php356 Privacy Policy

php356 ("we," "us," "our") is committed to protecting the personal data of every player who registers and participates on our platform. We understand that Filipino players entrust us with sensitive personal and financial information when they create a php356 account, and we take that responsibility seriously.

This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations as promulgated by the National Privacy Commission (NPC). This Policy explains in clear, plain terms: what personal data php356 collects, why we collect it, how we process it, with whom we may share it, how long we keep it, and what rights you have as a data subject under Philippine law.

This Privacy Policy should be read together with the php356 Terms & Conditions, which govern your use of the platform. Both documents form part of the agreement between you and php356.

php356 collects personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Policy. The categories of personal data we process include:

php356 does not collect or process special categories of sensitive personal data (such as health information, religious beliefs, or political opinions) unless strictly required by applicable law.

php356 collects personal data through the following channels and methods:

• Direct Provision. When you register for a php356 account, complete identity verification (KYC), make a deposit or withdrawal, contact customer support, or participate in any promotional activity, you directly provide personal data to us.
• Automated Technologies. When you browse and use the php356 platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes IP address, browser fingerprint, session data, and gameplay logs.
• Third-Party Verification Services. For identity and age verification, php356 may collect data through licensed KYC service providers who verify submitted identification documents against relevant Philippine government databases.
• Payment Processors. When you deposit or withdraw funds via GCash, PayMaya, BPI, BDO, or Metrobank, transaction confirmation data is received from the respective payment service provider for the purpose of crediting or debiting your php356 wallet.
• Game Providers. Our certified game providers may transmit gameplay data (bet amounts, round results, session durations) to php356 for account management, dispute resolution, and responsible gaming monitoring.

php356 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which php356 processes personal data include:

• Account Administration. Creating, maintaining, securing, and managing your php356 player account, including password resets, security alerts, and account verification.
• Service Delivery. Providing access to php356 games, processing bets and game results, administering bonuses and promotions, and delivering all platform features you use.
• Payment Processing. Executing deposits and withdrawals in Philippine Peso via GCash, PayMaya, and bank transfer, and maintaining accurate transaction records for your account.
• Identity & Age Verification. Confirming that all php356 players are at minimum 21 years of age and that submitted identity documents are authentic, in compliance with Philippine gaming and data privacy regulations.
• Fraud Prevention & Security. Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the platform.
• Legal & Regulatory Compliance. Fulfilling obligations under applicable Philippine laws, including anti-money laundering regulations, tax reporting requirements, and directions from competent Philippine regulatory authorities.
• Customer Support. Responding to inquiries, resolving disputes, processing complaints, and providing ongoing assistance through live chat and email support.
• Responsible Gaming. Monitoring gameplay patterns to identify potential problem gambling behavior and enabling responsible gaming tools including deposit limits, session timers, and self-exclusion.
• Marketing Communications. Sending promotional emails, in-platform notifications, and SMS messages regarding php356 offers and new features, where you have provided consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement. Analyzing aggregated usage data to improve game selection, platform performance, user interface design, and overall player experience on php356.

Under the Data Privacy Act of 2012, php356 processes your personal data on the following legal grounds:

• Contractual Necessity. The majority of processing activities on php356 are necessary to perform our contractual obligations to you as a registered player — including account management, payment processing, game delivery, and customer support. Without this processing, php356 cannot provide its services.
• Legal Obligation. Certain processing activities are required to comply with applicable Philippine laws, including anti-money laundering obligations, age verification requirements under gaming regulations, and tax reporting duties. php356 has no discretion to refuse this processing.
• Legitimate Interests. php356 processes certain technical and usage data on the basis of legitimate interests, including platform security, fraud prevention, service improvement, and network integrity. We ensure these interests do not override your fundamental privacy rights.
• Consent. Where processing is not required by contract or law — specifically, direct marketing communications — php356 relies on your explicit, freely given consent. You may withdraw consent for marketing communications at any time by updating your account preferences or contacting support.

php356 does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients, strictly as required to deliver our services or comply with applicable law:

• Payment Service Providers. GCash (GXI / G-Xchange Inc.), PayMaya (Maya Philippines Inc.), BPI, BDO, and Metrobank receive transaction data necessary to process deposits and withdrawals. These providers are independently licensed and regulated in the Philippines.
• Game Providers. Licensed game suppliers including Pragmatic Play, PG Soft, NetEnt, and others receive account-level identifiers and bet data necessary to deliver game content and resolve disputes.
• KYC & Verification Services. Third-party identity verification providers process submitted identification documents to confirm player identity and age in accordance with regulatory requirements.
• Technology & Infrastructure Partners. Cloud hosting providers, cybersecurity firms, and platform maintenance contractors may process personal data as part of service delivery, strictly under data processing agreements that bind them to the same security and confidentiality standards as php356.
• Regulatory & Law Enforcement Authorities. php356 will disclose personal data to the National Privacy Commission, Anti-Money Laundering Council (AMLC), Bureau of Internal Revenue (BIR), Philippine National Police (PNP), or other competent Philippine authorities where required by law, court order, or lawful regulatory directive.
• Professional Advisers. Legal counsel, auditors, and accountants engaged by php356 may access personal data to the extent necessary to provide their professional services, subject to professional confidentiality obligations.

php356 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The categories of cookies we use include:

• Strictly Necessary Cookies. Essential for the platform to function. These include session authentication cookies, security tokens, and load balancing identifiers. You cannot opt out of strictly necessary cookies without ceasing to use php356.
• Functional Cookies. Remember your preferences such as language settings, notification preferences, and display options to personalize your php356 experience.
• Analytics Cookies. Collect anonymized data on how players navigate and use the php356 platform — pages visited, features used, session duration — to help us improve the product. This data does not identify individual players in reports.
• Security Cookies. Assist in detecting and preventing fraudulent activity, bot access, and suspicious login patterns on the php356 platform.

php356 does not use third-party advertising or retargeting cookies. No cookie data from php356 is shared with advertising networks for the purpose of serving targeted advertisements on external websites.

