mnl68 Privacy Policy

1 Who We Are (Data Controller)

The data controller responsible for the personal data of mnl68 players and visitors is the operator of mnl68.app, a PAGCOR-licensed online gaming entity operating in the Philippines. For all data privacy-related inquiries, you may contact our Data Protection Officer at the email address provided in Section 13 of this policy.

mnl68 is registered with the National Privacy Commission (NPC) of the Philippines in accordance with the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173).

2 Personal Data We Collect

mnl68 collects the following categories of personal data from players and platform visitors:

mnl68 does not intentionally collect sensitive personal data (as defined under R.A. 10173) beyond what is strictly necessary for KYC and AML compliance obligations.

3 How We Collect Your Data

mnl68 collects personal data through the following channels:

• Direct registration: Information you provide when creating your mnl68 account, including during KYC verification.
• Platform usage: Data generated automatically when you access and use mnl68 — including game activity, deposit and withdrawal transactions, and session data.
• Customer support: Information shared by you when contacting mnl68 via live chat or email.
• Technical collection: Device and network data collected automatically via cookies, server logs, and similar tracking technologies when you access mnl68.app.
• Payment processors: Transaction confirmation data relayed to mnl68 by GCash, PayMaya, and Philippine banking partners when you complete a deposit or withdrawal.
• Identity verification providers: Data returned by third-party KYC service providers used to verify the identity and age of players during the KYC process.

4 Legal Basis for Processing

mnl68 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The applicable legal bases are:

• Contractual necessity: Processing required to perform our obligations under the mnl68 Terms and Conditions — including account management, game operation, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, anti-money laundering (AML) obligations, the Data Privacy Act, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your data protection rights.
• Consent: Processing of personal data for marketing communications and optional cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 How mnl68 Uses Your Data

Personal data collected by mnl68 is used for the following specific purposes:

• Creating, managing, and maintaining your mnl68 account, including login authentication and session management.
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• Verifying your identity and age as required by PAGCOR and Philippine AML regulations.
• Operating all games and betting markets available on the mnl68 platform and maintaining accurate game records.
• Detecting, investigating, and preventing fraud, money laundering, bonus abuse, and other prohibited conduct.
• Providing customer support and resolving disputes submitted via live chat or email.
• Monitoring gameplay patterns for responsible gaming purposes and reaching out to players who may be at risk of harm.
• Sending transactional communications — including deposit confirmations, withdrawal notifications, and OTP codes — to your registered mobile number and email address.
• Sending promotional communications where you have opted in to receive them. You may opt out at any time by contacting support or updating your account communication preferences.
• Maintaining platform security, including login monitoring, IP-based access controls, and device fingerprinting for fraud prevention.

6 Data Sharing & Disclosure

mnl68 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following limited circumstances:

• Game providers: Your player ID and relevant game data is shared with licensed game providers who supply games to the mnl68 platform, solely for game operation purposes.
• Payment processors: Financial data necessary to process deposits and withdrawals is shared with GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners.
• KYC and AML service providers: Identity verification data is shared with certified third-party verification providers to fulfill PAGCOR and AML compliance obligations.
• Regulatory authorities: mnl68 will disclose personal data to PAGCOR, the National Privacy Commission, or other Philippine regulatory authorities where required by law or in response to lawful orders.
• Law enforcement: Personal data may be disclosed to Philippine law enforcement agencies where required by applicable law or to prevent, detect, or investigate criminal activity.
• IT and security service providers: Technically necessary access may be provided to hosting, security, and infrastructure vendors who process data on mnl68's behalf under strict data processing agreements.

All third parties with whom mnl68 shares personal data are contractually required to process such data only for the purposes specified by mnl68 and in compliance with applicable Philippine data protection laws.

7 Cookies & Tracking Technologies

mnl68.app uses cookies and similar tracking technologies to operate the platform, maintain login sessions, and improve user experience. The types of cookies used include:

• Strictly necessary cookies: Essential for platform functionality — including login session tokens, security cookies, and load-balancing cookies. These cannot be disabled without disrupting core functionality.
• Performance cookies: Used to collect anonymous data about how players use mnl68.app, including page load times and navigation patterns, to help us improve platform performance.
• Functional cookies: Store your preferences — such as language settings and game lobby layout — to personalize your experience on return visits.
• Security cookies: Used to detect and prevent fraudulent activity, including device fingerprinting to identify unauthorized login attempts.

You may control non-essential cookies through your browser settings. Please note that disabling cookies may affect certain platform features. mnl68 does not use third-party advertising cookies or serve behavioral advertising to players.

8 Data Retention

mnl68 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• Active account data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of transaction, in compliance with Philippine AML regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support records: Retained for a period of three (3) years from the date of the support interaction.
• Marketing consent records: Retained for as long as necessary to demonstrate compliance with consent obligations, and deleted promptly following confirmed opt-out.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with mnl68's data destruction procedures.

9 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by mnl68:

To exercise any of the above rights, please contact the mnl68 Data Protection Officer using the contact details in Section 13.

10 Security Measures

mnl68 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Transport encryption: All data transmitted between your device and mnl68.app is encrypted using TLS 1.3 (256-bit SSL).
• Data at rest encryption: Stored personal data, including KYC documents and financial records, is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized mnl68 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for internal systems.
• Intrusion detection: mnl68 employs automated systems to detect and alert on unauthorized access attempts, anomalous data access patterns, and potential security incidents.
• Vendor security assessments: Third-party service providers with access to personal data are subject to regular security assessments and are bound by contractual data protection obligations.
• Incident response: In the event of a data breach affecting your personal data, mnl68 will notify affected players and the National Privacy Commission within the timeframes required by R.A. 10173.

11 Children's Privacy

The mnl68 platform is strictly intended for adults aged 21 years and above as required by PAGCOR regulations. mnl68 does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted during the account registration process. If mnl68 discovers that personal data has been collected from a person under 21 years of age, that account will be immediately terminated, all associated data will be deleted, and any balance will be forfeited in accordance with the mnl68 Terms and Conditions.

If you are a parent or guardian and believe that your child has created an mnl68 account, please contact our Data Protection Officer immediately using the contact details in Section 13.

12 Changes to This Privacy Policy

mnl68 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. The "Last Updated" date at the top of this page reflects the most recent revision.

Where material changes are made to this policy, mnl68 will notify registered players via email or in-platform notification prior to the changes taking effect. Your continued use of the mnl68 platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically. Archived versions of previous Privacy Policy iterations are available upon request from the Data Protection Officer.

13 Contact & Data Protection Officer

For all data privacy inquiries, requests to exercise your data rights, or to report a potential data protection concern, please contact the mnl68 Data Protection Officer:

Complaints regarding mnl68's compliance with the Data Privacy Act may also be filed with the National Privacy Commission (NPC) of the Philippines through official NPC channels.