phs365 Privacy Policy

This Privacy Policy ("Policy") describes how phs365 ("phs365," "we," "us," "our") collects, uses, stores, and protects the personal information of players and visitors ("you," "your") who access or use the phs365 online gaming platform, website, and related services (collectively, the "Platform").

phs365 is committed to protecting the privacy and personal data of all its users in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected through the phs365 website, mobile platform, customer support channels, and any other touchpoint where you interact with phs365. Please read this Policy carefully. By registering an account or continuing to use the phs365 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the phs365 Terms and Conditions, which govern your use of the Platform as a whole.

For the purposes of the Data Privacy Act of 2012 and this Policy, phs365 acts as the Personal Information Controller (PIC) with respect to the personal data of its registered players and platform visitors. As PIC, phs365 determines the purposes and means by which your personal data is processed.

Where phs365 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud infrastructure partners — those parties act as Personal Information Processors (PIPs) and are contractually bound to process your data only in accordance with phs365's instructions and applicable Philippine data protection law.

For all data privacy inquiries, requests, and complaints, you may contact the phs365 Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

phs365 collects the following categories of personal data, depending on how you interact with the Platform:

phs365 does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law or expressly provided by you in the context of a responsible gaming self-assessment.

phs365 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, browser information, and session data via cookies and similar tracking technologies;
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors (e.g., GCash, PayMaya), and financial institutions (e.g., BPI, BDO, Metrobank) in connection with transaction processing;
• Regulatory sources: Information received from PAGCOR or other regulatory bodies in connection with licensing, compliance, or investigation requirements.

phs365 uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your phs365 player account, including verifying your identity and age (21+ requirement) in compliance with PAGCOR regulations;
• Platform operation: To provide access to games, process bets, calculate winnings, and deliver the full range of phs365 services;
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels;
• Legal and regulatory compliance: To meet our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other security threats;
• Responsible gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion requests, and identify players who may be at risk of problem gambling;
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services;
• Platform improvement: To analyze usage patterns, conduct research, and develop new features and services for the phs365 Platform;
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications, and subject to your right to opt out at any time.

Under the Data Privacy Act of 2012, phs365 processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or completing a responsible gaming self-assessment;
• Contractual necessity: Where processing is necessary to perform the contract between you and phs365 — specifically, to operate your player account, process transactions, and deliver gaming services;
• Legal obligation: Where processing is required to comply with applicable Philippine law, including PAGCOR licensing requirements, AMLA obligations, and NPC directives;
• Legitimate interests: Where processing is necessary for phs365's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and freedoms.

phs365 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, solely for the purpose of processing your deposits and withdrawals;
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with PAGCOR and AMLA requirements;
• Cloud and technology providers: Infrastructure and software providers who host and support the phs365 Platform, bound by strict data processing agreements;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory directive;
• Professional advisors: Legal counsel, auditors, and compliance consultants, where necessary for the operation of phs365's business and subject to professional confidentiality obligations;
• Business successors: In the event of a merger, acquisition, or sale of phs365's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

phs365 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data. The following types of cookies are used:

• Essential cookies: Required for the Platform to function correctly, including maintaining your login session and remembering your preferences. These cannot be disabled without affecting Platform functionality;
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the Platform, helping phs365 identify areas for improvement;
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats;
• Preference cookies: Used to remember your language, display, and notification preferences across sessions.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phs365 Platform. phs365 does not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.

phs365 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and PAGCOR regulations;
• Gaming and betting records: Retained for a minimum of three (3) years from the date of each gaming session, for regulatory reporting and dispute resolution purposes;
• Customer support communications: Retained for two (2) years from the date of the last interaction, for quality assurance and dispute resolution;
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, phs365 will securely delete or anonymize your personal data in accordance with its data disposal procedures, unless further retention is required by law.

phs365 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phs365 Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While phs365 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phs365 account credentials. If you suspect that your account has been compromised, contact phs365 support immediately.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phs365:

• Right to be informed: The right to know whether phs365 holds personal data about you and to receive clear information about how it is processed — which this Policy provides;
• Right of access: The right to request a copy of the personal data phs365 holds about you, along with information about how it is used;
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data phs365 holds about you;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phs365's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on phs365's legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller, where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phs365 has violated your data privacy rights.

To exercise any of these rights, please contact the phs365 Data Protection Officer using the details in Section 15. phs365 will respond to all verified data subject requests within fifteen (15) business days, in accordance with NPC guidelines. We may request proof of identity before processing your request to protect against unauthorized access to your data.

If phs365 discovers or is notified that it has inadvertently collected personal data from a person under 21 years of age, it will take immediate steps to delete that data and close the associated account. If you believe that phs365 may have collected data from an underage individual, please contact our support team immediately.

phs365 employs age verification procedures during the registration process and reserves the right to request documentary proof of age from any player at any time. Providing false information about your age is a serious violation of the phs365 Terms and Conditions and may result in account termination and forfeiture of funds.

phs365 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where phs365 uses cloud infrastructure or technology partners with operations in other countries.

Where such international transfers occur, phs365 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring overseas recipients to apply data protection standards equivalent to those required under Philippine law;
• Transfers only to jurisdictions that the NPC has recognized as providing adequate levels of data protection;
• Data processing agreements with all third-party processors that include binding data protection obligations.

By using the phs365 Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

phs365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, phs365 will notify registered players by email or via a prominent notice on the Platform at least seven (7) days before the changes take effect.

The effective date at the top of this Policy indicates when it was last updated. Your continued use of the phs365 Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how phs365 protects your personal data.

If you do not agree with any changes to this Policy, you should cease using the Platform and may request account closure by contacting phs365 customer support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way phs365 handles your personal data, please contact our Data Protection Officer. We are committed to addressing all privacy-related inquiries promptly and transparently.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.

phs365 takes all privacy complaints seriously and will cooperate fully with any NPC investigation or mediation process. We encourage you to contact us first so we can attempt to resolve your concern directly before escalating to the NPC.