Privacy Policy

1. Who We Are

ph366 is an online casino and sports betting platform dedicated to Filipino players, operated in accordance with applicable gaming regulations. ph366 is committed to protecting the privacy and personal data of every player who registers and uses our services. This Privacy Policy is issued pursuant to the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations (IRR), and reflects our obligations as a personal information controller under Philippine law.

For the purposes of this Privacy Policy, "personal data" means any information that identifies or could reasonably be used to identify you as an individual, including your name, contact details, financial information, identity documents, and device or usage data generated through your interaction with the ph366 platform.

2. Personal Data We Collect

ph366 collects the following categories of personal data in the course of providing its services:

Registration & Identity Data:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Registered Philippine mobile number (+63 format)
• Email address
• Residential address
• Government-issued ID documents submitted for KYC verification (e.g., PhilSys, UMID, driver's licence, SSS card, passport)
• Selfie or liveness check images submitted during identity verification

Financial Data:

• GCash or Maya account reference numbers linked to your ph366 account
• Bank account details where bank transfer is used
• Deposit and withdrawal transaction history
• Cryptocurrency wallet addresses where USDT TRC20 transactions are used

Gameplay & Activity Data:

• Game session history, bet amounts, and game outcomes
• Sports betting selections and wager records
• Bonus and promotional activity
• Login timestamps and session durations

Technical & Device Data:

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Cookies and similar tracking technology data (see Section 6)

Communications Data:

• Records of customer support interactions via live chat or email
• Feedback, complaints, and dispute correspondence

3. How ph366 Uses Your Personal Data

ph366 uses your personal data for the following specific purposes:

• Account creation and management — to register your ph366 account, verify your identity, and maintain your account in accordance with these Terms
• Age and identity verification (KYC) — to confirm that you meet the 21+ age requirement and that your identity is genuine, as required by applicable gaming regulations
• Payment processing — to facilitate deposits and withdrawals via GCash, Maya, bank transfer, and other supported payment channels
• Game delivery and platform operation — to provide access to casino games, sports betting, bingo, and all other ph366 platform features
• Regulatory and legal compliance — to meet anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulatory obligations applicable to ph366
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security incidents
• Responsible gaming — to monitor player behaviour for signs of problem gambling and to enforce self-exclusion, deposit limits, and other responsible gaming tools
• Customer support — to respond to your enquiries, complaints, and account-related requests
• Platform improvement — to analyse aggregate usage patterns and improve ph366 products, features, and user experience
• Promotional communications — to send you information about ph366 promotions and offers where you have consented to receive such communications (opt-out available at any time via Account Settings)

4. Legal Basis for Processing

ph366 processes your personal data on one or more of the following lawful bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to perform the contract between you and ph366 (i.e., operating your account and delivering gaming services)
• Legal obligation — processing required to comply with KYC, AML, CTF, and gaming regulatory requirements applicable to ph366
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights
• Consent — processing for optional purposes such as marketing communications, where you have given explicit consent that can be withdrawn at any time

5. Data Sharing & Disclosure

ph366 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following circumstances:

• Payment processors — GCash, Maya, BPI, BDO, Metrobank, GrabPay, Coins.ph, and other payment partners, solely for the purpose of processing your transactions
• Identity verification providers — third-party KYC and AML screening providers engaged by ph366 to verify player identity and screen against regulatory watchlists
• Game content providers — where game software is supplied by a licensed third-party provider, aggregated gameplay data may be shared with that provider for RTP reporting and game integrity purposes
• Regulatory and law enforcement authorities — where disclosure is required by applicable Philippine law, court order, or lawful regulatory demand
• Professional advisers — legal, accounting, and compliance advisers engaged by ph366, subject to professional confidentiality obligations
• Business transfers — in the event of a merger, acquisition, or sale of ph366's business or assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections

All third-party processors engaged by ph366 are contractually required to process personal data only for specified purposes, to maintain appropriate security standards, and to comply with applicable data protection law.

6. Cookies & Similar Technologies

ph366 uses cookies and similar tracking technologies to operate and improve the platform. Cookies used by ph366 fall into the following categories:

• Strictly necessary cookies — required for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game lobby layout to personalise your ph366 experience
• Analytics cookies — collect aggregated, anonymised data about how players navigate the platform, used to identify usability improvements. No individual player is identified through analytics data.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using ph366, but may affect the availability of certain personalisation features.

7. Data Retention

ph366 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal and regulatory obligations. The following specific retention periods apply:

• Account and KYC data — retained for a minimum of 5 years following account closure, as required by AML regulations applicable to ph366
• Financial transaction records — retained for a minimum of 5 years following the date of each transaction
• Gameplay records — retained for 2 years following account closure, or longer where required for dispute resolution or regulatory compliance
• Customer support communications — retained for 3 years following the resolution of the relevant interaction
• Marketing consent records — retained until consent is withdrawn, plus 1 year for compliance audit purposes

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ph366's data disposal procedures.

8. Data Security

ph366 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and ph366 servers
• Encryption of personal data and financial information stored on ph366 systems
• Salted cryptographic hashing of account passwords — passwords are never stored in retrievable plain text
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Regular security assessments and penetration testing of ph366 platform infrastructure
• Two-factor authentication available for all player accounts (strongly recommended)

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph366 will notify the National Privacy Commission (NPC) and affected players in accordance with applicable breach notification requirements under the Data Privacy Act of 2012.

9. Your Data Protection Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph366:

• Right to be informed — to be told how your personal data is collected and used (fulfilled by this Privacy Policy)
• Right of access — to request a copy of the personal data ph366 holds about you
• Right to rectification — to request correction of inaccurate or incomplete personal data
• Right to erasure — to request deletion of your personal data, subject to legal and regulatory retention obligations
• Right to object — to object to processing of your personal data for marketing purposes or where processing is based on ph366's legitimate interests
• Right to data portability — to receive your personal data in a structured, machine-readable format where technically feasible
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated

To exercise any of these rights, please contact ph366 customer support. We will respond to verified requests within 15 business days. In some cases, additional identity verification may be required before processing your request.

10. Children and Minors

ph366 does not knowingly collect personal data from individuals under 21 years of age. The ph366 platform is strictly restricted to adults aged 21 and above, in compliance with applicable Philippine gaming law. Age verification is conducted through KYC document review as part of the account registration and activation process.

If ph366 becomes aware that personal data has been collected from a person under the minimum age, that account will be immediately suspended, all associated data will be deleted (subject to any legal obligations to retain records of the violation), and any funds on account will be handled in accordance with applicable regulatory requirements.

11. International Data Transfers

ph366 may transfer your personal data to third-party service providers located outside the Philippines where necessary to provide platform services — for example, cloud infrastructure providers or game content suppliers operating internationally. Any such transfers are conducted under appropriate safeguards, including data processing agreements that require the recipient to maintain data protection standards equivalent to those required by Philippine law.

By registering a ph366 account, you acknowledge and consent to the transfer of your personal data to jurisdictions outside the Philippines for the purposes described in this Privacy Policy, subject to the safeguards described above.

12. Changes to This Privacy Policy

ph366 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. Material changes will be communicated to registered players via email or in-platform notification at least 7 days prior to taking effect. The updated Privacy Policy will be published at ph366.bio/privacy-policy with a revised effective date. Your continued use of ph366 following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.