ph367 Privacy Policy

1.Introduction

ph367 ("we," "us," or "the Platform") is committed to protecting the privacy and personal data of every player who registers and uses the ph367 online gaming platform at ph367.one. This Privacy Policy has been prepared in accordance with Republic Act No. 10173, the Data Privacy Act of 2012, and the implementing rules and regulations issued by the National Privacy Commission of the Philippines.

This policy applies to all personal data collected and processed by ph367 in the course of providing its online casino, sports betting, bingo, and related gaming services to Filipino players. It covers data collected through the ph367 website, mobile browser interface, customer support channels, and any other means by which you interact with ph367.

By registering a ph367 account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein, where processing is based on consent. For processing based on legal obligation or contract performance, your consent is not required but you remain informed of the processing activities.

2.Data Controller

ph367 (operating through ph367.one) is the personal information controller responsible for your personal data. Our designated Data Protection Officer (DPO) is responsible for overseeing data protection strategy, ensuring compliance with the Data Privacy Act of 2012, and handling data subject rights requests.

3.Personal Data We Collect

3.1 Identity and Contact Data. When you register a ph367 account, we collect your full legal name, date of birth, nationality, registered Philippine mobile number, and email address. This data is required to create your account, verify your identity in compliance with PAGCOR KYC requirements, and ensure you meet the minimum age requirement of 21 years.

3.2 Government-Issued Identification. For KYC verification purposes and as required under PAGCOR regulations, ph367 may collect images or scans of government-issued identification documents such as SSS/GSIS ID, Philippine passport, driver's licence, or other PAGCOR-accepted identification. These constitute sensitive personal data and are processed with heightened security controls.

3.3 Financial and Payment Data. ph367 collects payment account identifiers necessary to process deposits and withdrawals — including GCash mobile numbers, Maya account details, and Philippine bank account details. Full financial account numbers are not stored by ph367; payment processors handle financial transaction data under their own privacy frameworks.

3.4 Technical and Usage Data. ph367 automatically collects technical data when you access the platform, including IP address, device type and operating system, browser type and version, login timestamps, session duration, and game activity logs including bet amounts and outcomes. This data is used for security monitoring, fraud detection, responsible gaming compliance, and platform performance optimisation.

3.5 Communications Data. Records of your communications with ph367 customer support — whether via chat, email, or other channels — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

4.How We Collect Your Data

ph367 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you access the ph367 platform.
• Third-party sources: Data received from payment processors (e.g., GCash, Maya) confirming transaction completion; identity verification services used to validate KYC documents; and fraud prevention services that may provide data relevant to the security of your account.

5.How We Use Your Personal Data

ph367 uses your personal data for the following purposes:

• Creating and managing your ph367 account, including processing your ph367 Login and maintaining your account security;
• Verifying your identity and age as required by PAGCOR and applicable Philippine law;
• Processing deposits and withdrawals through your chosen payment method (GCash, Maya, BPI, BDO, and other supported Philippine payment channels);
• Providing access to ph367's gaming products including slots, live casino, bingo, Circle, Super Wheel, and sports betting;
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities in compliance with the Anti-Money Laundering Act (AMLA);
• Monitoring your gaming activity to fulfil ph367's responsible gaming obligations under PAGCOR's framework, including identifying patterns that may indicate problematic gambling behaviour;
• Communicating with you about your account, including security notifications, transaction confirmations, and important service updates;
• Sending you promotional materials and personalised offers where you have opted in to receive such communications — you may opt out at any time;
• Complying with legal and regulatory obligations including PAGCOR reporting requirements, AML obligations, and NPC data privacy requirements;
• Resolving disputes and enforcing ph367's Terms & Conditions.

6.Legal Bases for Processing

Under the Data Privacy Act of 2012, ph367 processes personal data on the following legal bases:

• Contract performance: Processing necessary to register your account, provide gaming services, and process financial transactions;
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, NPC requirements, and other applicable Philippine law;
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and technical platform operations, where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and the use of non-essential cookies, where you have provided explicit consent — which may be withdrawn at any time.

7.Data Sharing & Disclosure

7.1 ph367 does not sell, rent, or trade your personal data to third parties for their independent commercial use.

7.2 ph367 shares personal data with the following categories of recipients, solely to the extent necessary for the stated purpose:

• Payment processors: GCash (Mynt/G-Xchange), Maya Philippines, BPI, BDO, Metrobank, and other payment service providers — for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Third-party services used to verify identity documents submitted during registration or account upgrade;
• Cloud and technology service providers: Hosting, database, and security service providers operating under data processing agreements that bind them to confidentiality and data protection obligations;
• PAGCOR: The Philippine Amusement and Gaming Corporation, as the regulatory authority with statutory rights to access player data for regulatory oversight purposes;
• Anti-Money Laundering Council (AMLC): In compliance with the Anti-Money Laundering Act, where ph367 is required to report covered or suspicious transactions;
• Law enforcement and courts: Where disclosure is required by valid legal process, court order, or applicable Philippine law.

