ph3365 Privacy Policy

This Privacy Policy ("Policy") describes the practices of ph3365 ("the Company," "we," "us," "our") with respect to the collection, use, disclosure, storage, and protection of personal data obtained from individuals ("Players," "Users," "you") who register for, access, or use the ph3365 online casino platform available at ph3365.net and its associated subdomains and mobile-optimised versions (collectively, the "Platform").

ph3365 is committed to the responsible handling of personal data in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the relevant issuances of the National Privacy Commission of the Philippines ("NPC"). We take these obligations seriously — not merely as a legal requirement, but as a fundamental part of our commitment to every Filipino player who trusts us with their information.

By creating a ph3365 account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, you must not register an account or use the Platform.

For the purposes of the Data Privacy Act of 2012, ph3365 is the Personal Information Controller ("PIC") in respect of personal data collected from players on the Platform. ph3365 determines the purposes and means of processing personal data as described in this Policy.

ph3365 has designated a Data Protection Officer ("DPO") responsible for overseeing the Company's data protection practices, ensuring compliance with the DPA, and acting as the primary point of contact for data subjects exercising their rights under Philippine law. The DPO may be contacted via the email address listed in Section 15 of this Policy.

Third-party service providers engaged by ph3365 to process personal data on its behalf — including payment processors, identity verification agencies, and gaming technology providers — act as Personal Information Processors ("PIPs") under the DPA and are bound by data processing agreements that require them to handle personal data only as instructed by ph3365 and in accordance with applicable Philippine law.

ph3365 collects the following categories of personal data in connection with the operation of the Platform:

ph3365 collects personal data through the following methods:

• Direct collection: Information you provide when registering a ph3365 account, completing identity verification, making a deposit or withdrawal request, contacting customer support, or responding to a survey or promotional offer;
• Automated collection: Technical data collected automatically when you access or use the Platform, including IP addresses, device identifiers, cookies, session logs, and browsing behaviour within the ph3365 website;
• Third-party sources: Identity and address verification data received from licensed KYC and AML compliance partners; transaction confirmation data from payment processors including GCash, Maya, BPI, and BDO; and fraud screening data from authorised security services;
• Publicly available sources: In limited circumstances where required for AMLC compliance, ph3365 may verify information against publicly available government records or sanction screening databases.

ph3365 does not purchase personal data lists from third-party data brokers or marketing companies. All personal data collected by ph3365 is sourced directly from the player or from authorised service providers acting on ph3365's instructions in accordance with the DPA.

ph3365 processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Processing based on your explicit consent provided at the time of account registration, including consent to receive marketing communications and promotional offers from ph3365;
• Contractual necessity: Processing required to perform the contract between ph3365 and you — that is, to operate your account, process deposits and withdrawals, provide access to games, and deliver customer support;
• Legal obligation: Processing required to comply with applicable Philippine law, including the DPA, PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and directives from the AMLC and NPC;
• Legitimate interests: Processing necessary for fraud prevention, Platform security, responsible gaming monitoring, and business analytics, where such interests do not override your fundamental rights and freedoms.

The specific purposes for which ph3365 processes personal data include: account creation and management; age and identity verification; payment processing and withdrawal fulfilment; fraud detection and prevention; anti-money laundering screening; responsible gaming monitoring and intervention; customer support and complaint resolution; regulatory compliance and reporting; and improvement of Platform performance and user experience.

ph3365 may disclose your personal data to the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors and e-wallet providers: GCash, Maya, BPI, BDO, UnionBank, and other payment service providers as necessary to process deposits and withdrawals on your behalf;
• Identity verification providers: Licensed KYC and AML compliance service providers that assist ph3365 in verifying player identities and conducting anti-money laundering checks;
• Game providers: Third-party gaming software providers whose games are accessible through the ph3365 Platform may receive limited technical data (such as session tokens and bet transaction IDs) necessary to facilitate gameplay;
• Cloud infrastructure providers: Authorised data hosting and processing services that support Platform operations, subject to data processing agreements that comply with the DPA;
• Regulatory authorities: PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), and other Philippine government agencies where disclosure is required by law or in response to a valid legal order;
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by ph3365, subject to professional confidentiality obligations.

ph3365 will not sell, rent, trade, or otherwise transfer your personal data to unaffiliated third parties for advertising, marketing, or commercial purposes without your express prior consent. All third-party service providers engaged by ph3365 are required to maintain the confidentiality and security of personal data in accordance with the DPA and the terms of their data processing agreements with ph3365.

ph3365 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by the ph3365 website that enable certain Platform functions and allow ph3365 to recognise your browser across sessions.

ph3365 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens, and login state management. These cookies cannot be disabled without impairing your ability to use the Platform;
• Functional cookies: Used to remember your preferences, such as your selected language and notification settings;
• Analytical cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform, to help ph3365 identify areas for improvement;
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised login attempts, and bot-driven access to the Platform.

ph3365 does not use third-party advertising or tracking cookies that share your browsing behaviour with external advertising networks. You may manage your cookie preferences through your browser settings, though disabling strictly necessary cookies will affect Platform functionality. By continuing to use ph3365 after accepting this Policy, you consent to the use of cookies as described above.

ph3365 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by Philippine law and regulatory requirements.

At the end of the applicable retention period, personal data will be securely deleted, anonymised, or de-identified in accordance with ph3365's data disposal procedures, except where further retention is required by a court order, regulatory direction, or ongoing investigation.

ph3365 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures include:

• Encryption in transit: All personal data transmitted between your device and ph3365 servers is encrypted using 256-bit SSL/TLS protocols;
• Encryption at rest: Sensitive personal data stored in ph3365 databases, including identity documents and financial account details, is encrypted using AES-256 encryption;
• Access controls: Access to personal data is restricted on a strict need-to-know basis, governed by role-based access control policies and enforced through multi-factor authentication for all ph3365 staff systems;
• Password hashing: Player passwords are processed through a one-way cryptographic hashing algorithm before storage — ph3365 staff cannot access or retrieve your actual password;
• Intrusion detection: ph3365 operates automated intrusion detection and anomaly monitoring systems that flag and respond to suspicious activity on Platform infrastructure;
• Regular security audits: ph3365 engages independent security professionals to conduct periodic vulnerability assessments and penetration tests of Platform infrastructure;
• Staff training: All ph3365 personnel with access to personal data undergo mandatory data protection and security awareness training.

Under the Data Privacy Act of 2012, you have the following rights with respect to personal data that ph3365 holds about you. These rights may be exercised by contacting ph3365 customer support as described in Section 15.

In the course of providing the ph3365 Platform, certain personal data may be transferred to, stored in, or processed by systems located outside of the Philippines, including in jurisdictions where game software providers, cloud infrastructure partners, or specialist compliance service providers operate their data centres.

ph3365 ensures that all international transfers of personal data are conducted in compliance with Section 21 of the Data Privacy Act of 2012, which requires that adequate data protection safeguards are in place in the recipient country or that a binding agreement is in place with the data recipient requiring them to provide protection equivalent to that of Philippine law.

Before transferring personal data outside the Philippines, ph3365 conducts a data transfer impact assessment and implements appropriate contractual safeguards, including standard contractual clauses where required. Transfers made to comply with legal obligations imposed by Philippine courts or regulatory authorities are exempt from these additional safeguard requirements.

The ph3365 Platform is strictly prohibited for individuals under the age of 21 years, in compliance with PAGCOR regulations governing online casino-style gaming in the Philippines. ph3365 does not knowingly collect or process personal data from individuals under the age of 21.

If ph3365 discovers that personal data has been collected from a player who does not meet the minimum age requirement, ph3365 will immediately suspend the relevant account, reverse any transactions where possible, and permanently delete the personal data of the underage individual from its systems, except where required to be retained for regulatory reporting purposes.

If you are a parent or guardian and believe that a minor in your care has registered a ph3365 account, please contact customer support immediately at the email address provided in Section 15. ph3365 will prioritise the review and closure of any account associated with an underage individual.

In the event of a personal data breach that is likely to result in a real risk of serious harm to affected data subjects, ph3365 will notify the National Privacy Commission of the Philippines within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and the requirements of the Data Privacy Act of 2012.

Affected players will be notified without undue delay where the breach is likely to adversely affect their rights and freedoms, or where it involves sensitive personal information such as government-issued identification documents or financial account details. Notification will be made via the email address registered to the affected ph3365 account and will include:

• The nature of the personal data involved in the breach;
• The contact details of the ph3365 Data Protection Officer;
• The measures ph3365 has taken or proposes to take to address the breach;
• Recommended steps the affected player can take to protect themselves.

ph3365 reserves the right to update or revise this Privacy Policy at any time to reflect changes in Philippine law, NPC guidance, Platform operations, or industry best practice. When material changes are made to this Policy, ph3365 will notify active players by posting a prominent notice on the Platform and sending an email to each player's registered email address at least seven (7) days before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the date on which the most recent version was published. Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should contact ph3365 to close your account before the revised Policy takes effect.

Previous versions of this Privacy Policy are available upon written request to the ph3365 Data Protection Officer at the contact details provided below.

To exercise your data subject rights, submit a data subject access request, raise a data protection concern, or contact ph3365's Data Protection Officer, please use the following channels:

Data subject access requests will be processed within thirty (30) days of receipt. ph3365 may request proof of your identity before actioning any data subject request to ensure that personal data is not disclosed to or deleted at the request of an unauthorised individual.

If you are not satisfied with ph3365's response to a data protection complaint, you have the right to file a formal complaint with the National Privacy Commission of the Philippines. Complaints to the NPC may be filed online through the NPC's official government portal.

For responsible gaming support, self-exclusion requests, or deposit limit queries, please visit the ph3365 Responsible Gaming page or contact customer support via live chat.