68gl is committed to protecting the personal data of every player on the platform. This Privacy Policy explains what we collect, why we collect it, and how it is handled — in plain terms, not just legal jargon.
All personal data collected by 68gl is handled in compliance with Republic Act 10173 — the Data Privacy Act of 2012 of the Philippines. We apply technical and organizational safeguards proportionate to the sensitivity of the data we hold, including 256-bit encryption for data in transit.
68gl does not sell, rent, or trade your personal information to third-party marketers. Data shared with external processors is limited strictly to what is necessary for platform operation, payment processing, identity verification, and legal compliance obligations.
As a registered 68gl player, you hold statutory rights under the Data Privacy Act of 2012 — including the right to access, correct, object to processing, and request deletion of your personal data. Requests are handled by our Data Privacy Officer within thirty (30) days of receipt.
Every category of personal data we process has a documented lawful basis — either your consent, contractual necessity (operating your account and processing transactions), a legal obligation (PAGCOR and AML compliance), or our legitimate interest in platform security and fraud prevention.
We will only send you promotional communications if you have opted in to receive them. Transactional messages — such as deposit confirmations, withdrawal notifications, and security alerts — are sent regardless of marketing preferences because they relate directly to your account activity.
68gl retains personal data only as long as necessary for the purpose it was collected, or as required by applicable law. Account and transaction records are retained for a minimum of five (5) years after account closure to satisfy AML and gaming regulatory requirements.
The cards above are plain-language summaries. The full binding Privacy Policy is set out in the numbered sections below.
1.1 This Privacy Policy ("Policy") describes how 68gl ("68gl," "We," "Us," or "Our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("You," "Player," or "User") who access or use the 68gl online gaming platform available at 68gl.org.
1.2 This Policy applies to all personal data processed in connection with: the registration and operation of a 68gl player account; the use of any game, feature, or service on the platform; any communication between you and 68gl's support team; and any transaction conducted through the 68gl payment system.
1.3 This Policy is intended to comply with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as well as any applicable guidelines issued by the National Privacy Commission ("NPC") of the Philippines.
1.4 By registering a 68gl account or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the 68gl platform.
1.5 This Policy should be read in conjunction with the 68gl Terms and Conditions, which govern the overall relationship between you and 68gl as a player on the platform.
2.1 For the purposes of the Data Privacy Act of 2012 and this Policy, 68gl acts as the personal information controller ("PIC") in respect of the personal data collected from players on the platform.
2.2 As personal information controller, 68gl determines the purposes and means of processing player data and is responsible for ensuring that all processing activities comply with applicable data protection law.
2.3 Where 68gl engages third-party service providers to process personal data on its behalf — including payment processors, identity verification providers, and customer support platforms — those third parties act as personal information processors ("PIPs") under binding data processing agreements that require them to handle player data only in accordance with 68gl's instructions and applicable law.
Data Privacy Officer: 68gl has appointed a Data Privacy Officer ("DPO") responsible for overseeing compliance with this Policy and the Data Privacy Act of 2012. You may contact the DPO through the support channels listed in Section 15 of this Policy, clearly labelling your message as a "Data Privacy Inquiry."
3.1 The following table sets out the categories of personal data that 68gl collects from players, together with examples of specific data points within each category:
| Category | Data Points Collected |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID type and number (e.g., Philippine passport, UMID, SSS card, driver's license, Voter's ID) |
| Contact Data | Philippine mobile number (+63), email address, residential address |
| Account Data | Username, encrypted password, account creation date, account status, VIP tier, active bonuses, communication preferences |
| Financial Data | Deposit and withdrawal transaction records, payment method identifiers (e.g., GCash registered mobile number, Maya account reference, BPI/BDO account name), wallet balances, transaction amounts and timestamps |
| Gaming Activity Data | Game session logs, wager amounts, game results, session duration, game type and provider, betting history, bonus redemption history |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, session tokens, login timestamps, geolocation data (country/city level) |
| KYC Verification Data | Copies of government-issued ID documents, proof of address documents, proof of payment method ownership (submitted for identity verification and withdrawal processing) |
| Communications Data | Records of live chat sessions, email correspondence, and support tickets between you and the 68gl support team |
| Responsible Gaming Data | Self-imposed deposit limits, loss limits, session reminders, cooling-off periods, and self-exclusion status where elected by the player |
3.2 68gl does not intentionally collect sensitive personal information (as defined under the DPA) beyond what is required for identity verification and regulatory compliance. Where such data is received as part of a KYC document submission (e.g., a national ID that includes religion or civil status), it is processed solely for identity verification and stored securely with access restricted to authorized personnel only.
4.1 68gl collects personal data through the following means:
Data you provide directly when registering an account (name, mobile number, date of birth, password), when submitting KYC documents, when making a deposit or withdrawal, when contacting customer support, or when updating your account settings.
Technical data collected automatically when you access and use the 68gl platform, including IP address, device identifiers, browser metadata, login session data, and geolocation (at the country/city level) through cookies and similar tracking technologies. See Section 10 for full details on our cookie practices.
In certain circumstances, 68gl may receive or verify personal data from authorized third parties, including:
5.1 68gl processes personal data only where there is a valid lawful basis for doing so under the Data Privacy Act of 2012. The primary lawful bases relied upon are:
6.1 68gl uses the personal data it collects for the following specific purposes:
6.2 68gl does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except in the context of automated fraud detection systems where human review is available upon request.
7.1 68gl does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes.
7.2 Your personal data may be shared with the following categories of third parties strictly to the extent necessary for the purposes described in this Policy:
GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, and other payment partners receive transaction data — including your registered payment account identifier and transaction amounts — to process deposits and withdrawals on your behalf.
Third-party KYC and identity verification service providers receive copies of your submitted ID documents and personal details to validate identity and age in compliance with PAGCOR requirements.
Game software providers (such as Pragmatic Play, PG Soft, and Jili) receive session data — including account ID, wager amounts, and game history — necessary to operate game rounds and validate results. Game providers do not receive your full identity data.
Fraud detection and anti-money laundering screening providers may receive account and transaction data to identify risk indicators, PEP matches, and sanctions list hits in compliance with the Anti-Money Laundering Act.
PAGCOR and other Philippine regulatory or law enforcement authorities may receive personal data and transaction records pursuant to lawful orders, regulatory reporting obligations, or investigation requests.
The third-party live chat and support ticketing platform used by 68gl may process support interaction data in the course of resolving your inquiries.
Note: All third-party processors engaged by 68gl are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond what is necessary to fulfill their specific function, and require them to maintain security standards at least equivalent to those applied by 68gl.
8.1 Some of the third-party service providers used by 68gl may be located or operate servers outside of the Philippines. Where personal data is transferred outside the Philippines, 68gl takes steps to ensure that the transfer is subject to appropriate safeguards, including contractual data protection clauses or the recipient country's recognition as providing adequate data protection standards.
8.2 Players who have questions about the specific safeguards applied to cross-border transfers may contact the 68gl Data Privacy Officer using the contact details in Section 15.
9.1 68gl retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years after account closure (AML and gaming regulatory requirement) |
| Financial & Transaction Records | Minimum 5 years from transaction date (Anti-Money Laundering Act requirement) |
| KYC Documents | Duration of account plus 5 years after account closure |
| Gaming Activity Logs | Duration of account plus 3 years after account closure |
| Support Communications | 3 years from the date of the interaction |
| Technical & Log Data | 12 months from collection, unless extended for active investigation |
| Self-Exclusion Records | Retained indefinitely to prevent re-registration circumventing exclusion |
9.2 Where data is no longer required for its original purpose and no legal retention obligation applies, 68gl will securely delete or anonymize it so that it can no longer be associated with an identifiable individual.
10.1 68gl uses cookies and similar tracking technologies (collectively, "Cookies") on the platform for the purposes described below.
These Cookies are essential for the platform to function. They maintain your login session, remember your security authentication status, and enable core platform functionality. These Cookies cannot be disabled without preventing you from using the platform.
These Cookies remember your preferences and settings — such as language preference and accepted bonus terms — to improve your experience during and across sessions.
