ph355 Privacy Policy

1. Introduction

ph355 Gaming Corporation ("ph355", "we", "us", or "our") is committed to protecting the privacy and personal data of every player who uses the ph355 online gaming platform, accessible at ph355.org (the "Platform").

This Privacy Policy (the "Policy") is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Republic of the Philippines (the "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). It also reflects ph355's obligations under the requirements of the Philippine Amusement and Gaming Corporation ("PAGCOR") with respect to player data handling.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the Platform.

2. Data Controller

The data controller responsible for your personal information collected through the ph355 Platform is:

ph355 has appointed a Data Privacy Officer (DPO) as required under the DPA. The DPO is responsible for overseeing ph355's data protection strategy and ensuring compliance with applicable privacy laws. You may contact the DPO at any time through the support channel listed above for any privacy-related inquiry or request.

3. Data We Collect

ph355 collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued identification document;
• Date of birth (for age verification purposes — you must be 21 or older);
• Nationality and country of residence;
• Government-issued ID type and reference number (for KYC verification);
• ph355 username chosen at registration.

3.2 Contact Data

• Philippine mobile number (primary identifier for login, OTP delivery, and account notifications);
• Email address (where provided for correspondence or promotional opt-in).

3.3 Financial Data

• GCash, PayMaya, BPI, BDO, Metrobank, and other payment account references (masked — ph355 does not store full card numbers or full e-wallet credentials);
• Deposit amounts, dates, and payment method identifiers;
• Withdrawal requests, amounts, and processing status;
• Account Balance at any point in time.

3.4 Gaming & Transactional Data

• Wager amounts, game titles played, session durations, and win/loss records;
• Bonus activations and wagering requirement progress;
• Self-imposed limit settings and responsible gaming tool usage;
• Tournament participation and leaderboard positions.

3.5 Technical & Device Data

• IP address and general geographic location derived therefrom;
• Device type, operating system, and browser version;
• Session start and end timestamps;
• Cookie identifiers and session tokens (see Section 8).

3.6 Communications Data

• Records of live chat support interactions, including transcripts retained for quality assurance and dispute resolution purposes;
• Records of SMS communications initiated by ph355 (OTPs, account notifications, promotional messages where you have opted in).

4. How We Collect Data

ph355 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit, request a withdrawal, contact support, or update your account settings;
• Automatically — through cookies, session tokens, and server logs when you interact with the Platform (see Section 8);
• From third-party payment providers — GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors provide transaction reference data to ph355 to confirm deposit and withdrawal processing;
• From identity verification providers — ph355 may engage accredited KYC service providers to assist with identity document verification and anti-money laundering (AML) checks as required under PAGCOR regulations.

5. Legal Basis for Processing

ph355 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

Processing Purpose	Legal Basis
Account registration and identity verification	Contractual necessity; Legal obligation (PAGCOR KYC requirements)
Processing deposits and withdrawals	Contractual necessity; Legal obligation (AML compliance)
Delivering gaming services and game history	Contractual necessity
Fraud prevention and security monitoring	Legitimate interest; Legal obligation
Responsible gaming monitoring and enforcement	Legal obligation (PAGCOR responsible gaming requirements)
Customer support and dispute resolution	Contractual necessity; Legitimate interest
Marketing and promotional communications	Consent (where separately obtained)
Regulatory reporting to PAGCOR and NPC	Legal obligation

6. How We Use Your Data

ph355 uses collected personal data strictly for the following purposes:

1. To create and maintain your ph355 Account and verify your identity in compliance with PAGCOR's KYC requirements;
2. To process deposits and withdrawals through your chosen Philippine payment method (GCash, PayMaya, BPI, BDO, Metrobank, or others);
3. To deliver the gaming services you access — including slot games, live dealer tables, sports betting, bingo rooms, and sabong — and to record your gaming activity accurately;
4. To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct as required by Philippine law and PAGCOR regulations;
5. To monitor gaming behaviour for responsible gaming purposes, including detecting patterns that may indicate problem gambling, and to enforce self-imposed player limits and exclusions;
6. To provide customer support and resolve disputes through our 24/7 live chat team;
7. To send transactional SMS communications — login OTPs, deposit confirmations, withdrawal notifications, and security alerts — to your registered Philippine mobile number;
8. To send promotional communications, including bonus offers and tournament announcements, where you have provided separate opt-in consent;
9. To comply with regulatory reporting obligations to PAGCOR, the NPC, and other competent Philippine authorities.

ph355 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances.

