ph366 Privacy Policy

1. Who We Are

ph366 ("ph366," "we," "our," or "us") operates the online gaming platform at ph366.asia, offering casino games, sports betting, and related entertainment services to eligible players in the Philippines. ph366 acts as the data controller for all personal information collected through the ph366 platform.

ph366 operates in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations (IRR), and the applicable issuances of the National Privacy Commission (NPC). We are also guided by PAGCOR regulations in the collection and use of player identity and transaction data.

2. Personal Data We Collect

ph366 collects the following categories of personal data from players and prospective players:

• Identity Data: Full legal name, date of birth, nationality, government-issued ID type and number (e.g., PhilSys ID, Passport, Driver's License, UMID), and a photograph for KYC verification.
• Contact Data: Residential address in the Philippines, email address, and Philippine mobile number.
• Financial Data: GCash mobile number, PayMaya account details, BPI/BDO/Metrobank account details (for deposit and withdrawal processing), transaction history, and account balance records.
• Account Data: Username, encrypted password, account preferences, responsible gaming settings, self-exclusion status, and session logs.
• Gaming Data: Bets placed, games played, RTP outcomes, bonus usage, and gameplay session duration and frequency.
• Technical Data: IP address, browser type and version, device type and operating system, referring URLs, and pages visited within ph366.asia.
• Communications Data: Records of your communications with ph366 support, including chat transcripts and support ticket details.

3. How We Collect Your Data

ph366 collects personal data through the following means:

• Direct submission: When you register for a ph366 account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automated collection: Through cookies, web beacons, server logs, and analytics tools when you browse and interact with ph366.asia.
• Third-party sources: From identity verification service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention partners, to verify your identity and protect your account.
• Regulatory sources: From PAGCOR or other regulatory authorities as required for compliance with Philippine gaming regulations and AML obligations.

4. How We Use Your Personal Data

ph366 uses your personal data for the following purposes:

• To register and maintain your ph366 account, including identity verification (KYC) as required by PAGCOR regulations.
• To process deposits and withdrawals in Philippine Peso via your chosen payment method (GCash, PayMaya, or bank transfer).
• To operate, improve, and personalize your gaming experience on ph366, including game recommendations and promotional offers.
• To detect, investigate, and prevent fraud, money laundering, underage gambling, and other prohibited activities on the platform.
• To comply with applicable Philippine law, including PAGCOR regulations, the Data Privacy Act of 2012, and Anti-Money Laundering Act (AMLA) requirements.
• To provide customer support and respond to your account inquiries, complaints, and disputes.
• To send you account notifications, security alerts, and (where you have opted in) promotional communications about ph366 offers and games.
• To administer and enforce ph366's responsible gaming tools, including deposit limits, self-exclusion, and session time reminders.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph366 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the ph366 Terms and Conditions (account operation, payment processing, game provision).
• Legal obligation: Processing required to comply with PAGCOR regulations, AML obligations, NPC guidelines, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud detection, security, platform improvement, and responsible gaming enforcement, where such interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time through your ph366 account settings.

6. Sharing Your Personal Data

ph366 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash (Globe Fintech Innovations Inc.), PayMaya Philippines Inc., BPI, BDO Unibank, and Metrobank — to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with PAGCOR requirements.
• Game providers: Licensed third-party game software providers whose games are offered on ph366, who may receive session and wagering data for RNG certification and compliance purposes.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies as required by law.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers operating under strict confidentiality and data processing agreements.

ph366 does not transfer your personal data to countries outside the Philippines without ensuring that appropriate data protection safeguards are in place, as required by the Data Privacy Act of 2012 and NPC guidelines.

7. Cookies & Tracking Technologies

ph366.asia uses cookies and similar tracking technologies to improve your browsing experience, maintain your login session, and collect analytics data about platform usage.

• Essential cookies: Required for the platform to function correctly — including your login session, account preferences, and security tokens. These cannot be disabled.
• Analytics cookies: Used to understand how players navigate ph366.asia, which pages are most visited, and where users experience difficulty, allowing us to improve the platform.
• Preference cookies: Store your language, game lobby, and display preferences so you don't need to re-configure them on every visit.

You may manage non-essential cookie preferences through your browser settings. Disabling essential cookies may impair your ability to log in and use the ph366 platform.

8. Data Retention

ph366 retains personal data for the following periods, after which data is securely deleted or anonymized:

• Active account data: Retained for the duration of your ph366 account plus 5 years following account closure, as required for PAGCOR and AMLA compliance.
• KYC and identity verification records: Retained for a minimum of 5 years from the date of verification, in accordance with PAGCOR and AMLC record-keeping requirements.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the transaction date.
• Support communications: Chat transcripts and support tickets are retained for 2 years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter as evidence of the consent record.

9. Your Data Protection Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph366:

• Right to be informed: The right to know what personal data ph366 collects about you and how it is used — as described in this Privacy Policy.
• Right of access: The right to request a copy of the personal data ph366 holds about you.
• Right to rectification: The right to correct inaccurate or incomplete personal data in your ph366 account.
• Right to erasure: The right to request deletion of your personal data, subject to ph366's legal retention obligations under PAGCOR and AMLA regulations.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph366 has violated your data protection rights.

To exercise any of these rights, please contact the ph366 Data Privacy Officer at [email protected]. ph366 will respond to all data subject requests within 15 business days.

10. Data Security

ph366 implements technical and organizational security measures appropriate to the risk of processing your personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between your browser and ph366.asia servers.
• Encryption at rest for sensitive personal data stored in ph366 databases, including passwords (hashed using bcrypt) and financial account identifiers.
• Role-based access controls ensuring that ph366 staff can only access personal data strictly necessary for their job function.
• Regular security audits, vulnerability assessments, and penetration testing of the ph366 platform.
• Multi-factor authentication for ph366 staff accessing systems that contain personal data.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, ph366 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

11. Children and Minors

ph366 is strictly for persons aged 21 years and above, in accordance with PAGCOR regulations. ph366 does not knowingly collect personal data from individuals under 21 years of age. If ph366 becomes aware that a user is under 21, the account will be immediately suspended, all funds will be handled in accordance with PAGCOR guidelines, and all personal data associated with the account will be deleted from ph366's systems as required by law.

If you believe a minor has registered with ph366, please contact us immediately at [email protected] so we can take prompt action.

12. Changes to This Privacy Policy

ph366 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or updates to the ph366 platform. When material changes are made, ph366 will notify registered players via their registered email address and/or through a prominent notice on ph366.asia at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page always reflects when the most recent revision was published. Continued use of ph366 after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

13. Contact the ph366 Data Privacy Officer

If you have any questions, requests, or complaints regarding this Privacy Policy or ph366's handling of your personal data, please contact our Data Privacy Officer: