ph367 Privacy Policy

Effective Date: January 1, 2026

1. Introduction and Scope

This Privacy Policy governs the collection, processing, storage, use, disclosure, and protection of personal data provided by users ("You," "User," or "Player") of the ph367 online gaming platform ("Platform," "Service," "We," "Us," or "Our"). By registering for an account, accessing the ph367 website at https://ph367.cam, or using any ph367 services, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy.

ph367 operates in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and all applicable circulars, orders, and opinions issued by the National Privacy Commission (NPC) of the Philippines. We are committed to implementing appropriate technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

This Privacy Policy applies to all personal data collected through our website, mobile applications, customer support channels, social media platforms, and any other touchpoints where ph367 interacts with users. It supplements but does not supersede the ph367 Terms and Conditions, which govern your use of the platform.

2. Data Controller Information

ph367 acts as the data controller responsible for the collection and processing of your personal information. For purposes of data protection compliance, our designated Data Protection Officer (DPO) oversees privacy practices and serves as the primary point of contact for data subject requests, privacy inquiries, and complaints. You may contact our DPO at:

• Email: [email protected]
• Subject Line: Attention: Data Protection Officer
• Response Time: We aim to respond to all privacy-related inquiries within seven (7) business days

3. Categories of Personal Data Collected

ph367 collects various categories of personal data necessary to provide gaming services, comply with legal obligations, prevent fraud, and enhance user experience. The types of personal data we collect include:

3.1 Account Registration Information

• Full legal name (as it appears on government-issued identification)
• Date of birth (to verify legal age requirement of 21 years or older)
• Gender (optional, for personalization purposes)
• Residential address (street address, barangay, city/municipality, province, postal code)
• Email address (primary contact method for account notifications)
• Mobile phone number (for SMS verification, two-factor authentication, and customer support)
• Username and encrypted password

3.2 Identity Verification Documents (KYC/AML Compliance)

• Government-issued photo identification (UMID, Philippine Passport, Driver's License, PhilSys ID, Voter's ID, or other valid IDs)
• Proof of address documents (utility bills, bank statements, government correspondence dated within 90 days)
• Selfie photograph holding your identification document (for enhanced verification)
• Source of funds documentation (for high-value transactions exceeding regulatory thresholds)

3.3 Financial and Transaction Data

• Payment method information (bank account numbers, e-wallet account names, credit/debit card details with PCI DSS-compliant tokenization)
• Deposit and withdrawal transaction history (amounts, dates, times, payment channels)
• Gaming activity records (bets placed, games played, winnings, losses, bonuses claimed)
• Account balance and transaction ledger

3.4 Technical and Usage Data

• IP address and geolocation data (to verify Philippine jurisdiction and prevent unauthorized access)
• Device information (device type, operating system, browser type and version, screen resolution)
• Cookies and tracking technologies (session cookies, preference cookies, analytics cookies)
• Log files (access times, pages viewed, clickstream data, referral URLs)
• Platform interaction data (game preferences, time spent on platform, navigation patterns)

3.5 Communications and Support Data

• Customer support inquiries and correspondence (live chat transcripts, email exchanges, phone call recordings)
• Survey responses and feedback submissions
• Marketing preferences and communication opt-ins/opt-outs

4. Legal Bases for Processing Personal Data

ph367 processes your personal data only when we have a valid legal basis under the Data Privacy Act of 2012. The primary legal grounds for our data processing activities include:

4.1 Consent

You provide explicit, informed, and freely given consent when you create a ph367 account and accept this Privacy Policy. You may withdraw consent at any time by contacting our Data Protection Officer, subject to legal and contractual restrictions.

4.2 Contractual Necessity

Processing is necessary to fulfill our contractual obligations to you under the ph367 Terms and Conditions, including account creation, transaction processing, game provision, payment settlement, and customer support.

4.3 Legal Obligation

We are legally required to process certain personal data to comply with Philippine laws and regulations, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, tax reporting under the Bureau of Internal Revenue (BIR) regulations, and age verification mandates.

4.4 Legitimate Interests

ph367 processes personal data when necessary for legitimate business interests, provided such processing does not override your fundamental rights and freedoms. Legitimate interests include fraud prevention, network and information security, internal business analytics, product improvement, and marketing communications (subject to opt-out rights).

5. How We Use Your Personal Data

ph367 uses your personal information for the following specific purposes:

• Account Management: Creating and maintaining your ph367 account, authenticating your identity at ph367 Login, verifying eligibility (age 21+), and managing account security.
• Transaction Processing: Processing deposits, withdrawals, and in-game transactions; reconciling financial records; issuing invoices and transaction confirmations.
• Game Provision: Providing access to slots, live casino, sports betting, bingo, and fishing games; tracking gameplay history; calculating winnings and bonuses; awarding rewards and VIP benefits.
• Customer Support: Responding to inquiries, resolving disputes, investigating complaints, providing technical assistance, and improving service quality.
• Regulatory Compliance: Fulfilling Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations; reporting suspicious transactions to the Anti-Money Laundering Council (AMLC); maintaining records as required by PAGCOR; cooperating with lawful government requests.
• Fraud Prevention and Security: Detecting and preventing fraud, collusion, bonus abuse, money laundering, identity theft, and unauthorized account access; monitoring for suspicious activity; enforcing Terms and Conditions.
• Marketing and Promotions: Sending promotional offers, bonus notifications, loyalty rewards, and personalized recommendations (subject to your marketing preferences and opt-out rights).
• Platform Improvement: Conducting analytics to understand user behavior; improving game selection and platform features; testing new functionalities; optimizing user experience.
• Legal Protection: Establishing, exercising, or defending legal claims; complying with court orders and legal processes; protecting ph367's rights and property.

