ph386 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") explains how ph386 ("ph386," "we," "us," "our") collects, uses, discloses, stores, and protects personal information obtained from users ("you," "User," "Player") of our online gaming platform located at https://ph386.cam (the "Platform") and related services (collectively, the "Services").

ph386 operates as a PAGCOR-licensed online gaming operator in the Republic of the Philippines. We are committed to protecting your privacy and handling your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), National Privacy Commission (NPC) advisories and circulars, PAGCOR regulatory requirements, and applicable anti-money laundering laws.

By creating an account, accessing the Platform, or using any ph386 Services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Policy. If you do not agree with this Policy, you must immediately discontinue use of ph386 Services.

1.1 Data Controller

ph386 acts as the data controller for the personal information collected through the Platform. We determine the purposes and means of processing your personal data. Our Data Protection Officer can be contacted at [email protected] for questions regarding data processing activities.

1.2 Consent

Where required under the Data Privacy Act, we obtain your explicit consent before collecting and processing sensitive personal information. Registration on ph386 constitutes consent for processing of personal information necessary to provide gaming services, subject to the limitations and safeguards described in this Policy.

2. Information We Collect

2.1 Personal Information

Personal information refers to any information from which your identity is apparent or can be reasonably ascertained. ph386 collects the following categories of personal information:

• Identity Information: Full legal name (as shown on government ID), date of birth, nationality, gender, government-issued identification number (passport, driver's license, SSS, UMID);
• Contact Information: Email address, mobile telephone number, residential address, city, province, postal code;
• Account Credentials: Username, password (stored in encrypted hash form only), security questions and answers;
• Financial Information: Payment method details (GCash number, PayMaya account, bank account information), transaction history, deposit and withdrawal records, wagering activity;
• Verification Documents: Copies of government-issued identification, proof of address (utility bills, bank statements), selfie photographs for identity verification;
• Technical Information: IP address, device identifiers, browser type and version, operating system, time zone setting, geographic location data, cookie identifiers;
• Usage Information: Gaming activity (games played, bets placed, wins and losses), login timestamps, page views, clickstream data, communication records with customer support.

2.2 Sensitive Personal Information

Sensitive personal information under the Data Privacy Act includes information revealing government-issued identification numbers and biometric data. We collect and process the following sensitive personal information only when strictly necessary and with your explicit consent:

• Government-issued identification numbers (for age verification and regulatory compliance);
• Facial image data from selfie verification (for identity authentication);
• Financial account numbers (for secure payment processing);
• Records related to self-exclusion or problem gambling interventions (for responsible gaming programs).

2.3 Aggregated and Anonymized Data

We may create aggregated or anonymized data from personal information by removing information that makes the data personally identifiable. Such anonymized data is not considered personal information under the Data Privacy Act and may be used for analytics, research, and service improvement without further notice.

3. How We Collect Information

3.1 Direct Collection

We collect personal information directly from you when you:

• Register an account and complete the registration form;
• Submit identity verification documents;
• Make deposits or request withdrawals;
• Place bets or play games on the Platform;
• Contact customer support via live chat, email, or phone;
• Subscribe to promotional communications;
• Participate in surveys, promotions, or tournaments;
• Update your account information or preferences.

3.2 Automated Collection

We automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies when you access or use the Platform. This includes IP addresses, device information, browsing behavior, and interaction data. For more information, see Section 9 (Cookies and Tracking Technologies).

3.3 Third-Party Sources

We may receive information about you from third-party service providers, including:

• Payment Processors: Transaction verification and fraud detection data from GCash, PayMaya, and banking partners;
• Identity Verification Services: Verification status and document authentication results;
• Marketing Partners: Attribution data if you accessed ph386 through affiliate or referral links;
• Regulatory Authorities: Information received in response to PAGCOR or AMLC inquiries.

4. How We Use Your Information

4.1 Primary Purposes

ph386 uses your personal information for the following primary purposes:

• Service Provision: Creating and managing your account, processing deposits and withdrawals, enabling gameplay, recording gaming transactions, displaying account balance and transaction history;
• Identity Verification: Verifying your age (21+ requirement), confirming your identity, validating payment method ownership, preventing multiple accounts and identity fraud;
• Regulatory Compliance: Meeting PAGCOR licensing requirements, complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Philippine law, responding to regulatory audits and inquiries;
• Responsible Gaming: Implementing deposit limits, monitoring for problematic gambling patterns, facilitating self-exclusion programs, enforcing cooling-off periods;
• Customer Support: Responding to inquiries, resolving disputes, investigating complaints, providing technical assistance;
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, unauthorized access, bonus abuse, collusion, and other Terms violations;
• Service Improvement: Analyzing usage patterns, testing new features, optimizing Platform performance, enhancing user experience;
• Marketing and Promotions: Sending promotional offers, bonus notifications, and gaming updates (with your consent, and with opt-out options).

4.2 Legal Basis for Processing

Under the Data Privacy Act, we process your personal information based on the following legal grounds:

• Consent: You have given explicit consent for specific processing activities;
• Contract Performance: Processing is necessary to fulfill our contractual obligations under the Terms of Service;
• Legal Obligation: Processing is required to comply with PAGCOR regulations, AML/CTF laws, and other Philippine legal requirements;
• Legitimate Interests: Processing serves our legitimate business interests (fraud prevention, service improvement) while not overriding your fundamental rights.

5. Information Sharing and Disclosure

5.1 When We Share Information

ph386 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share personal information only in the following limited circumstances:

5.2 Service Providers

We share personal information with trusted third-party service providers who perform functions on our behalf, including:

• Payment Processors: GCash, PayMaya, banking institutions, and payment gateway providers (to process deposits and withdrawals);
• Identity Verification Services: Third-party KYC (Know Your Customer) verification vendors;
• Game Providers: Licensed third-party game developers and suppliers (limited technical data only);
• Cloud Infrastructure: Hosting and server providers operating within the Philippines;
• Customer Support: Live chat platform providers and CRM systems;
• Marketing Services: Email delivery platforms and analytics providers (anonymized data only).

All service providers are contractually obligated to maintain the confidentiality and security of your personal information and may use it only for the specific purposes for which it was disclosed.

5.3 Regulatory and Legal Disclosures

We disclose personal information when required by law or when we believe disclosure is necessary to:

• Comply with PAGCOR regulatory requirements, audits, and investigations;
• Respond to lawful requests from law enforcement agencies, courts, or government authorities;
• Meet anti-money laundering reporting obligations to the Anti-Money Laundering Council (AMLC);
• Enforce our Terms of Service and other agreements;
• Protect the rights, property, or safety of ph386, our users, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or similar corporate transaction involving ph386, your personal information may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

5.5 With Your Consent

We may share personal information with third parties when you have given explicit consent for such sharing, such as participating in co-branded promotions or referring friends.

6. Data Security Measures

6.1 Technical Security

ph386 employs industry-standard technical safeguards to protect personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: SSL/TLS encryption for all data transmissions between your device and our servers; AES-256 encryption for sensitive data at rest;
• Access Controls: Role-based access restrictions, multi-factor authentication for administrative accounts, regular access reviews;
• Network Security: Firewalls, intrusion detection and prevention systems, DDoS protection, network segmentation;
• Secure Infrastructure: Servers hosted in certified data centers within the Philippines with physical security controls;
• Regular Testing: Penetration testing, vulnerability assessments, and security audits conducted by independent third parties.

6.2 Organizational Security

We implement organizational measures to ensure data security:

• Employee training on data privacy and security best practices;
• Confidentiality agreements with all personnel having access to personal information;
• Background checks for employees handling sensitive data;
• Incident response procedures and breach notification protocols;
• Regular review and update of security policies and procedures.

6.3 Your Security Responsibilities

You are responsible for maintaining the confidentiality of your account credentials. Never share your password with others. If you suspect unauthorized access to your account, immediately change your password and contact customer support.

7. Data Retention and Deletion

7.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy and to comply with legal and regulatory obligations:

• Active Accounts: Information is retained for the duration of your active account plus applicable retention period;
• Closed Accounts: After voluntary account closure, personal information is retained for five (5) years to comply with PAGCOR record-keeping requirements and potential dispute resolution;
• Transaction Records: Gaming and financial transaction records are retained for seven (7) years in accordance with Philippine AML/CTF laws;
• Marketing Communications: Marketing consent records are retained until you withdraw consent, plus three (3) years for audit purposes;
• Legal Matters: Information related to disputes, investigations, or legal proceedings is retained until final resolution plus applicable statute of limitations.

7.2 Secure Deletion

Upon expiration of retention periods, personal information is securely deleted or anonymized using industry-standard data destruction methods to prevent recovery.

8. Your Privacy Rights

8.1 Rights Under the Data Privacy Act

Under Republic Act No. 10173, you have the following rights regarding your personal information:

• Right to Be Informed: Right to know how your personal information is collected, used, and shared (provided through this Policy);
• Right to Access: Right to obtain confirmation of whether ph386 is processing your personal information and to access such information;
• Right to Object: Right to object to processing of your personal information, including for direct marketing purposes;
• Right to Rectification: Right to correct inaccurate or incomplete personal information;
• Right to Erasure or Blocking: Right to request deletion or blocking of personal information when processing is unlawful or no longer necessary (subject to legal retention obligations);
• Right to Data Portability: Right to receive your personal information in a structured, commonly used, and machine-readable format;
• Right to Damages: Right to seek compensation for damages arising from inaccurate, incomplete, outdated, unlawfully obtained, or unauthorized use of personal information.

8.2 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] or submit a request through your account settings. We will respond to requests within fifteen (15) business days. Identity verification may be required to prevent unauthorized disclosures.

8.3 Limitations on Rights

Certain rights may be limited where we have compelling legal obligations to retain information (PAGCOR regulations, AML/CTF laws, ongoing investigations, unresolved disputes). We will explain any limitations when responding to your request.

8.4 Right to Complain

If you believe ph386 has violated your privacy rights or the Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC):

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto St., Pasay City, Metro Manila 1307
Email: [email protected]
Website: www.privacy.gov.ph

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device by your web browser. They allow websites to recognize your device and remember information about your visit. ph386 uses cookies and similar tracking technologies (web beacons, pixels, local storage) to provide and improve Services.

9.2 Types of Cookies We Use

• Essential Cookies: Strictly necessary for Platform operation, authentication, security, and fraud prevention. Cannot be disabled.
• Functional Cookies: Remember your preferences (language, display settings) and provide enhanced features.
• Performance Cookies: Collect anonymous information about how visitors use the Platform to improve performance and user experience.
• Marketing Cookies: Track your activity across websites to deliver personalized advertisements. You can opt out through browser settings or the cookie banner.

9.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may impair Platform functionality. Most browsers accept cookies by default but allow you to change settings to block or delete cookies.

10. Children's Privacy

ph386 Services are strictly prohibited for individuals under the age of twenty-one (21). We do not knowingly collect personal information from minors. Age verification is required before account activation. If we discover that we have collected information from a person under 21, we will immediately delete such information and permanently close the account. If you believe a minor has created an account, contact us immediately at [email protected].

11. International Data Transfers

ph386 primarily stores and processes personal information within the Republic of the Philippines. However, some service providers may process data in other jurisdictions. When personal information is transferred outside the Philippines, we ensure adequate safeguards are in place through:

• Standard contractual clauses approved by the National Privacy Commission;
• Transfers to jurisdictions with adequate data protection laws;
• Explicit consent for specific transfers where required.

By using ph386 Services, you consent to such transfers subject to the safeguards described above.

12. Changes to This Policy

12.1 Policy Updates

ph386 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or Service offerings. The "Last Updated" date at the top of this Policy indicates when changes were last made.

12.2 Notice of Material Changes

Material changes that significantly affect how we collect, use, or disclose personal information will be communicated to you via email notification at least thirty (30) days before the changes take effect. We will also display a prominent notice on the Platform.

12.3 Continued Use

Your continued use of ph386 Services after the effective date of the updated Policy constitutes acceptance of the changes. If you do not agree to the modified Policy, you must discontinue use and may close your account.

13. Contact Information

13.1 Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, contact our Data Protection Officer:

ph386 Data Protection Officer
Email: [email protected]
Response Time: Within 15 business days

13.2 General Inquiries

For general customer support inquiries:

• Email: [email protected]
• Live Chat: Available 24/7 on the ph386 Platform