ph368 Privacy Policy

1 Introduction

ph368 is committed to protecting the privacy and personal data of all users of the ph368 online casino platform. This Privacy Policy sets out in detail the types of personal information we collect from you, the purposes for which we use that information, the circumstances under which we may share it with third parties, and the rights you have in relation to your personal data.

This Privacy Policy applies to all personal data collected through the ph368 website at ph368.club, including data collected during account registration, identity verification, financial transactions, customer support interactions, and general use of the ph368 platform. It applies to all registered players and visitors to the ph368 platform, regardless of location, though it is specifically designed to reflect the requirements of Philippine law.

Please read this Privacy Policy carefully. By registering for a ph368 account or continuing to use the ph368 platform, you acknowledge that you have read, understood, and agree to the collection and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the ph368 platform immediately.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, ph368 acts as the personal information controller in respect of the personal data it collects from users of the ph368 platform.

As the personal information controller, ph368 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine data privacy laws and PAGCOR regulatory requirements.

If you have any questions or concerns about how ph368 handles your personal data, or if you wish to exercise any of your data subject rights, you may contact ph368's Data Protection Officer (DPO) using the contact details provided in Section 14 of this Privacy Policy.

3 Personal Data We Collect

ph368 collects personal data from you in several ways: directly when you provide it to us during registration or account use, automatically when you interact with the ph368 platform, and from third parties where permitted by law. The categories of personal data we collect include:

3.1 Registration and Identity Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (including city, province, and postal code)
• Username and password (stored in encrypted form)
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address documents
• Selfie or photograph for identity verification purposes
• Proof of payment method ownership

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash account reference, Maya account reference, bank account details — stored in tokenized or reference form only)
• Transaction amounts and timestamps
• Wagering history and game activity records

3.4 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and login timestamps
• Pages visited and features used on the ph368 platform
• Referring website or source

3.5 Communications Data

• Customer support chat logs and email correspondence
• Feedback and survey responses
• Complaints and dispute records

4 How We Use Your Personal Data

ph368 uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Registration data, identity data
Age and identity verification (KYC)	KYC documents, date of birth, selfie
Processing deposits and withdrawals	Financial and transaction data
Providing gaming services	Account data, wagering history
Customer support	Communications data, account data
Fraud prevention and security	Technical data, transaction data, IP address
Anti-money laundering (AML) compliance	KYC data, transaction data
Responsible gaming monitoring	Wagering history, session data
Platform improvement and analytics	Technical and usage data (anonymized where possible)
Marketing communications (with consent)	Email address, preferences
Legal and regulatory compliance	All categories as required by law

5 Legal Basis for Processing

ph368 processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173):

• Contractual necessity: Processing is necessary to perform the contract between you and ph368 — i.e., to provide you with access to the ph368 platform and its services.
• Legal obligation: Processing is necessary for ph368 to comply with its legal obligations under Philippine law, including PAGCOR regulations, anti-money laundering laws (AMLA), and the Data Privacy Act itself.
• Legitimate interests: Processing is necessary for ph368's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending you marketing communications — ph368 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time.

6 Sharing Your Personal Data

ph368 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. ph368 may share your personal data with third parties only in the following limited circumstances:

6.1 Service Providers

ph368 engages trusted third-party service providers to assist in operating the ph368 platform. These include payment processors (for GCash, Maya, and bank transfer transactions), identity verification providers, game software providers, cloud hosting providers, and customer support tools. These service providers are contractually bound to process your personal data only on ph368's instructions and in accordance with applicable data privacy laws.

6.2 Regulatory and Legal Authorities

ph368 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other government authorities where required to do so by Philippine law, court order, or regulatory directive. ph368 will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ph368's business, your personal data may be transferred to the acquiring entity as part of that transaction. ph368 will notify you of any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Privacy Policy.

6.4 With Your Consent

ph368 may share your personal data with third parties for purposes not described above where you have given your explicit prior consent to such sharing.

7 Cookies and Tracking Technologies

ph368 uses cookies and similar tracking technologies on the ph368 platform to enhance your user experience, analyze platform usage, and support security functions. The types of cookies ph368 uses include:

• Essential cookies: Strictly necessary for the ph368 platform to function. These include session cookies that keep you logged in and security cookies that help detect fraudulent activity. These cookies cannot be disabled.
• Analytics cookies: Used to collect anonymized information about how users interact with the ph368 platform, helping us identify areas for improvement. These cookies do not identify you personally.
• Preference cookies: Used to remember your settings and preferences on the ph368 platform, such as language and display preferences.
• Marketing cookies: Used only with your consent to deliver relevant promotional content. You may opt out of marketing cookies at any time through your browser settings or by contacting ph368 support.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph368 platform. For more information on managing cookies, refer to your browser's help documentation.

8 Data Security

ph368 takes the security of your personal data seriously and implements a range of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and the ph368 platform
• Encryption of sensitive data at rest, including identity documents and financial information
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments of the ph368 platform
• Multi-factor authentication options for player accounts
• Incident response procedures for detecting, reporting, and responding to personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph368 will notify the National Privacy Commission (NPC) and affected users in accordance with the requirements of RA 10173 and its Implementing Rules and Regulations.

9 Data Retention

ph368 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine anti-money laundering laws.
• Customer support records: Retained for up to three (3) years from the date of the interaction, or longer if required for ongoing dispute resolution or legal proceedings.
• Technical and usage data: Retained for up to two (2) years, after which it is anonymized or deleted.
• Marketing consent records: Retained until you withdraw your consent, plus a reasonable period thereafter for compliance documentation purposes.

When personal data is no longer required, ph368 will securely delete or anonymize it in accordance with industry best practices and applicable legal requirements.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by ph368:

• Right to be informed: You have the right to be informed about how ph368 collects and uses your personal data. This Privacy Policy fulfills that obligation.
• Right of access: You have the right to request a copy of the personal data ph368 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data ph368 holds about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph368's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph368 has violated your data privacy rights.

To exercise any of these rights, please contact ph368's Data Protection Officer using the contact details in Section 14. ph368 will respond to all data subject requests within thirty (30) days of receipt, in accordance with RA 10173.

11 Children's Privacy

The ph368 platform is strictly intended for users who are 21 years of age or older. ph368 does not knowingly collect personal data from any person under the age of 21. If ph368 becomes aware that it has inadvertently collected personal data from a person under 21, it will immediately delete that data and close the associated account.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to ph368, please contact ph368 support immediately so that appropriate action can be taken.

12 Third-Party Links

The ph368 platform may contain links to third-party websites or services. ph368 is not responsible for the privacy practices or content of any third-party websites. This Privacy Policy applies solely to the ph368 platform at ph368.club. ph368 encourages you to review the privacy policies of any third-party websites you visit.

13 Changes to This Privacy Policy

ph368 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, ph368 will notify registered players via email or a prominent notice on the ph368 platform prior to the changes taking effect.

The updated Privacy Policy will be posted at ph368.club/privacy-policy with a revised effective date. Your continued use of the ph368 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Privacy Policy, you must cease using ph368 and may request account closure by contacting ph368 support.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or ph368's handling of your personal data, please contact ph368's Data Protection Officer: