ph366 Privacy Policy

ph366 operates the online gaming platform accessible at ph366.biz and is committed to protecting the personal data and privacy of all registered players and visitors. This Privacy Policy ("Policy") sets out the basis on which ph366 collects, processes, stores, discloses, and otherwise handles personal data provided by you or collected in connection with your use of the ph366 platform.

This Policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations, which govern the processing of personal information in the Philippines. As a Filipino-first platform, ph366 treats compliance with Philippine data protection law as a baseline minimum, not merely a compliance exercise.

By registering for a ph366 Account, accessing the ph366 platform, or otherwise providing your personal data to ph366, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree to this Policy, please discontinue your use of the ph366 platform and contact Support to request Account closure.

For the purposes of this Policy and applicable Philippine data protection law, the data controller responsible for your personal data is:

ph366 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the Data Privacy Act of 2012. To contact the ph366 DPO, email [email protected] with the subject line "Data Protection Officer Enquiry."

ph366 collects the following categories of personal data from players and platform visitors:

ph366 does not intentionally collect sensitive personal information as defined under the Data Privacy Act of 2012 (such as health information, religious beliefs, or political opinions) except where strictly required by law or regulatory obligation.

ph366 collects personal data through the following methods:

• Direct provision by you: When you register a ph366 Account, complete identity verification (KYC), make deposits or withdrawal requests, contact ph366 Support, or respond to surveys and promotions.
• Automated collection: When you access the ph366 platform, our servers automatically record Technical Data and Usage Data including your IP address, device information, session activity, and gameplay data.
• Payment processors: When you make deposits or withdrawals via GCash, Maya, BPI, BDO, Metrobank, or card providers, ph366 receives transaction confirmation data from these processors to reconcile your Account balance.
• Identity verification partners: When KYC verification is required, ph366 may use regulated third-party identity verification services to assist in verifying the authenticity of documents you submit.
• Cookies and tracking technologies: ph366 uses cookies and similar technologies as described in Section 10 of this Policy.

ph366 processes your personal data only where a clear legal basis exists. The following table sets out each processing purpose and the corresponding legal basis under the Data Privacy Act of 2012:

ph366 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. ph366 may share your personal data with carefully selected third parties strictly for the purposes of operating the ph366 platform, as follows:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, Visa/Mastercard network processors — for the purpose of processing your deposits and withdrawals. These providers receive only the minimum financial data required to complete the transaction.
• Game content providers: Pragmatic Play, Evolution Gaming, PGSoft, Jili, Hacksaw Gaming, and other licensed studios — your anonymised session data may be shared for game integrity and technical support purposes.
• Identity verification services: Regulated KYC and document verification providers — for the purpose of verifying your identity documents during the KYC process.
• Anti-money laundering compliance services: Regulated screening providers for the purpose of meeting ph366's obligations under Philippine anti-money laundering legislation.
• IT and hosting providers: Cloud infrastructure and security service providers who process data solely on ph366's instructions under binding data processing agreements.
• Legal and regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), law enforcement agencies, and courts where ph366 is required or permitted by applicable law to disclose data.

All third-party service providers with whom ph366 shares personal data are subject to binding contractual obligations requiring them to maintain appropriate security standards and process data only as directed by ph366 and for the specified purpose.

Some of ph366's third-party service providers — particularly game content providers and certain cloud infrastructure partners — are located outside the Philippines. Where ph366 transfers your personal data outside the Philippines, ph366 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012 and the regulations of the National Privacy Commission (NPC), including:

• Binding contractual clauses with the receiving party that impose data protection obligations consistent with Philippine standards.
• Use of service providers located in jurisdictions that have been assessed to provide an adequate level of data protection.
• Where required, obtaining your explicit consent for international transfers before they occur.

You may request details of the specific safeguards in place for any international data transfer by contacting ph366's Data Protection Officer at [email protected].

ph366 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements. The following retention periods apply:

When data is no longer required, ph366 securely destroys or anonymises it in accordance with industry-standard secure deletion practices.

ph366 implements a comprehensive programme of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and ph366's servers, ensuring that login credentials, financial data, and personal information cannot be intercepted in transit.
• Encryption at rest for sensitive stored data including identity documents, financial records, and password hashes. Passwords are stored using industry-standard one-way cryptographic hashing — ph366 cannot read your actual password.
• Access controls restricting access to personal data to ph366 staff and contractors who have a specific need to access it for their job function, governed by role-based access permissions and monitored access logs.
• Two-factor authentication available for all player accounts and enforced for all ph366 internal systems accessed by staff.
• Regular security assessments including vulnerability scanning and security monitoring of the ph366 platform infrastructure.
• Data breach response procedures that comply with the notification requirements of the Data Privacy Act of 2012, including notifying the National Privacy Commission and affected players within the required timeframes in the event of a qualifying data breach.

ph366 uses cookies and similar tracking technologies on the ph366 platform. A cookie is a small text file placed on your device by a website to remember information about your session. ph366 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the ph366 platform to function. They maintain your login session, remember your Account state between pages, and enable core security features such as CSRF protection. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, game display settings, and notification preferences — to personalise your ph366 experience across sessions.
• Analytics Cookies: ph366 uses analytics cookies to understand how players use the platform — which games are most popular, where players navigate, and how platform performance can be improved. Analytics data is processed in aggregated, non-personally-identifiable form where possible.
• Marketing and Targeting Cookies: Where you have provided consent, ph366 may use cookies to deliver relevant promotional content and measure the effectiveness of ph366's marketing activity. You may withdraw consent for marketing cookies at any time through your browser settings.

You can control and delete cookies through your browser settings. Disabling certain categories of cookies may affect the functionality of the ph366 platform. Strictly Necessary Cookies are required for the platform to operate and cannot be disabled by ph366 on your behalf.

As a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by ph366:

To exercise any of the above rights, contact ph366's Data Protection Officer at [email protected] with the subject line "Data Rights Request." ph366 will respond to all valid requests within 30 days. Where a request is complex or ph366 receives multiple requests, this period may be extended by a further 60 days with prior written notice to you.

ph366 is strictly an adult gaming platform and does not knowingly collect personal data from individuals under 21 years of age, which is the minimum legal age for online gaming participation in the Philippines as regulated by PAGCOR.

If ph366 becomes aware that it has inadvertently collected personal data from an individual under the age of 21 without appropriate age verification, ph366 will immediately close the relevant Account, return any deposited funds in accordance with applicable regulations, and securely delete all personal data associated with the Account.

If you are a parent or guardian and believe that your child under the age of 21 may have accessed the ph366 platform, please contact ph366 Support immediately at [email protected]. ph366 strongly recommends the use of parental control software on devices shared with or accessible to minors.

ph366 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, special events, and VIP offers where you have opted in to receiving marketing communications during registration or subsequently through your Account settings.

You have the right to opt out of all marketing communications from ph366 at any time through any of the following methods:

• Clicking the unsubscribe link included in any ph366 marketing email.
• Updating your communication preferences in the Notifications section of your ph366 Account settings.
• Contacting ph366 Support via live chat or email and requesting removal from all marketing lists.

Opting out of marketing communications will not affect the receipt of service-related communications from ph366, such as transaction confirmations, Account security alerts, KYC request notices, or important policy updates, which are sent on the basis of your Account relationship with ph366 rather than your marketing consent.

ph366 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, ph366's data processing practices, or platform features. The following procedure applies to material changes:

1. ph366 will update the "Last Updated" date at the top of this Policy whenever material changes are made.
2. Registered players will be notified of material changes via the email address registered to their ph366 Account, with at least 7 days' notice before the changes take effect where reasonably practicable.
3. Where a change to this Policy requires your consent under applicable law, ph366 will obtain that consent from you before the change is implemented.
4. Continued use of the ph366 platform following the effective date of a revised Policy constitutes acceptance of the revised Policy, except where specific consent is required by law.

ph366 recommends reviewing this Privacy Policy periodically to stay informed of how your data is being protected and used.

For any questions, concerns, or requests related to this Privacy Policy or ph366's handling of your personal data, please contact ph366's Data Protection Officer through any of the following channels:

If you are not satisfied with ph366's response to your data protection enquiry, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent government body responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available on the NPC's official website.