How mnl68 Approaches Privacy
Before diving into the legal detail, here are the six privacy principles that guide every data decision at mnl68. These are not marketing statements — they reflect the actual engineering, policy, and operational choices we make when handling Filipino player data.
Purpose Limitation
mnl68 collects personal data only for specific, legitimate purposes clearly disclosed in this Policy. We do not repurpose your data for uses unrelated to your gaming account, legal compliance, and platform security. If the purpose changes materially, we will seek your fresh consent before proceeding.
Data Minimization
We collect only the minimum personal information necessary to operate your mnl68 account, comply with PAGCOR regulations, process your GCash and bank transactions, and keep your account secure. We do not collect sensitive personal data categories beyond what is required for KYC identity verification under Philippine gaming law.
Security by Default
Personal data stored on mnl68 servers is protected by 256-bit AES encryption at rest and TLS 1.3 in transit. Access to production data is restricted to authorized mnl68 personnel on a strict need-to-know basis. All access is logged, monitored, and auditable in response to PAGCOR and NPC regulatory reviews.
Defined Retention Periods
mnl68 does not keep your personal data indefinitely. Retention periods are set in accordance with PAGCOR requirements, the Anti-Money Laundering Act, and the Data Privacy Act of 2012. Account data is retained for a minimum of five years following account closure as required by Philippine gaming regulations, after which it is securely deleted.
Your Rights Are Real
The rights granted to you under the Data Privacy Act of 2012 are enforceable at mnl68. You can access your data, correct inaccuracies, object to certain processing activities, and request deletion where legally permissible. We process all data rights requests within thirty (30) calendar days of receipt.
Full Transparency
We don't hide what we do with your data in footnotes or legalese that no one reads. This Privacy Policy is written to be understood by regular Filipino players — not just lawyers. Where legal precision requires technical language, we provide plain-language summaries so you always know where you stand with mnl68.
NOTICE TO ALL mnl68 PLAYERS: This Privacy Policy is issued by mnl68 ("Company," "We," "Us," "Our") and applies to all personal information collected through the mnl68 platform at mnl68.cam. By registering an account or using the mnl68 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy is subject to and should be read alongside the mnl68 Terms & Conditions.
Introduction & Scope
mnl68 operates the online casino and sports betting platform accessible at mnl68.cam, licensed under PAGCOR (Philippine Amusement and Gaming Corporation). As a responsible and licensed operator, mnl68 takes its obligations as a personal information controller seriously under the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable PAGCOR data governance requirements.
This Privacy Policy applies to all personal information collected from individuals who: register an account on the mnl68 platform; access or browse the mnl68 website without registering; contact mnl68 customer support via any channel; or interact with mnl68 promotional communications.
This Policy does not apply to third-party websites, platforms, payment processors, or game providers that may be accessible through links or integrations on the mnl68 platform. Those third parties operate under their own privacy policies, and mnl68 is not responsible for their data practices. Filipino players should review the privacy policies of any third-party service they interact with independently.
Definitions
The following terms carry the meanings assigned to them throughout this Privacy Policy:
- "Personal Information" — Any information from which the identity of an individual can be reasonably and directly ascertained, or when put together with other information, would directly and certainly identify an individual, as defined under Section 3(g) of the Data Privacy Act of 2012.
- "Sensitive Personal Information" — Personal information that includes government-issued identification numbers, health and medical records, biometric data, and other categories specified under Section 3(l) of the Data Privacy Act of 2012.
- "Processing" — Any operation performed on personal data, including collection, recording, storage, updating, retrieval, use, disclosure, erasure, or destruction.
- "Data Subject" — A natural person whose personal information is processed by mnl68, typically a registered Player or website visitor.
- "Personal Information Controller" — mnl68, being the entity that determines the purposes and means of processing personal information collected through the Platform.
- "NPC" — The National Privacy Commission of the Philippines, the independent body responsible for administering and implementing the Data Privacy Act of 2012.
- "DPO" — The mnl68 Data Protection Officer, the designated individual responsible for overseeing mnl68's compliance with this Policy and applicable data privacy legislation.
- "KYC Data" — Identity verification documents and associated personal information collected as part of the Know Your Customer process required under PAGCOR regulations and Philippine anti-money laundering legislation.
Data We Collect
mnl68 collects personal information in the categories listed below. We collect only information that is necessary for the purposes specified in Section 5 of this Policy.
