68ji Privacy Policy

1. Data Controller

The data controller responsible for your personal data collected through the 68ji Platform is the legal entity operating 68ji under its PAGCOR licence. As data controller, 68ji determines the purposes and means of processing your personal data and is accountable for that processing under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.

68ji has designated a Data Protection Officer (DPO) as required under the National Privacy Commission's (NPC) regulations. You may contact our DPO at the contact details provided in Section 13 of this Policy.

2. Personal Data We Collect

68ji collects personal data through several channels: during account registration, through your use of the Platform, via KYC verification, and through your interactions with customer support. The categories of personal data we collect include:

2.1 Registration Data

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (to verify you are 21 years of age or older);
• Philippine mobile number;
• Email address;
• Residential address in the Philippines (city, province);
• Username and encrypted password.

2.2 KYC Verification Data

• Images of government-issued Philippine identification documents (PhilSys National ID, UMID, Driver's License, or Passport);
• Selfie or biometric image for liveness verification where required;
• Tax Identification Number (TIN) where required by PAGCOR regulations for reporting purposes.

2.3 Financial Data

• GCash or PayMaya account details linked to your 68ji Wallet (account name and registered number — not full wallet credentials);
• Bank account details for BPI, BDO, or Metrobank withdrawals (account name and number);
• Transaction history: deposits, withdrawals, bet amounts, and winnings.

2.4 Technical & Usage Data

• IP address and approximate geolocation (to verify Philippine residency);
• Device type, operating system, and browser;
• Session duration, pages visited, and game activity logs;
• Cookies and similar tracking technologies as described in Section 7.

2.5 Communications Data

• Support tickets, chat transcripts, and email correspondence with 68ji;
• Responses to surveys or promotional communications where you voluntarily participate.

3. How We Use Your Personal Data

68ji processes your personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, KYC data
Identity and age verification (21+ enforcement)	KYC data, date of birth
Processing deposits and withdrawals	Financial data, KYC data
Anti-money laundering (AML) compliance	Financial data, KYC data, transaction history
PAGCOR regulatory reporting	KYC data, transaction history, TIN
Responsible gaming monitoring	Usage data, transaction history
Platform security and fraud prevention	Technical data, IP address, usage data
Customer support	Registration data, communications data
Service improvements and analytics	Usage data (aggregated and anonymised)
Direct marketing (with consent)	Email, mobile number

68ji does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except for automated age verification and fraud detection flagging — both of which are subject to human review when action is taken on your Account.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, 68ji processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 68ji — including account management, game operation, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR licence conditions, AML/CTF (Anti-Money Laundering / Counter-Terrorism Financing) obligations under Republic Act No. 9160, KYC requirements, and mandatory PAGCOR reporting.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting 68ji support or updating your Account preferences.

5. Data Sharing and Disclosure

68ji does not sell your personal data. We share your data only in the circumstances described below:

5.1 Regulatory Authorities

68ji discloses personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine regulatory or law enforcement authorities when required by law, court order, or PAGCOR licence conditions.

5.2 Payment Processors

Transaction data is shared with GCash (Mynt — Globe Fintech Innovations Inc.), PayMaya (Voyager Innovations Inc.), and banking partners (BPI, BDO, Metrobank) solely to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine data protection law.

5.3 Game and Technology Suppliers

Certain game providers (such as slot studios and live casino operators) may receive limited technical data — such as session tokens and bet data — necessary to operate the game. 68ji requires these suppliers to process data in compliance with RA 10173 through contractual data processing agreements.

5.4 KYC and Fraud Prevention Services

68ji engages third-party identity verification and fraud detection service providers. These providers process KYC documents and technical data on 68ji's behalf under data processing agreements.

5.5 Professional Advisors

68ji may share data with legal, audit, or compliance advisors under confidentiality obligations where necessary for business operations.

