Privacy Policy

1. Introduction

ph357 ("ph357," "we," "us," or "our") operates the online casino platform accessible at ph357.org (the "Platform"). We understand that your personal data is important to you, and we take our responsibility as a data controller seriously. This Privacy Policy describes how ph357 collects, uses, stores, shares, and protects the personal information of players and visitors who access the Platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC") of the Philippines. It applies to all personal data processed by ph357 in connection with the operation of the Platform and the provision of online casino services to Filipino players.

By registering for a ph357 account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, please do not use the Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, ph357 is the personal information controller in respect of the personal data collected through the Platform. ph357 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

ph357 has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with the DPA and this Privacy Policy. You may contact the ph357 DPO at any time using the contact details provided in Section 15 of this Privacy Policy.

3. Personal Data We Collect

ph357 collects the following categories of personal data from players and Platform visitors:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification purposes)
• Government-issued identification number (e.g., Philippine National ID, passport, driver's license)
• Username and password (stored in hashed form)
• Nationality and country of residence

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (for KYC verification)

3.3 Financial Data

• GCash account number or registered mobile number
• PayMaya / Maya account details
• Bank account details (account name, account number, bank name) for bank transfer transactions
• Debit card details (card number is not stored by ph357; it is processed directly by our certified payment processor)
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment methods used

3.4 Gaming & Activity Data

• Game history, including games played, wager amounts, wins, and losses
• Session data, including login times, session duration, and logout times
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical & Device Data

• IP address
• Device type, operating system, and browser type
• Device identifiers and fingerprinting data (used for fraud prevention and multi-account detection)
• Geolocation data (country and region level, derived from IP address)
• Cookie and tracking data (see Section 8)

3.6 Communications Data

• Records of communications between you and ph357 customer support, including live chat transcripts and email correspondence
• Feedback, complaints, and dispute records

4. How We Collect Your Data

ph357 collects personal data through the following means:

• Directly from you: When you register for a ph357 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or use any feature of the Platform that requires you to provide information.
• Automatically: When you access and use the Platform, ph357 automatically collects technical and device data through cookies, web beacons, log files, and similar tracking technologies.
• From third parties: ph357 may receive personal data from identity verification service providers, payment processors, fraud prevention services, and other third parties engaged to support the operation of the Platform, subject to those parties' own privacy policies and applicable data sharing agreements.
• From public sources: ph357 may supplement the information you provide with data from publicly available sources, such as government databases, for the purpose of identity verification and fraud prevention.

5. How We Use Your Personal Data

ph357 uses the personal data it collects for the following purposes:

Purpose	Data Used
Account registration and management	Identity data, contact data, password
Age verification and KYC compliance	Identity data, government ID, date of birth
Processing deposits and withdrawals	Financial data, identity data
Providing and improving casino games and Platform features	Gaming data, technical data
Fraud prevention and security monitoring	Technical data, financial data, gaming data
Anti-money laundering compliance	Identity data, financial data, transaction history
Responsible gaming monitoring and tool management	Gaming data, responsible gaming settings
Customer support and dispute resolution	Communications data, account data
Sending account notifications and service communications	Contact data
Sending promotional communications (with consent)	Contact data, gaming preferences
Regulatory reporting to PAGCOR and AMLC	Identity data, financial data, transaction history
Analytics and Platform performance improvement	Technical data, gaming data (aggregated/anonymized where possible)

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph357 processes your personal data on the following legal bases:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to create and manage your ph357 account and to provide the online casino services you have requested.
• Legal obligation: ph357 is required by Philippine law to process certain personal data for KYC verification, anti-money laundering compliance, regulatory reporting to PAGCOR and the AMLC, and tax purposes.
• Legitimate interests: ph357 processes technical and gaming data for fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your data protection rights.
• Consent: Where ph357 sends you promotional communications or processes data for purposes beyond those strictly necessary for the provision of services, we will obtain your prior consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting ph357 customer support.

