ph365ph Privacy Policy

This Privacy Policy ("Policy") describes how ph365ph ("we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," or "the Player") who access or use the ph365ph online gaming platform, including the website at ph365ph.org and any related services, features, or content offered by ph365ph (collectively, the "Platform").

ph365ph operates in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. We are committed to upholding the rights of Filipino data subjects and ensuring that all personal data processed through the ph365ph Platform is handled lawfully, fairly, and transparently.

By regist ering an account or otherwise using the ph365ph Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the ph365ph Platform.

This Policy should be read together with the ph365ph Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

ph365ph collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and in limited cases from trusted third-party sources. The categories of personal data we collect include the following:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you are at least 21 years of age);
• Gender;
• Nationality and country of residence;
• Residential address, including barangay, city or municipality, province, and postal code;
• Email address;
• Mobile number registered in the Philippines.

2.2 Identity Verification (KYC) Documents

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID);
• Proof of address documents (e.g., utility bills, bank statements, barangay certificates);
• Proof of payment method ownership (e.g., GCash or PayMaya account screenshots showing your registered name).

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Philippine Peso (₱), timestamps, and payment method references;
• GCash, PayMaya, BPI, BDO, and Metrobank account reference identifiers (we do not store full bank account numbers or card numbers);
• Account balance history and bonus transaction records.

2.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, win/loss outcomes, and session durations;
• Bonus and promotion participation records;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type and version;
• Unique device identifiers;
• Platform access logs, including login timestamps and session activity.

2.6 Communications Data

• Records of your communications with ph365ph customer support, including live chat transcripts and email correspondence;
• Feedback, survey responses, and any other information you voluntarily provide to ph365ph.

ph365ph uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

ph365ph does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have given explicit consent.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, ph365ph processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and ph365ph — specifically, to provide you with access to the Platform, process your transactions, and manage your account;
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations under Republic Act No. 9160 (as amended), KYC requirements, and regulatory reporting obligations;
• Legitimate interests: Processing is necessary for ph365ph's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and freedoms;
• Consent: For certain processing activities — such as sending promotional communications or using non-essential cookies — ph365ph relies on your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time.

ph365ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

5.1 Service Providers

ph365ph engages trusted third-party service providers to assist in operating the Platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, customer support software providers, and analytics platforms. All service providers are contractually bound to process your data only on ph365ph's instructions and in accordance with applicable data protection law.

5.2 Regulatory & Law Enforcement Authorities

ph365ph may disclose your personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. ph365ph will notify you of such disclosures where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ph365ph's business, your personal data may be transferred to the acquiring entity as part of that transaction. ph365ph will notify you of any such transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.

5.4 With Your Consent

ph365ph may share your personal data with other third parties where you have given your explicit prior consent to such sharing. You may withdraw this consent at any time by contacting ph365ph support.

ph365ph uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain your session, and gather analytics data that helps us improve our services. The types of cookies we use are as follows:

• Strictly necessary cookies: These are essential for the Platform to function correctly. They enable core features such as account login sessions, security tokens, and load balancing. These cookies cannot be disabled without impairing Platform functionality;
• Functional cookies: These remember your preferences and settings (such as language and display preferences) to provide a more personalized experience;
• Analytics cookies: These collect aggregated, anonymized data about how players use the Platform — such as which pages are visited most frequently and how long sessions last — to help ph365ph improve the Platform;
• Security cookies: These help ph365ph detect and prevent fraudulent activity, unauthorized access attempts, and other security threats.

ph365ph retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and KYC regulatory requirements under Philippine law;
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• Gaming activity data: Retained for three (3) years from the date of each gaming session, or longer where required for dispute resolution or regulatory purposes;
• Customer support communications: Retained for two (2) years from the date of the last communication, or longer where relevant to an ongoing dispute or legal proceeding;
• Technical and device data: Retained for twelve (12) months from collection, unless required for longer for security or fraud investigation purposes.

Upon expiry of the applicable retention period, ph365ph will securely delete or anonymize your personal data in accordance with industry-standard data destruction practices.

The security measures employed by ph365ph include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph365ph Platform;
• Encryption at rest for all sensitive personal data stored on ph365ph servers;
• Role-based access controls ensuring that only authorized ph365ph personnel with a legitimate need can access personal data;
• Multi-factor authentication for all internal systems that process personal data;
• Regular security audits and penetration testing conducted by independent third-party security firms;
• Intrusion detection and prevention systems monitoring the Platform 24/7 for suspicious activity;
• Staff training on data protection obligations and security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph365ph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

As a data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by ph365ph. To exercise any of these rights, please contact ph365ph support using the details provided in Section 12.

ph365ph will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case ph365ph will notify you of the extension and the reasons for it. ph365ph will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

ph365ph employs age verification procedures during the registration process and as part of ongoing KYC compliance to prevent underage individuals from accessing the Platform. If ph365ph becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, ph365ph will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child or a minor in your care has registered on the ph365ph Platform, please contact ph365ph support immediately using the contact details in Section 12. ph365ph takes underage gambling extremely seriously and will act promptly on all such reports.

ph365ph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made to this Policy, ph365ph will notify registered players via the email address associated with their account and by posting a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how ph365ph protects your personal data. Your continued use of the ph365ph Platform following the posting of any changes constitutes your acceptance of the revised Policy.

If you have any concerns about changes to this Privacy Policy, you are welcome to contact ph365ph support before the changes take effect. If you do not agree with the revised Policy, you must cease using the Platform and may request the closure of your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph365ph, please contact our Data Protection Officer (DPO) or customer support team using the details below.

If you are not satisfied with ph365ph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about how to file a complaint with the NPC is available on the NPC's official website.