mnl68 Privacy Policy

mnl68 ("we," "us," "our," or "the Company") operates the online gaming platform accessible at mnl68.vip, serving Philippine residents under PAGCOR regulatory oversight. As a data controller processing the personal information of Filipino players, we are bound by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC").

This Privacy Policy describes in specific terms what personal data mnl68 collects from you, why we collect it, how we process and protect it, who we may share it with, how long we retain it, and what rights you have with respect to your personal data. We have written this Policy to be as clear and readable as possible, not just to satisfy a regulatory requirement but because we believe players deserve to understand exactly how their information is handled.

This Policy applies to all personal data collected through the mnl68 website at mnl68.vip, including all account registration processes, gameplay activity, transaction records, customer support interactions, and marketing communications. It applies to all registered players, visitors to the website, and anyone who contacts mnl68 in any capacity.

For the purposes of RA 10173 and its IRR, the data controller responsible for your personal data processed in connection with the mnl68 Platform is:

Platform Name: mnl68
Website: mnl68.vip
Regulatory Authority: Philippine Amusement and Gaming Corporation (PAGCOR)
Data Privacy Contact: [email protected]

Questions, requests, and complaints relating to your personal data may be directed to the mnl68 Data Privacy Officer at the contact details provided in Section 15 of this Policy.

mnl68 collects and processes the following categories of personal data. We collect only what is necessary for the specific purposes outlined in Section 6 of this Policy. The principle of data minimisation — collecting no more than is required — is a core feature of our data handling approach.

3.1 Registration and Identity Data

Collected when you create an mnl68 account:

3.2 Identity Verification Data (KYC)

Collected to comply with PAGCOR KYC obligations and AML requirements under RA 9160. Required before first withdrawal:

3.3 Transaction and Financial Data

Collected in connection with deposits, withdrawals, and in-game financial activity:

Note: mnl68 does not store full GCash credentials, bank account numbers, or card numbers on its own servers. These are handled exclusively by certified third-party payment processors under their own security and data protection frameworks.

3.4 Gameplay and Activity Data

3.5 Technical and Device Data

3.6 Communications Data

mnl68 collects personal data through the following mechanisms:

• Direct submission by you: Registration forms, KYC document uploads, support inquiries, and payment initiation processes where you actively provide your information.
• Automatic technical collection: Server logs, session tracking, IP address logging, and device fingerprinting that occur automatically when you access the Platform.
• Cookies and similar technologies: As described in Section 8 of this Policy, certain data is collected passively through browser cookies, session identifiers, and related tracking technologies.
• Third-party payment processors: Transaction confirmation data is returned to mnl68 by GCash, PayMaya, and bank payment processing partners following a completed deposit or withdrawal. Only transaction reference numbers, amounts, and outcome statuses are shared; full credential data remains with the payment processor.
• Identity verification partners: Where mnl68 uses a third-party KYC service to assist with document verification and liveness checks, data shared with that service is limited to what is necessary for the verification purpose and is governed by that service's own data processing agreement with mnl68.

Under RA 10173 and its IRR, all personal data processing must have a valid legal basis. The following table sets out the legal bases on which mnl68 processes your personal data:

Where processing is based on consent, you retain the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Where consent is withdrawn for processing that is also required by legal obligation, the legal obligation basis continues to apply.

mnl68 uses your personal data for the following specific purposes, each of which is tied to a legal basis as described in Section 5:

6.1 Account and Platform Operations

• Creating, maintaining, and managing your mnl68 account and player profile.
• Authenticating your identity on each login session and verifying 2FA requests.
• Processing deposits, managing your wallet balance, and fulfilling withdrawal requests to your nominated Philippine payment method.
• Delivering game sessions and recording gameplay outcomes for dispute resolution and fair play auditing purposes.
• Administering bonuses, VIP points, tier progression, and promotional offer eligibility.

6.2 Compliance and Legal Obligations

• Verifying player age (21+) and identity in compliance with PAGCOR responsible gaming requirements.
• Conducting AML and counter-terrorism financing monitoring as required under RA 9160 and PAGCOR regulations.
• Preparing and submitting regulatory reports to PAGCOR as required under the mnl68 operating licence.
• Complying with any lawful request from Philippine government authorities, courts, or law enforcement agencies.

6.3 Security and Fraud Prevention

• Detecting, investigating, and preventing unauthorised account access, account fraud, and identity theft.
• Identifying and blocking prohibited conduct as defined in the mnl68 Terms and Conditions, including multi-account operation, bonus abuse, and collusion.
• Monitoring login patterns and transaction activity for anomalies consistent with compromised account access.

6.4 Responsible Gaming

• Monitoring gameplay patterns to identify potential indicators of problem gambling behaviour.
• Enforcing player-set responsible gaming tools including deposit limits, loss limits, session time limits, and self-exclusion.
• Surfacing responsible gaming information to accounts exhibiting patterns associated with gambling-related harm.

6.5 Communications and Support

• Responding to customer support inquiries and resolving complaints and disputes.
• Sending transactional notifications — including deposit confirmations, withdrawal updates, login alerts, and OTP codes — that are necessary for account operation.
• Sending promotional communications to players who have opted in to marketing, including bonus offers and VIP promotions.

6.6 Platform Improvement

• Analysing aggregated and anonymised usage data to improve platform performance, game content selection, payment processing speed, and customer support quality.
• Testing new features and platform updates with subset player groups, where opt-in consent is obtained for any non-essential testing.

mnl68 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your personal data only in the following circumstances and with the following categories of recipients:

7.1 Service Providers and Data Processors

mnl68 engages third-party service providers who process personal data on our behalf and under our documented instructions. These include:

• Payment processors: GCash, PayMaya, and Philippine bank payment gateway providers for deposit and withdrawal processing. Data shared is limited to transaction reference information necessary to process and reconcile payments.
• KYC and identity verification services: Third-party KYC technology providers who assist with document verification and liveness detection during the identity verification process.
• Cloud infrastructure providers: Certified cloud hosting and data storage providers whose infrastructure underpins the mnl68 platform. These providers process technical and operational data under strict data processing agreements.
• Customer support platforms: Technology providers whose systems support the delivery of mnl68 live chat and support services.
• Analytics providers: Aggregated, non-personally-identifiable analytics data may be processed by analytics platforms to support platform improvement activities. Raw personal data is not shared with analytics providers.

All service providers engaged by mnl68 are required to sign data processing agreements that impose obligations consistent with RA 10173, restrict the use of data to the agreed purpose, and require the implementation of appropriate technical and organisational security measures.

7.2 Regulatory and Law Enforcement Disclosure

mnl68 will disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities when required to do so by law, regulation, court order, or a valid written request from a duly authorised agency. mnl68 will notify the affected player of such a disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a sale, merger, acquisition, or reorganisation of mnl68 or its operating entity, player personal data may be transferred to a successor entity as part of that transaction. Players will be notified of any such transfer and of any material change in data handling practices that results from the transaction, consistent with NPC notification requirements.

The mnl68 Platform uses cookies and similar tracking technologies to operate core platform features, maintain session security, and — where you have consented — to support analytics and personalisation functions. The following categories of cookies are used:

You may manage cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform, including the ability to maintain a logged-in session. Disabling functional cookies will result in the loss of saved preferences across sessions.

mnl68 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or such longer period as is required by applicable Philippine law. The following retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. Data that has been anonymised such that it can no longer be attributed to an identifiable individual may be retained indefinitely for aggregated statistical and analytical purposes.

mnl68 implements technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport encryption: All data exchanged between your device and the mnl68 Platform is encrypted using TLS 1.2 or higher. The Platform enforces HTTPS on all connections; unencrypted HTTP connections are automatically redirected.
• At-rest encryption: Sensitive personal data — including KYC documents, identity records, and financial transaction data — is encrypted at rest using AES-256 encryption in the mnl68 data store.
• Access controls: Strict role-based access controls limit mnl68 personnel access to personal data on a need-to-know basis. Access to production data stores is logged and audited. All privileged access requires multi-factor authentication.
• Password security: Player passwords are never stored in plain text. mnl68 uses one-way hashing with a strong cryptographic algorithm and per-account salting to store password credentials.
• Third-party audits: mnl68 conducts periodic security assessments and cooperates with PAGCOR compliance audits relating to data handling and system security.
• Employee training: All mnl68 personnel with access to personal data receive training on data privacy obligations under RA 10173 and mnl68's internal data handling policies upon commencement of employment and on an annual basis thereafter.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by mnl68. Requests to exercise these rights may be submitted to the mnl68 Data Privacy Officer at the contact details provided in Section 15.

11.1 Right to Be Informed

You have the right to be informed about the collection and processing of your personal data, including the identity of the data controller, the purpose of processing, the scope and method of processing, the recipients or classes of recipients to whom your data may be disclosed, and your rights as a data subject. This Privacy Policy is the primary means by which mnl68 fulfils this obligation.

11.2 Right of Access

You have the right to request access to the personal data that mnl68 holds about you, including information about the purposes for which it is being processed. mnl68 will provide a copy of your personal data within 30 days of a verified request, in a commonly used electronic format unless you request otherwise.

11.3 Right to Rectification

You have the right to request the correction of inaccurate or incomplete personal data held by mnl68. Corrections will be made within a reasonable timeframe following verification of the request. In certain cases, supporting documentation may be required to verify the accuracy of the requested correction.

11.4 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (where consent was the sole legal basis), or where processing is unlawful. This right is subject to overriding legal obligations: mnl68 cannot delete data that it is required to retain under RA 9160, PAGCOR regulations, or BIR tax documentation requirements.

11.5 Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes. Where you object to direct marketing processing, mnl68 will cease that processing immediately. Where you object to processing based on legitimate interests, mnl68 will assess whether there are overriding grounds for continuing processing.

11.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another data controller where technically feasible, where processing is based on consent or contract and is carried out by automated means.

11.7 Right to Lodge a Complaint with the NPC

If you believe that mnl68 has not handled your personal data in compliance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. mnl68 encourages you to first contact our Data Privacy Officer to attempt to resolve the matter directly before escalating to the NPC.

The mnl68 Platform is a real-money gambling platform strictly restricted to individuals aged 21 years and older in compliance with PAGCOR regulations. mnl68 does not knowingly collect any personal data from individuals under the age of 21, and the Platform does not offer any services to individuals below this age.

If mnl68 becomes aware that personal data has been collected from a person under 21 years of age — whether through a false age declaration at registration or any other means — that account will be immediately suspended, all personal data associated with the account will be securely deleted to the extent not required for regulatory record-keeping, and any balance will be handled in accordance with PAGCOR procedures for underage account closures.

If you believe that a minor has registered an account on the mnl68 Platform, please contact the Data Privacy Officer immediately at the details provided in Section 15 so that the matter can be investigated and resolved without delay.

mnl68 sends two distinct categories of communications to registered players, which are governed by different rules:

13.1 Transactional Notifications

Transactional notifications are communications that are necessary for the operation of your account and the delivery of services. These include: deposit confirmations, withdrawal processing updates, login alerts from new devices or locations, OTP and 2FA codes, responsible gaming limit confirmations, account security alerts, and regulatory notices. These communications cannot be opted out of while your account is active, as they are essential for account security and service delivery.

13.2 Promotional Marketing

Promotional communications — including bonus offers, VIP programme promotions, new game announcements, and event notifications — are sent only to players who have expressly opted in to marketing communications. Opt-in consent is collected separately during registration and may be managed at any time in your account notification settings.

You may withdraw your consent to promotional marketing at any time by: (a) updating your notification preferences in Account Settings; (b) clicking the unsubscribe link in any marketing email from mnl68; or (c) contacting the Data Privacy Officer directly. Opt-outs will be processed within 48 hours. Withdrawal of marketing consent does not affect your ability to use the Platform or receive transactional notifications.

mnl68 does not send promotional marketing to players who have activated self-exclusion, players who have indicated they are experiencing gambling difficulties, or players whose responsible gaming monitoring flags them as at-risk accounts, regardless of their stated marketing preference.

mnl68 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or business operations. The "Last Updated" date at the top of this document indicates the date on which the most recent version took effect.

When we make material changes to this Policy — meaning changes that meaningfully affect how we collect, use, or share your personal data — we will notify registered players through the following channels:

• A notification displayed on the mnl68 Platform upon your next login session following the change;
• An email notification to your registered email address; and/or
• An SMS notification to your registered Philippine mobile number.

We encourage you to review this Privacy Policy periodically. Continued use of the mnl68 Platform following notification of a material change to this Policy constitutes your acceptance of the revised version. If you do not accept the revised terms, you may request account closure by contacting the player support team.

For all matters relating to this Privacy Policy, your personal data, or the exercise of your rights as a data subject under RA 10173, please contact the mnl68 Data Privacy Officer:

Role: Data Privacy Officer, mnl68
Email: [email protected]
Response Hours: Monday to Friday, 9:00 AM – 6:00 PM Philippine Standard Time (PST)
Response Target: Within 5 business days for initial acknowledgment; within 30 calendar days for substantive responses

When submitting a data privacy inquiry or rights request, please include: your registered username or account email, a description of your request or concern, the type of personal data involved (if applicable), and — for identity verification purposes — sufficient information to confirm you are the account holder (we will not request your password).

If your concern is not resolved to your satisfaction through direct contact with the mnl68 Data Privacy Officer, you may file a complaint with the Philippine National Privacy Commission (NPC). The NPC's contact information and complaints procedure are available through official Philippine government channels.

This Privacy Policy was last reviewed and approved on January 1, 2026. All prior versions of this Privacy Policy are superseded in full by this document.