Privacy Policy — d63 Casino Philippines

1. Data Controller

1.1 The data controller responsible for personal data processed through d63.lat is d63 ("d63," "the Operator," "we," "us," "our"), a PAGCOR-licensed online gaming operator registered and operating in the Philippines.

1.2 d63 has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act of 2012. The DPO is responsible for overseeing d63's data protection compliance and serving as the primary contact for data subjects exercising their rights. DPO contact details are provided in Section 13 of this Policy.

1.3 This Policy applies to all personal data collected from individuals who register an account on d63, visit d63.lat without registering, contact d63 customer support, or interact with d63 through any official channel.

2. Personal Data We Collect

d63 collects the following categories of personal data, depending on how you interact with the platform:

d63 does not collect sensitive personal information as defined by RA 10173 (such as health, political, or religious data) unless specifically required by PAGCOR's responsible gaming regulations (e.g., self-exclusion records, problem gambling indicators).

3. Purposes of Processing

d63 processes personal data for the following purposes:

1. Account creation and management — To register your d63 account, authenticate your identity at login, and maintain your account preferences and session history.
2. KYC and age verification — To comply with PAGCOR's Know Your Customer requirements and verify that all d63 players are at least 21 years of age, as required under Philippine law.
3. Payment processing — To process deposits via GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank, and to process withdrawal requests to verified payment instruments.
4. Anti-Money Laundering (AML) compliance — To fulfill obligations under the Anti-Money Laundering Act (RA 9160, as amended) and PAGCOR's AML framework, including transaction monitoring, suspicious activity detection, and mandatory reporting to the Anti-Money Laundering Council (AMLC).
5. Responsible gaming — To administer deposit limits, self-exclusion requests, cooling-off periods, and session time controls, and to identify indicators of problem gambling behavior as required by PAGCOR's responsible gaming standards.
6. Customer support — To investigate and resolve account queries, payment disputes, game complaints, and technical issues raised through d63's live chat and email support channels.
7. Fraud prevention and security — To detect and prevent unauthorized account access, multi-accounting, bonus abuse, payment fraud, and other prohibited conduct outlined in d63's Terms & Conditions.
8. Regulatory compliance and audit — To maintain records required by PAGCOR for licensing audits, including game logs, financial transaction records, and KYC documentation, for the periods specified in Section 5.
9. Marketing communications — To send promotional offers, bonus notifications, and VIP program updates to players who have opted in. Opt-in is not a condition of registration and may be withdrawn at any time.
10. Platform improvement — To analyze aggregated, anonymized usage patterns to improve the d63 game lobby, payment flows, and user experience. This analysis does not involve individual player profiling for commercial purposes.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, d63 processes personal data on the following legal grounds:

• Contractual necessity — Processing required to operate your d63 account and deliver the gaming services you have registered to use.
• Legal obligation — Processing required to comply with PAGCOR licensing conditions, AMLA reporting requirements, and other applicable Philippine law.
• Legitimate interests — Processing for fraud prevention, security monitoring, and platform improvement, where d63's interests do not override the fundamental rights of data subjects.
• Consent — Processing for marketing communications, where you have provided explicit opt-in consent. This consent may be withdrawn at any time without affecting your account access.

5. Data Retention Periods

d63 retains personal data only for as long as necessary for the purposes outlined in Section 3, subject to the following minimum retention periods mandated by Philippine law and PAGCOR regulations:

• KYC and identity documents: Five (5) years from account closure, as required by AMLA.
• Financial transaction records: Five (5) years from the date of each transaction, as required by AMLA and PAGCOR audit requirements.
• Game session logs: Three (3) years from the date of each session.
• Customer support communications: Three (3) years from the date of the interaction.
• Marketing preference records: Until withdrawal of consent plus one (1) year for audit purposes.

Upon expiry of applicable retention periods, d63 will securely delete or anonymize the relevant data.

6. Data Sharing & Third Parties

6.1 d63 does not sell, rent, or trade personal data to third parties for commercial purposes.

6.2 d63 shares personal data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• Payment service providers — GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and their technology partners, for the processing of deposits and withdrawals.
• KYC and identity verification vendors — Accredited identity verification service providers who assist d63 in fulfilling PAGCOR KYC requirements.
• Game software providers — Licensed game studios and platform providers whose games are integrated into the d63 lobby, for the purpose of game session management and RNG certification audit.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), and any other Philippine regulatory body with lawful authority to receive such data.
• Law enforcement — Philippine law enforcement agencies when required by court order, subpoena, or applicable law.
• Cloud and infrastructure providers — Hosting and data storage providers operating under contractual data processing agreements with appropriate security and confidentiality obligations.

