ph355 Privacy Policy — How We Handle Your Personal Data

1. About This Privacy Policy

1.1. This Policy applies to all personal information collected from: (a) registered ph355 Players; (b) visitors to the ph355 platform who have not completed registration; and (c) individuals who contact ph355 through customer support channels.

1.2. ph355 acts as a Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012, responsible for the collection and processing of personal data described in this Policy.

1.3. This Policy should be read alongside the ph355 Terms and Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with ph355.

2. Personal Data We Collect

ph355 collects the following categories of personal data:

2.1. ph355 does not collect sensitive personal information as defined under the Data Privacy Act — such as health data, religious affiliation, or political views — except where voluntarily disclosed in the context of a responsible gaming or self-exclusion request.

3. Legal Basis for Processing

ph355 processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Performance of Contract: Processing necessary to operate your ph355 account, execute deposits and withdrawals, and deliver gaming services you have requested.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws and regulations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving ph355 services — where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where we will seek your explicit consent and you may withdraw it at any time.

4. How ph355 Uses Your Personal Data

ph355 uses your personal data for the following purposes:

• Creating and managing your ph355 account, including verifying your identity and age (minimum 21 years as required by PAGCOR).
• Processing financial transactions — deposits via GCash, Maya, BDO, BPI, Metrobank and withdrawals to verified payment methods registered in your name.
• Complying with PAGCOR regulatory requirements, including player activity reporting and responsible gaming obligations.
• Conducting AML checks and Source of Funds verifications as required under the Anti-Money Laundering Act and implementing rules of the AMLC.
• Detecting and preventing fraud, unauthorized account access, bot activity, and other prohibited conduct on the ph355 platform.
• Personalising your ph355 experience — surfacing games, promotions, and content relevant to your preferences and play history.
• Sending transactional communications: account confirmations, deposit/withdrawal notifications, security alerts, and KYC status updates.
• Sending promotional communications, including bonus offers, tournament announcements, and platform news — only where you have consented or where permitted under applicable Philippine law.
• Monitoring for responsible gaming indicators and administering self-exclusion or deposit limit requests.
• Improving ph355 platform performance, user interface design, and game library curation based on aggregated usage analytics.

5. Disclosure of Personal Data

5.1. ph355 does not sell, rent, or trade personal data to third parties for their own commercial purposes.

5.2. ph355 may disclose personal data to the following categories of recipients:

• Payment Service Providers: GCash (G-Xchange Inc.), Maya (Voyager Innovations), Philippine commercial banks (BDO, BPI, Metrobank, UnionBank), and other licensed payment processors — strictly for transaction processing purposes.
• Identity Verification Providers: KYC and AML screening service providers operating under data processing agreements that impose equivalent data protection obligations.
• Game Content Providers: Licensed game studios and live dealer operators whose games are hosted on the ph355 platform, where technically necessary for game delivery and fairness auditing.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies — where required by law, regulation, or court order.
• Professional Advisers: Legal, audit, and compliance advisers bound by professional confidentiality obligations.

5.3. All third-party service providers with access to ph355 Player data are required to enter into data processing agreements that prohibit them from using the data for any purpose other than delivering services to ph355.

6. Cookies and Tracking Technologies

6.1. ph355 uses cookies and similar tracking technologies to operate the platform, maintain session security, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for platform operation — session authentication, security tokens, load balancing. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language, currency display, and game lobby layout settings.
• Analytics Cookies: Aggregate, anonymised data on page visits, game lobby navigation, and feature usage — used to improve the ph355 platform. No personally identifiable data is included in analytics reporting.

6.2. You may adjust your browser settings to refuse non-essential cookies. Note that disabling functional cookies may affect your ph355 experience, and disabling strictly necessary cookies will prevent the platform from operating correctly.

7. Data Security

7.1. ph355 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph355 servers.
• Encryption at rest for sensitive data fields including KYC documents, financial account references, and authentication credentials.
• Role-based access controls ensuring ph355 staff access only the personal data necessary for their specific job function.
• Regular penetration testing and security vulnerability assessments of the ph355 platform infrastructure.
• Dedicated security monitoring with automated alerts for unusual account access patterns, including geographic anomalies relevant to Philippine-based accounts.

7.2. In the event of a personal data breach that is likely to result in risk to your rights, ph355 will notify affected Players and the National Privacy Commission (NPC) within the timeframe required by the Data Privacy Act and NPC Circular 16-03.

8. Data Retention

8.1. ph355 retains personal data for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with the retention requirements of the Anti-Money Laundering Act of the Philippines.

8.2. KYC identity documents are retained for the same minimum five-year period and stored in isolated, access-restricted archival systems separate from active operational databases.

8.3. Transaction logs and gameplay history are retained for regulatory reporting purposes for a minimum of five years. Anonymised, aggregated analytics data may be retained indefinitely as it does not constitute personal data.

8.4. Where you have consented to marketing communications and subsequently withdraw that consent, your contact details will be moved to a suppression list to ensure you are not contacted again — rather than deleted outright, which would not allow ph355 to honour your opt-out reliably.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to personal data held by ph355:

• Right to Access: You may request a copy of the personal data ph355 holds about you, the purposes for which it is processed, and the parties it has been shared with.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For KYC-related data, corrections require submission of updated identity documentation.
• Right to Erasure / Right to be Forgotten: You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to ph355's legal retention obligations under the AMLA and PAGCOR framework.
• Right to Object: You may object to processing based on ph355's legitimate interests, including direct marketing communications. Objection to marketing will be honoured immediately.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to ph355 for transfer to another service, where technically feasible.
• Right to File a Complaint: If you believe ph355 has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, contact the ph355 Data Protection Officer at [email protected]. ph355 will respond to rights requests within 15 business days of receipt.

10. Minors and Age Restriction

10.1. ph355 services are strictly intended for persons aged 21 and above. ph355 does not knowingly collect personal data from persons under 21 years of age. If ph355 discovers that a Player under the age of 21 has registered an account, that account will be immediately suspended, all data will be handled in accordance with this Policy and relevant Philippine child data protection laws, and no winnings from the account will be paid out.

10.2. If you are the parent or guardian of a minor who has used ph355 without authorisation, please contact [email protected] immediately.

11. International Data Transfers

11.1. ph355's primary data processing infrastructure is located within the Philippines and the Asia-Pacific region. Where personal data is transferred outside the Philippines — for example to game content providers or cloud infrastructure providers with regional data centres — such transfers are conducted under appropriate safeguards as required by the Data Privacy Act, including contractual clauses that impose equivalent data protection obligations on the receiving party.

11.2. ph355 does not transfer personal data to jurisdictions that do not provide an adequate level of protection for personal data without implementing appropriate additional safeguards.

12. Amendments to This Policy

12.1. ph355 may revise this Privacy Policy at any time. When material changes are made, ph355 will notify registered Players via the contact details on file and update the "Last Updated" date at the top of this page. Continued use of ph355 after the effective date of any revision constitutes acceptance of the updated Policy.

13. Contact Information and Data Protection Officer

ph355 has designated a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. For all privacy-related inquiries, data subject rights requests, or concerns regarding this Policy, please contact: