96phn Privacy Policy

1 Introduction

96phn is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that trust is earned — and a big part of that trust is being transparent about what information we collect, why we collect it, and how we keep it safe.

This Policy sets out the data protection principles that govern all 96phn operations involving personal information. It is drafted in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR) as enforced by the National Privacy Commission (NPC).

In addition to the DPA, 96phn's data handling practices are also shaped by our obligations as a PAGCOR-licensed gaming operator, which include KYC (Know Your Customer) requirements, Anti-Money Laundering Act (AMLA) compliance, and responsible gaming data obligations.

2 Data Controller

For the purposes of the Philippine Data Privacy Act, the data controller responsible for your personal information is 96phn, operating the online gaming platform at https://96phn.net under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR).

96phn has appointed a Data Privacy Officer (DPO) as required under the DPA. The DPO is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact our DPO at any time — see Section 14 for contact details.

Where 96phn engages third-party service providers to process personal data on its behalf (for example, payment processors such as GCash or PayMaya, or KYC verification providers), those parties act as data processors under written agreements that bind them to process your data only as instructed by 96phn and in accordance with applicable Philippine law.

3 Data We Collect

96phn collects the following categories of personal data. We only collect data that is adequate, relevant, and limited to what is necessary for the purposes described in this Policy.

4 How We Collect Your Data

96phn collects your personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or respond to a survey or promotion.
• Automatically — when you access and use the 96phn platform, our systems automatically record technical data such as your IP address, device identifiers, browser type, session times, and in-game activity through server logs and cookies (see Section 9 for our Cookies Policy).
• From third-party service providers — our payment partners (GCash, PayMaya, BPI, BDO, Metrobank) and identity verification providers may share data with us as part of the deposit, withdrawal, or KYC process.
• From regulatory sources — in certain circumstances, we may receive data from PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities as required by law.

5 Purpose and Legal Basis for Processing

Under the Philippine Data Privacy Act, 96phn may process your personal data only where a lawful basis exists. The table below sets out the primary purposes for which we process your data and the corresponding legal basis under the DPA:

6 Sharing Your Personal Data

96phn does not sell your personal data. We share your information only in the following limited and controlled circumstances:

• Payment service providers: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• KYC and identity verification providers: Third-party vendors engaged to verify the authenticity of your government-issued ID and confirm your age (21+) and identity. These vendors are contractually bound to process your data solely for verification purposes.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government bodies where disclosure is required by law or regulatory directive.
• Platform technology providers: Game software providers (e.g., slot and live casino content providers) and IT infrastructure partners who support the operation of the 96phn platform. Access is limited to what is technically necessary, and all providers are bound by data processing agreements.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by 96phn, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or transfer of 96phn's business, player data may be transferred as part of that transaction. Affected players will be notified in advance in accordance with applicable law.

7 Data Retention

96phn retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following general retention periods apply:

• Active account data (identity, contact, gaming activity): Retained for the duration of your active 96phn account relationship.
• Financial transaction records: Retained for a minimum of 5 years following the transaction date, in compliance with AMLA record-keeping requirements.
• KYC documentation: Retained for a minimum of 5 years after account closure or the date of the last transaction, whichever is later, as required under PAGCOR and AMLA regulations.
• Responsible gaming records (including self-exclusion): Retained for the duration of the exclusion period plus a minimum of 5 years thereafter to prevent re-registration during exclusion.
• Support communications: Retained for a minimum of 2 years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for record-keeping purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identified individual. Where full deletion is not technically feasible (for example, in encrypted backup archives), the data will be isolated and protected until deletion is possible.

8 Security Measures

96phn implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Transport Layer Security (TLS): All data transmitted between your browser or app and the 96phn platform is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal and financial data stored on 96phn servers is encrypted using industry-standard algorithms.
• Access controls: Access to personal data within 96phn's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and auditable.
• Two-factor authentication (2FA): 96phn strongly encourages all players to enable 2FA on their accounts for an additional layer of login security.
• Regular security assessments: 96phn conducts periodic vulnerability assessments and penetration testing of its platform infrastructure.
• Staff training: All 96phn personnel with access to personal data receive regular data privacy and security training.

9 Cookies and Tracking Technologies

The 96phn platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and collect analytics data that helps us improve our services. By using the 96phn platform, you consent to the use of cookies as described in this section.

The following types of cookies are used by 96phn:

• Strictly necessary cookies: Essential for the operation of the platform, including maintaining your login session, remembering your preferences, and processing transactions. These cannot be disabled without affecting core platform functionality.
• Analytics cookies: Used to collect aggregate, anonymised data on how players navigate and use the platform (e.g., pages visited, session duration, error pages encountered). This data is used internally to improve platform performance and user experience.
• Security cookies: Used to detect fraudulent activity, protect against bot access, and enforce responsible gaming monitoring systems.
• Preference cookies: Store your platform preferences such as language setting, notification preferences, and interface customisations.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality or security of the 96phn platform. 96phn does not use third-party advertising cookies or share cookie data with external advertising networks.

10 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 96phn. These rights can be exercised free of charge by contacting our Data Privacy Officer (see Section 14):

To exercise any of the rights above, please submit a written request to our Data Privacy Officer at [email protected] with the subject line "Data Privacy Rights Request". We may need to verify your identity before processing your request.

11 Minors and Age Policy

The 96phn platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations. 96phn does not knowingly collect personal data from individuals under 21.

As part of our KYC verification process, all players are required to confirm their age and provide valid Philippine government-issued identification before Real-Money Play is enabled. Where we discover that personal data has been submitted by an individual under the age of 21, we will immediately close the associated account and securely delete the personal data collected, except where retention is required for regulatory reporting purposes.

12 Cross-Border Data Transfers

In the course of operating the 96phn platform, some of your personal data may be transferred to or processed by service providers located outside the Philippines — for example, game software providers or cloud infrastructure partners with servers in other countries.

Where such transfers occur, 96phn ensures that appropriate safeguards are in place to protect your personal data in accordance with the Philippine Data Privacy Act. These safeguards may include:

• Data processing agreements that contractually bind the recipient to DPA-equivalent data protection standards.
• Transfers to countries or organisations that have been assessed as providing an adequate level of personal data protection.
• Specific technical and organisational measures applied to the transferred data to maintain its security and integrity.

96phn will not transfer your personal data internationally in circumstances where we cannot ensure that an appropriate level of protection will be maintained.

13 Changes to This Privacy Policy

96phn reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine laws, or PAGCOR regulatory requirements. Where changes are material, we will notify you by email to the address registered on your account and/or by posting a prominent notice on the 96phn platform at least 7 days before the changes take effect.

The effective date at the top of this Policy will always reflect when it was last updated. We encourage you to review this Policy periodically. Your continued use of the 96phn platform after a Policy update constitutes your acceptance of the revised terms.

If you do not agree to any material changes, you should stop using the platform and contact our Data Privacy Officer to request account closure and data deletion where applicable.

14 Contact Our Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact 96phn's Data Privacy Officer:

If you are not satisfied with 96phn's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the independent authority responsible for administering and implementing the Philippine Data Privacy Act of 2012.