ph355 Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") describes how ph355 (operating at ph355.vip) collects, uses, stores, discloses, and protects the personal data of individuals ("Data Subjects", "you", "Players") who interact with the ph355 platform. This Policy applies to all users of ph355, including registered account holders, prospective players who initiate but do not complete registration, and visitors to ph355.vip.

By creating a ph355 account, depositing funds, or otherwise using the ph355 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should not access or use ph355.

This Policy is to be read in conjunction with the ph355 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.

2. Data Controller

ph355 operates as the Data Controller for personal data collected through ph355.vip in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its Implementing Rules and Regulations (IRR). As Data Controller, ph355 determines the purposes and means of processing your personal data.

ph355 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Privacy Policy. Contact details for the ph355 DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

ph355 collects the following categories of personal data from players:

3.1 Identity Data

• Full legal name as it appears on a valid Philippine government-issued ID
• Date of birth (for mandatory 21+ age verification)
• Government-issued ID number (e.g., Philippine National ID, passport, SSS, GSIS, driver's license, PhilSys)
• Photograph or scan of identity document (submitted during KYC verification)

3.2 Contact Data

• Email address (used for account communications and security alerts)
• Philippine mobile number (used for SMS OTP, 2FA, and account notifications)
• Residential address in the Philippines (city, province, postal code)

3.3 Financial Data

• GCash or PayMaya mobile wallet number associated with transactions
• Bank account details (account number, bank name) for bank transfer deposits and withdrawals (BPI, BDO, Metrobank, Instapay)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used

3.4 Gaming & Behavioral Data

• Game session history, bet records, win/loss records, and game preferences
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction logs

3.5 Technical Data

• IP address and approximate geolocation (country, region) at time of login and transactions
• Device type, operating system, and browser type
• Cookie identifiers and session tokens (see Section 6)

4. How We Collect Your Data

ph355 collects personal data through the following means:

• Account Registration: Data you provide directly when creating your ph355 account, including name, date of birth, contact details, and payment information.
• KYC Verification: Identity documents and supporting materials submitted in response to ph355's verification requests.
• Platform Use: Data generated automatically as you interact with ph355, including game play, deposits, withdrawals, and customer support contacts.
• Cookies and Tracking Technologies: Technical data collected via cookies, local storage, and similar technologies as described in Section 6.
• Third-Party Sources: ph355 may receive data from payment processors (GCash, PayMaya, banks) to confirm transaction details, and from fraud prevention and identity verification service providers.

5. Purpose and Legal Basis for Processing

ph355 processes your personal data for the following purposes and on the corresponding legal bases under the DPA:

• Account Creation and Management — Necessary for the performance of the contract between you and ph355 (DPA Sec. 12(b)).
• Age and Identity Verification (KYC) — Necessary for compliance with PAGCOR regulations mandating 21+ age verification (DPA Sec. 12(c)).
• Payment Processing — Necessary for contract performance and to process your deposits and withdrawals via GCash, PayMaya, and Philippine banks (DPA Sec. 12(b)).
• Anti-Money Laundering (AML) Compliance — Legally required under the Anti-Money Laundering Act of 2001 (RA 9160, as amended) and PAGCOR AML guidelines (DPA Sec. 12(c)).
• Fraud Prevention and Platform Security — Legitimate interest in protecting the ph355 platform and its players from fraudulent activity (DPA Sec. 12(f)).
• Responsible Gaming Monitoring — Legitimate interest and PAGCOR compliance obligation to identify and assist players exhibiting signs of problem gambling (DPA Sec. 12(f), 12(c)).
• Customer Support — Contract performance and legitimate interest in resolving player issues efficiently (DPA Sec. 12(b), 12(f)).
• Marketing Communications — Based on your explicit consent at the point of registration or subsequent opt-in. You may withdraw marketing consent at any time (DPA Sec. 12(a)).

6. Cookies and Tracking Technologies

ph355 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies used by ph355 include:

• Strictly Necessary Cookies: Required for core platform functionality including maintaining your ph355 login session, security tokens, and account preferences. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Used to measure how players use ph355, identify popular games, and detect performance issues. Data collected is aggregated and anonymized.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences to enhance your ph355 experience.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of ph355. ph355 does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

7. Sharing and Disclosure of Your Data

ph355 does not sell, rent, or trade your personal data. ph355 may share your data with the following categories of recipients only as necessary for the purposes set out in Section 5:

• Payment Processors: GCash (G-Xchange, Inc.), PayMaya (PayMongo Philippines, Inc.), BPI, BDO, Metrobank, and Instapay-connected institutions, to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers that assist ph355 in verifying your identity and age in compliance with PAGCOR requirements. These providers are bound by data processing agreements consistent with the DPA.
• PAGCOR: ph355 is required to report certain player data and gaming activity to PAGCOR as part of its licensing obligations. This includes AML-related reports and responsible gaming compliance records.
• Law Enforcement and Regulatory Authorities: ph355 will disclose personal data to competent Philippine authorities (including PAGCOR, AMLC, NBI, PNP) where required by law, court order, or lawful regulatory directive.
• Game Technology Providers: RNG-certified game developers and live casino streaming providers who supply the ph355 game library. These providers receive only the data necessary to deliver the game experience and are bound by confidentiality obligations.

8. Data Retention

ph355 retains personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and Identity Data: Retained for a minimum of 5 years from account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by AML regulations.
• Customer Support Records: Retained for 3 years from the date of the support interaction.
• Marketing Consent Records: Retained until consent is withdrawn and for 1 year thereafter to evidence the withdrawal.

Upon expiry of applicable retention periods, ph355 will securely delete or anonymize personal data in accordance with industry-standard data destruction practices.

9. International Data Transfers

ph355 primarily processes and stores player data within the Philippines or in jurisdictions that provide an adequate level of data protection as recognized by the National Privacy Commission (NPC). Where data is transferred to a third party located outside the Philippines (for example, a game technology provider headquartered abroad), ph355 ensures that appropriate safeguards are in place, including contractual clauses aligned with NPC-approved standard data protection terms, to ensure that your personal data receives a level of protection consistent with the DPA.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 (RA 10173), you hold the following rights with respect to your personal data held by ph355:

• Right to Be Informed: The right to know what personal data ph355 holds about you, how it is used, and with whom it is shared — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ph355 holds about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your ph355 account settings; for corrections requiring document verification, please contact support.
• Right to Erasure: The right to request deletion of your personal data where processing is no longer necessary, subject to ph355's regulatory retention obligations described in Section 8.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time by contacting ph355 support.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph355 has violated your data privacy rights.

To exercise any of the above rights, contact the ph355 Data Protection Officer using the contact details in Section 15. ph355 will respond to verifiable data subject requests within 15 business days as required by NPC rules.

11. Children's Privacy

ph355 is strictly prohibited from being used by individuals under 21 years of age in accordance with PAGCOR regulations. ph355 does not knowingly collect or process the personal data of minors. 21+

If ph355 discovers that personal data of an individual under 21 has been collected, the account will be suspended immediately, the data will be deleted, and any funds will be returned in accordance with applicable regulations. If you believe that ph355 may hold data relating to a minor, please contact our Data Protection Officer immediately using the details in Section 15.

12. Security Measures

ph355 implements technical, organizational, and physical security measures appropriate to the risks presented by the processing of personal data on a licensed online gaming platform. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between players and ph355 servers
• Encryption of sensitive data at rest, including financial records and identity document copies
• Role-based access controls limiting access to personal data to authorized personnel on a need-to-know basis
• Multi-factor authentication for ph355 internal systems that store or process player personal data
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Incident response procedures aligned with NPC Circular 16-03 for personal data breach management

In the event of a personal data breach that is likely to result in harm to affected Data Subjects, ph355 will notify the NPC within 72 hours of discovery and affected players within 5 business days as required by NPC Circular 16-03.

13. Third-Party Links

ph355.vip may contain links to third-party websites or services (for example, PAGCOR's official website or responsible gaming information pages). ph355 is not responsible for the privacy practices of any third-party website and encourages you to review the privacy policies of any external sites you visit. The inclusion of a link on ph355.vip does not constitute an endorsement of the linked website's privacy practices.

14. Amendments to This Privacy Policy

ph355 reserves the right to amend this Privacy Policy at any time. Material changes — including changes to the categories of data collected, the purposes of processing, or the rights of Data Subjects — will be communicated to registered players via the email address on file at least 7 days before the changes take effect, except where immediate implementation is required by law or PAGCOR directive.

The "Last updated" date at the top of this Policy will be revised on each amendment. Your continued use of ph355 following any amendment constitutes your acceptance of the revised Policy.

15. Contact Information & Complaints

For questions, data subject requests, or concerns regarding this Privacy Policy or ph355's processing of your personal data, please contact the ph355 Data Protection Officer:

Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 on ph355.vip in English and Tagalog

If you are not satisfied with ph355's response to a privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.