FC168 Privacy Policy

This Privacy Policy applies to all personal data processed by FC168 in connection with the website fc168.biz, its associated mobile-optimized interfaces, customer support channels, and all services offered thereunder — including slots, live dealer games, sabong streaming, sports betting, bingo, instant games, and wallet functionality.

Data Controller: FC168 (referred to in this policy as "FC168," "we," "us," or "our") is the data controller responsible for the personal data you provide or that we collect during your use of the platform. FC168 determines the purposes and means of processing your personal data and is accountable for its lawful handling.

This policy should be read alongside the FC168 Terms & Conditions, which govern the overall relationship between FC168 and registered players. By using FC168, you confirm acceptance of both documents.

FC168 collects personal data through several channels: information you provide directly, information generated automatically through your use of the platform, and information received from third-party partners. The categories of personal data we collect are set out below.

FC168 may process sensitive personal information — including government ID details for KYC purposes — only to the extent required by applicable Philippine anti-money laundering (AML) regulations and gaming regulatory requirements. Such data is processed with enhanced security controls and is accessible only to authorized personnel.

FC168 does not require you to provide sensitive personal information beyond what is needed for identity verification and regulatory compliance. You may decline to provide certain optional information, though this may affect your ability to access specific features or complete withdrawal requests.

FC168 uses the personal data it collects for the following purposes:

• Account Registration & Management: Creating and maintaining your FC168 account, verifying your identity and age (21+), and managing your account settings and preferences.
• Service Delivery: Enabling you to access and use FC168 games, betting products, sabong streams, wallet functionality, and all associated platform features.
• Payment Processing: Processing your deposits via GCash, Maya, BPI, BDO, and other accepted Philippine payment methods; verifying payment ownership; and processing withdrawal requests to your registered payment account.
• KYC & Regulatory Compliance: Verifying your identity and age as required under Philippine gaming regulations and AML obligations; maintaining records as required by law.
• Fraud Prevention & Security: Detecting and preventing unauthorized account access, fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct.
• Responsible Gaming: Monitoring gaming behavior against self-imposed limits, enforcing cooling-off periods and self-exclusion requests, and proactively identifying patterns of potentially harmful play.
• Customer Support: Responding to your queries, complaints, and support requests submitted via live chat, email, or other channels.
• Platform Improvement: Analyzing aggregated and anonymized usage data to improve the FC168 platform, fix bugs, optimize game performance, and develop new features.
• Marketing Communications: Sending you promotional offers, bonus notifications, and FC168 news, subject to your communication preferences and the opt-out rights described in Section 12.
• Legal Compliance: Complying with applicable Philippine laws, regulations, court orders, and regulatory instructions.

FC168 processes your personal data on one or more of the following legal bases, in accordance with the Philippine Data Privacy Act of 2012:

• Consent: Where you have given clear, informed, and voluntary consent to processing for a specific purpose — for example, when subscribing to FC168 marketing communications or when providing optional account information. You may withdraw consent at any time.
• Contractual Necessity: Where processing is necessary to perform the contract between you and FC168 — that is, to provide the services you registered for, including account management, game access, and payment processing.
• Legal Obligation: Where processing is required for FC168 to comply with a legal or regulatory obligation, such as KYC verification, AML record-keeping, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Where processing is necessary for FC168's legitimate business interests — such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your privacy rights.

FC168 does not sell your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following circumstances:

FC168 engages trusted third-party service providers who process personal data on our behalf and under our instructions, including:

• Payment processors — GCash, Maya, BPI, BDO, GrabPay, and 7-Eleven CLiQQ for transaction processing.
• KYC & identity verification providers — for age and identity verification as required by Philippine gaming regulations.
• Game software providers — licensed third-party studios whose games are offered through the FC168 lobby. Game session data may be shared to the extent necessary for game operation, dispute resolution, and RTP auditing.
• IT infrastructure providers — for hosting, security monitoring, and platform maintenance.
• Customer support platforms — live chat and ticketing tools used to manage support interactions.

All service providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to FC168.

FC168 may disclose personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), law enforcement agencies, courts, or other governmental authorities when required to do so by law, court order, or regulatory instruction. FC168 will notify affected users of such disclosures where legally permitted to do so.

In the event of a merger, acquisition, reorganization, or sale of assets involving FC168, personal data held by FC168 may be transferred to the acquiring or successor entity. You will be notified of any such transfer and the applicable privacy protections that will apply.

FC168 primarily processes and stores personal data within the Philippines and in data centers located in jurisdictions that maintain adequate data protection standards. Where personal data is transferred outside the Philippines — for example, to game software providers, cloud infrastructure partners, or security service providers with operations in other countries — FC168 ensures that appropriate safeguards are in place.

Such safeguards may include contractual clauses that meet the standards required by the National Privacy Commission (NPC) of the Philippines, adequacy determinations, or other legally recognized transfer mechanisms. FC168 does not transfer personal data to any country or entity that cannot provide an adequate level of data protection.

FC168 uses cookies and similar tracking technologies (including web beacons, pixels, and local storage) to operate the platform effectively, personalize your experience, and analyze usage patterns. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings or through the FC168 cookie settings banner displayed on your first visit. Note that disabling strictly necessary cookies will prevent the FC168 platform from functioning correctly. FC168 does not use cookies for cross-site tracking or to serve advertisements on third-party websites.

FC168 retains personal data only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status and for a period of up to five (5) years after account closure, in accordance with applicable AML record-keeping requirements and potential dispute resolution needs.
• KYC & Identity Verification Records: Retained for a minimum of five (5) years from the date of verification, as required under Philippine AML regulations.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of the transaction, consistent with Philippine tax and financial record-keeping obligations.
• Gaming Activity Logs: Retained for a minimum of two (2) years from the date of activity, for dispute resolution and regulatory compliance purposes.
• Communication Records (support transcripts, emails): Retained for up to two (2) years from the date of the communication, unless the content is relevant to a pending dispute.
• Marketing Consent Records: Retained for the period of your consent plus three (3) years, to demonstrate compliance with consent-based marketing obligations.

After the applicable retention period has elapsed, personal data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual. Anonymized aggregated data may be retained for longer periods for statistical and analytical purposes.

FC168 implements a multi-layered security framework to protect your personal data against unauthorized access, alteration, disclosure, destruction, or accidental loss. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the FC168 platform is encrypted using SSL/TLS protocols, preventing interception on public networks.
• Password Hashing: Account passwords are stored using one-way hashing algorithms. FC168 cannot retrieve or read your password in plain text.
• Access Controls: Access to personal data within FC168's internal systems is restricted on a strict need-to-know basis. All staff with data access undergo background screening and mandatory data privacy training.
• Two-Factor Authentication (2FA): FC168 offers optional 2FA for all registered accounts using SMS OTP to the registered Philippine mobile number, adding a second layer of authentication.
• Intrusion Detection & Monitoring: FC168 operates real-time intrusion detection and security monitoring systems on its infrastructure. Unusual access patterns trigger automated alerts and investigation procedures.
• Data Minimization: FC168 collects only the personal data that is necessary for its stated purposes and does not retain data beyond applicable retention periods.

In the event of a personal data breach that is likely to result in high risk to your rights and freedoms, FC168 will notify you and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with our obligations under the Data Privacy Act. The notification will describe the nature of the breach, the data affected, the likely consequences, and the measures taken or proposed to address it.

Under the Philippine Data Privacy Act of 2012 and FC168's own data governance policies, registered players have the following rights with respect to their personal data. You may exercise these rights at any time by contacting FC168's Data Protection Officer as described in Section 15.

FC168 will respond to data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by up to sixty (60) additional days with prior notice. FC168 will not charge a fee for exercising your data rights, except in cases of manifestly unfounded or excessive requests.

FC168 is strictly prohibited from collecting personal data from individuals under the age of 21. FC168 does not knowingly register, serve, or collect data from minors. Age verification is a mandatory component of the FC168 registration and KYC process.

If FC168 discovers or is notified that a registered account belongs to a person under 21 years of age, it will immediately suspend the account, void all transactions, and delete any personal data collected in connection with that account, retaining only the minimum records required for regulatory purposes.

FC168 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, special events, and platform updates. Marketing communications are sent only to registered players who have consented to receive them, or in cases where FC168 has a legitimate interest in communicating with existing players about directly related services.

You may opt out of FC168 marketing communications at any time using any of the following methods:

• Clicking the "Unsubscribe" link included in every FC168 marketing email.
• Replying "STOP" to any FC168 SMS marketing message.
• Updating your communication preferences in your FC168 account settings under "Notifications."
• Contacting FC168 support via live chat or email and requesting removal from marketing lists.

Opt-out requests are processed within 10 business days. After opting out, you will continue to receive transactional and account-related communications that are necessary for the ongoing operation of your FC168 account (such as deposit confirmations, withdrawal notifications, and security alerts). These non-marketing communications cannot be opted out of while your account is active.

The FC168 platform may contain links to third-party websites or services, such as payment provider portals (GCash, Maya) accessed during the deposit or withdrawal process. Once you navigate away from fc168.biz to a third-party website, FC168's Privacy Policy no longer applies. FC168 has no control over and accepts no responsibility for the privacy practices or content of third-party websites.

You are encouraged to review the privacy policies of any third-party website or service you access through a link on the FC168 platform before providing any personal information to that third party.

FC168 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine laws, or the services we offer. When material changes are made, FC168 will notify registered players via email or through an on-platform notification at least 14 days before the revised policy takes effect.

The effective date at the top of this policy will be updated each time the policy is revised. We encourage you to review this Privacy Policy periodically. Your continued use of the FC168 platform after the effective date of any revision constitutes your acceptance of the updated policy.

If we change our practices regarding the use of sensitive personal information or if we plan to use personal data for a new purpose that is materially different from what was originally disclosed, we will seek your explicit consent prior to implementing such changes.

FC168 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us using the following details:

• Platform: fc168.biz
• Email (Privacy): [email protected] — subject line: "Privacy Request"
• Live Chat: Available 24/7 on fc168.biz — select "Privacy & Data" from the support category menu

For formal complaints or if you believe your data rights have not been adequately addressed by FC168, you also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines.