Privacy Policy — ph365.org

ph365.org collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected and processed. The categories of personal data we collect include:

We do not collect sensitive personal information (as defined under RA 10173) unless strictly required for legal compliance purposes, in which case we will obtain your explicit consent.

ph365.org collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Technical and usage data collected automatically when you access and use the ph365.org platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, and banking partners; fraud prevention data from security service providers; and publicly available information where relevant to compliance obligations.

ph365.org processes your personal data for the following purposes:

• Account management: Creating, maintaining, and managing your ph365.org player account, including authentication and access control;
• Identity and age verification: Verifying that you meet the 21+ age requirement and confirming your identity in compliance with KYC obligations;
• Transaction processing: Processing deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card in Philippine Peso (₱);
• Legal and regulatory compliance: Fulfilling obligations under the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and any applicable PAGCOR regulations;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, cheating, money laundering, and other prohibited conduct;
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and administering self-exclusion and deposit limit tools;
• Platform improvement: Analysing usage data to improve the ph365.org platform, game offerings, and user experience;
• Marketing communications: Sending you promotional offers and updates about ph365.org, where you have consented to receive such communications. You may opt out at any time.

Under the Data Privacy Act of 2012, ph365.org processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (i.e., providing the ph365.org gaming platform and associated services);
• Legal obligation: Processing required to comply with applicable Philippine laws, including AMLA, tax regulations, and PAGCOR requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ph365.org does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya/Maya, and Philippine banking partners, for the purpose of processing your financial transactions;
• KYC and identity verification providers: Third-party services that assist us in verifying your identity and age in compliance with regulatory requirements;
• Fraud prevention and security providers: Services that help us detect and prevent fraudulent activity on the platform;
• Regulatory authorities: The Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and other competent Philippine authorities, where required by law or court order;
• Law enforcement: Philippine law enforcement agencies, where required by law or where disclosure is necessary to protect the rights, property, or safety of ph365.org, our players, or the public;
• Professional advisers: Lawyers, auditors, and accountants, subject to professional confidentiality obligations.

All third-party service providers who process personal data on our behalf are required to implement appropriate data protection measures and are prohibited from using your data for any purpose other than the specific service they provide to ph365.org.

ph365.org retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

Upon expiry of the applicable retention period, ph365.org will securely delete or anonymise your personal data in accordance with NPC-approved disposal methods. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes as it can no longer be linked to any individual.

ph365.org implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and ph365.org is encrypted using SSL/TLS protocols. Sensitive data stored in our systems is encrypted at rest using industry-standard algorithms;
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo regular data privacy training and are bound by confidentiality obligations;
• Firewalls and intrusion detection: Our infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems;
• Regular security audits: ph365.org conducts periodic security assessments, penetration testing, and vulnerability scans to identify and address potential weaknesses;
• Incident response: We maintain a documented data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, ph365.org will notify the NPC within 72 hours and affected individuals without undue delay, in accordance with RA 10173.

While ph365.org takes all reasonable steps to protect your data, no system is completely immune to security risks. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph365.org:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed, which is the primary purpose of this Privacy Policy;
• Right of access: You have the right to request a copy of the personal data ph365.org holds about you, along with information about how it is being processed;
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update basic account information directly through your account settings;
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests;
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 13 of this Policy. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

ph365.org uses cookies and similar tracking technologies to enhance your experience on our platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the ph365.org platform. ph365.org does not use third-party advertising or tracking cookies.

ph365.org is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will immediately delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on ph365.org or provided us with personal data, please contact our Data Protection Officer immediately using the contact details in Section 13. We take underage access extremely seriously and will act promptly on all such reports.

ph365.org reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by posting a prominent notice on the ph365.org platform or by sending a notification to your registered email address.

The effective date of the most recent version of this Privacy Policy is indicated at the top of this page. We encourage you to review this Policy periodically to stay informed about how ph365.org protects your personal data. Your continued use of the platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes.

If you do not agree with any changes to this Privacy Policy, you should cease using ph365.org and may request account closure by contacting our support team.

ph365.org has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.

For responsible gaming concerns, self-exclusion requests, or account closure, please visit our Responsible Gaming page or contact our support team directly.