Privacy Policy

1 Overview

ph355 is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that trust is the foundation of any good relationship — and that trust starts with being transparent about how we handle your information.

This Policy applies to all personal data collected through the ph355 website, mobile interface, customer support channels, and any other touchpoints where you interact with ph355. It covers data collected from players based in the Philippines and is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

ph355 processes personal data only for legitimate, specified, and explicit purposes. We collect only what is necessary, retain it only for as long as required, and protect it with industry-standard security measures at all times.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, ph355 acts as the Personal Information Controller (PIC) with respect to the personal data of its registered players and website visitors. ph355 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine privacy laws.

ph355 has appointed a Data Protection Officer (DPO) who is registered with the National Privacy Commission. The DPO oversees ph355's data protection compliance program, handles data subject rights requests, and serves as the primary point of contact for privacy-related inquiries. Contact details for the DPO are provided in Section 14 of this Policy.

3 Personal Data We Collect

ph355 collects the following categories of personal data from Players and website visitors:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, government ID number	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, residential address	Account management, customer support, regulatory notifications
Financial Data	GCash number, bank account details, debit card details, transaction history	Processing deposits and withdrawals, AML compliance
Technical Data	IP address, device type, browser type, operating system, session data	Platform security, fraud prevention, service optimization
Usage Data	Games played, bet amounts, session duration, login history	Responsible gaming monitoring, personalization, analytics
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support, dispute resolution, quality assurance
Verification Documents	Copies of government-issued ID, proof of address, selfie photos	KYC compliance, identity verification, fraud prevention

ph355 does not intentionally collect sensitive personal information (as defined under RA 10173) such as health data, religious beliefs, or political affiliations, unless specifically required by law or regulatory mandate.

4 How We Collect Your Data

ph355 collects personal data through the following means:

4.1 Direct Collection

Information you provide directly to ph355 when you: register for an Account; complete KYC verification; make a deposit or withdrawal; contact customer support; participate in promotions or surveys; or update your Account profile.

4.2 Automated Collection

Technical and usage data collected automatically when you access the ph355 platform, including through cookies, web beacons, log files, and similar tracking technologies. This data is collected to ensure platform security, prevent fraud, and improve the user experience.

4.3 Third-Party Sources

ph355 may receive personal data from third parties in limited circumstances, including:

• Payment processors (GCash, PayMaya, banks) — transaction confirmation and fraud signals.
• Identity verification providers — results of automated KYC checks.
• Regulatory authorities — information shared pursuant to legal obligations, including PAGCOR compliance requirements.
• Anti-fraud and AML screening services — watchlist screening results.

5 Purpose & Legal Basis for Processing

ph355 processes your personal data only for the following specified, legitimate purposes and on the following legal bases under RA 10173:

Purpose	Legal Basis
Account registration and management	Performance of contract (Terms & Conditions)
Processing deposits and withdrawals	Performance of contract; legal obligation
KYC and age verification	Legal obligation (PAGCOR regulations, RA 9160)
Anti-money laundering (AML) compliance	Legal obligation (RA 9160, AMLA)
Fraud prevention and platform security	Legitimate interest; legal obligation
Responsible gaming monitoring	Legal obligation; legitimate interest
Customer support and dispute resolution	Performance of contract; legitimate interest
Marketing and promotional communications	Consent (opt-in only)
Platform analytics and improvement	Legitimate interest
Regulatory reporting to PAGCOR and NPC	Legal obligation

Where ph355 relies on your consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact ph355 customer support or update your Account notification preferences.

6 Sharing Your Personal Data

ph355 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:

6.1 Service Providers

ph355 engages trusted third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under data processing agreements. These include payment processors (GCash, PayMaya, Philippine banks), KYC verification providers, cloud hosting providers, customer support platform providers, and analytics services. All PIPs are contractually bound to process data only on ph355's instructions and to maintain appropriate security measures.

6.2 Game Providers

ph355 partners with licensed game providers to deliver casino games, fishing games, bingo, and slots on our platform. Limited technical data (such as session tokens and bet data) may be shared with game providers solely for the purpose of delivering the game experience. Game providers are not permitted to use this data for any other purpose.