Registration & Account Data:
- Full legal name as it appears on your government-issued identification document
- Date of birth (for age verification — 21+ requirement)
- Residential address in the Philippines
- Valid Philippine mobile number
- Email address
- Username and encrypted password credentials
- Security question answers (where selected)
KYC Identity Verification Data:
- Copies of government-issued photo identification (passport, UMID, SSS ID, PhilHealth ID, voter's ID, or driver's license)
- Proof of Philippine residential address documents
- Selfie photographs taken alongside identification documents
- Source of funds declarations where applicable
Financial Transaction Data:
- GCash account number or linked mobile number
- PayMaya account details where used
- Bank account numbers, bank name, and branch for BDO, BPI, and Metrobank transfers
- Transaction amounts, dates, types, and reference numbers
- Account balance history and transaction records
Gaming Activity Data:
- Games played, bet amounts, win/loss outcomes, and session durations
- Sports betting selections, odds taken, and settlement records
- Bonus claims, wagering activity against bonus requirements, and promotional participation history
- Responsible gaming tool settings and self-exclusion history
Technical & Device Data:
- IP address and approximate geolocation at time of login
- Device type, operating system, and browser information
- Session timestamps, login history, and failed authentication attempts
- Cookie identifiers and analytics data as described in Section 9
What We Do NOT Collect: mnl68 does not collect your full credit or debit card numbers. We do not collect biometric data beyond KYC selfie photographs required by PAGCOR. We do not collect sensitive health information unless you voluntarily disclose it in the context of a responsible gaming or self-exclusion request.
How We Collect Data
mnl68 collects personal information through the following channels and methods:
- Direct Submission: Information you provide directly when registering an account, completing KYC verification, updating your profile, submitting a deposit or withdrawal request, contacting customer support, or participating in a promotion.
- Automated Technical Collection: Device and session data automatically collected when you access the mnl68 platform, including IP addresses, browser fingerprints, session cookies, and analytical tracking data as described in Section 9.
- Third-Party Payment Processors: Transaction confirmation data received from GCash, PayMaya, BDO, BPI, and Metrobank when you complete deposit and withdrawal transactions. These processors operate under their own privacy policies and share only transaction-level data necessary for account crediting and reconciliation.
- Game Providers: Game session data received from JILI and other licensed game providers integrated into the mnl68 platform, limited to bet history, game outcomes, and session durations required for account statement accuracy.
- Identity Verification Services: Results of automated and manual identity verification checks conducted through third-party KYC service providers engaged by mnl68 in compliance with PAGCOR licensing requirements.
- Regulatory Bodies: Information lawfully shared with mnl68 by PAGCOR or the NPC in the course of regulatory compliance, investigation, or dispute resolution activities.
Purposes of Processing
mnl68 processes your personal information for the following specific and legitimate purposes:
- Account Management: Creating, maintaining, operating, and closing your mnl68 player account, including authenticating your identity at login and managing your account settings and preferences.
- PAGCOR Compliance: Fulfilling obligations as a PAGCOR-licensed operator, including player identification, age verification, gaming activity reporting, and audit trail maintenance required by Philippine gaming regulations.
- Anti-Money Laundering Compliance: Conducting due diligence and monitoring as required under the Anti-Money Laundering Act (RA 9160, as amended) and the Terrorism Financing Prevention and Suppression Act.
- Payment Processing: Processing your deposits and withdrawals through GCash, PayMaya, and Philippine bank channels, reconciling transactions, and investigating payment disputes.
- Security & Fraud Prevention: Detecting, investigating, and preventing fraud, account takeover attempts, multi-accounting, bonus abuse, bot activity, and other prohibited conduct described in the mnl68 Terms & Conditions.
- Platform Improvement: Analyzing aggregated and anonymized usage patterns to improve the mnl68 platform, game library, user interface, and payment infrastructure.
- Customer Support: Responding to your queries, complaints, and support requests submitted via live chat, email, or any other support channel made available on the mnl68 platform.
- Responsible Gaming: Administering deposit limits, session time controls, loss limits, and self-exclusion requests; identifying indicators of problem gambling; and referring players to support resources where appropriate.
- Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. All marketing emails include an unsubscribe option.
- Legal Claims: Establishing, exercising, or defending legal claims in Philippine courts or regulatory proceedings involving mnl68 and a data subject.
Legal Bases
Under the Data Privacy Act of 2012, mnl68 relies on the following legal bases for processing your personal information:
- Consent: For marketing communications and the use of non-essential cookies. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
- Contractual Necessity: For processing required to perform the mnl68 Terms & Conditions contract with you, including account creation, payment processing, and game provision.