You may manage cookie preferences through your browser settings. Disabling cookies beyond strictly necessary ones may affect the functionality and performance of certain php356 features.

php356 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine laws and regulations. Our general retention guidelines are as follows:

• Active Accounts. Personal data associated with active php356 accounts is retained for the lifetime of the account plus a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations under the AMLA.
• KYC Documents. Identity verification documents are retained for a minimum of five (5) years from the date of submission, as required by applicable Philippine gaming and financial regulations.
• Transaction Records. All deposit, withdrawal, and gameplay transaction records are retained for a minimum of five (5) years to comply with AMLC reporting and BIR record-keeping requirements.
• Customer Support Records. Live chat transcripts and support ticket correspondence are retained for three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
• Marketing Data. Email and marketing preference data is retained until you withdraw consent or request deletion, whichever occurs first.
• Technical Logs. Server and access logs are retained for twelve (12) months for security monitoring and incident investigation purposes.

Upon expiry of the applicable retention period, php356 will securely delete or anonymize personal data in a manner that prevents recovery or reconstruction.

php356 implements a comprehensive set of technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security infrastructure includes:

• Transport Layer Security. All data transmitted between your device and php356 servers is encrypted using TLS 1.2 or higher (256-bit encryption). Unencrypted HTTP connections are not permitted on the php356 platform.
• Data Encryption at Rest. Sensitive data stored in php356 databases — including identification documents, financial information, and authentication credentials — is encrypted at rest using AES-256 or equivalent industry-standard algorithms.
• Access Controls. Access to personal data within php356's systems is restricted to personnel who have a legitimate operational need. Role-based access controls, multi-factor authentication, and audit logging govern all internal data access.
• Network Security. php356 infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems, DDoS mitigation services, and continuous 24/7 security monitoring.
• Penetration Testing. php356 conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response. php356 maintains a data breach response plan. In the event of a personal data breach affecting your rights, php356 will notify the National Privacy Commission and affected players within the timeframes required by applicable Philippine law.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by php356:

• Right to Be Informed. You have the right to be informed about how your personal data is collected, processed, and used. This Privacy Policy fulfills that obligation.
• Right of Access. You may request a copy of the personal data php356 holds about you, along with information about how it is being processed. Requests will be fulfilled within a reasonable timeframe, typically within fifteen (15) business days.
• Right to Correction. If any personal data php356 holds about you is inaccurate, incomplete, or outdated, you have the right to request its correction or update. You may also update many details directly through your php356 account dashboard.
• Right to Erasure. You may request the deletion of personal data that is no longer necessary for the purpose for which it was collected, where processing was based on consent that you have since withdrawn, or where processing was unlawful. Note that erasure requests may not be fulfilled where retention is required by applicable Philippine law.
• Right to Object. You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests where you believe your individual rights outweigh php356's interests.
• Right to Data Portability. Where technically feasible and permitted by law, you may request a copy of your personal data in a commonly used, machine-readable format for the purpose of transferring it to another service provider.
• Right to Restrict Processing. In certain circumstances — such as while a correction request is being assessed — you may request that php356 restrict further processing of your data.
• Right to Lodge a Complaint. If you believe php356 has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).

To exercise any of these rights, please contact the php356 Data Protection Officer at the contact details provided in Section 14 of this Policy.

php356 strictly prohibits the use of its platform by any person under 21 years of age, in accordance with applicable Philippine online gaming regulations. php356 does not knowingly collect personal data from minors.

If php356 becomes aware that a player account was registered by or on behalf of a person under 21, we will immediately suspend the account, delete all associated personal data (except where retention is legally required for fraud reporting), and forfeit any funds in the account in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has created a php356 account, please contact our support team immediately at [email protected]. We will investigate and take appropriate action promptly.

As a platform that partners with internationally based game providers, payment processors, and technology infrastructure providers, some personal data processed by php356 may be transferred to and stored in servers or systems located outside of the Philippines.

When php356 transfers personal data to entities located outside the Philippines, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding the requirements of the Data Privacy Act of 2012. These safeguards include contractual data processing agreements, adequacy assessments, and technical security measures consistent with those described in Section 9 of this Policy.

All international game providers and technology partners engaged by php356 are required to maintain data handling practices that comply with internationally recognized privacy standards, and are contractually bound to process php356 player data only for the purposes specified in our agreements with them.

php356 may update this Privacy Policy periodically to reflect changes in our data processing practices, new platform features, updates to applicable Philippine laws, or regulatory guidance from the National Privacy Commission. When material changes are made, php356 will notify registered players via a notification displayed on the platform upon login and by updating the "Last Updated" date at the top of this page.

If the changes are significant and affect your rights as a data subject in a material way, php356 may also send a notification to the email address registered to your account, where operationally feasible.

Continued use of the php356 platform following notification of an updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with material changes to this Policy, you have the right to close your account and request deletion of your personal data, subject to applicable legal retention obligations.

For all privacy-related inquiries, data subject rights requests, or complaints regarding php356's data handling practices, please contact our Data Protection Officer (DPO) using the details below. Our DPO is responsible for overseeing php356's compliance with the Data Privacy Act of 2012 and this Privacy Policy.

If you are not satisfied with php356's response to a privacy complaint, you may file a complaint directly with the National Privacy Commission of the Philippines. For more information, please visit the NPC website.