This Privacy Policy describes how 86ph Casino collects, uses, stores, shares, and protects your personal information when you use our platform. 86ph is committed to safeguarding your privacy in compliance with the Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and applicable PAGCOR regulations governing online gaming operators in the Philippines.
Six core principles that govern how 86ph Casino handles your personal data — from collection to deletion.
86ph collects only the personal data that is necessary for a specific, stated purpose — operating your account, processing GCash and PayMaya transactions, complying with PAGCOR and AML requirements, and providing customer support. Your data is never collected speculatively or without a clear lawful basis.
All data transmitted between your device and 86ph is protected by 256-bit SSL/TLS encryption. Stored personal data is encrypted at rest using industry-standard protocols. Access to personal data within 86ph is role-restricted — only staff who require data access to perform their function can retrieve it.
86ph takes reasonable steps to ensure that the personal data it holds is accurate and up to date. You can review and update your personal information through your account settings at any time. For changes to identity-verified details — such as your legal name — please contact our support team with the appropriate documentation.
As a data subject under the Philippine Data Privacy Act of 2012, you have enforceable rights regarding your personal data held by 86ph. These include the right to access, correct, erase, and port your data, as well as the right to object to certain processing activities. Details on how to exercise these rights are provided in this policy.
86ph does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Data sharing is limited to strictly necessary parties: licensed game providers, regulated payment processors, PAGCOR as the licensing authority, and AMLC where legally mandated. Each sharing arrangement is governed by data processing agreements.
86ph retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Under Philippine AML regulations, transaction records and KYC documents are retained for a minimum of five years. Account data of closed accounts is retained for the legally required period and then securely deleted.
A summary of the types of personal data 86ph may collect, the purpose of collection, and the legal basis under the Philippine Data Privacy Act.
| Data Category | Examples | Purpose | Legal Basis |
|---|---|---|---|
| Identity Data | Full name, date of birth, nationality, government ID details | Account registration, KYC verification, age verification (21+ requirement) | Legal obligation (PAGCOR, AML) |
| Contact Data | Philippine mobile number, email address, city/region | Account communication, OTP delivery, promotional messages (with consent) | Contract performance; consent |
| Financial Data | GCash number, PayMaya account, bank account details, transaction history | Deposit processing, withdrawal, AML monitoring, fraud prevention | Contract performance; legal obligation |
| Gaming Activity Data | Bet history, game sessions, win/loss records, wagering patterns | Platform operation, responsible gaming monitoring, bonus eligibility | Contract performance; legitimate interest |
| Technical Data | IP address, device type, browser, OS, session duration, login timestamps | Platform security, fraud detection, performance optimization | Legitimate interest; legal obligation |
| KYC Documents | Photos/scans of PhilSys ID, passport, driver's license, UMID | Identity verification for withdrawals, regulatory compliance | Legal obligation (PAGCOR, AML) |
| Communication Data | Live chat transcripts, support ticket content, email correspondence | Customer support, dispute resolution, quality assurance | Legitimate interest; contract performance |
1.1 Identity of Controller. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller for personal information processed through the 86ph Casino platform is 86ph Casino, operating under PAGCOR regulatory oversight and accessible at 86ph.app.
1.2 Data Protection Officer. 86ph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. Contact details for the DPO are provided in Section 14 of this policy.
1.3 Scope of This Policy. This Privacy Policy applies to all personal data processed by 86ph in connection with your use of the 86ph Casino platform, including account registration, identity verification, gaming activity, financial transactions, customer support interactions, and marketing communications. It applies to all players accessing 86ph from any location within the Philippines, including Metro Manila, Cebu, Davao, and all other regions.
2.1 Directly From You. 86ph collects personal data that you provide directly when you register an account, complete KYC identity verification, make a deposit or withdrawal request, contact customer support, respond to a survey or promotion, or update your account settings.
2.2 Automatically During Platform Use. When you use the 86ph platform, certain technical and behavioral data is collected automatically through cookies, log files, and similar tracking technologies. This includes your IP address, device identifier, browser type and version, operating system, pages visited, session duration, game interactions, and bet placement patterns. This data is used to maintain platform security, detect fraud, and improve the user experience.
2.3 From Payment Processors. When you transact through GCash, PayMaya, BPI, BDO, or Metrobank, 86ph receives transaction confirmation data from these payment processors, including transaction reference numbers, amounts, timestamps, and the account identifiers associated with your payment method. Full payment credentials — such as your complete GCash PIN — are never transmitted to or stored by 86ph.
2.4 From Third-Party Verification Services. For KYC purposes, 86ph may use third-party identity verification services to authenticate your government-issued Philippine ID documents. These services process your document data under their own privacy policies, subject to data processing agreements with 86ph that require equivalent data protection standards.
86ph uses personal data collected from players for the following specific purposes:
3.1 No Automated Decision-Making With Legal Effect. 86ph does not use automated processing that produces decisions with significant legal effects on players — such as permanent account suspension — without human review. Automated fraud flags trigger a human investigation before any irreversible account action is taken.
4.1 Principle of Minimum Sharing. 86ph shares your personal data only where it is necessary to deliver platform services, comply with legal obligations, or protect the legitimate interests of 86ph and its players. We do not sell or rent personal data to third parties for commercial advertising purposes.
4.2 Game Providers. To operate game sessions on the 86ph platform, game providers such as JILI Games and other certified suppliers receive a session token and your account identifier. These providers do not receive your full identity data, contact information, or payment details. All game providers used by 86ph operate under data processing agreements that restrict use of any shared data to the sole purpose of game operation.
4.3 Payment Processors. GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum personal data necessary to process your requested transaction. 86ph complies with BSP (Bangko Sentral ng Pilipinas) regulations governing data shared with payment service providers.
4.4 Regulatory Authorities. As a PAGCOR-licensed operator, 86ph is legally required to report certain player data and transaction information to PAGCOR. Under the Anti-Money Laundering Act (AMLA), 86ph is required to report covered and suspicious transactions to the Anti-Money Laundering Council (AMLC). These reporting obligations supersede any privacy preferences you may have expressed.
4.5 Law Enforcement. 86ph may disclose personal data to Philippine law enforcement agencies, courts, or other government bodies where required by a valid legal order, court order, or applicable Philippine law.
5.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. 86ph uses cookies and similar technologies such as local storage and session tokens to operate the platform, maintain your logged-in session, remember your preferences, and analyze platform usage.
5.2 Types of Cookies Used by 86ph.
5.3 Managing Cookies. You can manage or disable non-essential cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your 86ph account. 86ph does not use third-party advertising cookies or cross-site tracking cookies for behavioral advertising purposes.
6.1 Active Accounts. Personal data associated with active 86ph accounts is retained for as long as the account remains open and for the period necessary to deliver the services you have requested, manage your VIP tier, and administer your bonus history.
6.2 Closed Accounts. Upon account closure — whether requested by you or initiated by 86ph — your personal data is retained for the minimum period required by applicable Philippine law. Under AMLA, transaction records and KYC documents must be retained for a minimum of five (5) years following the date of the transaction or account closure, whichever is later. After the applicable retention period expires, your data is securely deleted or irreversibly anonymized.
6.3 Support and Dispute Records. Customer support communications and dispute records are retained for three (3) years following resolution, to support potential re-escalation, regulatory audit, or legal proceedings.
6.4 Marketing Data. Where you have consented to receive marketing communications from 86ph, your marketing preference data is retained until you withdraw consent. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
7.1 Technical Safeguards. 86ph implements the following technical security measures to protect your personal data:
7.2 Organizational Safeguards. In addition to technical measures, 86ph maintains organizational security practices including mandatory data protection training for all staff, binding confidentiality obligations for employees and contractors with data access, documented data breach response procedures, and regular privacy impact assessments for new platform features.
7.3 Your Role in Security. While 86ph maintains robust security infrastructure, the security of your 86ph account also depends on you maintaining strong, unique login credentials and enabling two-factor authentication. 86ph will never contact you by phone, SMS, or email asking for your full password or complete OTP codes. If you receive such a request, treat it as a phishing attempt and do not comply.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 86ph. To exercise any of these rights, contact our Data Protection Officer as described in Section 14.
Request a copy of the personal data 86ph holds about you, including what data is held, why it is held, and who it has been shared with.
Request correction of inaccurate or incomplete personal data held by 86ph. Updates to identity-verified information require documentary evidence.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to legal retention obligations under AMLA and PAGCOR regulations.
Object to processing of your personal data based on legitimate interests or for direct marketing purposes. Objecting to processing required for legal compliance is not possible.
Request a machine-readable copy of the personal data you have provided to 86ph, to facilitate transfer to another service provider where technically feasible.
If you believe 86ph has mishandled your personal data, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
9.1 Strict Age Restriction. 86ph Casino is strictly prohibited from being used by individuals under 21 years of age. This is a mandatory requirement under PAGCOR regulations governing online gaming in the Philippines. 86ph does not knowingly collect or process personal data from individuals below this age threshold.
9.2 Discovery of Underage Data. In the event that 86ph discovers that personal data has been collected from or on behalf of an individual under 21 years of age, 86ph will immediately suspend the relevant account, retain the minimum data necessary to fulfill its legal reporting obligations, and securely delete all other personal data associated with the account as soon as those obligations are satisfied.
9.3 Household Responsibility. Account holders are responsible for ensuring that minors in their household cannot access the 86ph platform using their device or account credentials. If you are concerned that a minor may have accessed your 86ph account, contact support immediately at [email protected].
10.1 Consent-Based Marketing. 86ph sends promotional emails, SMS notifications, and in-platform messages about new games, bonus offers, VIP events, and platform news. Marketing communications are sent only to players who have opted in to receive them during registration or through their account settings.
10.2 Transactional Communications. Regardless of your marketing preferences, 86ph will send you transactional and operational communications necessary to operate your account. These include deposit and withdrawal confirmations, security alerts, OTP codes for 86ph login, KYC status updates, and notifications required by PAGCOR regulations. These communications cannot be opted out of while your account remains active.
10.3 Opt-Out. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings, or by clicking the unsubscribe link in any 86ph marketing email. Withdrawal of consent will be processed within five (5) business days. Withdrawal does not affect your account status or ability to use the platform.
10.4 No Third-Party Marketing. 86ph does not share your contact details with third-party companies for their own marketing purposes. If you receive marketing communications that purport to be from 86ph but appear suspicious or arrive from an unfamiliar address, treat them as potentially fraudulent and contact support.
11.1 Primary Data Location. 86ph primarily stores and processes player data on servers located within the Philippines or in jurisdictions that provide adequate data protection standards recognized under Philippine law.
11.2 Third-Party Providers. Some third-party service providers used by 86ph — including certain game providers and cloud infrastructure services — may process data in jurisdictions outside the Philippines. In all such cases, 86ph ensures that appropriate safeguards are in place through binding data processing agreements that require the receiving party to apply data protection standards equivalent to those required under Philippine law.
11.3 Notification. If a significant change to data transfer arrangements is proposed that could affect the level of protection afforded to your personal data, 86ph will provide advance notice through the platform and update this Privacy Policy accordingly.
12.1 Detection and Containment. 86ph maintains continuous security monitoring to detect unauthorized access or data breaches. Upon detecting a potential breach, 86ph immediately initiates its incident response procedure, which includes isolating affected systems, assessing the scope and nature of the breach, and engaging forensic security resources as required.
12.2 Regulatory Notification. In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected players, 86ph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and subsequent guidelines.
12.3 Player Notification. Where a data breach is likely to result in a high risk to the rights and freedoms of affected individuals, 86ph will notify affected players without undue delay. Notification will be provided via the registered email address and, where appropriate, through the 86ph platform. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps 86ph has taken or is taking in response.
13.1 Right to Update. 86ph reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable Philippine data protection law, PAGCOR regulations, changes in our data processing practices, or improvements to our privacy framework.
13.2 Notification of Changes. Material changes to this Privacy Policy — such as changes to the categories of data collected, the purposes for which data is used, or the rights available to players — will be communicated to active members via their registered email address and through a notice on the 86ph platform at least fourteen (14) days prior to the effective date of the change.
13.3 Continued Use as Acceptance. Your continued use of the 86ph platform after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the updated policy. If you do not accept the amended Privacy Policy, you must cease using the platform and request account closure.
13.4 Version History. The current version of this Privacy Policy and its effective date are displayed at the top of this page. Prior versions are available upon request from the Data Protection Officer.
If you have any questions about this Privacy Policy, wish to exercise your data rights under the Philippine Data Privacy Act, or need to report a privacy concern, please contact 86ph through the following channels:
If you are not satisfied with 86ph's response to a privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official government website.
Your personal data is handled with care, stored securely, and never sold. 86ph is PAGCOR-regulated and Data Privacy Act compliant — so you can focus on the games, not worry about your information. Players must be 21 or older.
Strictly 21+ only. Gambling can be addictive — please play responsibly. Sumugal nang may responsibilidad.