68ji Casino Privacy Policy

68ji Casino ("68ji", "we", "us", "our") is committed to protecting the personal data of all individuals who interact with the 68ji platform, including registered players, visitors to 68ji.org, and any other persons whose personal data 68ji processes in the course of its operations.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC") of the Philippines. It also reflects applicable obligations under PAGCOR's licensing framework for online gaming operators.

This Policy applies to all personal data collected and processed by 68ji through: the 68ji.org website and all subdomains; the account registration and KYC verification process; all gaming, deposit, and withdrawal transactions conducted through the 68ji platform; communications with 68ji's customer support team; and marketing communications where you have provided consent.

For the purposes of the Data Privacy Act of 2012 and this Policy, the Personal Information Controller (data controller) responsible for your personal data is:

68ji Casino
Registered online gaming brand operating under applicable Philippine gaming regulations
Domain: 68ji.org
Data Privacy Officer Contact: [email protected]

68ji has appointed a Data Privacy Officer ("DPO") responsible for overseeing 68ji's compliance with the Data Privacy Act, responding to data subject rights requests, and serving as the primary point of contact for any privacy-related inquiry or complaint. The DPO can be reached at the contact details provided in Section 15 of this Policy.

68ji collects personal data through several channels during the course of your registration and use of the platform. The categories of data collected are described below:

3.1 Registration Data

When you create a 68ji account, we collect: your legal full name, date of birth, Philippine mobile number, email address (if provided), username, and a hashed version of your chosen password. This information is required to establish and operate your account.

3.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal, 68ji is required by PAGCOR and the Anti-Money Laundering Act ("AMLA") to verify your identity. For this purpose, we may collect: a photograph or scan of a valid Philippine government-issued ID (passport, UMID, SSS ID, driver's license, or voter's ID); a selfie photograph for biometric matching; your complete home address; and your Tax Identification Number (TIN) where applicable.

3.3 Transaction Data

We collect records of all financial transactions conducted through your 68ji account, including: deposit amounts, methods, and timestamps; withdrawal requests and processed amounts; game wager history, results, and balances; bonus crediting and wagering records; and GCash, PayMaya, BDO, BPI, and Metrobank account references (partial account numbers only — not full credentials).

3.4 Technical & Usage Data

When you access 68ji.org, our systems automatically collect: your IP address and approximate geolocation derived from it; device type, operating system, and browser version; session timestamps and duration; pages visited and game categories accessed; and referral source (if you arrived via a specific link).

3.5 Communications Data

If you contact 68ji's support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages and the resolution provided. This data is used for quality assurance, regulatory compliance, and to provide continuity of service in ongoing support cases.

68ji uses your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and operating your 68ji account, including authentication, balance management, and session handling.
• Transaction Processing: Processing deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and cryptocurrency networks, and maintaining accurate records of all financial transactions.
• Regulatory Compliance: Meeting 68ji's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act of 2012, and all other applicable Philippine laws — including mandatory reporting of suspicious transactions to the AMLC (Anti-Money Laundering Council).
• Identity Verification (KYC): Confirming that registered users meet the 21+ age requirement and that withdrawal requests are processed to verified account holders only.
• Fraud Detection and Prevention: Monitoring account activity for patterns indicative of fraud, multi-accounting, bonus abuse, money laundering, and unauthorized access — and taking appropriate action where suspicious activity is detected.
• Platform Security: Maintaining the integrity and security of the 68ji platform, including rate-limiting login attempts, detecting unusual login locations, and protecting against cyberattacks.
• Customer Support: Responding to your support inquiries, resolving disputes, and providing continuity of service in ongoing support cases.
• Responsible Gaming: Monitoring for indicators of problem gambling behavior and facilitating activation of responsible gaming tools including self-exclusion, deposit limits, and cooling-off periods.
• Service Improvement: Analyzing anonymized and aggregated usage data to improve platform performance, game curation, and user experience for the 68ji player base.
• Marketing Communications: Sending promotional communications to players who have opted in, including bonus notifications, tournament announcements, and platform updates. You may opt out at any time.

Under the Data Privacy Act of 2012, 68ji is required to identify a lawful basis for each category of personal data processing. The primary legal bases on which 68ji relies are:

• Contractual Necessity: Processing necessary for the performance of 68ji's Terms & Conditions — the contract you enter into with 68ji when you register an account. This covers account management, transaction processing, KYC verification, and customer support.
• Legal Obligation: Processing necessary to comply with PAGCOR licensing requirements, the Anti-Money Laundering Act, the Data Privacy Act's security and breach notification obligations, and other applicable Philippine laws. This covers regulatory reporting, AML monitoring, and mandatory data retention periods.
• Legitimate Interests: Processing necessary for 68ji's legitimate business interests where those interests are not overridden by your rights and freedoms. This covers fraud detection and prevention, platform security, and service improvement analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies to marketing communications and any optional data collection beyond what is required for platform operation. You may withdraw consent at any time without affecting the lawfulness of prior processing.

68ji does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances and with the following categories of recipients:

6.1 Service Providers (Data Processors)

68ji engages third-party service providers who process personal data on our behalf under binding data processing agreements. These include: payment processing partners (GCash / PayMaya infrastructure providers, bank transfer processors); KYC and identity verification technology providers; game software and live dealer platform providers; cloud infrastructure and data hosting providers; and fraud detection and cybersecurity service providers. All processors are contractually required to process your data only as instructed by 68ji and to maintain appropriate security measures.

6.2 Regulatory and Law Enforcement Authorities

68ji is required by law to disclose personal data to competent Philippine authorities in specific circumstances, including: mandatory suspicious transaction reports to the Anti-Money Laundering Council (AMLC); responses to lawful requests from PAGCOR in the exercise of its regulatory oversight functions; compliance with valid court orders, search warrants, or other judicial processes; and mandatory breach notifications to the National Privacy Commission under Section 20 of RA 10173.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 68ji's business operations, your personal data may be transferred to the acquiring entity as part of the transaction. In such cases, 68ji will notify affected users and ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.

68ji uses cookies and similar tracking technologies on the 68ji.org website to provide a functional, secure, and personalized experience. The categories of cookies used are described below:

7.1 Strictly Necessary Cookies

These cookies are essential for the 68ji platform to function and cannot be disabled. They include session management cookies that maintain your logged-in state, security tokens that prevent cross-site request forgery (CSRF) attacks, and load balancing cookies that ensure stable server performance. No consent is required for these cookies as they are operationally necessary.

7.2 Functional Cookies

Functional cookies allow 68ji to remember your preferences — such as your selected language, last-visited game category, and display settings — to provide a more consistent experience across sessions. These cookies do not track your activity across other websites.

7.3 Analytics Cookies

68ji uses analytics cookies to collect aggregated, anonymized data about how players navigate and use the platform. This data is used to identify usability issues, improve page performance, and inform product development decisions. Analytics data is never linked to identifiable individual users.

7.4 Managing Cookies

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your use of the 68ji platform. Instructions for managing cookies in major browsers (Chrome, Safari, Firefox) are available in each browser's help documentation.

68ji implements a multi-layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Key security measures include:

• Encryption in Transit: All data exchanged between your device and 68ji.org is encrypted using 256-bit TLS/SSL. This applies to all page loads, login sessions, API calls, and data submitted through the platform.
• Password Security: User passwords are processed using industry-standard adaptive cryptographic hashing algorithms (bcrypt). Plaintext passwords are never stored anywhere on 68ji's infrastructure.
• Two-Factor Authentication: 68ji implements OTP-based two-factor authentication for logins from new or unrecognized devices. This significantly reduces the risk of unauthorized account access even where login credentials are compromised.
• Access Controls: Access to personal data within 68ji's internal systems is restricted on a strict need-to-know basis. Staff access is controlled by role-based permissions, and all access to sensitive data is logged and audited.
• Infrastructure Security: 68ji's platform infrastructure is hosted on enterprise-grade cloud environments with physical and logical security controls, regular vulnerability scanning, and penetration testing.
• Breach Response: 68ji maintains a documented Data Breach Response Plan. In the event of a security incident affecting personal data, 68ji will notify the National Privacy Commission within 72 hours of becoming aware of the breach (where required under RA 10173) and will notify affected data subjects where the breach poses a significant risk to their rights and freedoms.

