This Privacy Policy explains how ph368 collects, uses, stores, and protects the personal information of players and visitors in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations.
Our Privacy Commitments
Before diving into the full legal text, here are six core commitments that summarize how ph368 handles your personal data as a Filipino player.
ph368 processes all personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012, and the National Privacy Commission's implementing regulations. Your data rights as a Filipino data subject are fully recognized and enforceable against ph368.
All data transmitted between your device and the ph368 platform is protected using industry-standard 256-bit SSL/TLS encryption. Personal and financial information is never transmitted over unencrypted connections. Your GCash account details, bank information, and login credentials are encrypted in transit and at rest.
ph368 does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. Period. Data shared with third-party service providers is strictly limited to what is necessary for those providers to perform their contracted services on behalf of ph368, and is governed by binding data processing agreements.
Filipino players have the right to access, correct, object to, and request erasure of their personal data held by ph368, subject to applicable legal and regulatory retention requirements. Data subject rights requests are processed within 15 business days of receipt by the ph368 Data Protection Officer.
ph368 applies the data minimization principle – only collecting personal data that is directly necessary for the specific purpose for which it is collected. We do not collect data speculatively or maintain data beyond its useful retention period. Inactive account data is reviewed regularly for lawful disposal.
Marketing communications from ph368 – including promotional emails, SMS notifications, and platform messages – require your prior consent and may be withdrawn at any time through your Account settings or by contacting the ph368 support team. Withdrawing marketing consent does not affect your ability to use the ph368 platform.
For the purposes of Republic Act No. 10173 (Data Privacy Act of 2012) and all applicable Philippine data protection regulations, the data controller responsible for the personal data collected through the ph368 platform is the operator of ph368.one (hereinafter referred to as "ph368," "we," "us," or "our").
ph368 has designated a Data Protection Officer (DPO) as required under the DPA 2012 and its Implementing Rules. The DPO is responsible for overseeing ph368's data protection strategy, ensuring compliance with applicable Philippine privacy law, and serving as the primary point of contact for data subject rights requests and National Privacy Commission (NPC) inquiries.
ph368 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and in limited circumstances from third-party service providers such as payment processors. The categories of data collected are described below.
ph368 may receive personal data about you from payment service providers (for transaction verification and anti-fraud purposes), identity verification service providers (for KYC compliance), and, where you have provided consent, social login providers such as Google or Facebook. Data received from third parties is handled in accordance with this Privacy Policy.
| Data Category | Primary Purpose | Legal Basis |
|---|---|---|
| Registration data | Account creation, authentication | Contract performance |
| KYC / identity documents | Age verification, AML compliance | Legal obligation |
| Payment details | Deposits, withdrawals, fraud prevention | Contract performance, legal obligation |
| Device and usage data | Platform security, fraud detection, improvement | Legitimate interest |
| Communication records | Support, dispute resolution | Contract performance, legitimate interest |
| Marketing preferences | Promotional communications | Consent |
ph368 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The applicable legal bases for ph368's data processing activities are:
ph368 uses the personal data it collects for the following purposes, each tied to a specific lawful basis as described in Section 3:
We use your registration data and ongoing account activity data to create and maintain your ph368 Account, authenticate your identity at login, process deposits and withdrawals through your nominated payment method (GCash, PayMaya, BDO, BPI, or Metrobank), and provide you with access to the full range of ph368 games and features.
ph368 is required to verify the age and identity of all players prior to enabling withdrawal access. KYC data including government-issued ID documents is used to confirm that you meet the minimum age requirement of 21 years, that you are who you say you are, and to satisfy ph368's obligations under Philippine anti-money laundering regulations. This processing is a legal obligation and cannot be refused without restricting account functionality.
Device data, usage patterns, IP addresses, and transaction history are analyzed to detect and prevent fraudulent activity, unauthorized account access, money laundering, bonus abuse, and other prohibited conduct described in the ph368 Terms and Conditions. This processing is in the legitimate interests of ph368 and its player community.
Support communications, account history, and relevant personal data are used to respond to your inquiries, resolve disputes, and investigate complaints. Support records are retained for the period necessary to resolve the matter and for a further period to address potential follow-up requests or regulatory inquiries.
Account activity data including deposit patterns, game session durations, and loss history may be analyzed to identify potential problem gambling behavior. Where such indicators are detected, ph368 may use this data to proactively contact affected players with responsible gaming resources and to apply protective measures as authorized under our responsible gaming framework and the ph368 Terms and Conditions.
Aggregated and anonymized usage data is used to understand how Filipino players interact with the ph368 platform, identify performance bottlenecks, prioritize development resources, and improve the overall player experience. Where analytics involve non-anonymized personal data, such processing is governed by ph368's legitimate interests in improving its services.
ph368 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:
ph368 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit ph368.one. The types of cookies used by ph368 are:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the ph368 platform. Most modern browsers (Chrome, Firefox, Safari) provide granular cookie controls accessible via Settings → Privacy.
ph368 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation (AML, AMLC) |
| KYC / identity documents | 5 years after account closure or last transaction | AMLC reporting requirements |
| Transaction records | 5 years from transaction date | AMLC, tax, regulatory compliance |
| Support communications | 3 years from resolution | Legitimate interest, dispute resolution |
| Device and usage logs | 12 months from collection | Fraud prevention, security |
| Marketing consent records | Until consent withdrawn + 3 years | Proof of consent (DPA 2012) |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph368's data disposal procedures. Anonymized data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.
ph368 implements technical and organizational security measures appropriate to the risk level associated with the personal data it processes. These measures include but are not limited to:
As a data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by ph368. These rights may be exercised by contacting the ph368 Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request."
Request a copy of the personal data ph368 holds about you, along with information about how it is used and with whom it has been shared.
Request correction of inaccurate or incomplete personal data. Some corrections may require supporting documentation for verification purposes.
Request deletion of your personal data where it is no longer necessary, where consent has been withdrawn, or where processing is unlawful – subject to legal retention obligations.
Object to processing of your personal data based on legitimate interests, including profiling for marketing purposes. Marketing objections are honored immediately.
Receive your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible and applicable.
If you believe ph368 has processed your data unlawfully, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
ph368 will respond to data subject rights requests within 15 business days of receipt. In complex cases, this period may be extended by up to one month, and you will be notified of any extension within the initial 15-business-day period. There is no charge for making a data subject rights request unless requests are manifestly unfounded, excessive, or repetitive.
The ph368 platform is intended exclusively for individuals who are 21 years of age or older, in compliance with Philippine gaming regulations. ph368 does not knowingly collect personal data from any individual under the age of 21.
If ph368 becomes aware that personal data has been collected from an individual under the age of 21, all such data will be immediately and permanently deleted, the associated Account will be closed, and any deposits or winnings associated with the underage Account will be handled in accordance with the ph368 Terms and Conditions and applicable regulatory requirements.
If you are a parent or guardian and believe that your child (under 21) has provided personal data to ph368, please contact the ph368 Data Protection Officer immediately at [email protected].
Some of ph368's third-party service providers – including cloud hosting providers and identity verification services – may be located outside the Republic of the Philippines and may process your personal data in those jurisdictions. Where such cross-border data transfers occur, ph368 ensures that appropriate safeguards are in place to protect your personal data to the standards required by the Data Privacy Act of 2012 and NPC regulations.
Safeguards may include contractual clauses requiring equivalent data protection standards, transfers to jurisdictions that have been assessed as providing adequate data protection, or explicit consent where required by applicable law. A list of countries to which data may be transferred is available upon request from the ph368 Data Protection Officer.
ph368 sends promotional and marketing communications – including bonus offers, tournament announcements, and platform updates – only to players who have provided their prior consent during registration or subsequently through Account settings. Marketing communications are sent via email and SMS to your registered ph368 contact details.
You may withdraw your marketing consent at any time by updating your preferences in Account Settings, by clicking the "unsubscribe" link in any marketing email from ph368, or by contacting ph368 support. Withdrawal of marketing consent does not affect your ability to receive essential service communications such as withdrawal notifications, security alerts, and Account status updates.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, ph368 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03 on Personal Data Breach Management.
Where a breach is likely to result in a high risk to the rights and freedoms of affected players, ph368 will also notify the affected individuals directly without undue delay. Breach notifications to players will be communicated via your registered email address and, where warranted by the severity of the breach, via SMS to your registered Philippine mobile number.
ph368 maintains a documented Personal Data Breach Response Plan and conducts regular simulated breach exercises to ensure organizational readiness. The Data Protection Officer coordinates all breach response activities.
ph368 reviews this Privacy Policy regularly and may update it to reflect changes in applicable Philippine privacy law, NPC guidance, ph368's data processing activities, or industry best practice. The effective date at the top of this document indicates when the most recent revision was made.
Material changes to this Privacy Policy that significantly affect how we process your personal data will be communicated to you via email to your registered address or via a prominent notice on the ph368 platform at least 15 days before the changes take effect. Continued use of the ph368 platform following the effective date of any updated Privacy Policy constitutes acknowledgment of the changes.
The current version of this Privacy Policy is always available at ph368.one/privacy-policy. If you are reviewing a cached or printed copy, please visit the live URL to confirm you are reading the current version.
For any questions, concerns, or requests relating to this Privacy Policy or ph368's data processing practices, please contact:
This Privacy Policy was drafted in compliance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and applicable NPC issuances. It was last reviewed and effective from 1 January 2026.
Your Data Is Protected
Your personal data is protected under the Philippine Data Privacy Act of 2012, secured with 256-bit SSL encryption, and never sold to third parties. Play 300+ games, bet on PBA and UFC, and withdraw instantly to GCash – knowing your privacy is taken seriously.
🔞 Players must be 21 years of age or older. Gambling involves risk. Please play responsibly.