ph358 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") is issued by ph358 ("ph358," "we," "us," or "our") and applies to all personal information collected from players, registered users, and visitors of ph358.club (the "Platform").

1.2 ph358 is committed to protecting your privacy and handling your personal data with the highest degree of care. This Policy explains what personal data we collect, why we collect it, how it is used, who it may be shared with, and what rights you have over your own information.

1.3 This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"). By using the ph358 Platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, ph358 is the Personal Information Controller ("PIC") in respect of personal data collected through the ph358 Platform.

2.2 ph358 has appointed a Data Protection Officer ("DPO") responsible for overseeing data protection matters. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 ph358 collects the following categories of personal data from players and users of the Platform:

3.2 ph358 does not collect sensitive personal information (as defined under the DPA) unless specifically required for identity verification or responsible gaming compliance purposes, and only with your explicit consent.

3.3 Where you provide personal data about third parties (for example, a beneficiary for prize payments), you warrant that you have obtained that individual's consent and are authorised to share their information with ph358.

4. How ph358 Uses Your Personal Data

4.1 ph358 processes your personal data for the following purposes:

• Account Registration and Management: To create and manage your ph358 player account, verify your identity, and maintain accurate account records.
• Platform Operations: To operate the ph358 gaming platform, process bets, calculate winnings, and provide the services you have requested.
• Payment Processing: To process GCash, Maya, and bank deposits and withdrawals in Philippine Peso (PHP), and to comply with payment provider requirements.
• KYC and AML Compliance: To verify your identity and age, screen against sanctions lists, and comply with anti-money laundering obligations under Philippine law and PAGCOR regulations.
• Fraud Prevention and Security: To detect and prevent fraud, unauthorized account access, money laundering, and other prohibited activities on the ph358 platform.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion requests, and administer deposit and loss limit tools in your account dashboard.
• Customer Support: To respond to your queries, process complaints, and provide assistance via live chat and email.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about ph358, where you have provided consent to receive such communications.
• Platform Improvement: To analyse usage patterns, improve the ph358 platform, personalise your gaming experience, and develop new features.
• Legal Compliance: To comply with applicable Philippine laws, PAGCOR regulatory requirements, and to respond to lawful requests from government or regulatory authorities.

5. Legal Bases for Processing

5.1 ph358 processes your personal data based on the following legal grounds under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to fulfil our obligations under the ph358 Terms and Conditions, including operating your account and processing transactions.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AML laws, and other applicable Philippine legislation.
• Legitimate Interests: Processing necessary for ph358's legitimate business interests, including fraud prevention, platform security, and responsible gaming, where such interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent, particularly for marketing communications and optional data collection. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

6.1 ph358 does not sell, rent, or trade your personal data to third parties. We may share your information only in the following limited circumstances:

• Service Providers: Third-party companies that provide services on our behalf, including KYC verification providers, payment processors (GCash/Maya/banks), game software providers, customer support tools, and cloud hosting providers. All service providers are contractually required to handle your data in accordance with the DPA and to use it solely for the purpose of providing services to ph358.
• Regulatory and Law Enforcement Authorities: Where required by law, PAGCOR regulations, court order, or other binding legal process, ph358 may disclose personal data to Philippine government agencies, regulatory bodies, or law enforcement authorities.
• AML and Fraud Prevention Agencies: As required by Philippine AML legislation, ph358 may share data with anti-money laundering agencies and financial intelligence units.
• Business Transfers: In the event of a merger, acquisition, or sale of ph358's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

6.2 ph358 will not share your personal data with third parties for their own marketing purposes.

7. Data Retention

7.1 ph358 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the duration of your active ph358 account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years in accordance with Philippine AML regulations.
• KYC Documents: Retained for five (5) years following account closure or the conclusion of any dispute, whichever is later.
• Support Communications: Retained for two (2) years following the resolution of the relevant query or complaint.
• Marketing Consent Records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of consent management.

7.2 Upon expiry of the applicable retention period, ph358 will securely delete or anonymise your personal data.

8. Cookies and Tracking Technologies

8.1 ph358 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impacting Platform functionality.
• Performance Cookies: Used to analyse how players use the ph358 Platform, which pages are visited most frequently, and where errors occur. This data is aggregated and anonymised.
• Functional Cookies: Allow ph358 to remember your preferences (such as language and display settings) and provide enhanced features.

8.2 ph358 does not use third-party advertising cookies or cross-site tracking technologies.

8.3 You can control cookie settings through your browser. Please note that disabling essential cookies will affect Platform functionality. For Chrome, Safari, and other mobile browsers commonly used by Filipino players, cookie settings can be found in the browser's privacy or security settings menu.

9. Data Security

9.1 ph358 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph358 servers;
• Encryption of sensitive data at rest, including financial information and KYC documents;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the ph358 Platform;
• Two-factor authentication (2FA) available to all player accounts;
• Incident response procedures for detecting and responding to data security breaches.

9.2 In the event of a personal data breach that is likely to result in risk to your rights and freedoms, ph358 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act and NPC Circular No. 16-03.

9.3 While ph358 takes extensive measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph358 account credentials.

10. Your Data Subject Rights

10.1 Under the Data Privacy Act of 2012 and its IRR, you have the following rights in respect of your personal data held by ph358:

• Right to Be Informed: The right to know what personal data ph358 collects, how it is used, and to whom it is disclosed — as set out in this Policy.
• Right of Access: The right to obtain confirmation from ph358 as to whether personal data concerning you is being processed, and to receive a copy of that data.
• Right to Rectification: The right to have inaccurate personal data corrected. You may update most of your account information directly through your ph358 account dashboard.
• Right to Erasure: The right to request deletion of your personal data where processing is no longer necessary, consent has been withdrawn, or processing is unlawful — subject to ph358's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time, and to object to other processing based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph358 has violated your data privacy rights.

10.2 To exercise any of the above rights, please contact ph358's Data Protection Officer using the contact details in Section 14. ph358 will respond to verified requests within fifteen (15) business days, in accordance with the DPA.

11. Children's Privacy

11.1 The ph358 Platform is strictly intended for individuals aged twenty-one (21) years and above, in accordance with PAGCOR regulations. ph358 does not knowingly collect or process personal data from individuals under the age of 21.

11.2 If ph358 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately delete such data and close the associated account. If you believe a minor has registered on ph358, please contact our support team immediately.

12. International Data Transfers

12.1 ph358 primarily stores and processes personal data within the Republic of the Philippines. Where data is transferred to service providers located outside the Philippines (for example, cloud hosting infrastructure), ph358 ensures that appropriate safeguards are in place as required under Section 21 of the Data Privacy Act.

12.2 Such safeguards include contractual clauses binding overseas service providers to standards equivalent to those required by the DPA, and conducting due diligence to confirm the receiving country's data protection standards.

13. Changes to This Privacy Policy

13.1 ph358 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, ph358 will notify registered players via email or a prominent notice on the Platform.

13.2 The date of the most recent revision is displayed at the top of this Policy. Your continued use of the ph358 Platform following any update constitutes acceptance of the revised Policy. If you do not agree with the changes, you should close your account before the revised Policy takes effect.

13.3 The current version of this Privacy Policy is always available at ph358.club/privacy-policy.

14. Contact & Data Protection Officer

14.1 For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact ph358 as follows:

• Data Protection Officer (DPO): ph358 Data Protection Team
• Email: [email protected]
• Live Chat: Available 24/7 on the ph358 Platform

14.2 If you are dissatisfied with ph358's response to a data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. Information about the NPC and how to file a complaint is available through official Philippine government channels.

14.3 ph358 takes all data privacy complaints seriously and commits to investigating and responding to all enquiries in good faith and within the timeframes required by applicable law.