pinoy168 Privacy Policy

This Privacy Policy ("Policy") describes how pinoy168 ("pinoy168", "we", "us", "our") collects, uses, stores, and discloses personal information obtained from users ("you", "Player", "User") of the pinoy168 website and gaming platform (collectively, the "Platform"). This Policy applies to all players accessing pinoy168 from the Philippines and any other permitted jurisdiction.

pinoy168 is committed to protecting your personal data in accordance with applicable Philippine data privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

1 Introduction

1.1 pinoy168 takes the privacy of its players seriously. We understand that Filipino players entrust us with sensitive personal and financial information, and we treat that responsibility with the utmost care. This Policy is designed to give you a clear and honest picture of our data practices.

1.2 This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and pinoy168.

1.3 pinoy168 acts as the Personal Information Controller in respect of the personal data you provide to us. This means we determine the purposes and means of processing your personal data.

1.4 We may engage third-party service providers who act as Personal Information Processors on our behalf. These processors are contractually bound to handle your data only in accordance with our instructions and this Policy.

2 Data We Collect

2.1 pinoy168 collects personal data that you provide directly to us, data generated through your use of the Platform, and data obtained from third parties where permitted by law. The categories of data we collect include:

2.2 Sensitive Personal Information. In certain circumstances, pinoy168 may collect sensitive personal information as defined under the Data Privacy Act of 2012, such as government ID numbers required for identity verification. We collect such information only to the extent strictly necessary for regulatory compliance and will handle it with heightened care.

2.3 Voluntary Disclosure. You are not obligated to provide all requested information. However, failure to provide certain data (such as identity verification documents) may prevent us from processing withdrawals or maintaining your account in good standing.

3 How We Use Your Data

3.1 pinoy168 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your pinoy168 player account, including processing registrations, verifying identity, and managing account settings;
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment channels, and to maintain accurate financial records in Philippine Peso (PHP);
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and PAGCOR regulatory requirements, including Know Your Customer (KYC) obligations;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account abuse, and other prohibited conduct on the Platform;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and apply deposit or session limits where requested by the player;
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance;
• Platform Improvement: To analyse usage patterns, improve game offerings, and enhance the overall player experience on pinoy168;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may opt out at any time.

3.2 pinoy168 will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent.

4 Legal Basis for Processing

4.1 Under the Data Privacy Act of 2012, pinoy168 processes your personal data on the following legal bases:

• Consent: Where you have given clear, informed consent to the processing of your personal data for a specific purpose, such as receiving marketing communications;
• Contractual Necessity: Where processing is necessary to perform our obligations under the Terms & Conditions, including account management and transaction processing;
• Legal Obligation: Where processing is required to comply with applicable Philippine law, including AML obligations, PAGCOR requirements, and NPC regulations;
• Legitimate Interests: Where processing is necessary for the legitimate interests of pinoy168, such as fraud prevention, platform security, and responsible gaming monitoring, provided such interests are not overridden by your rights and freedoms.

5 Cookies & Tracking Technologies

5.1 pinoy168 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session continuity, and gather analytical data about Platform usage.

5.2 Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your login session and remembering your preferences. These cannot be disabled without affecting Platform functionality;
• Analytical Cookies: Used to understand how players interact with the Platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymised;
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to personalise your experience;
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious account behaviour.

5.3 You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the pinoy168 Platform.

6 Data Sharing

6.1 pinoy168 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following circumstances:

• Payment Processors: We share financial data with Philippine payment service providers (including GCash, PayMaya, BPI, BDO, and Metrobank) strictly to process your deposits and withdrawals;
• Identity Verification Providers: We may share identity documents with accredited KYC and AML compliance service providers to verify your identity and comply with regulatory obligations;
• Game Technology Providers: Game data may be shared with our licensed game software providers to the extent necessary to operate and maintain game services on the Platform;
• Regulatory Authorities: We are required by law to disclose certain data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities upon lawful request;
• Legal and Fraud Investigations: We may disclose personal data to law enforcement agencies or legal counsel where necessary to investigate fraud, enforce our Terms & Conditions, or protect the rights and safety of pinoy168 and its players;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of pinoy168's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.2 All third parties with whom pinoy168 shares personal data are contractually required to maintain appropriate security measures and to process data only for the purposes specified by pinoy168.

7 Data Retention

7.1 pinoy168 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations.

7.2 The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act;
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship;
• Support Communications: Retained for up to two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution;
• Technical and Usage Data: Retained for up to twelve (12) months from collection, after which it is anonymised or deleted.

7.3 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

8 Data Security

8.1 pinoy168 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption of data in transit using industry-standard TLS (Transport Layer Security) protocols;
• Encryption of sensitive data at rest, including financial and identity information;
• Access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to data systems;
• Staff training on data privacy obligations and secure data handling practices.

8.2 While pinoy168 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Platform at your own risk in this regard.

8.3 Data Breach Notification. In the event of a personal data breach that is likely to result in serious harm to affected individuals, pinoy168 will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

9 Your Rights

9.1 Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by pinoy168:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed, as set out in this Policy;
• Right of Access: You have the right to request a copy of the personal data pinoy168 holds about you and information about how it is processed;
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by pinoy168;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

9.2 To exercise any of the above rights, please contact our Data Privacy Officer at the details provided in Section 13. We will respond to all verified requests within thirty (30) days, as required by the Data Privacy Act of 2012.

9.3 pinoy168 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to unauthorised parties.

10 Children's Privacy

10.1 The pinoy168 Platform is strictly intended for individuals aged 21 years and above, consistent with Philippine gaming regulations. pinoy168 does not knowingly collect personal data from individuals under the age of 21.

10.2 If pinoy168 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any winnings generated by an underage player will be forfeited.

10.3 If you are a parent or guardian and believe that your child has registered on the pinoy168 Platform, please contact us immediately at the details in Section 13 so that we can take appropriate action.

11 Third-Party Links

11.1 The pinoy168 Platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to the pinoy168 Platform and does not cover the privacy practices of any third-party websites.

11.2 pinoy168 is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

12 Changes to This Policy

12.1 pinoy168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The updated Policy will be published on the Platform with a revised "Last Updated" date.

12.2 Where changes are material, pinoy168 will endeavour to notify registered players via email or in-platform notification prior to the changes taking effect. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms.

12.3 We encourage you to review this Policy periodically to stay informed about how pinoy168 protects your personal data.

13 Contact Us

13.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by pinoy168, please contact our Data Privacy Officer:

• Email: [email protected]
• General Support: [email protected]

13.2 We aim to acknowledge all privacy-related enquiries within five (5) business days and to resolve them within thirty (30) days in accordance with the Data Privacy Act of 2012.

13.3 If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for administering and implementing the Data Privacy Act of 2012.