6. Data Sharing and Disclosure

ph367 does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under strict confidentiality obligations:

6.1 Service Providers and Business Partners

We share personal data with trusted third-party service providers who perform functions on our behalf, including payment processors (GCash, PayMaya, banks), game providers (Pragmatic Play, Evolution Gaming, PG Soft), identity verification services, cloud hosting providers, customer support platforms, and marketing automation tools. These service providers are contractually obligated to protect your data and use it only for the specific purposes for which we engage them.

6.2 Regulatory and Law Enforcement Authorities

ph367 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), Philippine National Police (PNP), National Bureau of Investigation (NBI), and other government agencies when required by law or in response to valid legal processes such as court orders, subpoenas, or search warrants.

6.3 Professional Advisors

We may share data with lawyers, accountants, auditors, and other professional advisors who assist with legal, financial, tax, and compliance matters under attorney-client privilege or professional confidentiality obligations.

6.4 Corporate Transactions

In the event of a merger, acquisition, sale of assets, reorganization, or bankruptcy, your personal data may be transferred to the acquiring or successor entity, subject to continued protection under this Privacy Policy or an equivalent policy.

6.5 Consent-Based Disclosures

With your explicit consent, we may share personal data with third parties for specific purposes not covered above, such as co-branded promotions or third-party loyalty programs.

7. International Data Transfers

ph367 primarily stores and processes data within the Philippines and Asia-Pacific data centers. However, some service providers may be located outside the Philippines, including in Singapore, Japan, the European Union, or the United States. When we transfer personal data internationally, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the National Privacy Commission, binding corporate rules, or certification under recognized data protection frameworks. You consent to such transfers by using ph367 services.

8. Data Retention

ph367 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your account's active status and for a reasonable period thereafter to address potential disputes or claims.
• Transaction Records: Financial and gaming transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine tax and anti-money laundering laws.
• KYC/AML Documents: Identity verification documents are retained for five (5) years after the termination or closure of your account.
• Marketing Communications: We retain marketing preference data until you withdraw consent or request deletion.
• Closed Accounts: After account closure, personal data may be anonymized or pseudonymized for statistical and analytical purposes, or deleted in accordance with applicable law.

You may request earlier deletion of your data by contacting our Data Protection Officer, subject to legal, regulatory, and legitimate business requirements.

9. Data Security Measures

ph367 implements industry-standard technical, organizational, and physical security measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and ph367 servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized ph367 employees and service providers on a need-to-know basis, with role-based access controls and multi-factor authentication.
• Network Security: Firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and regular penetration testing protect our infrastructure from cyber threats.
• Data Minimization: We collect only the personal data necessary for specified purposes and delete or anonymize data when no longer needed.
• Employee Training: All ph367 staff undergo mandatory data privacy and security training and are bound by confidentiality agreements.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and the National Privacy Commission within 72 hours of discovering a qualifying data breach, as required by law.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any unauthorized use of your account.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data. To exercise these rights, please contact our Data Protection Officer at [email protected] with "Data Subject Request" in the subject line:

10.1 Right to Information

You have the right to be informed about the collection and processing of your personal data, including the purposes, legal bases, recipients, retention periods, and your rights. This Privacy Policy serves as the primary notice.

10.2 Right of Access

You may request a copy of the personal data we hold about you, including details on how it is processed. We will provide the information in a commonly used electronic format within fifteen (15) days of your request.

10.3 Right to Rectification

If your personal data is inaccurate, incomplete, or outdated, you have the right to request correction or update. You may also update certain information directly in your account settings.

10.4 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data when: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; (c) the data was unlawfully processed; or (d) deletion is required by law. This right is subject to legal, regulatory, and contractual retention requirements (e.g., anti-money laundering and tax compliance obligations).

10.5 Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time by clicking "unsubscribe" in promotional emails or updating your communication preferences in account settings.

10.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible.

10.7 Right to Lodge a Complaint

If you believe ph367 has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines through their website at www.privacy.gov.ph or by visiting their office at 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City, Metro Manila.

11. Cookies and Tracking Technologies

ph367 uses cookies, web beacons, pixels, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content and advertising. Cookies are small text files stored on your device when you visit our website. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality. For detailed information on the cookies we use and their purposes, please refer to our Cookie Policy available in your account settings.

12. Children's Privacy

ph367 services are strictly intended for individuals 21 years of age or older. We do not knowingly collect personal data from individuals under 21 years of age. If we discover that a minor has provided personal information without verified parental consent, we will immediately delete the account and associated data and refund any deposits (winnings will be forfeited). If you believe a minor has created an account, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

ph367 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes by posting a prominent notice on our website, sending an email to your registered address, or displaying a notification when you log in to your account. The "Effective Date" at the top of this policy indicates when it was last revised. Your continued use of ph367 services following the posting of changes constitutes your acceptance of the revised Privacy Policy.

14. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or ph367's data processing practices, or if you wish to exercise your data subject rights, please contact:

• Data Protection Officer
• Email: [email protected]
• Subject Line: Attention: Data Protection Officer
• Response Time: We commit to responding to all privacy-related inquiries within seven (7) business days

For general customer support inquiries, you may also reach us via live chat available 24/7 on the ph367 platform.