63boss Privacy Policy 🔒

1. Introduction

63boss ("63boss," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the 63boss online gaming platform accessible at https://63boss.bio (the "Platform"). This Privacy Policy ("Policy") describes how 63boss collects, uses, discloses, retains, and protects your personal data when you access or use the Platform.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA") of the Philippines, and its implementing rules and regulations issued by the National Privacy Commission ("NPC"). By registering for a 63boss account or using the Platform in any manner, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy forms part of, and should be read together with, the 63boss Terms and Conditions. Capitalised terms not defined in this Policy have the meanings given to them in the Terms and Conditions.

2. Data Controller Information

63boss is the personal information controller ("PIC") in respect of all personal data collected through the Platform. As PIC, 63boss determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data privacy laws.

63boss operates under the Philippine Amusement and Gaming Corporation (PAGCOR) regulatory framework. All data handling practices described in this Policy are undertaken in a manner consistent with PAGCOR's regulatory requirements for licensed online gaming operators serving the Philippine market.

For all data privacy inquiries, you may contact our designated Data Protection Officer (DPO) at: [email protected]. Please reference "Data Privacy" in your subject line so your inquiry is directed appropriately.

3. Personal Data We Collect

Depending on how you interact with the 63boss Platform, we may collect and process the following categories of personal data:

We do not collect sensitive personal information (as defined under the DPA) unless strictly required for regulatory compliance (e.g., identity verification) and with your explicit consent.

4. How We Collect Your Data

63boss collects personal data through the following means:

• Direct collection: Information you provide when registering, completing KYC (Know Your Customer) verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access or use the Platform, including via cookies, log files, and similar tracking technologies;
• Third-party sources: Identity verification and fraud prevention services; payment processors (GCash, PayMaya, BDO, BPI, Metrobank); PAGCOR and other regulatory authorities where required by law.

5. Purposes and Legal Basis for Processing

63boss processes your personal data for the following purposes, each grounded in one or more lawful bases under the DPA:

• Account creation and management — to register your account, verify your identity, and manage your ongoing relationship with 63boss (contractual necessity);
• Payment processing — to process deposits, withdrawals, and bonus payments via GCash, PayMaya, and Philippine bank transfers (contractual necessity);
• Regulatory compliance and KYC — to fulfil PAGCOR licensing requirements, anti-money laundering (AML) obligations, and age verification (legal obligation);
• Fraud prevention and security — to detect, investigate, and prevent fraudulent, abusive, or illegal activity on the Platform (legitimate interest / legal obligation);
• Customer support — to respond to your queries, complaints, and support requests (contractual necessity / legitimate interest);
• Platform improvement — to analyse usage patterns, improve game offerings, and enhance the overall 63boss experience (legitimate interest);
• Responsible gaming — to monitor gaming patterns and apply responsible gaming tools where appropriate (legal obligation / legitimate interest);
• Marketing communications — to send promotional offers and platform updates, where you have given consent or where permitted under applicable law (consent / legitimate interest).

6. Disclosure of Personal Data

63boss does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash (Mynt), PayMaya (Voyager), BDO, BPI, and Metrobank, for the purpose of processing financial transactions;
• Game providers: Licensed third-party game studios and live dealer providers whose games are available on the 63boss Platform, solely for the purpose of game delivery and session management;
• Identity verification services: Third-party KYC and AML service providers engaged to fulfil PAGCOR regulatory requirements;
• Regulatory authorities: PAGCOR, the National Privacy Commission, and other Philippine government agencies, where disclosure is required by law or regulatory obligation;
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations;
• Technology service providers: Cloud hosting, platform infrastructure, and security service providers engaged by 63boss, subject to data processing agreements consistent with the DPA.

All third-party recipients are required to handle your personal data in accordance with applicable Philippine data privacy law and the terms of 63boss's data sharing or processing agreements with them.

7. Data Retention

63boss retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. As a PAGCOR-regulated operator, we are required to retain certain player records — including identity documents, financial transaction records, and gaming logs — for a minimum period specified under PAGCOR regulations and Philippine anti-money laundering law.

Upon closure of your 63boss account, we will retain your data for the minimum legally required retention period. After the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

8. Data Security

63boss implements technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 63boss Platform;
• Encrypted storage of all passwords (bcrypt hashing — plaintext passwords are never stored);
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Two-factor authentication (2FA) available to all players for account login security;
• Segregated storage of player funds in accounts separate from operational accounts.

No system is completely impenetrable. In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, 63boss will notify affected data subjects and the National Privacy Commission in accordance with NPC Circular 16-03 and applicable breach notification requirements.

9. Cookies and Tracking Technologies

The 63boss Platform uses cookies and similar tracking technologies to ensure proper Platform functionality, maintain session security, and analyse usage for Platform improvement. The categories of cookies used by 63boss are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled.
• Performance cookies: Collect aggregated, anonymised data about how players use the Platform (e.g., most visited game categories, session duration). No personally identifiable information is collected via performance cookies.
• Functional cookies: Remember your preferences (e.g., language settings, last-visited game lobby section) to improve your experience on return visits.

63boss does not use third-party advertising cookies or cross-site tracking cookies. You may configure your browser to refuse or delete cookies; however, doing so may affect certain Platform functionality, including session persistence and login.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 63boss:

• Right to be Informed: The right to be informed of how your personal data is being or will be processed, as described in this Policy;
• Right of Access: The right to request a copy of personal data we hold about you;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to Erasure or Blocking: The right to request deletion or blocking of personal data where processing is unlawful or no longer necessary, subject to legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and to request its transfer where technically feasible;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the 63boss Data Protection Officer via the support channels listed in Section 14. We will acknowledge your request within seventy-two (72) hours and aim to resolve it within fifteen (15) business days, subject to identity verification.

11. Children and Minors

The 63boss Platform is strictly intended for adults aged twenty-one (21) years and older, as required by PAGCOR regulations governing online gaming in the Philippines. 63boss does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the 63boss Platform, please notify us immediately via our support channels so that appropriate action can be taken without delay.

12. Cross-Border Data Transfers

The 63boss Platform is operated primarily within the Philippines. Where personal data is transferred to or processed by third parties located outside the Philippines (for example, cloud infrastructure providers or game studios domiciled in other jurisdictions), 63boss ensures that such transfers are conducted in compliance with Section 21 of the DPA and applicable NPC regulations.

Cross-border data transfers by 63boss are limited to recipients who provide an adequate level of data protection through: (a) binding data processing agreements incorporating NPC-approved standard contractual clauses; (b) the recipient being located in a jurisdiction recognised by the NPC as providing adequate protection; or (c) other mechanisms approved under applicable Philippine data privacy law.

13. Changes to This Privacy Policy

63boss reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will post the updated Policy on the Platform with a revised "Last Updated" date and, where changes significantly affect how we process your personal data, provide advance notice via email or an in-Platform notification.

Your continued use of the 63boss Platform following the effective date of any updated Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how 63boss protects your personal data.

14. How to Contact Us

For all data privacy inquiries, data subject rights requests, or concerns about how 63boss handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 inside your 63boss account dashboard — the fastest way to reach us
• Email (Data Privacy Officer): [email protected] — please include "Data Privacy Request" in your subject line

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with our response to your data privacy concern.