These Cookies collect aggregated, anonymized data about how players use the platform — such as which games are most visited, session duration, and navigation paths. This data helps 68gl improve platform performance and user experience. These Cookies may be disabled without affecting core functionality.
These Cookies assist in identifying and blocking suspicious activity, bot traffic, and unauthorized access attempts. They form part of 68gl's platform security infrastructure.
10.2 You may manage non-essential Cookies through your browser settings. Most browsers allow you to block or delete Cookies. Note that blocking certain Cookies may affect the functionality of the 68gl platform.
68gl does not use advertising or targeting Cookies to track player activity across other websites or to serve behaviorally targeted advertising to players outside the 68gl platform.
11.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 68gl:
Request a copy of the personal data 68gl holds about you and information about how it is being processed.
Request correction of any inaccurate or incomplete personal data held about you. Some corrections may require re-verification of identity documents.
Request deletion of your personal data where it is no longer necessary for the original purpose, subject to overriding legal retention obligations under the AML Act and gaming regulations.
Object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing communications where you have previously opted in.
Request that processing of your personal data be restricted in certain circumstances — for example, where accuracy is contested or processing is unlawful but deletion is not preferred.
Request receipt of your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract and is carried out by automated means.
11.2 To exercise any of the above rights, contact the 68gl Data Privacy Officer using the details in Section 15. 68gl will respond to your request within thirty (30) days of receipt. Where a request is complex or numerous, the response period may be extended by a further thirty (30) days, with notice provided to you within the initial thirty-day period.
11.3 68gl will not charge a fee for handling data rights requests unless the request is manifestly unfounded, excessive, or repetitive — in which case a reasonable administrative fee may be applied.
11.4 If you are dissatisfied with 68gl's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
12.1 68gl implements technical and organizational security measures appropriate to the risks associated with processing player personal data. These measures include:
12.2 While 68gl takes reasonable steps to protect your personal data, no online system is completely immune to security risk. You are responsible for maintaining the security of your account credentials. 68gl will never ask for your password and recommends that you use a strong, unique password and enable two-factor authentication.
12.3 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 68gl will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay where required.
13.1 The 68gl platform is strictly restricted to individuals who are at least twenty-one (21) years of age. 68gl does not knowingly collect personal data from individuals under the age of 21.
13.2 Where 68gl discovers or has reasonable grounds to believe that personal data has been submitted by an individual under 21 years of age, the associated account will be immediately suspended, the personal data will be securely deleted to the extent permitted by legal obligations, and any associated account balance will be handled in accordance with applicable regulatory requirements.
13.3 Parents and guardians who believe a minor may have registered or used the 68gl platform are encouraged to contact the 68gl support team immediately via the live chat function on 68gl.org. 68gl will respond promptly and work to resolve the matter.
14.1 68gl reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or platform operations. Material changes will be communicated to registered players via the email address or mobile number on file, or through a prominent notice on the 68gl platform.
14.2 The effective date of the current version of this Policy is displayed at the top of this page. The most current version will always be accessible at 68gl.org/privacy-policy.
14.3 Continued use of the 68gl platform following notification of any material change constitutes your acceptance of the updated Policy. If you do not accept the changes, you should cease using the platform and may request account closure in accordance with the 68gl Terms and Conditions.
15.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 68gl, please contact our Data Privacy Officer through the following channels:
Live Chat: Available 24/7 via the support widget on 68gl.org — mark your message as "Data Privacy Inquiry"
Email: [email protected] — use subject line "Data Privacy Request: [Your Name]"
Language: Requests accepted in English and Filipino (Tagalog)
15.2 The 68gl Data Privacy Officer will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) days, in accordance with the Data Privacy Act of 2012.
15.3 If you believe that your data privacy rights under the Data Privacy Act of 2012 have been violated and you are not satisfied with 68gl's response, you have the right to file a complaint with the National Privacy Commission of the Philippines.
Now that you've reviewed our Privacy Policy, you can play with confidence knowing your personal data and wallet are protected. Log in to your 68gl account or explore what's on offer in the lobby.
21+ only. Please gamble responsibly. Gambling involves financial risk.