ph356 Privacy Policy

1Who We Are (Data Controller)

ph356 (operating at ph356.bio) is the data controller responsible for your personal information collected through the ph356 platform. ph356 operates as a PAGCOR-regulated online casino and sports betting platform serving Filipino players. As the data controller, ph356 determines the purposes and means by which your personal data is processed, in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

Questions about your data or this Privacy Policy may be directed to our Data Protection Officer at: [email protected]

2Personal Data We Collect

ph356 collects personal data that is necessary for account management, regulatory compliance, payment processing, and delivery of gaming services. The categories of personal data we collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your Philippine government-issued ID;
• Date of birth (used for 21+ age verification);
• Residential address;
• Philippine mobile number;
• Email address.

2.2 Identity Verification (KYC) Data

• Copy or image of a Philippine government-issued photo ID (e.g., Passport, SSS UMID, Driver's License, PhilHealth ID, Voter's ID);
• Selfie photograph taken during the KYC verification process;
• ID number and issuance/expiry dates where applicable.

2.3 Financial Data

• GCash or Maya mobile wallet number associated with your account;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where used for deposits or withdrawals;
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used;
• Source of funds information where required by PAGCOR AML compliance obligations.

2.4 Gaming Activity Data

• Bet amounts, game results, win/loss records, and session timestamps;
• Game preferences and play patterns;
• Bonus and promotion participation history;
• Self-exclusion and responsible gaming tool usage.

2.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser;
• Session logs including login timestamps and session durations;
• Cookies and similar tracking technology data (see Section 7).

2.6 Communications Data

• Records of your communications with ph356 support (live chat transcripts, email correspondence);
• Complaint and dispute records.

3How We Collect Your Data

ph356 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC, making deposits or withdrawal requests, contacting support, or responding to promotions;
• Automated collection: Technical and device data collected automatically when you access ph356, via cookies, server logs, and session tracking systems;
• Third-party verification providers: Identity verification results from KYC service providers engaged by ph356 to verify the authenticity of your government-issued ID;
• Payment processors: Transaction confirmation data from GCash, Maya, InstaPay, PESONet, and banking partners;
• PAGCOR and regulatory databases: Exclusion list checks conducted as required by PAGCOR regulation.

4How We Use Your Personal Data

ph356 does not use your personal data for purposes beyond those listed above without first obtaining your consent or establishing a new lawful basis under the DPA.

5Legal Basis for Processing

Under the Philippine Data Privacy Act, ph356 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ph356 — account management, payment processing, game delivery;
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine law — KYC, AML reporting, exclusion list checks;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights;
• Consent: For any marketing communications or optional data uses where consent is the appropriate legal basis — you may withdraw consent at any time.

6Data Sharing & Disclosure

ph356 does not sell your personal data to third parties. ph356 may share your personal data with the following categories of recipients only to the extent necessary for the stated purposes:

• PAGCOR and Philippine regulatory authorities: As required by PAGCOR license conditions, AML reporting obligations, and applicable Philippine law;
• KYC verification providers: Third-party identity verification services that verify the authenticity of your government ID during the KYC process, operating under confidentiality obligations;
• Payment processors: GCash (Mynt), Maya (PayMaya), BancNet, and banking partners — for the sole purpose of processing your deposits and withdrawals;
• Game providers: Where required for delivery of specific games, limited technical identifiers may be shared with third-party game studios under data processing agreements;
• Cloud and infrastructure providers: Hosting, database, and security service providers operating under contractual data protection obligations;
• Law enforcement: Where ph356 is required to disclose data by court order, legal process, or law enforcement request under Philippine law.

All third-party processors engaged by ph356 are required to handle your personal data in accordance with the DPA and applicable data protection standards.