68ji retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, 68ji securely deletes or irreversibly anonymizes personal data using industry-accepted data destruction methods. Data that has been anonymized — meaning it can no longer be linked to an identifiable individual — may be retained indefinitely for statistical analysis and platform improvement purposes.

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 68ji. All requests must be submitted in writing to 68ji's Data Privacy Officer at [email protected]:

68ji will respond to all data subject rights requests within fifteen (15) working days of receipt. Where a request requires additional time to fulfil, 68ji will notify you of the extension and its reason within the initial 15-day period. 68ji does not charge a fee for exercising data subject rights, except where requests are manifestly unfounded or excessive.

If you are not satisfied with 68ji's response to a privacy complaint or rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

The 68ji platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. 68ji does not knowingly collect personal data from individuals under the age of 21.

If 68ji discovers that an account has been registered by an individual under the age of 21 — whether discovered through KYC verification, age declaration review, or any other means — that account will be immediately closed, the matter handled in accordance with 68ji's Terms & Conditions, and any personal data collected from that individual deleted to the extent permitted by applicable law.

If you are a parent or guardian and believe that a minor under your care has created a 68ji account without authorization, please contact 68ji's Data Privacy Officer at [email protected] immediately so the matter can be investigated and resolved promptly.

Some of 68ji's third-party service providers — including cloud hosting infrastructure and certain game technology providers — may process personal data outside of the Philippines. Where such cross-border transfers occur, 68ji ensures that appropriate safeguards are in place to protect your personal data in accordance with Section 21 of the Data Privacy Act.

Safeguards applicable to cross-border transfers include: contractual data processing agreements incorporating the standard privacy and security obligations required under RA 10173; transfer only to jurisdictions that the NPC has determined provide an adequate level of data protection; and prior notification to and, where required, approval by the National Privacy Commission.

68ji may send you promotional communications — including bonus notifications, tournament announcements, new game alerts, and platform updates — via SMS, push notification (browser-based), or email, where you have provided explicit opt-in consent during registration or subsequently through your Account Settings.

You may withdraw your consent to receive marketing communications at any time by: updating your notification preferences in your 68ji Account Settings; replying STOP to any marketing SMS; clicking the unsubscribe link in any marketing email; or contacting 68ji support via live chat or email and requesting removal from all marketing communications.

Withdrawal of marketing consent will be processed within 2 business days. Withdrawal of consent for marketing does not affect the lawfulness of any processing conducted prior to withdrawal, and does not affect 68ji's ability to send you transactional or operational communications (e.g., deposit confirmations, withdrawal notifications, account security alerts) which are not marketing in nature and do not require separate consent.

68ji reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The effective date at the top of this Policy indicates when the current version took effect.

When material changes are made to this Policy, 68ji will notify registered users via their registered contact details at least seven (7) days before the changes take effect. The updated Policy will always be available at 68ji.org/privacy-policy. Your continued use of the 68ji platform after the effective date of any revised Policy constitutes your acknowledgment of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how 68ji protects your personal data. If you have concerns about any change, please contact the Data Privacy Officer before the effective date.

For all privacy-related inquiries, data subject rights requests, complaints, or questions about this Privacy Policy, please contact 68ji's Data Privacy Officer using the details below. All communications should be in English or Filipino.

Data Privacy Officer — 68ji Casino Email: [email protected] (mark subject: "DPO / Privacy Request")
Live Chat: Available 24/7 at 68ji.org — specify "Privacy inquiry" to be directed to the DPO queue
Response time: Within 15 working days for formal rights requests; 1–2 business days for general inquiries

If you are not satisfied with 68ji's response to your privacy complaint, you have the right to file a complaint directly with the National Privacy Commission of the Philippines. The NPC is the competent supervisory authority for data protection matters in the Philippines.