7.3 All third-party data processors engaged by ph367 are required to maintain confidentiality and implement appropriate technical and organisational security measures consistent with the Data Privacy Act of 2012.

8.International Data Transfers

8.1 Where ph367's technology service providers operate servers or infrastructure outside the Philippines, personal data may be transferred to and processed in jurisdictions other than the Philippines. ph367 ensures that any such international transfers are conducted in accordance with the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

8.2 ph367 implements appropriate safeguards for international transfers, which may include contractual clauses binding the recipient to data protection standards equivalent to those required under Philippine law, or transferring only to jurisdictions that the NPC has determined provide adequate data protection.

9.Data Retention

9.1 ph367 retains personal data for the period necessary to fulfil the purposes for which it was collected, as follows:

• Active account data: Retained for the duration of the account and for a period of five (5) years following permanent account closure, to comply with PAGCOR's record-keeping requirements and applicable anti-money laundering obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under the AMLA and PAGCOR regulations;
• KYC documentation: Retained for five (5) years following account closure or the last transaction, whichever is later;
• Customer support records: Retained for three (3) years following the closure of the relevant support interaction;
• Marketing consent records: Retained for the duration of the marketing relationship plus two (2) years following opt-out.

9.2 After the applicable retention period, personal data is securely deleted or anonymised in accordance with ph367's data disposal procedures.

10.Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph367:

• Right to be informed: The right to be notified of how ph367 processes your personal data — which this Privacy Policy fulfils;
• Right of access: The right to obtain a copy of your personal data held by ph367 and information about how it is being processed;
• Right to rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to erasure: The right to request deletion of your personal data where ph367 no longer has a legal basis to retain it — subject to overriding legal retention obligations under PAGCOR regulations and AMLA;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or processing based on legitimate interests;
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission if you believe your data protection rights have been violated.

To exercise any of the above rights, please submit a written request to the ph367 Data Protection Officer at [email protected] with the subject line "Data Privacy Request." ph367 will respond within fifteen (15) working days of receiving your request.

11.Cookies & Tracking Technologies

11.1 ph367 uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and analyse platform usage for performance improvement purposes.

11.2 Essential cookies are required for the platform to function (e.g., session management, security tokens) and cannot be disabled without preventing access to the platform.

11.3 Analytics cookies collect anonymised usage data to help ph367 understand how players use the platform. These are used only with your consent.

11.4 You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ph367 platform.

12.Children's Privacy

12.1 ph367 is strictly prohibited from accepting registrations from persons under 21 years of age. ph367 does not knowingly collect personal data from minors. Age verification is conducted at registration for all accounts.

12.2 If ph367 becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all data will be deleted, and any balance — including winnings — will be forfeited in accordance with ph367's Terms & Conditions and PAGCOR's regulations.

12.3 If you believe that a minor has registered or used ph367, please contact [email protected] immediately.

13.Security Measures

ph367 implements the following technical and organisational measures to protect your personal data:

• TLS 1.2/1.3 encryption for all data in transit between your browser and ph367's servers;
• Encryption or hashing of sensitive data fields at rest, including passwords and financial account identifiers;
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
• Regular security assessments and penetration testing of the ph367 platform;
• Multi-factor authentication options for player accounts and mandatory MFA for ph367 administrative systems;
• Automated anomaly detection for login activity to identify and respond to potential account compromises.

While ph367 takes all commercially reasonable measures to protect your personal data, no online system can guarantee absolute security. Players are advised to maintain strong, unique passwords for their ph367 account and to enable two-factor authentication.

14.Updates to This Privacy Policy

14.1 ph367 reserves the right to update this Privacy Policy at any time to reflect changes in its data processing practices, regulatory requirements, or the services it provides. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

14.2 Where changes are material, ph367 will notify registered players via their registered email address or mobile number at least seven (7) days before the changes take effect. Continued use of the ph367 platform after the effective date of any updated Privacy Policy constitutes acceptance of the updated policy.

14.3 The current version of this Privacy Policy is always available at ph367.one/privacy-policy.

15.Contact the Data Protection Officer

For all data privacy enquiries, data subject rights requests, or complaints regarding ph367's handling of your personal data, please contact the ph367 Data Protection Officer:

If you believe your data privacy rights have been violated and ph367's response is unsatisfactory, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.