This Privacy Policy explains how 86ph collects, uses, stores, protects, and shares personal information submitted by players and visitors. It is written in compliance with Republic Act 10173, the Data Privacy Act of the Philippines, and PAGCOR's data handling requirements for licensed online gaming operators.
Six principles that guide how 86ph handles your personal information — in plain language, before the full legal text.
86ph collects only the personal information that is genuinely necessary to operate your account, process transactions, verify your identity as required by PAGCOR regulations, and provide you with relevant support. We do not collect data speculatively or for commercial resale.
This policy and 86ph's data practices are designed to comply with Republic Act 10173 — the Data Privacy Act of the Philippines — and its Implementing Rules and Regulations. Your rights as a data subject under Philippine law are fully recognised and honoured by 86ph.
86ph does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. Your data is shared only with trusted service providers who support 86ph operations under strict data processing agreements, and with regulators as legally required.
Personal data stored by 86ph is protected using industry-standard encryption, access controls, and security procedures. Sensitive data including KYC documents and payment information is handled with elevated security protocols. Access within 86ph is restricted on a strict need-to-know basis.
You have real, exercisable rights over your personal data at 86ph — access, correction, deletion, objection, and portability. These are not aspirational statements. You can exercise any of these rights by contacting 86ph support, and we will respond within the timeframes required by Philippine law.
This policy describes in specific terms what data 86ph collects, exactly why each category is needed, who it may be shared with, and how long it is retained. No vague language about "may be used for various purposes" — we state the purposes plainly and we stick to them.
Scope of this Policy: This Privacy Policy applies to all personal information collected by 86ph through the 86ph.org website, any mobile-optimised version thereof, account registration processes, customer support interactions, and all related 86ph services. It applies to all registered players and unregistered visitors to the platform.
For the purposes of the Data Privacy Act of the Philippines (Republic Act 10173) and its Implementing Rules and Regulations, the data controller responsible for the personal information collected through the 86ph platform is the entity operating 86ph at 86ph.org (referred to in this policy as "86ph," "we," "us," or "our").
86ph operates within the regulatory framework established by PAGCOR for online gaming in the Philippines. All data processing activities described in this policy are conducted in accordance with the requirements imposed by PAGCOR licensing conditions, the Data Privacy Act, and applicable implementing regulations issued by the National Privacy Commission (NPC) of the Philippines.
Questions, requests, and complaints relating to this Privacy Policy or the processing of your personal data by 86ph should be directed to our Data Protection Officer (DPO) using the contact details provided in Section 15 of this policy.
86ph collects the following categories of personal data from players and platform visitors. The specific data collected may vary depending on the nature of your interaction with the platform.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality | Account registration, KYC verification |
| Contact Data | Mobile number, email address, residential address | Account registration, KYC verification |
| Identity Documents | Government ID images, selfie photographs | KYC verification process |
| Financial Data | Payment method details, transaction history, GCash/Maya account name | Deposits, withdrawals, KYC |
| Gaming Activity Data | Games played, wager amounts, session duration, win/loss records | All gaming sessions |
| Technical Data | IP address, device type, browser, operating system, session data | All platform access |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, session time limits | Use of responsible gaming tools |
Sensitive Personal Information: Government-issued ID images and related KYC documents constitute sensitive personal information under Philippine law. 86ph applies additional security measures to this category of data and limits access to authorised compliance personnel only.
86ph collects personal data through the following means:
86ph processes your personal data only for specified, explicit, and legitimate purposes. The following table describes each processing purpose and the data categories involved:
Under the Data Privacy Act of the Philippines, 86ph relies on the following legal grounds for processing your personal data, depending on the specific processing activity:
86ph does not sell your personal data. Your information is never sold, rented, or traded to third parties for their own marketing or commercial purposes. Sharing is limited to the specific categories described below.
86ph may share your personal data with the following categories of third parties, strictly for the purposes described:
All third-party service providers who access personal data on behalf of 86ph are subject to contractual obligations requiring them to maintain appropriate security measures, process data only as instructed by 86ph, and comply with applicable Philippine data protection requirements.
The 86ph platform uses cookies and similar tracking technologies to support platform functionality, maintain your login session, enhance your user experience, and collect anonymised usage analytics. The following categories of cookies are used on the 86ph platform:
Most browsers allow you to manage cookie settings through their privacy or settings menu. Blocking all cookies may prevent you from using the 86ph platform, as session authentication requires strictly necessary cookies. Details on managing cookies are available through your specific browser's help resources.
86ph retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal, regulatory, and compliance retention requirements.
The following retention periods apply to key data categories:
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.
