us:

• Data Protection Officer: pinoy168 DPO Office
• Email: [email protected]
• Live Chat: Available 24/7 through the Platform
• Response Time: Within 30 days of receiving your verified request

For responsible gaming concerns, please also visit our Responsible Gaming page. For the full terms governing your use of the Platform, please review our Terms & Conditions.