6. Data Retention

68ji retains personal data for as long as your Account is active and for a period thereafter as required by law or legitimate business need:

• KYC and identity documents: Retained for a minimum of five (5) years after account closure, as required by PAGCOR and AML regulations.
• Transaction records: Retained for a minimum of five (5) years in compliance with AMLC record-keeping requirements.
• Active account data: Retained for the duration of your Account and for two (2) years following closure unless a longer period is legally required.
• Communications and support records: Retained for two (2) years from the date of the relevant communication.
• Marketing consent records: Retained for as long as you have an active Account or until you withdraw consent, whichever is earlier.

When data is no longer required, it is securely deleted or anonymised in accordance with 68ji's data destruction procedures.

7. Cookies and Tracking Technologies

The 68ji Platform uses cookies and similar technologies to operate and improve the service. The types of cookies used are:

• Essential cookies: Required for the Platform to function — including session authentication, load balancing, and security tokens. These cannot be disabled without breaking the Platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform — pages visited, session duration, and feature engagement. This data helps 68ji improve the player experience.
• Preference cookies: Store your Platform preferences such as language and display settings.
• Fraud prevention cookies: Used to detect and prevent fraudulent activity, including multiple-account attempts and automated bot access.

68ji does not use advertising cookies or share tracking data with advertising networks. You may manage cookie preferences through your browser settings, however disabling essential cookies will affect Platform functionality including your ability to log in to your 68ji Account.

8. Security Measures

68ji implements technical and organisational security measures appropriate to the risk associated with processing your personal data. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 68ji Platform;
• Encryption of sensitive data at rest, including KYC documents and financial data;
• Access controls limiting employee access to personal data to those with a legitimate operational need;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Two-factor authentication available to all players and required for administrative access;
• Audit logging of all access to personal data by 68ji personnel.

In the event of a personal data breach that is likely to result in harm to you, 68ji will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in compliance with the NPC's Breach Notification Guidelines.

9. Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act, you have the following rights in relation to your personal data held by 68ji:

• Right to be informed: You have the right to be told how your data is being collected and processed — which this Policy fulfils.
• Right of access: You may request a copy of the personal data 68ji holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For name and ID corrections, updated KYC documents will be required.
• Right to erasure: You may request deletion of your personal data subject to legal retention obligations (such as PAGCOR and AMLC requirements, which override erasure requests for certain data categories).
• Right to data portability: You may request your personal data in a structured, machine-readable format where technically feasible.
• Right to object: You may object to the processing of your data for direct marketing at any time. You may also object to processing based on legitimate interests, subject to 68ji demonstrating overriding legitimate grounds.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 68ji has not handled your data in accordance with the Data Privacy Act.

To exercise any of the above rights, contact 68ji's Data Protection Officer using the details in Section 13. We will respond within fifteen (15) days of receiving a verifiable request, as required by NPC regulations.

10. Children's Privacy and Age Restriction

Age verification is conducted during KYC as a mandatory step. If you are a parent or guardian and believe your child has registered an Account on 68ji, please contact our support team immediately at [email protected].

11. Cross-Border Data Transfers

Where 68ji engages service providers located outside the Philippines — such as internationally headquartered game studios, cloud infrastructure providers, or KYC technology vendors — personal data may be transferred outside Philippine borders. 68ji ensures that any such transfers are made only to recipients in countries with adequate data protection standards, or subject to appropriate contractual safeguards (such as standard contractual clauses acceptable to the NPC), in compliance with Section 21 of the Data Privacy Act.

68ji maintains a register of cross-border data transfer arrangements and can provide information on specific transfers upon request to the DPO.

12. Changes to This Privacy Policy

68ji may update this Privacy Policy from time to time to reflect changes in legal requirements, PAGCOR regulatory guidance, or the way 68ji operates. When material changes are made, 68ji will notify registered players via their registered email address and by posting a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the 68ji Platform after the effective date of any revised Policy constitutes your acknowledgment of the changes. If you do not accept the revised Policy, you should cease using the Platform and contact support to close your Account.

13. Contact & Data Protection Officer

For any questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data by 68ji, please contact:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with 68ji's response to a privacy concern.