ph368 Privacy Policy

ph368 is an online gaming platform serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We take the privacy and security of your personal data seriously. This Policy has been prepared in accordance with the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines and the implementing rules and regulations issued by the National Privacy Commission (NPC).

This Policy applies to all personal data collected through the ph368 website, mobile application, customer support channels, and any other interaction you have with ph368. It should be read together with the ph368 Terms & Conditions and Responsible Gaming Policy, both of which are available on the ph368 platform.

ph368 is the data controller responsible for the personal data collected through the ph368 platform. As data controller, ph368 determines the purposes and means by which your personal data is processed. ph368 has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012.

If you have any questions, concerns, or requests relating to the processing of your personal data by ph368, you may contact our Data Protection Officer at the email address provided in Section 14 of this Policy.

ph368 collects the following categories of personal data from players and platform users:

ph368 does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law or expressly provided by you in the context of a responsible gaming self-assessment.

ph368 collects your personal data through the following means:

• Direct collection: Data you provide when registering your ph368 account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the ph368 platform, including through cookies, web beacons, and server logs. See Section 8 for details on cookies.
• Third-party sources: Identity and age verification data received from third-party verification service providers engaged by ph368 to confirm your eligibility to use the platform. Financial data received from payment processors such as GCash and PayMaya in connection with your transactions.
• Publicly available sources: In limited circumstances, ph368 may verify information against publicly available records for fraud prevention or AML compliance purposes.

ph368 uses your personal data for the following purposes:

• To create, manage, and maintain your ph368 account, including verifying that you meet the 21+ age requirement under Philippine gaming regulations.
• To process deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods in Philippine Peso (PHP).
• To provide customer support and respond to your inquiries, complaints, and dispute submissions.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct on the ph368 platform.
• To comply with applicable Philippine laws and regulations, including reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC).
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behavior.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• To improve the ph368 platform, personalize your gaming experience, and analyze platform usage trends.
• To send you promotional communications about ph368 offers and bonuses, where you have consented to receive such communications. You may opt out at any time.

ph368 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

ph368 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing required to perform the contract between you and ph368, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests: Processing necessary for ph368's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications and certain types of profiling. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ph368 does not sell, rent, or trade your personal data to third parties. ph368 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC (Know Your Customer) and age verification service providers engaged by ph368 to verify your identity and confirm you meet the 21+ eligibility requirement.
• Technology and hosting providers: Cloud hosting, data storage, and platform infrastructure providers who process data on ph368's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or a valid legal order.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties with whom ph368 shares personal data are required to process that data in accordance with applicable Philippine data protection law and ph368's data processing standards. ph368 does not transfer personal data outside the Philippines except where necessary and subject to appropriate safeguards.

ph368 uses cookies and similar tracking technologies on the ph368 website and mobile application. Cookies are small text files stored on your device that help ph368 recognize you, remember your preferences, and improve your experience on the platform.

ph368 uses the following types of cookies:

• Strictly necessary cookies: Essential for the ph368 platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game display options to personalize your ph368 experience.
• Analytics cookies: Collect anonymized data about how players use the ph368 platform, helping us identify areas for improvement. This data is aggregated and does not identify individual users.
• Security cookies: Help ph368 detect and prevent fraudulent activity, unauthorized access, and bot traffic on the platform.

ph368 does not use advertising or cross-site tracking cookies. You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ph368 platform.

ph368 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your ph368 account and for a minimum of five (5) years following account closure, in accordance with AML and PAGCOR record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of the Philippines.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer if related to an ongoing dispute or legal proceeding.
• Technical and usage data: Retained for up to twelve (12) months, after which it is anonymized or deleted.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

When personal data is no longer required, ph368 will securely delete or anonymize it in accordance with industry best practices.

ph368 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the ph368 platform.
• Encryption of sensitive data stored on ph368 servers, including financial data and identity documents.
• Role-based access controls ensuring that ph368 staff can only access personal data necessary for their specific job functions.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security professionals.
• Multi-factor authentication requirements for ph368 staff accessing systems that contain personal data.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

While ph368 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You acknowledge this inherent risk when using the ph368 platform. If you suspect that your ph368 account has been compromised, please contact our support team immediately.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by ph368:

• Right to be informed: The right to be informed about how ph368 collects and processes your personal data, as set out in this Policy.
• Right of access: The right to request a copy of the personal data ph368 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data ph368 holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph368's legal retention obligations.
• Right to object: The right to object to certain types of processing, including direct marketing communications.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph368 has violated your data privacy rights.

To exercise any of these rights, please contact the ph368 Data Protection Officer using the contact details in Section 14. ph368 will respond to all verified data subject requests within thirty (30) days, in accordance with NPC guidelines. ph368 may request proof of identity before processing your request.

The ph368 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. ph368 does not knowingly collect personal data from individuals under the age of 21. If ph368 discovers that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be deleted, and any funds held in the account will be handled in accordance with applicable regulations.

If you are a parent or guardian and believe that your child has registered on ph368, please contact our support team immediately so that we can take appropriate action.

ph368 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. When material changes are made, ph368 will notify registered players via email or an in-platform notification prior to the changes taking effect.

The effective date at the top of this Policy will be updated whenever changes are made. Your continued use of the ph368 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how ph368 protects your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ph368 processes your personal data, please contact our Data Protection Officer. Our support team is available 24 hours a day, 7 days a week via live chat on the ph368 platform.

You may also reach our Data Protection Officer by email at: [email protected]

For general support inquiries, you may contact us at: [email protected]

ph368 will acknowledge all privacy-related inquiries within two (2) Philippine business days and will endeavor to resolve all requests within thirty (30) days. For complaints that cannot be resolved directly with ph368, you have the right to escalate your concern to the National Privacy Commission of the Philippines.