p567 Privacy Policy

This Privacy Policy ("Policy") describes how p567 ("p567," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "Player," or "User") who access or use the p567 online gaming platform available at p567.net and any associated mobile or web applications (collectively, the "Platform").

This Policy applies to all personal data processed by p567 in connection with the Platform, including data collected during account registration, identity verification, gameplay, financial transactions, customer support interactions, and marketing communications. It applies to all players located in the Philippines and, where applicable, to any other individuals whose data p567 processes.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. By registering a p567 account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations, p567 is the Personal Information Controller (PIC) in respect of the personal data it collects and processes through the Platform.

p567 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the DPA and this Policy. Contact details for the DPO are provided in Section 15 of this Policy. Players may contact the DPO at any time with questions, concerns, or requests relating to their personal data.

p567 collects the following categories of personal data, depending on how you interact with the Platform:

p567 does not collect sensitive personal information (as defined under the DPA) unless strictly required for identity verification or regulatory compliance purposes, and only with your explicit consent where required by law.

p567 collects personal data through the following channels:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, respond to a survey, or update your account preferences.
• Automatically: When you access or use the Platform, our servers and analytics tools automatically collect technical data such as your IP address, device identifiers, browser type, and session activity logs.
• From third-party service providers: Identity verification agencies, payment processors (e.g., GCash, Maya, BPI, BDO), and fraud prevention services may share data with us as part of the services they provide to p567.
• From regulatory bodies: PAGCOR and other Philippine regulatory authorities may share information with p567 in connection with licensing, compliance, or enforcement activities.

p567 will always tell you at the point of collection whether providing a particular piece of data is mandatory or voluntary, and what the consequences are of not providing it. Where data collection is mandatory for regulatory compliance (e.g., KYC verification), failure to provide the required data may result in your account being restricted or closed.

p567 processes your personal data only for specific, legitimate purposes and only where a valid legal basis exists under the DPA. The table below sets out the primary purposes for which p567 processes personal data and the corresponding legal basis:

Where p567 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact our DPO or update your preferences in your account settings.

p567 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Service providers: We share data with trusted third-party vendors who assist us in operating the Platform, including payment processors (GCash, Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), identity verification providers, cloud hosting providers, and customer support platforms. These providers are contractually bound to process your data only on p567's instructions and in accordance with the DPA.
• Game providers: Where you play games supplied by third-party game studios, limited gameplay data may be shared with those studios for the purpose of delivering the game and ensuring its integrity. Game providers are not permitted to use this data for any other purpose.
• Regulatory and law enforcement authorities: p567 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.
• Fraud prevention networks: p567 may share data with industry fraud prevention services to detect and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of p567's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

p567 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing requirements and AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act (RA 9160, as amended).
• Gaming history: Retained for a minimum of three (3) years from the date of the gaming session, for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and log data: Retained for up to twelve (12) months from the date of collection, unless required for longer periods for security or fraud investigation purposes.

When personal data is no longer required, p567 will securely delete or anonymize it in accordance with industry best practices and the requirements of the NPC.

p567 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and p567's servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal and financial data stored on p567's systems is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to p567 employees and contractors who have a legitimate need to access it for their job functions. All access is logged and audited.
• Two-factor authentication: p567 supports two-factor authentication (2FA) for player accounts and requires it for all administrative access to systems containing personal data.
• Regular security audits: p567 conducts regular penetration testing, vulnerability assessments, and security audits of its systems and infrastructure.
• Incident response: p567 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, p567 will notify the NPC and affected players within the timeframes required by the DPA.

p567 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, remember your preferences, analyze usage patterns, and deliver relevant content. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF).
• Functional cookies: These cookies remember your preferences (such as language settings and game display options) to provide a more personalized experience.
• Analytics cookies: These cookies collect anonymized information about how players use the Platform, such as which pages are visited most frequently and how long sessions last. This data helps p567 improve the Platform.
• Marketing cookies: With your consent, these cookies track your activity on the Platform to help p567 deliver relevant promotional offers. You can opt out of marketing cookies at any time through your account settings.

You can control cookies through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.

p567 is strictly an adult platform. In accordance with PAGCOR regulations and Philippine law, no person under the age of 21 is permitted to register, access, or use the Platform in any capacity.

p567 employs automated and manual age verification processes at the point of registration and during KYC review. If p567 discovers that personal data has been collected from a person under the age of 21, it will immediately suspend the account, void any associated transactions, and securely delete the minor's personal data from its systems.

Parents and guardians who believe that a minor may have registered on p567 are encouraged to contact our DPO immediately so that the matter can be investigated and resolved promptly.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by p567. These rights are real and enforceable — p567 is committed to honoring them promptly and without unnecessary barriers.

To exercise any of these rights, please contact p567's Data Protection Officer using the contact details in Section 15. p567 will respond to all valid requests within fifteen (15) business days of receipt, in accordance with the DPA's implementing rules. In complex cases, this period may be extended by a further fifteen (15) business days, and you will be notified of the extension and the reason for it.

p567 will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

p567 primarily processes personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and certain game studios — may process data in other countries. Where personal data is transferred outside the Philippines, p567 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the DPA.

These safeguards may include contractual clauses approved by the NPC, binding corporate rules, or transfers to countries that the NPC has recognized as providing an adequate level of data protection. p567 will not transfer your personal data to a country that does not provide adequate protection without your explicit consent or without implementing appropriate contractual safeguards.

p567 is subject to the Philippine Anti-Money Laundering Act (RA 9160, as amended by RA 10365 and RA 11521) and is required to implement a comprehensive Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) compliance program. As part of this program, p567 collects and retains detailed identity and transaction records for all players and is required to report certain transactions to the Anti-Money Laundering Council (AMLC).

Specifically, p567 is required by law to file:

• Covered Transaction Reports (CTRs) for single cash transactions exceeding ₱500,000 within one banking day.
• Suspicious Transaction Reports (STRs) for any transaction that p567 has reasonable grounds to believe is related to money laundering, terrorism financing, or other illegal activity, regardless of the amount.

The filing of CTRs and STRs is a legal obligation and does not require p567 to notify the player concerned. p567 is prohibited by law from disclosing to a player that a report has been filed in relation to their account or transactions.

p567 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, p567 will notify registered players by email and/or by posting a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how p567 protects your personal data. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by p567, please contact our Data Protection Officer:

If you are not satisfied with p567's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012.