63boss Privacy Policy

This Privacy Policy ("Policy") is published by 63boss ("63boss," "we," "us," or "the Company"), the operator of the online gaming and sports betting platform accessible at https://63boss.asia ("the Platform"). This Policy explains how 63boss collects, uses, stores, discloses, and protects the personal information of players, visitors, and any other individuals who interact with the 63boss Platform or its related services.

63boss is committed to protecting the privacy and personal data of its users. We comply with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC").

By creating a 63boss account, using the Platform, or providing your personal information to us in any context, you acknowledge that you have read, understood, and agreed to this Privacy Policy. This Policy should be read together with the 63boss Terms and Conditions, which are available at /terms-conditions.

For the purposes of the Data Privacy Act of 2012, the personal information controller for data processed through the 63boss Platform is the 63boss operating entity responsible for the Philippine market. The contact details for data privacy matters, including the Data Protection Officer, are set out in Section 15 of this Policy.

63boss has registered its data processing systems with the National Privacy Commission in compliance with NPC requirements for personal information controllers operating in the Philippines.

63boss collects personal data from you through the following categories of collection points. We collect only what is necessary for the purposes described in this Policy:

63boss does not intentionally collect sensitive personal information as defined under RA 10173, such as health data or biometric data, except where liveness verification is required as part of KYC processes mandated by PAGCOR. Where such data is collected, it is processed under applicable lawful bases and with appropriate safeguards.

63boss processes personal data only where a valid lawful basis exists under the Data Privacy Act of 2012. The primary lawful bases on which 63boss relies are:

• Fulfilment of Contract: Processing your Identity Data, Contact Data, and Financial Data is necessary to provide the services you have registered for — account management, processing deposits and withdrawals, and enabling gameplay.
• Legal Obligation: Processing your KYC Documents and Financial Data is required for 63boss to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), Republic Act No. 9160 as amended, and other applicable Philippine laws and regulations.
• Legitimate Interests: Processing Technical Data and Usage Data is necessary for 63boss's legitimate interests in maintaining Platform security, detecting fraud, preventing abuse, and improving the quality of our services — provided these interests are not overridden by your rights and interests.
• Consent: Processing your Marketing Preferences for direct marketing communications is based on your prior consent, which you may withdraw at any time as described in Section 13.

63boss uses the personal data collected for the following purposes:

• Account Management: Creating, maintaining, and administering your 63boss player account, including managing your account balance, preferences, and VIP status.
• Identity Verification (KYC): Verifying your identity and age (21+ requirement) as required by PAGCOR regulations and Philippine AML laws before processing withdrawals and as an ongoing compliance obligation.
• Payment Processing: Processing deposits via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted methods; processing withdrawal requests to your verified payment accounts.
• Regulatory Compliance: Meeting our obligations under PAGCOR licensing conditions, AML reporting requirements, tax regulations, and any other applicable Philippine laws.
• Fraud Prevention and Security: Monitoring account activity for signs of fraud, money laundering, bonus abuse, multi-accounting, or other prohibited conduct; maintaining Platform security; protecting other players.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators; administering responsible gaming tools such as deposit limits, session limits, and self-exclusion.
• Platform Improvement: Analysing aggregated usage data to improve the Platform, optimise game performance, and enhance the user experience for Filipino players.
• Direct Marketing: Sending you promotional communications about 63boss offers, bonuses, and new games — only where you have provided valid consent and subject to your right to opt out at any time.

63boss does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for legitimate purposes:

• PAGCOR and Regulatory Authorities: 63boss is legally required to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities when requested or required by law.
• Payment Service Providers: We share transaction data with GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors strictly to facilitate your deposit and withdrawal transactions.
• KYC and Identity Verification Providers: We engage third-party KYC verification service providers to assist with document verification and identity checks. These providers process your data only on 63boss's instructions and under strict data processing agreements.
• Game Software Providers: Game providers whose titles are hosted on the 63boss Platform may receive Technical Data and Usage Data to the extent necessary for game operation, fairness monitoring, and RNG certification. No additional personal data is shared without your knowledge.
• IT Infrastructure and Security Providers: We use third-party cloud infrastructure, cybersecurity, and fraud detection services. These providers act as data processors under binding agreements and may not use your data for their own purposes.
• Legal and Professional Advisers: We may share personal data with our legal counsel, auditors, or compliance advisers on a need-to-know basis where required for legal proceedings, investigations, or professional advice.

63boss retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by Philippine law or PAGCOR regulations. The general principles governing our retention periods are:

• Active Account Data: Personal data associated with an active 63boss account is retained for the duration of the account's active status, plus any mandatory retention period following account closure.
• KYC and AML Records: Under Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR compliance requirements, 63boss retains identity verification documents, transaction records, and related AML documentation for a minimum of five (5) years following account closure or the relevant transaction date, whichever is later.
• Financial Transaction Records: Deposit and withdrawal transaction records are retained for a minimum of five (5) years in compliance with Philippine financial recordkeeping requirements.
• Support Communications: Customer support correspondence is retained for a minimum of three (3) years from the date of the last communication in a case.
• Marketing Data: Marketing preference data and related communications history are retained until you withdraw consent or for three (3) years of inactivity, whichever occurs first.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with applicable standards. Anonymised or aggregated data that cannot identify you may be retained indefinitely for statistical analysis and platform improvement.

63boss implements technical, administrative, and physical security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 63boss servers.
• Encryption of personal data and KYC documents stored on 63boss systems.
• Role-based access controls limiting access to personal data to authorised personnel with a demonstrable need.
• Multi-factor authentication requirements for 63boss staff accessing systems containing personal data.
• Regular third-party security audits and penetration testing of Platform infrastructure.
• Incident response procedures including breach notification protocols consistent with NPC requirements.

In the event of a personal data breach that is likely to result in harm to affected individuals, 63boss will notify the National Privacy Commission and affected players in accordance with the timelines and requirements of the DPA and NPC Circular No. 16-03.

63boss uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly. These include session management cookies that keep you logged in, security tokens, and cookies that remember your preferences during a session. These cannot be disabled without affecting your ability to use the Platform.
• Performance Cookies: Used to collect anonymised information about how players interact with the Platform — including which pages are visited most and where errors occur — enabling us to improve Platform performance and stability.
• Functional Cookies: Enable the Platform to remember your preferences such as language settings, display preferences, and previously entered information to provide a more personalised experience.
• Analytics Cookies: Used to understand aggregate player behaviour, game popularity, and Platform usage patterns. Data collected is anonymised and is not linked to individual player identities for this purpose.

63boss does not use third-party advertising or behavioural tracking cookies that profile you for external advertising networks. You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 63boss Platform.

The 63boss Platform is strictly for adults. In the Philippines, online casino gambling is restricted to persons aged 21 years and above under applicable law and PAGCOR regulations. 63boss does not knowingly collect personal data from individuals under 21 years of age.

If 63boss discovers that personal data has been collected from an individual under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data to the extent not required to be retained for regulatory purposes, and report the matter as required by PAGCOR.

If you are the parent or guardian of a minor and believe that your child has provided personal information to 63boss, please contact our Data Protection Officer immediately at the address in Section 15.

As a data subject under Republic Act No. 10173, you have the following rights in relation to the personal data 63boss holds about you. To exercise any of these rights, contact our Data Protection Officer as described in Section 15.

Some of the third-party service providers used by 63boss — including cloud infrastructure providers, KYC verification services, and game software providers — may process personal data outside of the Philippines. Where personal data is transferred to countries that may not provide a comparable level of data protection to the Philippines, 63boss implements appropriate safeguards to ensure that your data remains protected to a standard consistent with RA 10173.

These safeguards include contractual clauses in data processing agreements that require the recipient to process data in a manner consistent with Philippine data privacy standards, and where applicable, conducting transfer impact assessments.

By using the 63boss Platform and accepting this Privacy Policy, you consent to the transfer of your personal data to third-party processors in other countries to the extent described in this section, subject always to the safeguards described above.

63boss may send you promotional communications about bonuses, new games, special events, and other 63boss offerings via SMS, email, and in-Platform notifications — but only if you have provided valid, explicit prior consent during registration or subsequently through your account communication settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your 63boss account settings.
• Clicking the "unsubscribe" link in any marketing email sent by 63boss.
• Replying "STOP" to any marketing SMS received from 63boss.
• Contacting 63boss support or the Data Protection Officer directly.

Withdrawal of marketing consent will not affect the lawfulness of processing carried out before the withdrawal. It will also not affect your receipt of service-related communications — such as account security alerts, withdrawal confirmations, and KYC notices — which are sent as part of the contractual relationship and are not marketing communications.

63boss reserves the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. We will publish the updated Policy at https://63boss.asia/privacy-policy with a revised "Last Updated" date.

Where changes are material — meaning they significantly affect how your personal data is processed or the rights available to you — we will notify registered players via their registered email address or Philippine mobile number at least fourteen (14) days before the changes take effect, where practicable.

Your continued use of the 63boss Platform after any changes to this Policy have taken effect constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should stop using the Platform and contact support to close your account.

63boss has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. If you wish to exercise any of the rights described in Section 11, have questions about this Policy, or wish to raise a data privacy concern, please contact the DPO through the following channels:

• Email: [email protected] (include "DPO — Privacy Request" in the subject line).
• Live Chat: Available 24/7 on the 63boss Platform — select "Privacy / Data Request" from the support topic menu.

63boss will acknowledge all privacy requests within five (5) business days and endeavour to respond substantively within fifteen (15) business days. Complex requests requiring additional verification or review may take longer, in which case we will notify you of the expected response timeline.

If you are not satisfied with the response from our DPO, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.