Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ph358 ("ph358", "we", "us", "our") collects, uses, discloses, stores, and protects the personal data of users ("Player", "you", "your") of the ph358 online gambling platform, accessible at ph358.vip and any associated mobile interfaces.

ph358 is committed to protecting the privacy of all players and to processing personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). ph358 is also subject to personal data obligations arising from its PAGCOR licence and applicable anti-money laundering regulations.

By registering on ph358 or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must not use the ph358 platform.

2. Data Controller

The data controller responsible for your personal data is ph358, the operator of ph358.vip. ph358 has appointed a Data Protection Officer ("DPO") as required under the Philippine Data Privacy Act. Contact details for the DPO are provided in Section 15 of this Policy.

ph358 is registered with the National Privacy Commission as a Personal Information Controller. Our personal data processing activities are conducted in accordance with the registration and notifications filed with the NPC.

3. Personal Data We Collect

ph358 collects the following categories of personal data:

4. How We Collect Personal Data

ph358 collects personal data through the following means:

• Direct Provision: Information you provide when registering, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the ph358 platform, including through cookies, web beacons, and server logs.
• Third-Party Sources: Identity verification data from licensed KYC/AML service providers; fraud screening data from anti-fraud vendors; payment verification data from GCash, PayMaya, BPI, BDO, and Metrobank.
• Regulatory Sources: Data received from PAGCOR or law enforcement authorities in the course of regulatory compliance or legal proceedings.

5. Purposes of Processing

ph358 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your ph358 account, including authentication and access control.
• Identity & Age Verification: Confirming that you are a real person, meet the 21+ age requirement, and are eligible to use the platform under Philippine law and PAGCOR regulations.
• Payment Processing: Facilitating deposits to and withdrawals from your ph358 account via GCash, PayMaya, and Philippine bank transfers.
• Service Delivery: Providing access to games, processing bets, crediting winnings, and delivering promotional offers.
• Regulatory Compliance: Meeting obligations under PAGCOR's licence conditions, the Anti-Money Laundering Act (AMLA), and the Philippine Data Privacy Act, including transaction monitoring and suspicious activity reporting.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct.
• Responsible Gaming: Monitoring for indicators of problem gambling, enforcing self-exclusion and limit settings, and complying with PAGCOR responsible gaming obligations.
• Customer Support: Responding to queries, resolving disputes, and administering complaints.
• Platform Improvement: Analysing platform usage to improve functionality, game selection, and user experience (using aggregated and anonymised data where possible).
• Marketing Communications: Sending promotional offers and updates where you have opted in. You may opt out at any time through your account settings.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act, ph358 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and ph358 (account management, payment processing, service delivery).
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, NPC registration requirements, and other applicable Philippine law.
• Legitimate Interest: Processing necessary for ph358's legitimate interests in fraud prevention, platform security, and business improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain cookies, where your explicit opt-in consent has been obtained. You may withdraw consent at any time.

7. Data Sharing and Disclosure

ph358 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:

• Game Providers: Technical identifiers (not full personal data) shared with certified game providers for session management and RNG integrity verification.
• Payment Processors: Financial data shared with GCash, PayMaya, BPI, BDO, Metrobank, and card processing networks to process transactions.
• KYC/AML Providers: Identity and document data shared with licensed identity verification and anti-money laundering screening services.
• PAGCOR: Transaction data, player records, and compliance reports as required by ph358's PAGCOR licence conditions.
• Law Enforcement & Regulatory Authorities: Personal data disclosed to Philippine law enforcement, the AMLC (Anti-Money Laundering Council), or courts where required by law or valid legal process.
• Professional Advisors: Legal, audit, and compliance advisors under strict confidentiality obligations.

All third-party service providers engaged by ph358 are subject to data processing agreements that restrict their use of your personal data to the specific purpose for which it was shared and require them to implement appropriate security measures.

8. Cookies and Tracking Technologies

ph358 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for the platform to function, including session authentication, security tokens, and game state persistence. These cannot be disabled.
• Performance Cookies: Collect aggregated, anonymised data about platform usage patterns to help ph358 improve functionality and identify technical issues.
• Functional Cookies: Remember your language, currency, and display preferences across sessions.
• Analytics Cookies: Used to understand how players navigate the platform, which games are most accessed, and where usability friction occurs. These use anonymised data only.

ph358 does not use third-party advertising cookies or behavioural tracking for cross-site advertising purposes. You may control non-essential cookies through your browser settings; however, disabling strictly necessary cookies will impair platform functionality.

9. Data Retention

ph358 retains personal data for the following periods:

• Account and Identity Data: For the duration of your account, plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations.
• Financial Transaction Records: Minimum of five (5) years from the date of each transaction, as required by Philippine financial record-keeping laws.
• KYC Documents: Retained for the duration of the regulatory obligation, typically five to ten years after the relevant activity, per AMLA requirements.
• Gaming Logs: Minimum of three (3) years, as required by PAGCOR licence conditions.
• Customer Support Records: Three (3) years from the closure of the support interaction.
• Marketing Consent Records: For the duration of the consent, plus three (3) years to demonstrate compliance.

At the end of the applicable retention period, ph358 securely deletes or anonymises personal data using industry-standard deletion procedures.

10. Security Measures

ph358 implements a comprehensive set of technical and organisational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph358 servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
• Role-based access controls ensuring ph358 staff access only the personal data necessary for their specific functions
• Multi-factor authentication required for all ph358 staff accessing production systems
• Regular penetration testing and vulnerability assessments by independent security firms
• 24/7 security monitoring and automated intrusion detection
• Data centre physical security controls including access logging, CCTV, and biometric authentication
• Regular staff training on data privacy obligations and security practices

11. Your Data Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by ph358:

To exercise any of the above rights, contact ph358's Data Protection Officer using the details in Section 15. ph358 will respond to verified requests within fifteen (15) business days as required by the DPA.

12. Minors

ph358 strictly prohibits use of the platform by persons under 21 years of age. We do not knowingly collect personal data from individuals under 21. If ph358 becomes aware that personal data has been collected from a person under 21, the account will be closed immediately, data will be securely deleted (except to the extent required by law to report the incident to PAGCOR), and any deposits will be refunded to the original payment method.

13. Cross-Border Data Transfers

ph358 primarily processes and stores personal data within the Philippines. Where personal data is transferred to or processed by parties outside the Philippines (for example, international game providers or security vendors), ph358 ensures that such transfers comply with the requirements of the Philippine Data Privacy Act, including that the receiving party implements equivalent data protection standards.

ph358 employs contractual safeguards including data processing agreements and, where applicable, standard contractual clauses to protect personal data transferred cross-border. You may request information about cross-border transfers affecting your personal data by contacting our DPO.

14. Amendments to This Policy

ph358 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to registered players via email to the address on file or via an in-platform notification at least seven (7) days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the ph358 platform after the effective date of a revised Policy constitutes your acknowledgement of and agreement to the updated terms.