ph369 Privacy Policy

1. Introduction and Scope

ph369 ("ph369", "we", "us", or "our") is deeply committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy ("Policy") describes in detail how ph369 collects, processes, stores, shares, and protects your personal information when you visit ph369.cam, use our mobile applications, or access any of our gaming services (collectively, the "Services").

This Policy applies to all users of ph369 Services, including registered members, prospective members who visit our website, and individuals who contact our customer support. It is part of our broader commitment to compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and applicable international data protection standards.

By accessing or using ph369 Services, you acknowledge that you have read and understood this Privacy Policy, and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of ph369 Services immediately.

This Policy should be read alongside our Terms and Conditions, which together govern your use of ph369 Services. In the event of any inconsistency between this Policy and the Terms and Conditions on privacy-related matters, this Policy shall prevail.

2. Information We Collect

ph369 collects personal information through multiple channels and for various legitimate purposes associated with the delivery of online gaming services. The categories of information we collect are described below.

2.1 Information You Provide Directly

When you register for a ph369 account or interact with our Services, you voluntarily provide us with information such as:

• Identity Data: Full legal name, date of birth, gender, and nationality as required for Know Your Customer (KYC) verification
• Contact Data: Email address, mobile phone number (for SMS verification and communications), and residential address
• Account Data: Username, password (stored in encrypted form), security questions, and account preferences
• Financial Data: Payment method details, GCash or PayMaya account references, bank account information, and transaction records. Note that full card numbers are processed by our secure payment partners and are not stored directly on ph369 servers
• Verification Documents: Copies of government-issued identification (such as Philippine Passport, Driver's License, SSS/GSIS ID, or PhilSys National ID), proof of address documents, and other identity verification materials
• Communications: Content of messages you send to our customer support team, feedback forms, and any other written communications with ph369
• Responsible Gaming Data: Self-imposed limits, self-exclusion requests, and other responsible gaming preferences you configure through your account

2.2 Information Collected Automatically

When you access ph369 Services, we automatically collect certain technical and behavioral data, including:

• Device and Technical Data: IP address, device type, operating system, browser type and version, device identifiers, screen resolution, and language settings
• Usage and Gaming Data: Pages visited, time spent on pages, game sessions played, bets placed, game outcomes, bonus usage, and navigation patterns within our platform
• Location Data: General geographic location derived from your IP address, used for fraud detection and compliance purposes
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar technologies as described in Section 8 of this Policy
• Log Data: Server logs including access times, error logs, and system activity records generated during your use of ph369 Services

2.3 Information from Third Parties

ph369 may receive personal information about you from third-party sources, including:

• Identity verification and KYC service providers who assist in confirming your identity
• Payment processors who provide transaction confirmation and fraud signals
• Marketing analytics partners who provide aggregated audience insights
• Regulatory authorities and law enforcement agencies pursuant to lawful requests
• Credit reference agencies or fraud prevention organizations where legally permitted

3. How We Use Your Information

ph369 processes your personal data only for lawful, specified, and legitimate purposes. The following table summarizes our key processing activities and their legal bases:

ph369 will not use your personal data for purposes that are incompatible with the original purposes for which it was collected, except where required by law or where you have given explicit consent.

4. Sharing and Disclosure of Personal Data

ph369 respects the confidentiality of your personal information and does not sell your personal data to third parties. We share your data only in the following circumstances and with the following categories of recipients:

4.1 Service Providers and Processors

We engage trusted third-party service providers to assist in delivering our Services. These providers act as data processors on our behalf, processing data only according to our documented instructions and under contractual data protection obligations. Categories of service providers include payment processors (GCash/PayMaya integration partners, banking partners), identity verification services, cloud hosting and infrastructure providers, customer support software providers, fraud detection and security services, and analytics platform providers.

4.2 Regulatory and Legal Disclosure

ph369 may disclose your personal data to government agencies, regulatory bodies, law enforcement authorities, and courts when:

• Required to do so by Philippine law, including reporting obligations under the Anti-Money Laundering Act (AMLA) and its amendments
• Responding to a valid legal process such as a court order, subpoena, or regulatory demand
• Necessary to protect the rights, property, or safety of ph369, its users, or the public
• Investigating suspected fraud, cheating, or other violations of our Terms and Conditions

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or other business transfer involving ph369, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and any significant changes to how your data will be processed as a result.

4.4 Aggregated and Anonymized Data

ph369 may share aggregated, anonymized, or de-identified data (data from which all personal identifiers have been removed) with partners, researchers, or for other purposes. Such data cannot reasonably be used to identify you and is not subject to the same restrictions as personal data.

5. Data Retention

ph369 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, to provide our Services, and to comply with our legal and regulatory obligations. Our general retention principles are as follows:

• Active Account Data: Retained for the duration of your relationship with ph369 and your account remains active
• Transaction and Financial Records: Retained for a minimum of five (5) years following the relevant transaction, as required by Philippine anti-money laundering regulations and tax laws
• KYC and Verification Documents: Retained for a minimum of five (5) years after account closure or the end of the relevant transaction relationship
• Responsible Gaming Records: Self-exclusion records and related data are retained for the duration of the exclusion period and at least five (5) years thereafter to prevent re-registration in breach of exclusion
• Marketing Data: Retained until you withdraw consent or object to processing, plus a reasonable period to process the request
• Technical Logs: Generally retained for ninety (90) days to two (2) years depending on the type of log and its security relevance
• Closed Account Data: Core account data is retained for five (5) years after account closure to satisfy legal, regulatory, and dispute resolution requirements, after which it is securely deleted or anonymized

When personal data is no longer required for any legitimate purpose, ph369 will securely delete, destroy, or anonymize it in accordance with our internal data disposal procedures.

6. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ph369:

• Right to be Informed: You have the right to be informed about how your personal data is collected, processed, and used. This Privacy Policy fulfills that obligation.
• Right to Access: You may request a copy of the personal data we hold about you, information about how it is processed, and details of any third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You may update basic account information directly through your account settings.
• Right to Erasure (Right to be Forgotten): In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to our overriding legal and regulatory retention obligations.
• Right to Data Portability: You may request a structured, commonly used, machine-readable copy of personal data you have provided to ph369, where technically feasible and legally applicable.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our ability to demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details provided in Section 11 of this Policy. We will respond to all verified requests within thirty (30) calendar days. We may require you to verify your identity before processing your request.

7. Data Security

ph369 employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• Encryption: All data transmitted between your device and ph369 servers is protected using Transport Layer Security (TLS) 1.2 or higher. Sensitive stored data including passwords and financial information is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within ph369 is strictly controlled on a need-to-know basis. All staff with data access are subject to confidentiality obligations and undergo regular security training.
• Infrastructure Security: ph369 hosting infrastructure is protected by firewalls, intrusion detection systems, and regular security audits. We maintain separate environments for development and production to minimize risk.
• Fraud Monitoring: Automated systems continuously monitor account activity for indicators of unauthorized access, suspicious transactions, and other security threats.
• Incident Response: ph369 maintains a formal data breach incident response plan. In the event of a security breach that poses a risk to your rights and freedoms, we will notify you and the National Privacy Commission as required by law.
• Vendor Security: Third-party service providers are assessed for security compliance before engagement and are contractually required to maintain appropriate security standards.

While we implement robust security measures, no method of internet transmission or electronic storage is completely secure. We encourage you to protect your account by using a strong, unique password and enabling any available two-factor authentication options. Never share your ph369 login credentials with anyone.

8. Cookies and Tracking Technologies

ph369 uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver relevant content. The types of cookies we use include:

• Essential Cookies: Strictly necessary for the operation of ph369 Services, including session management, authentication, and security functions. These cannot be disabled without affecting core functionality.
• Functional Cookies: Remember your preferences such as language settings, account display preferences, and responsible gaming configurations to provide a personalized experience.
• Analytics Cookies: Collect anonymized information about how visitors use our platform, helping us identify popular features, diagnose technical issues, and improve overall performance.
• Security Cookies: Used for fraud detection and security monitoring purposes to protect both ph369 and its users.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies may affect the functionality and personalization of your ph369 experience. Essential cookies cannot be disabled as they are required for our Services to operate correctly.

9. Children's Privacy

ph369 gaming Services are strictly restricted to individuals aged twenty-one (21) years and above in accordance with Philippine gaming regulations. ph369 does not knowingly collect personal data from minors or individuals under the age of 21. Our registration process includes mandatory age verification steps, and we reserve the right to request documentary proof of age at any time.

If we become aware that we have inadvertently collected personal data from an individual under the age of 21, we will take immediate steps to delete that data, close the relevant account, and void any associated transactions. If you are a parent or guardian and believe your child may have accessed ph369 Services, please contact us immediately using the details in Section 11.

10. Changes to This Privacy Policy

ph369 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable laws, or business operations. When we make material changes to this Policy, we will:

• Update the "Last Updated" date prominently at the top of this page
• Post a notice on the ph369 homepage or platform for a reasonable period
• Send an email notification to the address associated with your registered account for significant changes

Your continued use of ph369 Services following notification of changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal information. If you disagree with material changes to this Policy, you may close your account and cease using ph369 Services.

11. Contact and Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact ph369's Data Protection Officer:

• Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Subject Rights" in your subject line for faster routing
• Live Chat: Available 24/7 through your account dashboard for general privacy inquiries
• Response Time: We aim to acknowledge all privacy requests within seventy-two (72) hours and resolve them within thirty (30) calendar days

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.