ph357 Privacy Policy

1. Introduction

ph357 ("ph357", "we", "us", "our") is committed to protecting the privacy and personal information of all individuals who use ph357.club and its associated services ("Platform", "Services"). This Privacy Policy ("Policy") describes how ph357 collects, uses, stores, discloses, and protects personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on ph357.club or otherwise using ph357's Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not create an account or use the Services.

This Policy applies to all data subjects who interact with ph357, including registered players, prospective players who browse the Platform, and individuals who contact ph357 through support channels.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, ph357 acts as the Personal Information Controller (PIC) with respect to personal data collected through ph357.club. ph357 has designated a Data Protection Officer (DPO) responsible for ensuring ongoing compliance with applicable data privacy laws and for addressing data subject inquiries and complaints.

Contact details for the ph357 DPO are provided in Section 14 of this Policy.

3. Data We Collect

3.1 Registration Data

When you create a ph357 account, we collect: full legal name, date of birth, email address, mobile number (Philippines country code +63), residential address, and a username of your choosing. This data is required to create and administer your account and to verify your eligibility to use the Services.

3.2 Identity Verification (KYC) Data

For compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA) of the Philippines, ph357 may require identity documents for account verification. These may include a government-issued photo ID (UMID, passport, driver's licence, SSS ID, PhilHealth ID, or Voter's ID), a selfie for liveness verification, and proof of residential address. KYC documents are processed through secure channels and are subject to enhanced access controls.

3.3 Financial Transaction Data

ph357 records all deposit and withdrawal transactions, including the amount, date, time, payment method (e.g., GCash, PayMaya, BPI, BDO, Metrobank), and transaction reference numbers. GCash account details (mobile number) and bank account details provided for withdrawal purposes are stored in encrypted form. ph357 does not store full debit or credit card numbers.

3.4 Gaming Activity Data

ph357 maintains detailed records of all wagering activity, including game type, stake amount, outcome, session duration, and bet history. This data is required for regulatory reporting, dispute resolution, responsible gaming monitoring, and AML compliance.

3.5 Device & Technical Data

When you access ph357.club, we automatically collect: IP address, device type, operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimization.

3.6 Communications Data

If you contact ph357 via live chat, email, or support ticket, we retain the content of those communications, including any personal information you voluntarily provide, for customer service quality and compliance purposes.

4. How We Use Your Data

ph357 uses your personal data for the following purposes:

• Account Administration: Creating and managing your ph357 account, processing logins, and maintaining account security.
• Service Delivery: Processing deposits and withdrawals, recording wagers, crediting winnings, and administering bonuses and promotions.
• Regulatory Compliance: Fulfilling obligations under PAGCOR licensing conditions, AMLA requirements, and NPC regulations, including AML transaction monitoring and suspicious activity reporting to AMLC where required by law.
• Identity Verification: Conducting KYC checks to verify player age (21+), identity, and source of funds where required.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorized account access.
• Responsible Gaming: Monitoring gaming behavior to identify indicators of problem gambling and to administer self-exclusion, deposit limits, and cooling-off periods when requested or when ph357 deems it necessary in the player's interest.
• Customer Support: Responding to enquiries, resolving disputes, and processing complaints.
• Service Improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game selection, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and newsletters to Players who have opted in to receive marketing communications. You may withdraw marketing consent at any time by contacting support or updating your account preferences.

5. Legal Basis for Processing

ph357 processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between ph357 and the Player (account management, game delivery, payment processing).
• Legal Obligation: Processing required to comply with PAGCOR conditions, AMLA obligations, NPC requirements, and applicable Philippine tax law.
• Legitimate Interest: Fraud prevention, security monitoring, and platform analytics where ph357's interests do not override the data subject's fundamental rights.
• Consent: Marketing communications and non-essential cookie placement, where the Player has expressly opted in.

6. Data Sharing & Disclosure

ph357 does not sell personal data. ph357 may share personal data with the following categories of recipients only to the extent necessary for the purposes described in Section 4:

• Payment Processors: GCash (G-Xchange, Inc.), PayMaya (PayMongo Philippines), and banking partners (BPI, BDO, Metrobank) for transaction processing. Each payment processor operates under its own privacy policy and Philippine BSP regulations.
• KYC & Identity Verification Providers: Third-party identity verification services engaged by ph357 to perform document and liveness checks.
• Game Software Providers: ph357's licensed game technology providers may receive anonymized session data for game performance and integrity monitoring. No personally identifiable information is shared with game providers beyond what is technically required for gameplay.
• Regulatory Authorities: PAGCOR, AMLC, NPC, and other Philippine government bodies where disclosure is required by law, court order, or regulatory direction.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by ph357, subject to professional confidentiality obligations.