6.3 Regulatory and Legal Disclosure

ph355 may disclose your personal data to regulatory authorities, law enforcement agencies, and government bodies where required by Philippine law, including but not limited to: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and the Bureau of Internal Revenue (BIR). Such disclosures are made only to the extent required by applicable law and in accordance with proper legal process.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ph355's business, your personal data may be transferred to the acquiring entity as part of that transaction. ph355 will notify affected Players via their registered email address prior to any such transfer and will ensure that the receiving entity is bound by privacy obligations no less protective than those in this Policy.

6.5 Protection of Rights

ph355 may disclose personal data where we reasonably believe disclosure is necessary to: protect the rights, property, or safety of ph355, its Players, or the public; investigate suspected fraud, money laundering, or other illegal activity; or enforce our Terms & Conditions.

7 Data Retention

ph355 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

Data Category	Retention Period
Account and identity data	Duration of Account plus 5 years after closure
Financial transaction records	10 years from transaction date (AMLA requirement)
KYC verification documents	5 years after Account closure or last transaction
Customer support communications	3 years from date of interaction
Technical and usage logs	12 months from collection
Marketing consent records	Until consent is withdrawn, plus 3 years

Upon expiry of the applicable retention period, ph355 will securely delete or anonymize your personal data in accordance with NPC-approved disposal methods. Where data cannot be immediately deleted due to technical constraints, it will be isolated and protected from further processing until deletion is possible.

8 Data Security

ph355 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All personal and financial data is encrypted at rest using AES-256 and in transit using TLS 1.3. ph355 login credentials are stored as salted cryptographic hashes and are never stored in plaintext.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All ph355 staff with access to personal data undergo background checks and regular privacy training.
• Network Security: ph355's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services.
• Vulnerability Management: ph355 conducts regular penetration testing and security audits of its platform and infrastructure.
• Incident Response: ph355 maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to Players, ph355 will notify the NPC within 72 hours and affected Players without undue delay, as required by NPC Circular 16-03.
• Two-Factor Authentication: ph355 offers two-factor authentication (2FA) for Player accounts and strongly encourages all Players to enable this feature.

9 Cookies & Tracking Technologies

ph355 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the ph355 website. The following types of cookies are used:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Essential for platform operation — session management, security tokens, login state	No — required for platform to function
Functional	Remember your preferences such as language, game settings, and display options	Yes — disabling may affect experience
Analytics	Aggregate, anonymized data on how Players use the platform to help us improve it	Yes — opt out via cookie settings
Security	Fraud detection, bot prevention, and suspicious activity monitoring	No — required for platform security

ph355 does not use advertising or third-party marketing cookies. You can manage your cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the ph355 platform.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ph355:

To exercise any of the above rights, please contact ph355's Data Protection Officer using the contact details in Section 14. ph355 will respond to all data subject rights requests within fifteen (15) business days of receipt, as required by NPC regulations. We may request proof of identity before processing your request to protect against unauthorized access to your data.

11 Minors & Age Restriction

The ph355 platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing casino-style gambling in the Philippines. ph355 does not knowingly collect personal data from individuals under the age of 21.

If ph355 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated Account, delete the personal data in question, and report the matter to the relevant regulatory authorities where required.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to ph355, please contact our Data Protection Officer immediately using the details in Section 14 so that we can take prompt corrective action.

12 International Data Transfers

ph355 primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where ph355 uses internationally hosted cloud infrastructure or game provider systems.

Where such international transfers occur, ph355 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the NPC.
• Implementing contractual clauses in agreements with overseas processors that impose data protection obligations equivalent to those under RA 10173.
• Conducting transfer impact assessments where required by NPC guidelines.

ph355 will not transfer your personal data to jurisdictions that do not provide adequate data protection safeguards without your explicit consent or a valid legal basis under RA 10173.

13 Updates to This Privacy Policy

ph355 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC regulations, or business operations. When material changes are made, ph355 will:

• Update the "Effective Date" at the top of this Policy.
• Notify registered Players via their registered email address at least fourteen (14) days before the changes take effect.
• Display a prominent notice on the ph355 platform for a reasonable period following the update.

Your continued use of the ph355 platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Policy, you must cease using ph355 and may request Account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how ph355 protects your personal data.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph355, please contact our Data Protection Officer through the following channels:

Channel	Details
DPO Email	[email protected]
General Support Email	[email protected]
Live Chat	Available 24/7 on the ph355 platform — average response under 2 minutes
Response Time	Within 15 business days for formal data subject rights requests

If you are not satisfied with ph355's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.