ph364 Privacy Policy

1.Introduction

This Privacy Policy ("Policy") describes how ph364 ("ph364," "we," "us," or "our") collects, uses, stores, discloses, and protects personal information in connection with the ph364 online gaming platform accessible at ph364.win ("Platform").

ph364 is subject to the Data Privacy Act of 2012 (Republic Act No. 10173) ("DPA") and its Implementing Rules and Regulations, as administered by the National Privacy Commission of the Philippines. This Policy is drafted in compliance with the DPA and reflects ph364's commitment to the principles of transparency, legitimate purpose, and proportionality in data processing.

By creating a ph364 account, accessing the Platform, or submitting personal information to ph364 in any form, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue your use of ph364 immediately.

This Policy should be read together with the Terms & Conditions and Responsible Gaming Policy.

2.Data Controller

For the purposes of the Data Privacy Act of 2012, the data controller responsible for your personal information is ph364, operating the Platform at ph364.win. All data protection enquiries, requests, and complaints may be directed to our Data Protection Officer at: [email protected]

3.Information We Collect

ph364 collects the following categories of personal information from players and prospective players:

3.1 Registration Data

• Full legal name
• Date of birth (used to verify the minimum age requirement of 21 years)
• Residential address in the Philippines (e.g., Manila, Cebu, Davao, Quezon City, Makati)
• Email address and mobile phone number
• Username and encrypted account password

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine Passport, Driver's License, SSS ID, PhilHealth ID, UMID)
• Proof of address documentation where required
• Source of funds documentation for higher-value accounts as required by regulation

3.3 Financial Data

• GCash mobile number and transaction references
• PayMaya account identifiers and transaction references
• Bank account details (BPI, BDO, Metrobank) for eligible withdrawal methods
• Deposit and withdrawal transaction history

3.4 Gaming Activity Data

• Game session logs, wager amounts, outcomes, and durations
• Sports betting slip history and settlement records
• Bonus and promotional participation records
• Responsible gaming tool settings and usage (deposit limits, self-exclusion records)

3.5 Technical and Device Data

• IP address, device type, browser type and version, operating system
• Session timestamps and login/logout records
• Cookie identifiers and similar tracking technologies (see Section 7)

3.6 Communications Data

• Content of communications with ph364 customer support, including live chat transcripts and email correspondence
• Responses to optional surveys and feedback forms

4.Legal Basis for Processing

ph364 processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract
Identity verification (KYC) and age verification	Legal obligation; legitimate interest
Processing deposits and withdrawals	Performance of contract
Fraud prevention and security monitoring	Legitimate interest; legal obligation
Responsible gaming monitoring and enforcement	Legal obligation; legitimate interest
Regulatory reporting to gaming authorities	Legal obligation
Marketing communications (opt-in only)	Consent
Platform analytics and improvement	Legitimate interest

5.How We Use Your Data

ph364 uses the personal data collected for the following specific purposes:

• Account Services: To create, manage, verify, and maintain your ph364 account, including processing login credentials, updating account details, and responding to account-related enquiries.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank and other supported payment methods, and to maintain accurate financial records for each player account.
• Regulatory Compliance: To fulfil ph364's obligations under applicable Philippine gaming regulations, anti-money laundering laws, and data protection legislation, including mandatory reporting to regulatory authorities.
• Responsible Gaming: To administer responsible gaming tools such as deposit limits and self-exclusion, to monitor gaming behaviour for indicators of problem gambling, and to intervene where appropriate.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other forms of prohibited conduct on the ph364 platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via ph364's 24/7 support channels.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the features, performance, and user experience of ph364.win.
• Marketing (with your consent): To send promotional offers, bonus notifications, and platform updates by email or SMS where you have opted in to receive such communications. You may withdraw consent at any time.

6.Sharing Your Personal Data

ph364 does not sell your personal data. We may share your information with the following categories of recipients, strictly for the purposes identified in this Policy:

• Payment Processors: GCash (GXI Inc.), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank, for the purpose of processing financial transactions associated with your ph364 account.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged by ph364 to fulfil regulatory requirements. These providers process data under strict data processing agreements.
• Game Software Providers: Licensed game studios whose software powers the ph364 game library. Data shared is limited to session and transaction data necessary for game functionality and RTP certification.
• Regulatory Authorities: Philippine gaming regulatory bodies and law enforcement authorities, where disclosure is required by law, court order, or regulatory obligation.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers operating under binding data processing agreements with ph364.

All third parties with whom ph364 shares personal data are contractually required to process that data only for the specified purpose and to maintain appropriate security standards consistent with the DPA 2012.

7.Cookies & Tracking Technologies

ph364 uses cookies and similar tracking technologies on ph364.win. Cookies are small data files stored on your device that help ph364 deliver a functional and personalised gaming experience. The following categories of cookies are used:

• Essential Cookies: Required for basic platform functionality including login session management and security token validation. These cannot be disabled without impacting core functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate ph364.win, which games are most popular, and where technical errors occur. This data is used solely to improve the platform.
• Preference Cookies: Store your platform preferences such as language settings and notification preferences to improve your experience on return visits.

ph364 does not use advertising or retargeting cookies and does not share cookie data with third-party advertising networks. You may manage cookie settings through your browser settings. Note that disabling essential cookies will impair your ability to use the ph364 platform.

8.Data Security

ph364 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph364 servers
• Encryption of sensitive data fields (passwords, financial identifiers) at rest using industry-standard algorithms
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis
• Continuous intrusion detection monitoring and anomaly alerting on all ph364 infrastructure
• Regular penetration testing and security audits by independent security professionals
• Multi-factor authentication requirements for all administrative access to ph364 systems

While ph364 takes all reasonable precautions, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, ph364 will notify affected individuals and the National Privacy Commission in accordance with the requirements of the DPA 2012 and its implementing regulations.

9.Data Retention

ph364 retains personal data for the minimum period necessary to fulfil the purposes set out in this Policy, subject to the following retention schedule:

• Active Account Data: Retained for the duration of your ph364 account and for a period of five (5) years following permanent account closure, as required by Philippine anti-money laundering regulations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in compliance with AMLC regulations.
• Transaction Records: Retained for five (5) years in accordance with applicable financial record-keeping requirements.
• Customer Support Communications: Retained for three (3) years from the date of the communication.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the lawful basis for past processing.

When data is no longer required, ph364 will securely delete or anonymise it in accordance with our data disposal procedures.

10.Your Data Protection Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph364:

• Right to Access: You may request a copy of the personal data ph364 holds about you, along with information about how it is being processed.
• Right to Correction: You may request that inaccurate or incomplete personal data be corrected without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal retention obligations.
• Right to Object: You may object to the processing of your personal data where ph364 relies on legitimate interest as the legal basis, including objection to direct marketing.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Withdraw Consent: Where ph364 processes your data based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact ph364's Data Protection Officer at [email protected]. ph364 will respond to all verified data subject requests within thirty (30) days in accordance with the DPA 2012. If you believe your rights have been violated, you may lodge a complaint with the National Privacy Commission of the Philippines.

11.Children's Privacy

ph364 does not knowingly collect personal data from individuals under the age of 21. The ph364 platform is strictly intended for adults aged 21 years or older, in compliance with Philippine gaming regulations. If ph364 becomes aware that personal data has been collected from a person under this age threshold, all associated data will be deleted immediately and the account permanently closed.

If you believe a minor has created a ph364 account, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

12.Changes to This Privacy Policy

ph364 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, ph364 will notify registered players via email to their registered address or by prominent notice on ph364.win before the changes take effect.

Continued use of the ph364 platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

13.Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph364, please contact our Data Protection Officer:

• Email: [email protected]
• Support Availability: 24 hours a day, 7 days a week

ph364 is committed to addressing all data protection enquiries promptly and in full compliance with the Data Privacy Act of 2012 and applicable National Privacy Commission regulations.