7. Sharing Your Personal Data

ph357 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ph357 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya/Maya, and banking partners receive the financial data necessary to process your deposits and withdrawals. These processors operate under their own privacy policies and applicable Philippine financial regulations.
• Identity verification providers: Third-party KYC and age verification service providers receive identity data to assist ph357 in verifying player eligibility.
• Fraud prevention and security services: Specialist providers receive technical and behavioral data to help ph357 detect and prevent fraud, money laundering, and multi-accounting.
• Game software providers: Where ph357 offers games developed by third-party studios, those providers may receive limited gaming session data necessary to operate their games. ph357 ensures that such providers are bound by appropriate data processing agreements.
• Regulatory and law enforcement authorities: ph357 is required to share personal data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities when required by law or court order.
• Professional advisers: ph357's legal, accounting, and auditing advisers may access personal data to the extent necessary to provide their professional services, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ph357's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Privacy Policy.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the ph357 Platform. ph357 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, remember your preferences, analyze usage patterns, and support security and fraud prevention measures.

8.2 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your ph357 account. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help ph357 improve performance and user experience.
• Security cookies: Used for fraud detection, device fingerprinting, and multi-account prevention.

8.3 Managing Cookies

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph357 Platform, including your ability to log in or access certain features. Strictly necessary and security cookies cannot be disabled without preventing access to the Platform.

9. Data Retention

ph357 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial and transaction data: Retained for a minimum of five (5) years following the date of the transaction, in compliance with AMLC record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support communications: Retained for three (3) years following the resolution of the relevant inquiry or dispute.
• Technical and device data: Retained for up to twelve (12) months, unless required for longer periods for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, ph357 will securely delete or anonymize your personal data in accordance with NPC guidelines and ph357's internal data disposal procedures.

10. Data Security

ph357 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the ph357 Platform.
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial account details.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform.
• Multi-factor authentication options for player accounts.
• Continuous monitoring of the Platform for suspicious activity and potential security incidents.
• Staff training on data protection obligations and security best practices.

While ph357 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. ph357 cannot guarantee absolute security but is committed to promptly addressing any security incidents that may occur.

You are responsible for maintaining the confidentiality of your ph357 account credentials. If you suspect that your account has been compromised, please contact ph357 customer support immediately.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph357:

To exercise any of these rights, please contact ph357's Data Protection Officer using the details in Section 15. ph357 will respond to all data subject requests within thirty (30) days of receipt, in accordance with NPC guidelines. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

If you are not satisfied with ph357's response to your data privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12. Children's Privacy

The ph357 Platform is strictly intended for persons aged 21 years and above, in compliance with Philippine gaming regulations. ph357 does not knowingly collect personal data from persons under the age of 21. If ph357 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all data will be deleted (subject to any legal retention obligations), and any deposits will be returned to the payment source used.

If you believe that ph357 may have inadvertently collected personal data from a person under 21, please contact ph357's Data Protection Officer immediately using the contact details in Section 15.

13. International Data Transfers

ph357 primarily processes and stores player data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where ph357 uses cloud infrastructure providers or game software vendors with servers located abroad.

Where such international transfers occur, ph357 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the NPC.
• Implementing standard contractual clauses or data processing agreements with international recipients that impose data protection obligations equivalent to those under Philippine law.
• Conducting transfer impact assessments where required by NPC guidelines.

14. Changes to This Privacy Policy

ph357 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, ph357 will notify registered players via the email address associated with their account and/or by posting a prominent notice on the Platform. The date of the most recent revision is indicated at the top of this page.

Your continued use of the ph357 Platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. ph357 encourages you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ph357, please contact our Data Protection Officer:

ph357's DPO is available to respond to data privacy inquiries and requests. ph357 aims to acknowledge all privacy-related communications within five (5) business days and to provide a substantive response within thirty (30) days, in accordance with NPC guidelines.

This Privacy Policy was last updated on January 1, 2026. Previous versions are available upon request by contacting the ph357 Data Protection Officer.