ph368 Privacy Policy

This Privacy Policy ("Policy") is issued by ph368 ("ph368", "We", "Our", "Us") and applies to all personal data collected, processed, and stored in connection with your use of the ph368 online casino and sports betting platform, accessible at ph368.cam, including all related services, features, and customer support channels. By registering an account on ph368 or using any ph368 service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with the ph368 Terms & Conditions, which govern the overall use of ph368 services and are incorporated herein by reference.

1. Data Controller Identity

ph368 is the data controller responsible for your personal data collected through the ph368 platform. As data controller, ph368 determines the purposes and means of processing your personal data and is accountable under the Philippine Data Privacy Act of 2012 (RA 10173) for ensuring that all processing activities comply with applicable data protection law.

If you have any questions, concerns, or requests regarding this Policy or the handling of your personal data, you may contact ph368's Data Protection Officer via email at [email protected]. All privacy-related inquiries will be acknowledged within five (5) business days.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions, ph368 collects the following categories of personal data:

• Identity data: Full legal name, date of birth, nationality, and gender as appearing on your government-issued Philippine identification document.
• Contact data: Email address, mobile phone number (Philippines-based), and residential address.
• Identification documents: Scanned copies or photographs of government-issued Philippine ID (e.g., Philippine Passport, Driver's License, SSS ID, UMID, PhilHealth ID, Voter's ID, PRC License) and, where required, a selfie photograph holding the submitted ID.
• Financial data: GCash mobile number, Maya account details, bank account name and number for BPI, BDO, Metrobank, UnionBank, or other Philippine bank accounts used for deposits and withdrawals, and cryptocurrency wallet addresses used for USDT TRC20 transactions.
• Account credentials: Username and encrypted password (passwords are stored using one-way hashing and are never accessible to ph368 staff in plain text).

2.2 Data Collected Automatically

When you access and use the ph368 platform, certain technical and behavioral data is collected automatically through cookies, server logs, and similar technologies:

• Device and technical data: IP address, device type and model, operating system and version, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bets placed, session duration, login timestamps, clickstream data, and platform features accessed.
• Transaction data: Deposit and withdrawal amounts, dates, payment methods used, transaction reference numbers, and betting history.
• Communications data: Records of live chat conversations with customer support, email correspondence, and any feedback submitted through ph368 channels.

2.3 Data From Third Parties

ph368 may receive personal data about you from the following third-party sources, where necessary to verify your identity, process payments, or detect fraud:

• Payment service providers (GCash, Maya, BPI, BDO, Metrobank, UnionBank) for the purpose of verifying payment transactions and confirming account ownership.
• Identity verification service providers that assist with automated KYC processing and document authenticity checks.
• Fraud detection and anti-money-laundering screening services that cross-reference account activity against known fraud patterns and watchlists.

3. How We Use Your Personal Data

ph368 processes your personal data only for legitimate, specified purposes with a valid legal basis under RA 10173. The table below summarizes the primary purposes for which ph368 processes personal data and the corresponding legal basis:

Purpose of Processing	Legal Basis
Account registration and identity verification (KYC)	Contractual necessity; legal obligation (AML/KYC regulations)
Processing deposits and withdrawal requests	Contractual necessity
Providing access to games, sports betting, and platform features	Contractual necessity
Customer support and complaint resolution	Contractual necessity; legitimate interest
Fraud prevention, security monitoring, and anti-money-laundering	Legal obligation; legitimate interest
Responsible gaming monitoring and enforcement of age restrictions	Legal obligation; legitimate interest
Sending account notifications, transaction confirmations, and security alerts	Contractual necessity
Sending promotional communications and personalized offers	Consent (you may withdraw at any time)
Platform analytics, service improvement, and bug detection	Legitimate interest
Compliance with PAGCOR regulations and applicable Philippine law	Legal obligation

4. Cookies and Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit the ph368 website. They allow the platform to recognize your device, maintain your session, remember your preferences, and collect usage analytics. ph368 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period or until you delete them).

4.2 Types of Cookies Used

• Essential cookies: Required for the platform to function correctly, including session management, authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your language preferences, game settings, and other personalization choices to improve your experience.
• Analytics cookies: Collect anonymous usage data to help ph368 understand how the platform is used and identify areas for improvement.
• Security cookies: Used to detect fraud, prevent bot activity, and enforce responsible gaming controls such as self-exclusion.

4.3 Managing Cookies

You may configure your browser to refuse non-essential cookies or to alert you before cookies are placed. However, disabling essential cookies may affect the functionality of the ph368 platform, including your ability to log in, maintain a session, or process transactions.

5. Sharing Your Personal Data

5.1 Third-Party Service Providers

ph368 shares personal data with carefully selected third-party service providers who assist in delivering the ph368 platform and services. These providers are contractually bound to process personal data only on ph368's instructions and in accordance with RA 10173. Categories of service providers include:

• Payment processors and e-wallet operators (GCash, Maya, and banking partners) for transaction processing.
• KYC and identity verification service providers for document verification and fraud screening.
• Cloud hosting and infrastructure providers for platform operation and data storage.
• Customer support software providers for live chat and ticketing systems.
• Analytics providers for aggregated, anonymized platform usage analysis.

5.2 Regulatory and Legal Disclosures

ph368 may disclose your personal data to Philippine government authorities, law enforcement agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other regulatory bodies where required to do so by law, court order, or valid legal process. ph368 will, where legally permitted, notify you of any such disclosure request.

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other business transfer involving ph368, your personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, ph368 will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy, and you will be notified of any material change to data controllership.

5.4 No Sale of Personal Data

ph368 does not sell, rent, trade, or otherwise transfer your personal data to any third party for that party's own marketing or commercial purposes. Any sharing of personal data is limited to the purposes described in this Policy and is subject to appropriate contractual safeguards.

6. International Data Transfers

ph368's primary data processing infrastructure is located within the Philippines or in jurisdictions that provide adequate levels of data protection as determined by the National Privacy Commission. Where personal data is transferred to service providers or infrastructure providers located outside the Philippines, ph368 ensures that such transfers are governed by appropriate contractual safeguards, including data processing agreements that impose obligations equivalent to those required under RA 10173. By using ph368, you consent to such transfers where necessary for the provision of the platform's services.

7. Data Retention

ph368 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law and regulatory obligations. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with AMLC record-keeping requirements applicable to covered persons under RA 9160 (Anti-Money Laundering Act).
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support records: Retained for two (2) years from the date of the last support interaction.
• Marketing consent records: Retained for as long as you remain opted in, plus two (2) years following opt-out for compliance evidence purposes.
• Usage and analytics data: Retained in anonymized or aggregated form indefinitely; personally identifiable usage logs are retained for up to twelve (12) months.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents re-identification.

8. Data Security

ph368 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph368 servers.
• Encryption of sensitive personal data stored in ph368 databases.
• One-way cryptographic hashing of all account passwords (passwords are never stored or accessible in plain text).
• Role-based access controls limiting ph368 staff access to personal data to those with a legitimate need.
• Regular security audits, vulnerability assessments, and penetration testing of ph368 platform infrastructure.
• Two-factor authentication available for all player accounts and mandatory for administrative access.
• Continuous fraud monitoring and anomaly detection systems that flag suspicious account or transaction activity for review.

Notwithstanding these measures, no system is completely immune to security risks. In the event of a personal data breach that is likely to pose a real risk to your rights and freedoms, ph368 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with RA 10173 breach notification requirements.

9. Your Rights Under the Philippine Data Privacy Act

As a data subject under RA 10173, you have the following rights with respect to your personal data held by ph368:

• Right to be informed: You have the right to be informed about what personal data ph368 collects about you and how it is used, as set out in this Policy.
• Right to access: You have the right to request a copy of the personal data ph368 holds about you, along with information about how it is processed.
• Right to correction: You have the right to request correction of any inaccurate, incomplete, or outdated personal data we hold about you.
• Right to erasure or blocking: You have the right to request deletion or blocking of your personal data where processing is no longer necessary, where consent has been withdrawn, or where data has been processed unlawfully, subject to ph368's legal retention obligations.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest and you believe your rights override that interest.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

10. Marketing Communications

ph368 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, sports betting promotions, VIP offers, and other ph368 news, where you have provided consent to receive such communications during account registration or at a later date. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting customer support. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal.

Withdrawal of marketing consent does not affect essential account communications such as transaction confirmations, security alerts, KYC status updates, and important platform notices — these are sent regardless of marketing preferences as they are necessary for the performance of the agreement between you and ph368.

11. Children's Privacy and Age Restriction

ph368 is strictly intended for players aged 21 years and above, consistent with PAGCOR's applicable age requirements for casino-style gambling in the Philippines. ph368 does not knowingly collect personal data from individuals under the age of 21. All accounts are subject to age verification during the KYC process. If ph368 becomes aware that personal data has been collected from a person under 21, that account will be suspended immediately, the data will be securely deleted (subject only to mandatory legal retention requirements), and any deposited funds will be returned.

12. Links to Third-Party Services

The ph368 platform may reference or integrate third-party services such as payment processors and game providers. These third-party services operate under their own privacy policies, which are independent of this Policy. ph368 is not responsible for the data practices of third-party service providers beyond the contractual obligations ph368 has imposed on them as data processors. We encourage you to review the privacy policies of any third-party services you use in connection with ph368.

13. Changes to This Privacy Policy

ph368 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. The "Last Updated" date at the top of this Policy will be revised accordingly. Where changes are material, ph368 will notify registered players via email or prominent in-platform notice at least fourteen (14) days before the changes take effect, giving you the opportunity to review the amended Policy before it applies to you. Continued use of ph368 services following the effective date of any amendment constitutes acceptance of the revised Policy.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including but not limited to the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts of Metro Manila, Philippines, or resolved through the dispute resolution mechanism set out in the ph368 Terms & Conditions.

15. Contact Us

For all data privacy inquiries, access requests, correction requests, erasure requests, or complaints, please contact ph368's Data Protection Officer:

• Email: [email protected] (Subject: "Data Privacy Request")
• Response time: Within 15 calendar days of receiving a valid, verified request
• Support hours: 24 hours a day, 7 days a week via live chat on the ph368 platform

If you are not satisfied with ph368's response to your privacy request or believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission (NPC) of the Philippines through their official channels.