ph358 Privacy Policy

1. Who We Are

ph358 ("we," "us," or "the Company") operates the online gaming platform accessible at https://ph358.app (the "Platform"). ph358 is the data controller responsible for the personal data of players and visitors collected through the Platform. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

This Privacy Policy applies to all personal data collected from players, registered account holders, and visitors to the ph358 Platform. It should be read together with the ph358 Terms & Conditions.

2. Personal Data We Collect

ph358 collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Philippine mobile number and email address
• Username and encrypted password
• Residential address

2.2 KYC & Verification Data

• Copies of government-issued photo identification (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, PRC ID, voter's ID)
• Selfie photographs submitted for identity verification
• Proof of payment method ownership (e.g., GCash or PayMaya account screenshots)

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• GCash or PayMaya account reference numbers (we do not store full account credentials)
• Bank account details provided for withdrawal processing (bank name, account name, account number)
• Bonus and promotional credit history

2.4 Gaming Activity Data

• Game session logs, including games played, bets placed, wins, losses, and session duration
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

2.5 Technical & Usage Data

• IP address and approximate geolocation (country/region level)
• Device type, operating system, and browser information
• Pages visited, features used, and time spent on the Platform
• Session cookies and authentication tokens

2.6 Communications Data

• Records of live chat, email, and support ticket communications with ph358 customer support
• Responses to surveys or feedback forms (where voluntarily submitted)

3. How We Collect Your Data

ph358 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically — through cookies, server logs, and analytics tools when you access and use the Platform.
• From third parties — from payment processors (e.g., GCash, PayMaya, banks) to confirm transaction status; from identity verification service providers during KYC; and from game studios to record gaming activity.

4. How We Use Your Personal Data

ph358 uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Registration & identity data
Age and identity verification (KYC)	KYC & verification data
Processing deposits and withdrawals	Financial & transaction data
Providing gaming services and recording activity	Gaming activity data
Fraud prevention and security monitoring	Technical, financial, and identity data
Anti-money laundering (AML) compliance	Identity, financial, and transaction data
Responsible gaming monitoring and intervention	Gaming activity and responsible gaming data
Customer support and dispute resolution	Communications and account data
Platform improvement and analytics	Technical & usage data (aggregated/anonymized)
Promotional communications (with consent)	Contact details and gaming preferences

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, ph358 processes your personal data on the following legal bases:

• Contractual necessity — processing required to register your account, provide gaming services, and process financial transactions.
• Legal obligation — processing required to comply with Philippine law, including KYC/AML obligations under the Anti-Money Laundering Act and age verification requirements under gaming regulations.
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent — processing for optional promotional communications. You may withdraw consent at any time by contacting ph358 support or updating your account notification preferences.

6. Sharing Your Personal Data

ph358 does not sell or rent your personal data. We share your data only in the following limited circumstances:

6.1 Service Providers

ph358 engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, Philippine banks), identity verification providers, game studios, and cloud infrastructure providers. These providers are contractually bound to process your data only on ph358's instructions and in accordance with the DPA.

6.2 Regulatory & Legal Authorities

ph358 may disclose personal data to Philippine regulatory authorities (including PAGCOR and the Anti-Money Laundering Council), law enforcement agencies, or courts where required by law, court order, or regulatory directive. ph358 will notify affected players of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ph358's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

7. Cookies & Tracking Technologies

ph358 uses the following types of cookies and similar technologies on the Platform:

• Essential cookies — required for the Platform to function, including session authentication tokens and security cookies. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies — collect aggregated, anonymized data about how players use the Platform to help us improve performance and user experience. No personally identifiable information is included in analytics reports.

ph358 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies. You may manage non-essential cookies through your browser settings, though disabling certain cookies may affect Platform functionality.

8. Data Security

ph358 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data in transit between your device and ph358 servers.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident response procedures for detecting, reporting, and responding to personal data breaches.

In the event of a personal data breach that poses a risk to your rights and freedoms, ph358 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the DPA.

9. Data Retention

ph358 retains personal data for the following periods:

• Account and KYC data — retained for the duration of your account and for five (5) years following account closure, as required by Philippine AML regulations.
• Transaction records — retained for five (5) years from the date of each transaction, in compliance with AMLA record-keeping requirements.
• Gaming activity logs — retained for two (2) years from the date of each session.
• Support communications — retained for two (2) years from the date of the last communication.
• Technical and usage data — retained in anonymized or aggregated form for up to one (1) year.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where deletion is not technically feasible (e.g., backup systems), the data is isolated and protected from further processing until deletion is possible.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by ph358:

• Right to be informed — to know what personal data ph358 collects and how it is used (fulfilled by this Privacy Policy).
• Right of access — to request a copy of the personal data ph358 holds about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object — to object to processing based on legitimate interests, including direct marketing.
• Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) if you believe ph358 has violated your privacy rights.

To exercise any of these rights, contact the ph358 Data Protection Officer (DPO) at the email address listed in Section 14. ph358 will respond to all data subject requests within fifteen (15) business days of receipt.

11. Children's Privacy

ph358 is strictly intended for players aged 21 and above. ph358 does not knowingly collect personal data from individuals under the age of 21. If ph358 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all data will be deleted, and any funds will be handled in accordance with applicable regulations.

If you are a parent or guardian and believe your child has registered on ph358, please contact our support team immediately so we can take appropriate action.

12. Cross-Border Data Transfers

ph358 primarily stores and processes personal data within the Philippines. Where data is transferred to service providers located outside the Philippines (for example, cloud infrastructure or game studio partners), ph358 ensures that such transfers are subject to appropriate safeguards, including contractual data processing agreements that impose DPA-equivalent protections on the receiving party. ph358 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

13. Updates to This Privacy Policy

ph358 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered players via email or an in-platform notification at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of the ph358 Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

14. Contact & Data Protection Officer

ph358 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act. If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact the ph358 DPO:

Email: [email protected]

For general support inquiries: [email protected]

ph358 will acknowledge all privacy-related inquiries within three (3) business days and provide a substantive response within fifteen (15) business days. If you are not satisfied with ph358's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.