Privacy Policy for
pk67 Members

pk67 is an online casino and sports betting platform available at pk67.io, serving registered members across the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and all other regions. pk67 operates under the PAGCOR regulatory framework and is committed to maintaining the privacy and security of every member's personal data.

For the purposes of this Privacy Policy, pk67 acts as the data controller in respect of the personal information you provide when registering, using, or interacting with the pk67 platform. This means pk67 is responsible for deciding what personal data is collected, why it is collected, and how it is handled throughout its lifecycle on our systems.

pk67 collects personal data across several categories depending on how you interact with the platform. The table below summarises the main categories of data we collect and the context in which each category arises:

pk67 does not collect sensitive personal data such as biometric data, religious beliefs, political opinions, or health records, except where expressly required by PAGCOR regulatory guidelines or Philippine law (for example, responsible gaming self-exclusion records).

pk67 collects personal data through several distinct channels. Understanding these channels helps you make informed decisions about the information you share with us:

• Direct interactions: Information you provide when completing the pk67 registration form, submitting KYC documents, making deposits or withdrawals, contacting support, or updating your account profile.
• Automated technical collection: Data collected automatically when you access pk67.io or use the platform — including your IP address, device identifiers, browser type and version, operating system, and session activity logs.
• Cookies and similar technologies: pk67 uses first-party cookies and session tokens to maintain your login state, personalise your experience, and collect anonymised usage analytics. Full details are provided in Section 7 (Cookies & Tracking).
• Payment processors: When you deposit or withdraw using GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, or QR Ph, our payment partners share confirmation data with pk67 to record and reconcile your transaction.
• Game providers: Licensed game studios integrated into the pk67 platform (such as JILI, Evolution Gaming, and others) may share session and outcome data with pk67 for game integrity, auditing, and responsible gaming monitoring purposes.
• Publicly available sources: In certain fraud prevention or identity verification scenarios, pk67 may cross-reference information against publicly available Philippine government databases or credit reference agencies.

pk67 processes your personal data for clearly defined and legitimate purposes only. We do not use your data for any purpose incompatible with the reasons listed below:

• Account creation and management: To register your pk67 account, verify your identity, maintain your profile, and manage your login credentials securely.
• Payment processing: To process deposits and withdrawals accurately, reconcile transactions, and maintain an auditable financial record in compliance with PAGCOR requirements.
• Regulatory compliance: To fulfil pk67's obligations under the Philippine Data Privacy Act of 2012, PAGCOR licensing conditions, and the Anti-Money Laundering Act (AMLA). This includes KYC verification, suspicious transaction reporting, and record-keeping.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other security threats on the pk67 platform.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, administer self-exclusion requests, enforce deposit limits, and communicate responsible gaming resources to members who may need support.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of pk67's support services.
• Platform improvement: To analyse aggregated, anonymised usage data and improve the features, performance, and overall experience of the pk67 platform.
• Promotional communications: To send you relevant bonus offers, game announcements, and personalised promotions — but only where you have given explicit consent to receive marketing communications. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012 (RA 10173), pk67 must have a lawful basis for processing your personal data. The following legal bases apply to pk67's data processing activities:

• Contractual necessity: Processing required to fulfil pk67's obligations to you under your membership agreement — including account operation, payment processing, and game access.
• Legal obligation: Processing required to comply with PAGCOR licensing requirements, AMLA obligations, tax reporting duties, and other applicable Philippine laws.
• Legitimate interests: Processing carried out for pk67's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests do not override your fundamental privacy rights.
• Consent: Processing for purposes that require your explicit agreement — particularly the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where pk67 relies on consent as its legal basis, you have the right to withdraw that consent at any time by contacting pk67 support or adjusting your account communication preferences. Withdrawal of consent does not affect the validity of any processing that took place before the withdrawal.

pk67 does not sell your personal data. We share your information only in the specific, limited circumstances described below, and only with parties who are contractually required to maintain appropriate data security standards:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and QR Ph receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• Game technology providers: Licensed game studios and RNG certification bodies receive session data necessary for game delivery, outcome auditing, and regulatory compliance.
• Identity verification services: Third-party KYC and anti-fraud providers may receive copies of your identity documents and personal data solely for the purpose of verifying your identity and screening against AML watchlists.
• Regulatory authorities: PAGCOR and other competent Philippine government agencies may require pk67 to disclose member data as part of regulatory audits, licensing compliance checks, or law enforcement requests made under proper legal authority.
• Platform infrastructure providers: Cloud hosting, security, and analytics services used to operate pk67.io may process technical and anonymised data on pk67's behalf under strict data processing agreements.
• Professional advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations, where disclosure is necessary for pk67 to obtain professional advice.

