63boss Privacy Policy

1. Who We Are

This Privacy Policy is issued by 63boss ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at 63boss.org (the "Platform"). 63boss operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is committed to protecting the personal data of all registered players and visitors in the Philippines.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), 63boss acts as the Personal Information Controller with respect to the personal data you provide when using the Platform. This means we determine the purposes and means of processing your personal information.

2. Personal Data We Collect

Depending on how you interact with the 63boss Platform, we may collect the following categories of personal data:

Category	Examples
Identity Data	Full name, date of birth, nationality, government-issued ID number
Contact Data	Email address, mobile number, residential address (city/province)
Account Data	Username, encrypted password, account preferences, communication settings
Financial Data	GCash number, bank account details (for withdrawal verification), transaction history
Gaming Data	Game history, wager amounts, win/loss records, session durations, bonus usage
Technical Data	IP address, device type, browser type, operating system, session logs
Usage Data	Pages visited, features used, click patterns, time spent on Platform
KYC Documents	Scanned copies of valid Philippine government-issued IDs, selfie verification

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming compliance (e.g., self-exclusion requests related to problem gambling).

3. How We Collect Your Data

63boss collects personal data through the following means:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or participate in promotions.
• Automated technologies: When you browse the Platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies.
• Third-party sources: We may receive data from payment processors (e.g., GCash, Maya, partner banks) to verify transactions, and from identity verification service providers to confirm your age and identity.
• Regulatory sources: We may receive information from PAGCOR or other Philippine regulatory bodies in connection with compliance obligations.

4. How We Use Your Personal Data

63boss uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your 63boss player account.
• Identity verification (KYC): To verify your age (21+), identity, and eligibility to use the Platform in compliance with PAGCOR requirements.
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card.
• Regulatory compliance: To fulfill our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct.
• Customer support: To respond to your inquiries, complaints, and support requests.
• Responsible gaming: To monitor gaming patterns and enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Platform improvement: To analyze usage patterns and improve the features, performance, and content of the 63boss Platform.
• Marketing communications: To send you promotional offers, bonuses, and updates — only where you have provided consent and subject to your communication preferences.

5. Legal Bases for Processing

Under the Data Privacy Act of 2012, 63boss processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the 63boss Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, tax reporting requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed consent. You may withdraw consent at any time.

6. Data Sharing & Disclosure

63boss does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya (Maya), BPI, BDO, Metrobank, UnionBank, and other partner banks, solely to process your financial transactions.
• Identity verification providers: Third-party KYC service providers engaged to verify your identity and age in compliance with PAGCOR requirements.
• Game content providers: Licensed third-party game studios and live dealer operators who supply games on the Platform, to the extent necessary for game operation and dispute resolution.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulatory directive.
• IT and security service providers: Cloud hosting, cybersecurity, and analytics providers engaged under strict data processing agreements that prohibit independent use of your data.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties with whom we share your data are required to implement appropriate technical and organizational security measures and to process your data only for the specified purpose.

7. Cookies & Tracking Technologies

63boss uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled as they are required for security, session management, and 63boss Login functionality.
• Performance cookies: Collect anonymized data about how visitors use the Platform to help us improve performance and user experience.
• Functional cookies: Remember your preferences such as language settings and game display options.
• Analytics cookies: Help us understand player behavior and Platform usage patterns on an aggregated, anonymized basis.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 63boss Platform.

8. Data Security

63boss implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including financial information and KYC documents.
• Multi-factor authentication (MFA) options for player accounts.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Strict access controls ensuring that only authorized personnel can access personal data, on a need-to-know basis.
• 24/7 security monitoring and intrusion detection systems.
• Regular staff training on data privacy and security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 63boss will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

9. Data Retention

63boss retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account data: Retained for the duration of your active account, plus 5 years after account closure, in compliance with PAGCOR record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission, as required under the Anti-Money Laundering Act.
• Transaction records: Retained for 5 years from the date of each transaction, in compliance with AMLA and BIR requirements.
• Gaming history: Retained for 3 years from the date of each gaming session for dispute resolution and regulatory audit purposes.
• Support communications: Retained for 2 years from the date of resolution.
• Marketing consent records: Retained for the duration of your consent, plus 1 year after withdrawal of consent.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized so that it can no longer be associated with you.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 63boss:

To exercise any of these rights, please contact our Data Protection Officer via live chat or email at [email protected]. We will respond to all verified requests within 15 business days in accordance with NPC guidelines. If you are unsatisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Children's Privacy

The 63boss Platform is strictly intended for persons aged 21 years and above in accordance with Philippine gambling regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately suspend the associated account, delete the data, and report the matter to PAGCOR as required. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

12. Cross-Border Data Transfers

63boss primarily stores and processes your personal data within the Republic of the Philippines. In limited circumstances, data may be transferred to or accessed from servers located outside the Philippines — for example, where third-party game content providers or cloud infrastructure providers operate internationally.

Any cross-border transfer of personal data is conducted in compliance with Section 21 of the Data Privacy Act of 2012 and NPC guidelines. We ensure that recipient countries or organizations provide an adequate level of protection for your personal data, or that appropriate safeguards (such as contractual clauses) are in place before any transfer occurs.

13. Updates to This Privacy Policy

63boss reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Material changes to this Privacy Policy will be communicated to registered players via the email address on file or through a prominent notice on the Platform. Your continued use of the 63boss Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the 63boss Data Protection Officer (DPO):

• Live Chat: Available 24/7 via the 63boss Platform
• Email: [email protected]
• General Support: [email protected]

Our support and compliance teams serve Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and all regions of the Philippines, 24 hours a day, 7 days a week.

For unresolved privacy concerns, you may also contact the National Privacy Commission (NPC) of the Philippines through their official government channels.