d63com Privacy Policy

d63com ("we", "us", "our") is committed to protecting the privacy and personal data of every player and visitor who interacts with the d63com platform at d63com.one. This Privacy Policy describes the personal data we collect, the lawful purposes for which we process it, the parties with whom we may share it, how long we retain it, and the rights you hold as a data subject under Philippine law.

This Policy applies to all personal data collected through the d63com website, web application, mobile interface, customer support channels, and any other interaction you have with d63com as a registered user or site visitor. It should be read alongside the d63com Terms & Conditions, which are incorporated by reference.

By registering a d63com account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein where consent is the applicable legal basis. Where processing is necessary for contract performance, legal compliance, or legitimate interests, your use of the Platform constitutes acknowledgment of those processing activities.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the personal data controller is the entity operating the d63com platform.

d63com has designated a Data Protection Officer (DPO) who is responsible for overseeing this Privacy Policy and the organization's data protection compliance. Contact details for the d63com DPO are provided in Section 15 of this Policy. All data subject requests, privacy inquiries, and data breach reports should be directed to the DPO in the first instance.

d63com collects the following categories of personal data from players and site visitors. The specific data collected in each category depends on the nature of your interaction with the Platform.

d63com does not collect special categories of personal data (such as health information, political opinions, or religious beliefs) except where specifically required by PAGCOR-mandated responsible gaming assessments, and only with your explicit consent or where otherwise required by law.

d63com collects personal data through the following channels and methods:

d63com processes your personal data for the following specific and legitimate purposes:

• Account management: Creating, maintaining, and administering your d63com account, including authentication, security, and password recovery processes.
• Contract performance: Processing deposits and withdrawals, crediting and debiting your PHP wallet, settling game outcomes, and applying bonus credits — all obligations under the d63com Terms and Conditions.
• Identity verification (KYC/AML): Verifying your identity and age (21+) to comply with PAGCOR licensing conditions and anti-money laundering obligations under the Philippine AMLA framework (Republic Act No. 9160, as amended).
• Fraud prevention and security: Detecting and preventing unauthorized account access, fraudulent transactions, bonus abuse, multi-accounting, and money laundering activity on the d63com platform.
• Responsible gaming: Monitoring gaming activity to identify potential problem gambling indicators, administering self-exclusion and limit requests, and fulfilling PAGCOR-mandated responsible gaming obligations.
• Legal compliance: Complying with applicable Philippine laws including RA 10173 (Data Privacy Act), RA 9160 (AMLA), PAGCOR regulations, and lawful orders from courts and regulatory authorities.
• Customer support: Responding to your inquiries, complaints, and service requests via live chat and email, and maintaining records of those interactions for quality and compliance purposes.
• Platform improvement: Analyzing aggregated and anonymized usage data to identify technical issues, improve game performance, and enhance the d63com user experience for Filipino players.
• Promotional communications: Where you have consented, sending you information about d63com promotions, bonuses, and platform updates via your registered mobile number.

d63com processes your personal data under one or more of the following lawful bases, as recognized under the Philippine Data Privacy Act and its Implementing Rules and Regulations:

• Consent (Section 12(a) RA 10173): Where you have given d63com free, specific, informed, and unambiguous consent to process your data — for example, for promotional communications and certain non-mandatory data processing activities. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contract necessity (Section 12(b) RA 10173): Processing necessary to perform the contract between you and d63com — including account management, payment processing, and game delivery.
• Legal obligation (Section 12(c) RA 10173): Processing necessary to comply with d63com's obligations under Philippine law — including PAGCOR licensing conditions, AMLA requirements, and data retention mandates.
• Legitimate interests (Section 12(f) RA 10173): Processing necessary for d63com's legitimate interests where those interests are not overridden by your rights — including fraud detection, platform security, and aggregated analytics. d63com conducts legitimate interest assessments before relying on this basis.

d63com does not sell, rent, or commercially transfer your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

d63com retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active d63com account plus a minimum of five (5) years following account closure, in accordance with AMLA retention requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with PAGCOR reporting requirements and AMLA obligations.
• Gaming activity logs: Retained for a minimum of three (3) years for operational, fraud prevention, and regulatory audit purposes.
• KYC verification documents: Retained for a minimum of five (5) years from account closure or the completion of the verified transaction, whichever is later.
• Support communications: Retained for two (2) years from the close of each support interaction, unless the interaction relates to an unresolved dispute.
• Self-exclusion records: Retained indefinitely to prevent re-registration in violation of active exclusion periods.