6.3 All third-party data processors engaged by d63 are bound by contractual data processing agreements that require them to process personal data only on d63's instructions and in compliance with RA 10173.

7. Data Security

7.1 d63 implements technical and organizational security measures appropriate to the risk associated with processing player personal data. These measures include, without limitation:

• HTTPS/TLS encryption for all data transmitted between your device and d63.lat;
• Encryption at rest for sensitive personal data including identity documents and financial records;
• Password hashing using industry-standard one-way cryptographic algorithms;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular third-party security audits and penetration testing of the d63 platform;
• Audit logging of all access to sensitive personal data by d63 staff.

7.2 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, d63 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173 and NPC Circular 16-03.

8. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by d63:

• Right to be informed — The right to know that your personal data is being processed, the purposes of processing, and the recipients of your data.
• Right of access — The right to request a copy of the personal data d63 holds about you.
• Right to correction — The right to request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking — The right to request deletion or blocking of personal data that is unlawfully processed or no longer necessary for the purpose for which it was collected, subject to d63's legal retention obligations.
• Right to object — The right to object to processing of your personal data for direct marketing purposes. Exercising this right will not affect your account access.
• Right to data portability — The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to damages — The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, in accordance with RA 10173.

To exercise any of the above rights, please contact d63's Data Protection Officer using the details in Section 13. d63 will respond to rights requests within thirty (30) calendar days.

9. Cookies & Tracking Technologies

9.1 d63.lat uses cookies and similar tracking technologies to maintain session integrity, remember your login state, and analyze aggregate platform usage. No cookies are used to build individual behavioral profiles for sale to third-party advertisers.

9.2 The following categories of cookies are used on d63.lat:

• Strictly necessary cookies — Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without preventing platform use.
• Analytics cookies — Used to collect aggregated, anonymized data on how visitors navigate d63.lat (pages visited, session duration, error rates). Used solely for platform improvement.
• Preference cookies — Used to remember your account preferences such as language settings and lobby view configurations.

9.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent platform login and normal operation. Disabling analytics or preference cookies will not affect your ability to play on d63.

10. Minors

10.1 d63 is a real-money gambling platform strictly restricted to individuals aged 21 years and above. d63 does not knowingly collect personal data from persons under 21 years of age. Age verification is performed during the KYC process for all registered accounts.

10.2 If d63 discovers that a registered account belongs to a person under 21 years of age, the account will be immediately closed, all balances will be refunded to the verified payment source, and the personal data of the minor will be deleted from d63's systems within 30 days, subject to any mandatory retention obligations under AMLA and PAGCOR regulations.

11. Cross-Border Data Transfers

11.1 d63's primary data infrastructure is located within the Philippines. Where operational or technical requirements necessitate transfer of personal data to processors located outside the Philippines (for example, certain cloud infrastructure or game server providers), d63 ensures that such transfers are made only to countries or organizations providing adequate data protection, or under contractual safeguards that meet the requirements of RA 10173 and NPC regulations.

11.2 d63 does not transfer personal data outside the Philippines for marketing, data brokering, or any purpose beyond those described in this Policy.

12. Changes to This Policy

12.1 d63 reserves the right to update this Privacy Policy at any time to reflect changes in Philippine data protection law, PAGCOR requirements, or d63's data processing practices. Material changes will be communicated to registered players via their registered email address at least seven (7) days before the revised Policy takes effect.

12.2 The current version of this Policy, including the "Last updated" date at the top of this page, is the applicable version. We encourage you to review this Policy periodically. Continued use of d63 after the effective date of any revision constitutes acceptance of the updated Policy.

13. Contact & Data Protection Officer

For questions about this Privacy Policy, to exercise your data subject rights, or to raise a data protection concern, please contact:

• Data Protection Officer, d63
• Email: [email protected] (mark subject line: "Data Privacy – DPO")
• Live Chat: 24/7 via the d63 platform (request DPO escalation)
• Response time: Within 30 calendar days for data subject rights requests

If you are not satisfied with d63's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.