86ph implements technical and organisational security measures appropriate to the risk level of each category of personal data we process. These measures include:
Security incident notification: In the event of a personal data breach that is likely to result in significant harm to affected individuals, 86ph will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players as required by the Data Privacy Act and NPC regulations.
While 86ph takes data security seriously and implements the measures described above, no internet-based system can guarantee absolute security. Players are encouraged to protect their own accounts by using strong, unique passwords, enabling SMS OTP two-factor authentication, and promptly reporting any suspected unauthorised access to 86ph support.
Some of the third-party service providers used by 86ph — including cloud infrastructure providers, identity verification services, and game content providers — may process personal data outside the Philippines. Where such international data transfers occur, 86ph ensures that appropriate safeguards are in place as required by the Data Privacy Act of the Philippines and NPC regulations on cross-border data transfers.
Safeguards used for cross-border transfers include:
Details of specific cross-border transfers and the safeguards applicable to each may be requested from 86ph's Data Protection Officer.
Under the Data Privacy Act of the Philippines and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by 86ph. These rights are exercisable by contacting 86ph's Data Protection Officer using the details in Section 15:
You have the right to request confirmation of whether 86ph processes personal data about you, and to receive a copy of that data together with information about how it is used. Access requests will be processed within fifteen (15) working days of receipt.
You have the right to request correction of inaccurate or incomplete personal data held about you. Where correction is not technically feasible (e.g., historical transaction records), 86ph will note the dispute against the relevant records.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent is withdrawn (for consent-based processing), or where processing is unlawful. This right is subject to override by legal retention obligations including PAGCOR's five-year records requirement.
You may object to processing based on legitimate interests, including the use of your data for marketing purposes. Objections to marketing will be acted upon immediately. Objections to other processing will be assessed against the specific legitimate interests and legal obligations applicable.
Where technically feasible, you may request a copy of personal data you have provided to 86ph in a structured, commonly used, machine-readable format. This right applies to data processed on the basis of consent or contractual necessity.
If you believe 86ph has handled your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. We encourage you to contact our DPO first, as many issues can be resolved directly and promptly.
Age Restriction — 21 Years and Above Only. The 86ph platform is strictly for adults aged 21 years and above. 86ph does not knowingly collect personal data from individuals under 21 years of age. This is a firm requirement under PAGCOR's online gaming regulatory framework.
If 86ph becomes aware that personal data has been collected from an individual below the minimum age of 21, the account will be immediately closed and all associated personal data deleted or returned as appropriate, except to the extent that retention is required to comply with anti-money laundering or other legal obligations.
If you are a parent or guardian and believe that a minor under your care has registered an account with 86ph, please contact our support team immediately via the on-site live chat. 86ph will investigate and take appropriate action without delay.
The 86ph platform may contain references to third-party services, including game providers and payment processors, whose own privacy policies and data practices apply independently of this Privacy Policy. 86ph is not responsible for the privacy practices of third-party entities operating their own separate services.
Game content provided by third-party game developers within the 86ph platform is subject to the data practices of those developers to the extent that their systems process session data independently. 86ph's contractual arrangements with game providers include data protection requirements, but 86ph cannot control each provider's internal data handling beyond those contractual obligations.
Players are encouraged to review the privacy policies of any third-party payment services they use in connection with 86ph — including GCash, Maya, BPI, and BDO — as these services operate their own data collection and processing activities independent of 86ph.
86ph reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, new legal or regulatory requirements, or changes to the 86ph platform's functionality. Material changes to this policy will be communicated to registered players via SMS notification to their registered mobile number and/or a prominent notice displayed upon next login, with a minimum of seven (7) days' notice before the change takes effect, except where immediate implementation is required for legal compliance reasons.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. The current version of this Privacy Policy is always available at 86ph.org/privacy-policy. Continued use of the 86ph platform following the effective date of an amendment constitutes acknowledgment of the updated policy.
For non-material changes — such as clarifications, corrections of typographical errors, or updates to contact details — 86ph may update the policy without formal advance notice, though the "Last Updated" date will always be current.
For all queries, requests, and complaints relating to this Privacy Policy or the processing of your personal data by 86ph, please contact the 86ph Data Protection Officer through the following channels:
When submitting a data subject rights request, please provide your registered mobile number and a clear description of your request to allow efficient identification of your account records and processing of your request within the applicable statutory timeframes.
If you are not satisfied with 86ph's response to a privacy complaint, you have the right to escalate to the National Privacy Commission of the Philippines — the competent supervisory authority for data protection matters in the Philippines.
We've built 86ph's data practices around Philippine law and genuine respect for player privacy. Your information is used to run your account and keep it safe — nothing more. Ready to experience 86ph? Register today and play with confidence. Must be 21 years of age or older.
21+ Only. Gambling involves financial risk. Please gamble responsibly. PAGCOR regulated.