At the end of applicable retention periods, personal data is securely deleted or anonymized in accordance with d63com's data deletion procedures and the requirements of the NPC.

d63com implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key measures include:

• Encryption in transit: All data transmitted between your device and d63com's servers is protected using TLS 1.3 encryption. Plaintext transmission of personal or financial data is not permitted on any d63com system.
• Encryption at rest: Sensitive data stored on d63com's servers — including identity documents, payment method details, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within d63com's systems is restricted on a strict need-to-know basis. Employee access is governed by role-based access controls and requires authenticated login with audit logging.
• Two-factor authentication: d63com accounts require OTP-based 2FA via Philippine mobile numbers to mitigate the risk of unauthorized access from compromised credentials.
• Penetration testing: d63com's platform undergoes periodic security assessments by qualified cybersecurity professionals to identify and remediate vulnerabilities.
• Incident response: d63com maintains a documented data breach incident response plan consistent with the notification requirements of RA 10173 and NPC issuances.

d63com uses cookies and similar technologies to operate and improve the Platform. A cookie is a small text file placed on your device by the d63com web server when you visit the Platform. Cookies allow d63com to recognize your device, maintain your login session, and personalize certain aspects of the Platform experience.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core d63com Platform, but may affect certain optional features. Note that blocking essential cookies will prevent successful login to your d63com account.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by d63com. To exercise any of these rights, contact the d63com DPO as described in Section 15.

d63com will respond to all data subject requests within thirty (30) calendar days of receipt, in accordance with the timeframes prescribed by RA 10173. Complex requests may require an extension of up to sixty (60) days, in which case d63com will notify you within the initial 30-day period with an explanation of the reason for the extension.

The d63com Platform is strictly prohibited for persons under the age of 21 years. d63com does not knowingly collect personal data from minors. Age verification is a mandatory step in the d63com registration and KYC process. If d63com discovers that personal data has been collected from a person under 21, that data will be immediately deleted and the associated account closed.

If you are a parent or guardian and believe your child has registered a d63com account, please contact the d63com DPO immediately at [email protected]. d63com treats such notifications as urgent and will act within 24 hours of receiving credible notification of underage account registration.

In certain circumstances, d63com's technology infrastructure, game studio partnerships, or verification service providers may result in your personal data being processed outside the Philippines. Where cross-border data transfers occur, d63com ensures that appropriate safeguards are in place as required by NPC Circular No. 16-01 and applicable RA 10173 implementing rules.

Safeguards for cross-border transfers may include contractual data processing agreements incorporating the NPC's standard data protection clauses, transfer to jurisdictions recognized as providing adequate data protection, or transfers subject to your explicit consent where the above mechanisms are not applicable.

d63com maintains a register of cross-border data transfers and the safeguards applicable to each. This information is available to you upon request to the d63com DPO.

d63com reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The effective date at the top of this Policy indicates when the current version was last updated.

Where changes are material, d63com will notify registered Players via SMS to their registered Philippine mobile number or via a prominent notice on the d63com Platform prior to the changes taking effect. Non-material clarifications may be made without specific notification.

Your continued use of the d63com Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes and, where applicable, your consent to the updated data processing terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or d63com's data processing activities, you may contact the d63com Data Protection Officer through the following channels:

For complaints that are not resolved through d63com's internal process, you have the right to submit a complaint directly to the National Privacy Commission of the Philippines (NPC). Information about the NPC complaint process is publicly available through official Philippine government channels.