7Cookies & Tracking Technologies

ph356 uses cookies and similar technologies to operate the platform, maintain your login session, and collect technical data. The categories of cookies used include:

• Strictly necessary cookies: Required for the platform to function — session management, login state, security tokens. These cannot be disabled without breaking platform functionality;
• Performance cookies: Anonymized data on how players navigate the platform, used to identify and fix usability issues;
• Functional cookies: Remembering your preferences such as language settings, display preferences, and "remember me" login state on trusted devices.

ph356 does not use third-party advertising or behavioral tracking cookies. You may manage cookie preferences through your browser settings; disabling strictly necessary cookies may impair platform functionality.

8Data Retention

ph356 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine regulation:

• KYC records and identity documents: Minimum 5 years from the date of account closure, as required by PAGCOR and AMLA regulations;
• Financial transaction records: Minimum 5 years from the date of the transaction, for AML compliance and tax purposes;
• Gaming activity logs: Minimum 3 years from the date of the session, for dispute resolution and regulatory audit purposes;
• Support communications: 2 years from the close of the support interaction;
• Account data for closed accounts: Retained for the minimum legal period, then securely deleted or anonymized.

Where retention beyond the minimum period is required by ongoing legal proceedings, regulatory investigations, or unresolved disputes, ph356 will retain relevant data until such matters are resolved.

9Data Security

Security measures implemented by ph356 include:

• SSL/TLS encryption for all data transmitted between your device and ph356 servers;
• Encryption of sensitive data at rest, including identity documents and financial information;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for administrative access to data systems;
• Regular security audits and vulnerability assessments;
• Incident response procedures for detecting, containing, and reporting data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that poses a real risk to your rights, ph356 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by the DPA.

10Your Data Rights

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by ph356:

• Right to be informed: The right to know what personal data ph356 holds about you and how it is used — as described in this Privacy Policy;
• Right of access: The right to request a copy of your personal data held by ph356;
• Right to rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to erasure: The right to request deletion of your personal data where no legal obligation requires continued retention;
• Right to data portability: The right to receive your personal data in a structured, machine-readable format where technically feasible;
• Right to object: The right to object to processing of your personal data based on legitimate interests;
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting lawfulness of prior processing.

To exercise any of these rights, contact ph356's Data Protection Officer at [email protected]. ph356 will respond to data rights requests within 15 business days. Note that certain rights may be limited where ph356 has legal obligations requiring continued data retention (e.g., AML and PAGCOR retention requirements).

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph356 has not handled your personal data in accordance with the DPA.

11Children's Privacy and the 21+ Requirement

Age verification is enforced through mandatory KYC — no player can access real-money features without submitting a Philippine government-issued ID confirming they are 21 or older. If ph356 discovers that personal data has been collected from a person under 21 years of age, that data will be promptly deleted and the associated account suspended. If you believe a minor has accessed ph356, please contact [email protected] immediately.

12Cross-Border Data Transfers

ph356 primarily stores and processes player data within data centers serving the Philippines region. Where ph356 engages service providers (such as cloud infrastructure providers or KYC verification platforms) that process data outside the Philippines, ph356 ensures that appropriate safeguards are in place as required by Section 21 of the Philippine DPA, including contractual clauses that impose data protection standards equivalent to those required under Philippine law.

ph356 will not transfer your personal data to jurisdictions that do not provide adequate data protection without first obtaining your consent or establishing another valid legal basis under the DPA.

13Changes to This Privacy Policy

ph356 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. Material changes will be communicated to registered players via email to the address on file or via a platform notification, at least 7 days before the updated policy takes effect.

The current version of this Privacy Policy is always accessible at ph356.bio/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of ph356 after a policy update constitutes your acknowledgment of the revised policy.

14Contact & Data Protection Officer

For all data privacy inquiries, data rights requests, or to contact ph356's Data Protection Officer:

ph356 support and the Data Protection Officer are available 24/7. For formal DPA complaints or if you are not satisfied with ph356's response to a data rights request, you may contact the National Privacy Commission of the Philippines through its official channels.