- Legal Obligation: For KYC verification, AML monitoring, transaction reporting, and data retention required under PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act of 2012.
- Legitimate Interests: For fraud prevention, security monitoring, platform improvement, and legal claims — where our legitimate interests are not overridden by your fundamental rights and freedoms as a Filipino data subject.
Data Sharing
mnl68 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:
- PAGCOR and Regulatory Authorities: As required by our gaming license and applicable Philippine law, mnl68 shares player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and other competent Philippine government authorities upon lawful request.
- Payment Processors: GCash, PayMaya, BDO, BPI, and Metrobank receive the minimum personal and transaction data necessary to process your deposit and withdrawal instructions.
- KYC Verification Providers: Third-party identity verification service providers engaged by mnl68 to process KYC documentation as required by PAGCOR and AML regulations.
- Game Providers: Licensed game providers such as JILI receive session identifiers and bet history data required to deliver and settle game outcomes. These providers do not receive your full name, address, or payment details.
- Cloud Infrastructure and Security Partners: Hosting, cybersecurity, and fraud detection service providers who process data on behalf of mnl68 under strict data processing agreements and confidentiality obligations.
- Legal and Professional Advisors: Philippine legal counsel, auditors, and compliance consultants who process personal data solely in connection with their professional advisory engagements with mnl68.
Third-Party Obligations: All third parties with whom mnl68 shares personal data are contractually required to process that data only for the specified purpose, implement appropriate technical and organizational security measures, and comply with the Data Privacy Act of 2012 and other applicable Philippine privacy regulations.
International Transfers
Some of the third-party service providers engaged by mnl68 — including game providers, cloud infrastructure platforms, and KYC verification services — may be located outside the Republic of the Philippines. Where personal data is transferred internationally, mnl68 takes all steps required under Section 21 of the Data Privacy Act of 2012 to ensure that the receiving party provides a level of protection at least equivalent to that required under Philippine law.
International data transfers are conducted only where: the destination country provides adequate data protection as determined by the NPC; contractual clauses incorporating standard NPC-prescribed data protection obligations are in place with the receiving entity; or the transfer is necessary for the performance of your mnl68 gaming contract or compliance with a legal obligation to which mnl68 is subject.
All international transfers are documented and subject to mnl68's internal data transfer impact assessment process. A list of third-party recipients and their countries of operation is available upon written request to the mnl68 DPO at [email protected].
Cookies & Tracking
The mnl68 platform uses cookies and similar tracking technologies to deliver and improve its services. Cookies are small text files placed on your device by the mnl68 web application. The following categories of cookies are used on the mnl68 platform:
- Strictly Necessary Cookies: Essential for the operation of your mnl68 session, including login authentication tokens, session identifiers, and security cookies that prevent cross-site request forgery. These cannot be disabled without preventing your access to the platform.
- Functional Cookies: Enable enhanced functionality such as remembering your language preferences, game display settings, and "Remember Me" login convenience features.
- Analytics Cookies: Used by mnl68 to understand aggregate player behavior patterns, identify technical errors, and measure the performance of platform features. These are anonymized and do not identify individual players. You may opt out of analytics cookies via your browser settings.
- Security and Fraud Detection Cookies: Used to identify suspicious login patterns, detect bot activity, and prevent fraud. These are categorized as necessary cookies for platform security purposes.
Most modern browsers allow you to control cookie settings through their preferences panels. Disabling cookies may affect your ability to use certain features of the mnl68 platform. mnl68 does not use cookies to deliver third-party advertising or track your activity on external websites.
Data Security
mnl68 implements a comprehensive set of technical, organizational, and administrative security measures designed to protect your personal information from unauthorized access, disclosure, alteration, destruction, or accidental loss. Key security measures include:
- 256-bit AES encryption for personal data stored in mnl68 databases
- TLS 1.3 encryption for all data transmitted between your device and mnl68 servers
- Role-based access controls ensuring that mnl68 staff access only the data necessary for their specific job function
- Comprehensive access logging and audit trails reviewed regularly by the mnl68 security team
- Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists
- Multi-factor authentication required for all mnl68 internal system access
- Incident response protocols aligned with NPC Personal Data Breach Reporting requirements
Security Incident Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mnl68 will notify the NPC within seventy-two (72) hours of becoming aware of the breach and will notify affected players as required by NPC Circular No. 16-03 and applicable PAGCOR incident reporting guidelines. Notifications will be sent to the email address registered on your mnl68 account.
Retention & Deletion
mnl68 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with applicable legal obligations, and resolve any disputes that may arise. The following retention periods apply unless a longer period is required by Philippine law:
- Active Account Data: Retained for the duration of your active mnl68 account relationship.