7. Data Sharing

ph355 may share your personal data with the following categories of recipients, strictly as necessary for the purposes described in Section 6:

• Payment processors — GCash (Mynt/Globe), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, InstaPay, and other payment infrastructure providers, for the purpose of processing deposits and withdrawals;
• Game content providers — JILI, Pragmatic Play, PG Soft, CQ9, Spadegaming, and other licensed game software suppliers, who may receive anonymised session data for technical integrity and RNG certification purposes;
• KYC and AML service providers — third-party identity verification and compliance screening services engaged by ph355 to fulfil its obligations under PAGCOR regulations and the Anti-Money Laundering Act;
• Regulatory authorities — PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law or by ph355's licence conditions;
• Professional advisers — lawyers, auditors, and accountants bound by confidentiality obligations, where necessary for ph355 to obtain professional advice or conduct audits;
• Technology and hosting providers — cloud infrastructure, cybersecurity, and data centre providers engaged by ph355 under data processing agreements that impose equivalent data protection obligations.

Any third party with whom ph355 shares personal data is required by contract to process such data only in accordance with ph355's instructions and applicable Philippine privacy law.

8. Cookies & Tracking Technologies

The ph355 Platform uses cookies and similar tracking technologies to ensure the proper functioning of the Platform, maintain your login session, and improve your user experience. The categories of cookies used are:

• Strictly Necessary Cookies — essential for the Platform to function. These include session authentication tokens that keep you logged in to your ph355 Account during an active session. You cannot opt out of these cookies and continue to use the Platform.
• Functional Cookies — remember your preferences, such as preferred game categories, display language, and responsible gaming limit settings. Disabling these may affect Platform functionality.
• Analytics Cookies — collect anonymised data about how players navigate the Platform (pages visited, session duration, feature usage) to help ph355 improve the product. ph355 uses only first-party analytics tools; no third-party analytics scripts that share data externally are deployed.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to the Platform.

9. Data Retention

ph355 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention schedules:

• Account and KYC data — retained for a minimum of five (5) years from Account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Financial transaction records — retained for a minimum of five (5) years from the date of the relevant transaction;
• Gaming history records — retained for three (3) years from Account closure;
• Customer support transcripts — retained for two (2) years from the date of the interaction;
• Marketing consent records — retained until consent is withdrawn plus one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ph355's data destruction procedures.

10. Data Security

ph355 implements technical and organisational measures appropriate to the sensitivity of the personal data it processes. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph355 Platform;
• Encryption at rest for all databases containing personal and financial data;
• Role-based access controls — ph355 staff may access personal data only to the extent necessary for their specific job function;
• Multi-factor authentication for all staff accessing internal systems containing player data;
• Regular penetration testing and vulnerability assessments conducted by accredited third-party cybersecurity firms;
• DDoS protection and web application firewall (WAF) technology to safeguard Platform availability and integrity.

Notwithstanding the foregoing, no data transmission over the internet or electronic storage system is completely secure. ph355 cannot guarantee absolute security and encourages all players to enable 2FA on their ph355 Accounts and to use strong, unique passwords.

11. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by ph355:

• Right to be Informed — you have the right to know that ph355 collects and processes your personal data, which this Policy provides;
• Right of Access — you may request a copy of the personal data ph355 holds about you;
• Right to Rectification — you may request correction of inaccurate or incomplete personal data in your ph355 Account;
• Right to Erasure — you may request deletion of your personal data, subject to ph355's legal retention obligations under PAGCOR regulations and the Anti-Money Laundering Act;
• Right to Object — you may object to processing of your personal data for marketing purposes at any time;
• Right to Data Portability — you may request a copy of your personal data in a structured, machine-readable format;
• Right to Lodge a Complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph355 has violated your data privacy rights.

To exercise any of the above rights, please contact the ph355 Data Privacy Officer through the live chat support channel. ph355 will respond to verified requests within fifteen (15) business days in accordance with NPC guidelines.

12. Minors

The ph355 Platform is not directed at or intended for use by individuals under the age of 21. ph355 does not knowingly collect personal data from individuals under 21. If ph355 becomes aware that personal data has been collected from an individual under 21 without parental consent, it will take immediate steps to delete such data and close the relevant Account. If you have reason to believe that a minor has registered on the Platform, please contact ph355 support immediately.

13. Third-Party Links

The ph355 Platform does not contain links to external third-party websites. This Policy applies exclusively to data collected and processed through the ph355 Platform at ph355.org and its sub-domains. ph355 is not responsible for the privacy practices of any third-party payment processors or game content providers accessed externally; players should review the privacy policies of those entities independently.

14. Changes to This Policy

ph355 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR regulatory requirements, or ph355's internal data handling practices. Material changes will be communicated to registered players via SMS to their registered mobile number no less than seven (7) calendar days before the amended Policy takes effect. The updated Policy will also be published on this page with a revised "Last Updated" date. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ph355, please contact our Data Privacy Officer:

• Via live chat support — available 24/7 on the ph355 Platform;
• By email: support ph355.org (please include "Privacy Request" in the subject line);
• By post: Data Privacy Officer, ph355 Gaming Corporation, Pasay City, Metro Manila, Philippines.

You may also contact the National Privacy Commission of the Philippines directly if you wish to lodge a formal complaint regarding ph355's data protection practices.