ph1365 Privacy Policy

1. Identity of the Data Controller

1.1 The data controller responsible for your personal data is ph1365, the operator of the online gambling platform accessible at ph1365.club. ph1365 operates under PAGCOR regulatory oversight in the Republic of the Philippines.

1.2 For all data privacy-related inquiries, requests, or complaints, you may contact ph1365's designated Data Protection Officer (DPO) at [email protected]. Please include "Data Privacy Request" in the subject line of your communication.

1.3 ph1365 is registered with the National Privacy Commission (NPC) of the Philippines in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

2. Personal Data We Collect

2.1 ph1365 collects the following categories of personal data from registered users and platform visitors:

2.2 ph1365 does not intentionally collect sensitive personal information (as defined in Section 3(l) of the Data Privacy Act) except where strictly necessary for regulatory compliance (e.g., government ID details for KYC). If you believe ph1365 has collected sensitive personal information beyond what is necessary, please contact the DPO immediately.

3. How We Collect Personal Data

3.1 ph1365 collects personal data through the following means:

• Direct registration: Information you provide when creating a ph1365 account, including name, mobile number, email, and date of birth.
• KYC document submission: Copies of government-issued identification documents submitted during the verification process.
• Transaction activity: Data generated automatically when you make deposits, withdrawals, or play games on the ph1365 platform.
• Device and browser data: Technical information collected automatically when you access ph1365.club, including cookies and session identifiers (see Section 7).
• Customer support interactions: Content of your communications with the ph1365 support team via live chat, email, or other channels.
• Third-party providers: Where you use a third-party login or payment method (e.g., GCash), ph1365 may receive limited data from that provider necessary to complete the transaction or verification.

4. Lawful Bases for Processing

4.1 ph1365 processes your personal data on the following lawful bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing necessary for the performance of the contract between you and ph1365 — i.e., delivering the gaming services, processing payments, and managing your account.
• Legal obligation: Processing required to comply with PAGCOR's regulatory requirements, including KYC, AML obligations, transaction reporting, and responsible gaming monitoring.
• Legitimate interests: Processing necessary for ph1365's legitimate interests in fraud prevention, platform security, and improving the quality of services — provided these interests are not overridden by your fundamental rights.
• Consent: Where ph1365 relies on consent — specifically for marketing communications — you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal. You may update your marketing preferences in your ph1365 account settings.

5. Purposes of Processing

5.1 ph1365 processes your personal data for the following specific purposes:

• Creating and managing your ph1365 account;
• Verifying your identity and age in compliance with PAGCOR requirements (21+ minimum age);
• Processing deposits and withdrawals via GCash, Maya, and other accepted payment methods;
• Detecting, investigating, and preventing fraud, money laundering, and other unlawful activity;
• Delivering game content and ensuring fair, uninterrupted gameplay;
• Monitoring for responsible gaming indicators and applying responsible gaming tools where appropriate;
• Providing customer support and resolving disputes;
• Complying with PAGCOR regulatory reporting obligations and applicable Philippine law;
• Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts);
• Sending promotional communications where you have provided consent;
• Improving the ph1365 platform through analytics and user behavior research (using anonymized or aggregated data where possible).

6. Disclosure to Third Parties

6.1 ph1365 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ph1365 discloses your personal data only to the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, UnionBank, and other payment providers receive transaction data necessary to process deposits and withdrawals.
• KYC / identity verification providers: Third-party identity verification services used to validate government IDs and confirm age, as required by PAGCOR.
• Game software providers: JILI, PG Soft, Evolution Gaming, Ezugi, and other licensed game providers may receive session and wager data necessary to deliver their games within the ph1365 lobby.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies where disclosure is required by law or regulatory directive.
• Fraud and security service providers: Third-party fraud detection and cybersecurity partners who assist ph1365 in protecting the platform and its users from unauthorized access and fraudulent activity.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

6.2 All third-party data processors engaged by ph1365 are bound by data processing agreements requiring them to maintain adequate data protection standards consistent with the Data Privacy Act of 2012.

7. Cookies & Tracking Technologies

7.1 ph1365.club uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against CSRF attacks. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, game lobby filter states, and UI display options. Disabling these may affect your user experience.
• Analytics cookies: Used to collect anonymized information about how visitors use ph1365.club — which pages are visited most, how long sessions last, and where users navigate. This data is used to improve the platform.
• Security and fraud prevention cookies: Used to identify devices associated with suspicious or fraudulent activity and to support account security features including device fingerprinting.

7.2 You may control cookies through your browser settings. Note that disabling certain cookies (particularly strictly necessary cookies) will impair your ability to use the ph1365 platform. ph1365 does not currently respond to Do Not Track (DNT) browser signals.

8. International Data Transfers

8.1 Some of ph1365's service providers and game software partners may be located outside the Republic of the Philippines. Where ph1365 transfers your personal data to recipients in other countries, it does so only where adequate protections are in place, including: contractual data transfer agreements incorporating standard data protection clauses; or transfers to countries recognized as providing adequate data protection under Philippine law.

8.2 ph1365 will not transfer your personal data to a foreign jurisdiction without ensuring that the transfer complies with the requirements of the Data Privacy Act of 2012 and the relevant issuances of the National Privacy Commission.

9. Data Retention

9.1 ph1365 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by regulation:

• Account and KYC data: Minimum five (5) years from account closure, in accordance with PAGCOR AML requirements.
• Financial transaction records: Minimum five (5) years from the date of transaction, consistent with AMLC record-keeping requirements.
• Game activity logs: Minimum two (2) years from the date of the activity.
• Customer support records: Two (2) years from resolution of the relevant issue, or longer if related to an ongoing dispute or legal proceeding.
• Marketing consent records: For the duration of your account plus two (2) years, or until you withdraw consent, whichever is earlier.

9.2 Upon expiry of the applicable retention period, ph1365 will securely delete or anonymize your personal data unless retention is required by an applicable legal obligation or regulatory direction.

10. Your Data Subject Rights

10.1 Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by ph1365:

• Right to be informed: The right to be notified that your personal data is being collected and processed, and to be provided with relevant information about how it is used — as provided in this Privacy Policy.
• Right of access: The right to obtain confirmation from ph1365 as to whether we hold personal data about you, and to receive a copy of that data in a commonly used format.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly through your ph1365 account settings.
• Right to erasure / right to be forgotten: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph1365's legal retention obligations under PAGCOR and AMLC requirements.
• Right to object: The right to object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph1365 has processed your personal data in violation of the Data Privacy Act.

10.2 To exercise any of the above rights, submit a written request to ph1365's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." ph1365 will respond within fifteen (15) business days of receipt of a complete request. ph1365 may require identity verification before processing data subject rights requests to protect against unauthorized disclosure.

11. Security Measures

11.1 ph1365 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph1365.club;
• Bcrypt one-way hashing for all stored passwords;
• Role-based access controls ensuring that internal staff can only access personal data on a need-to-know basis;
• Regular penetration testing and security audits of ph1365 platform infrastructure;
• Two-factor authentication options for player accounts;
• Real-time monitoring for suspicious login activity and automated account protection measures;
• Physical and logical security controls for data storage infrastructure.

11.2 Data Breach Notification. In the event of a personal data breach that is likely to result in a real risk of serious harm to data subjects, ph1365 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay in accordance with NPC Circular No. 16-03.

12. Changes to This Privacy Policy

12.1 ph1365 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Material changes will be notified to registered players via the email address or mobile number associated with their account at least seven (7) days before the revised policy takes effect.

12.2 The date of the most recent revision is displayed at the top of this Privacy Policy. Your continued use of the ph1365 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.