pk67.io uses cookies and similar browser-based tracking technologies to provide you with a functional, personalised, and secure gaming experience. A cookie is a small text file placed on your device when you visit a website. pk67 uses the following categories of cookies:

• Strictly necessary cookies: These are essential to the operation of pk67.io. They include session authentication tokens that keep you logged in, security cookies that prevent cross-site request forgery, and cookies that maintain your cashier state during a transaction. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences — such as your preferred language, game lobby layout, and responsible gaming settings — so you do not need to re-enter them on each visit.
• Analytics cookies: pk67 uses anonymised, aggregated analytics data to understand how members use the platform, which pages are visited most, and where technical issues arise. This data does not identify individual members.
• Marketing cookies: Only activated where you have explicitly consented, these cookies allow pk67 to display relevant promotional content within the platform based on your gaming activity and preferences.

You can control non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the pk67 platform. pk67 does not use third-party advertising network cookies or cross-site tracking pixels that share your data with external marketing platforms.

pk67 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your membership with pk67, plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLA record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction on your account, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with Philippine AMLA reporting requirements.
• Support correspondence: Retained for three (3) years from the date of the last interaction, to allow pk67 to respond to any follow-up disputes or regulatory enquiries.
• Marketing consent records: Retained for the duration of your membership, plus two (2) years following opt-out, to demonstrate compliance with consent obligations.
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes, then deleted or anonymised.

When your personal data is no longer required, pk67 securely deletes or anonymises it so that it can no longer be associated with your identity.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to the personal data pk67 holds about you:

• Right to be informed: You have the right to know what personal data pk67 collects about you, how it is used, and with whom it is shared — all of which is described in this Privacy Policy.
• Right to access: You may request a copy of the personal data pk67 holds about you at any time. pk67 will respond to verified access requests within fifteen (15) business days.
• Right to correction: If any personal data pk67 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation requires pk67 to retain it.
• Right to object: You have the right to object to pk67 processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to pk67, where technically feasible.
• Right to lodge a complaint: If you believe pk67 has handled your personal data in a manner inconsistent with the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact pk67's Data Protection Officer (DPO) using the details provided in Section 13 of this Privacy Policy. pk67 may require you to verify your identity before processing your request.

pk67 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• TLS encryption: All data transmitted between your device and pk67.io is protected by Transport Layer Security (TLS 1.2 or higher), preventing interception during transit.
• AES-256 encryption at rest: Sensitive personal data — including government ID documents and financial records — is stored using AES-256 encryption on pk67's secured servers.
• Access controls: Access to personal data within pk67's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-factor authentication (2FA): pk67 strongly encourages all members to enable 2FA on their accounts to add an additional layer of login security.
• Regular security audits: pk67's platform and data infrastructure undergo periodic security assessments conducted by independent third-party security specialists.
• Incident response procedures: In the event of a personal data breach, pk67 will notify affected members and the National Privacy Commission within the timeframes required by Philippine law.

While pk67 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You also play a role in protecting your account — please keep your pk67 login credentials confidential and do not share them with anyone, including pk67 support staff.

pk67 is an online gaming platform exclusively for adults. In accordance with Philippine gaming regulations, pk67 strictly enforces a minimum age requirement of 21 years and above for all registered members. The platform does not knowingly collect, store, or process personal data belonging to any individual under the age of 21.

During the registration and KYC verification process, pk67 verifies each applicant's date of birth against a valid Philippine government-issued identification document. Any account discovered to belong to a person under 21 years of age will be immediately closed, all funds handled in accordance with PAGCOR guidelines, and the personal data of the minor securely deleted in line with the Data Privacy Act of 2012.

pk67 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or PAGCOR regulatory requirements. The effective date at the top of this page will always reflect the most recent revision.

When material changes are made — meaning changes that significantly affect your rights or how pk67 uses your personal data — pk67 will notify all registered members by email to the address on file at least seven (7) days before the amended policy takes effect. A prominent notice will also be displayed on pk67.io.

Your continued use of the pk67 platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the platform and contact pk67 support to request account closure before the revised policy comes into effect.

For all privacy-related enquiries, data subject rights requests, or concerns about how pk67 handles your personal data, please contact pk67's Data Protection Officer using the following details:

• Data Protection Officer: pk67 Data Protection Team
• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please use "Data Privacy Request – [Your Registered Username]" for faster processing
• Response time: pk67 aims to acknowledge all privacy requests within 48 hours and provide a full response within fifteen (15) business days
• Live Chat: Available 24 hours a day, 7 days a week via the pk67 platform for general privacy questions

If you are not satisfied with pk67's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC): https://www.privacy.gov.ph
• NPC Complaints: [email protected]