- Closed Account and Transaction Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR gaming regulations and the Anti-Money Laundering Act for transaction record-keeping obligations.
- KYC Identity Documents: Retained for a minimum of five (5) years following account closure per PAGCOR and AMLC requirements.
- Customer Support Records: Retained for three (3) years following resolution of the relevant support interaction.
- Marketing Consent Records: Retained for the duration of your marketing consent plus three (3) years thereafter for legal claims documentation purposes.
- Security and Fraud Logs: Retained for three (3) years or for the duration of any ongoing investigation, whichever is longer.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with NPC guidelines on personal data disposal. Anonymized data may be retained beyond these periods for aggregate statistical purposes.
Your Data Rights
As a Filipino data subject under the Data Privacy Act of 2012, you hold the following rights with respect to your personal information processed by mnl68. To exercise any of these rights, submit a written request to [email protected] with your full name, account username, and a description of your request. mnl68 will respond within thirty (30) calendar days.
Right to Be Informed
You have the right to be informed about the collection and processing of your personal data before it is collected or at the time of collection. This Privacy Policy fulfills mnl68's obligation to inform you of its data practices in a clear and accessible manner.
Right to Access
You have the right to reasonable access to your personal information held by mnl68, including the sources from which it was obtained, purposes of processing, recipients with whom it has been shared, and a copy of the data in a commonly used electronic format upon request.
Right to Correction
You have the right to dispute and correct inaccurate or incomplete personal data held in your mnl68 account. Corrections will be implemented within a reasonable timeframe, and any third parties to whom the incorrect data was disclosed will be notified where practicable.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to mnl68's legal retention obligations under PAGCOR and AML regulations, which may prevent immediate or complete deletion.
Right to Object
You have the right to object to processing of your personal data for direct marketing purposes at any time, and to object to processing based on mnl68's legitimate interests where your individual rights and freedoms override those interests in a specific circumstance.
Right to Data Portability
You have the right to receive personal data you have provided to mnl68 in a structured, commonly used, machine-readable format, and to transmit that data to another personal information controller where technically feasible.
Right to Lodge a Complaint
If you believe mnl68 has not complied with its obligations under the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact information for the NPC is available on the official NPC government website.
Minors & Age Restriction
The mnl68 platform is strictly restricted to Filipino adults aged 21 years and older, in compliance with PAGCOR regulations. mnl68 does not knowingly collect personal information from persons under 21 years of age. The mnl68 registration process includes age verification steps designed to prevent underage access.
If mnl68 becomes aware that personal information has been collected from a person under the age of 21, that information will be deleted from mnl68 systems promptly and the associated account will be closed in accordance with the mnl68 Terms & Conditions and PAGCOR guidelines on underage account closures. If you are a parent or guardian who believes your child under 21 has accessed the mnl68 platform, please contact the DPO immediately at [email protected].
Policy Updates
mnl68 reserves the right to update this Privacy Policy at any time to reflect changes in Philippine data privacy legislation, PAGCOR regulatory requirements, or mnl68's data processing practices. The effective date at the top of this document will be updated each time a revision is made.
Where material changes are made to this Policy that affect the way we process your personal information, mnl68 will notify registered players via email to the address associated with their account not less than fourteen (14) calendar days before the revised Policy takes effect. Your continued use of the mnl68 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to a revised Policy, you should close your mnl68 account before the revised Policy takes effect.
Contact & DPO
If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mnl68, please contact our Data Protection Officer through the following channels. All data rights requests should be submitted in writing to allow mnl68 to process them within the thirty (30) day statutory period.
Data Protection Officer — mnl68
Email: [email protected]
Subject line: "Data Privacy Request — [Your Full Name]"
Response Timeframe: 30 calendar days from receipt of written request
Support Hours: 24/7 — including weekends and Philippine public holidays
For unresolved complaints, the National Privacy Commission of the Philippines is the competent supervisory authority. Players may file complaints through the NPC's official government channels independent of any complaint submitted to mnl68.
This Privacy Policy was last revised on 1 January 2026 and supersedes all prior versions. mnl68 recommends that all registered players retain a copy of this Policy for their personal records.
Your Data Is Safe at mnl68
You've read the policy — now you know exactly how mnl68 handles your personal information. We're a PAGCOR-licensed platform built for Filipino players, committed to transparency, security, and the Data Privacy Act of 2012. Join thousands of Filipino players who trust mnl68 with their gaming experience. Strictly 21+ only.