AP168 Privacy Policy

1 Introduction

AP168 ("we," "us," "our," "the Platform") is committed to protecting the privacy and personal data of all users ("you," "your," "the Player") who access and use the AP168 online gaming platform, including the website at ap168.app and the AP168 mobile application.

This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. It describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.

By registering an account on AP168 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, please discontinue use of the AP168 platform.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2 Personal Data We Collect

AP168 collects the following categories of personal data from players and platform users:

2.1 Identity and Registration Data

• Full legal name
• Date of birth (used to verify the 21+ age requirement)
• Gender
• Government-issued identification number (e.g., Philippine National ID, passport, driver's license)
• Username and encrypted password
• Profile photograph (where submitted for KYC verification)

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city, province, region)

2.3 Financial and Transaction Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details (BDO, BPI, Metrobank, UnionBank, or other linked banks)
• Deposit and withdrawal transaction history
• Account balance and bonus balance records

2.4 Gaming Activity Data

• Game session logs, including games played, wagers placed, and outcomes
• Bonus claims and wagering history
• Responsible gaming tool usage (deposit limits set, self-exclusion requests)

2.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and similar tracking data (see Section 7)

2.6 Communications Data

• Records of your communications with AP168 customer support
• Feedback, complaints, and dispute records

3 How We Collect Your Data

AP168 collects personal data through the following means:

• Direct Submission: When you register an account, complete your profile, submit KYC documents, make a deposit or withdrawal, contact support, or participate in promotions.
• Automated Collection: Through cookies, web beacons, and similar tracking technologies when you browse the AP168 website or use the mobile application. See Section 7 for full details on our cookie practices.
• Third-Party Sources: From payment processors such as GCash, PayMaya, BDO, BPI, and Metrobank when you initiate a deposit or withdrawal transaction.
• Identity Verification Providers: From third-party KYC and identity verification services that we engage to confirm the authenticity of documents you submit.
• Fraud Prevention Services: From fraud detection and risk management partners who help us identify suspicious activity on the platform.

4 How We Use Your Personal Data

AP168 uses the personal data we collect for the following purposes:

AP168 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5 Legal Basis for Processing

AP168 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your AP168 account, process your transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with our legal obligations, including KYC verification, AML reporting, age verification, and regulatory requirements imposed by PAGCOR and other applicable authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as sending you promotional emails or SMS notifications about AP168 bonuses and new games, we rely on your explicit consent. You may withdraw this consent at any time by contacting support or updating your notification preferences in your account settings.

6 Data Sharing and Disclosure

AP168 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

• Payment Processors: GCash, PayMaya, BDO, BPI, Metrobank, UnionBank, and other payment service providers, solely to process your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC service providers engaged to verify the authenticity of identity documents you submit during account verification.
• Fraud Prevention Partners: Risk management and fraud detection service providers who assist us in identifying and preventing fraudulent activity on the platform.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government bodies where disclosure is required by law, court order, or regulatory directive.
• IT and Infrastructure Providers: Cloud hosting, data storage, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

AP168 does not transfer your personal data outside the Philippines except where necessary to engage internationally-based service providers, in which case we ensure that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012.

7 Cookies & Tracking Technologies

AP168 uses cookies and similar tracking technologies on our website and mobile application to enhance your experience, maintain your session, and gather analytics data that helps us improve the platform.

We use the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, display settings, and responsible gaming limits, to provide a more personalized experience.
• Analytics Cookies: These cookies collect aggregated, anonymized data about how players use the AP168 platform — such as which games are most popular and how long sessions last — to help us improve our services.
• Security Cookies: These cookies help us detect and prevent fraudulent activity, unauthorized access, and bot traffic on the platform.

AP168 does not use cookies to serve third-party advertising or to track your activity on websites outside of the AP168 platform.

8 Data Retention

AP168 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations.

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Customer Support Records: Communications with our support team are retained for three (3) years from the date of the interaction.
• Technical and Log Data: Server logs and technical data are retained for up to twelve (12) months, unless required for longer periods in connection with an ongoing investigation or legal proceeding.

Upon expiry of the applicable retention period, AP168 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

9 Data Security

AP168 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the AP168 platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized AP168 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: AP168 supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of security.
• Regular Security Audits: AP168 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in our systems.
• Incident Response: AP168 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) and affected players in accordance with the Data Privacy Act of 2012.

10 Your Data Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by AP168:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data that AP168 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update basic profile information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that AP168 has violated your data privacy rights.

11 Children's Privacy and Age Restriction

The AP168 platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law governing real-money online gaming. AP168 does not knowingly collect personal data from individuals under the age of 21.

If AP168 discovers or is notified that personal data has been collected from an individual under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and return any deposited funds in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor may have registered on the AP168 platform are encouraged to contact our support team immediately at [email protected]. We take underage access seriously and will act promptly on all such reports.

12 Changes to This Privacy Policy

AP168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or through a prominent notice on the AP168 platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how AP168 protects your personal data.

Your continued use of the AP168 platform following the posting of any changes to this Privacy Policy constitutes your acceptance of those changes.

13 Contact Us & Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way AP168 handles your personal data, please contact our dedicated Data Privacy Officer. Our team is available to assist Filipino players 24 hours a day, 7 days a week.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the regulatory body responsible for enforcing the Data Privacy Act of 2012.