All third-party service providers engaged by ph357 are required to enter into Data Processing Agreements (DPAs) that restrict their use of ph357 Player data to the specific services they are engaged to provide.

7. Cookies & Tracking Technologies

ph357.club uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function — including authentication tokens, session state, and security cookies. These cannot be disabled without preventing access to the Services.
• Analytics Cookies: Used to collect aggregated, anonymized data about how Players navigate and interact with ph357.club. This data helps ph357 improve platform performance and user experience.
• Preference Cookies: Store display and interface preferences (e.g., language, theme settings) to improve your experience on return visits.
• Marketing Cookies: Used only for Players who have opted in to receive personalized promotions. These cookies track interaction with ph357 promotional content to measure campaign effectiveness.

Non-essential cookies (analytics, preference, marketing) can be managed through your browser settings. Disabling analytics or preference cookies will not prevent access to the ph357 platform but may affect some display functionality.

8. Data Security

ph357 implements the following technical and organizational security measures to protect your personal data:

• 256-bit TLS encryption for all data transmitted between your device and ph357 servers.
• AES-256 encryption for sensitive data at rest, including financial account details and identity documents.
• Role-based access controls ensuring that ph357 staff access only the data necessary for their specific function.
• Two-factor authentication for all administrative access to Player data systems.
• Regular third-party security audits and penetration testing of ph357's infrastructure.
• Incident response procedures aligned with NPC breach notification requirements (72-hour reporting for qualifying breaches).

While ph357 implements industry-standard security measures, no online platform can guarantee absolute security. Players are responsible for maintaining the security of their own devices and login credentials.

9. Data Retention

ph357 retains personal data for the following periods, after which data is securely deleted or anonymized:

• Active Account Data: Retained for the duration of the account relationship.
• Closed Account Data: Retained for 5 years following account closure for regulatory and dispute resolution purposes.
• Financial Transaction Records: Retained for 7 years from the date of transaction, as required by AMLC regulations and Philippine tax law.
• KYC Documents: Retained for 5 years from the end of the account relationship or as otherwise directed by PAGCOR or AMLC.
• Support Communications: Retained for 2 years from the date of the last communication.
• Marketing Opt-In Records: Retained for the duration of the marketing relationship plus 3 years for compliance evidence purposes.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and NPC regulations, Philippine data subjects have the following rights with respect to their personal data held by ph357:

• Right to be Informed: The right to know what personal data ph357 collects and how it is used — fulfilled by this Policy.
• Right to Access: The right to request a copy of the personal data ph357 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure/Blocking: The right to request deletion or blocking of personal data where processing is unlawful or no longer necessary, subject to ph357's legal retention obligations.
• Right to Object: The right to object to the processing of personal data, including for direct marketing purposes, where processing is based on legitimate interest or consent.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format, where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.

To exercise any of these rights, contact ph357's Data Protection Officer as described in Section 14. ph357 will respond to all data subject requests within 15 business days. In complex cases, ph357 may extend this period by a further 15 business days with written notice to you.

11. Children's Privacy

ph357's Services are strictly limited to individuals aged 21 years and above. ph357 does not knowingly collect personal data from individuals under 21 years of age. If ph357 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, the data will be deleted, and any deposits will be returned less applicable regulatory deductions. Parents or guardians who believe a minor has accessed ph357 should contact support immediately.

12. Cross-Border Data Transfers

ph357 may engage service providers whose systems are located outside the Philippines for specific technical functions (e.g., cloud infrastructure, security monitoring). Any cross-border transfer of ph357 Player data is conducted only where the receiving jurisdiction provides an adequate level of data protection comparable to that provided under the Data Privacy Act of 2012, or where appropriate contractual safeguards (including standard contractual clauses approved by the NPC) are in place. ph357 does not transfer Player data to jurisdictions known to have inadequate data protection frameworks without prior NPC notification where required.

13. Changes to This Policy

ph357 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory requirements, or platform operations. Material changes will be communicated to registered Players via email to the address on their account no less than 14 days before the change takes effect. The revised Policy will also be published at ph357.club/privacy-policy with an updated effective date. Continued use of ph357's Services after the effective date of any revision constitutes acceptance of the updated Policy.

14. Contact & Data Protection Officer

For data subject requests, privacy complaints, or any enquiry regarding ph357's data processing practices, please contact the ph357 Data Protection Officer:

Please include "Privacy Request" or "Data Subject Request" in your message subject line to ensure your enquiry is routed directly to the DPO team. ph357 responds to all privacy enquiries within 15 business days. For urgent data security concerns, live chat support on ph357.club provides the fastest response channel.

If you are not satisfied with ph357's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.