ph388 Privacy Policy

This Privacy Policy ("Policy") describes how ph388 ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Players", "Users", "you") who access or use the ph388 online gaming platform available at ph388.cam and any related subdomains or digital touchpoints.

This Policy applies to all personal data processing activities carried out by ph388 in connection with account registration, identity verification (KYC), deposits and withdrawals, gameplay, customer support interactions, marketing communications, and any other services provided through the ph388 platform to players in the Philippines and other eligible jurisdictions.

This Policy should be read alongside the ph388 Terms & Conditions, which govern the overall contractual relationship between you and ph388. Defined terms not defined in this Policy carry the meanings given to them in the Terms & Conditions.

For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, ph388 acts as the Personal Information Controller (PIC) in respect of the personal data processed under this Policy. As PIC, ph388 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable law.

ph388 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection obligations. Contact details for the DPO are provided in Section 14 of this Policy.

Where ph388 engages third-party service providers (such as payment processors, game software providers, or identity verification platforms) to process personal data on its behalf, those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that impose obligations equivalent to those applicable to ph388 under Philippine law.

ph388 collects personal data through several channels, including account registration forms, KYC verification uploads, payment transactions, gameplay activity, and customer support interactions. The categories of personal data we collect include:

ph388 does not intentionally collect or process special categories of personal data (such as health data, religious beliefs, or political opinions) from players, except where disclosure arises incidentally in a customer support context. In such cases, the data is handled with enhanced care and is not retained beyond what is necessary to resolve the relevant matter.

ph388 uses the personal data it collects for the following specific purposes:

• Account Management: To create, verify, maintain, and administer your ph388 player account, including login authentication and security monitoring.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR requirements and anti-money laundering obligations under the Anti-Money Laundering Act (AMLA) and its amendments.
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other supported Philippine payment methods.
• Game Provision: To deliver, personalise, and improve the gaming services available on ph388, including casino games, slots, live dealer tables, bingo, and fishing games.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat and email at [email protected].
• Responsible Gaming: To monitor gameplay patterns and identify indicators of problem gambling in order to apply appropriate player protection interventions, including account restrictions and self-exclusion enforcement.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited behaviors on the platform.
• Regulatory Compliance: To comply with obligations imposed by PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), and other applicable Philippine regulatory bodies.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — subject to your consent and opt-out preferences.
• Analytics & Improvement: To analyse aggregate, anonymised usage data to improve platform performance, game selection, and user experience.

ph388 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing required to perform the contract between you and ph388 — including account creation, game provision, transaction processing, and support.
• Legal Obligation: Processing necessary for ph388 to comply with its obligations under Philippine law, including PAGCOR licensing requirements, AMLA obligations, tax reporting, and NPC data breach notification duties.
• Legitimate Interests: Processing that serves ph388's legitimate interests in operating a secure and well-functioning platform — such as fraud detection, security monitoring, and aggregate analytics — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time by updating your marketing preferences in your account settings or by contacting support.

ph388 does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:

• Payment Processors: GCash (Mynt — Globe Fintech Innovations), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, UnionBank, and other approved Philippine payment partners — to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening platforms engaged by ph388 to verify player identities and screen against watchlists.
• Game Software Providers: Licensed gaming content providers whose games are available on the ph388 platform — who may receive session data necessary to deliver and audit game outcomes.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council, and other Philippine government bodies, where disclosure is required by law or regulatory order.
• Law Enforcement: Philippine law enforcement agencies or courts where ph388 is compelled to disclose information by lawful process or where disclosure is necessary to prevent or investigate crime.
• IT & Infrastructure Providers: Cloud hosting, platform infrastructure, and cybersecurity service providers engaged by ph388, who process data solely on ph388's instructions under binding data processing agreements.

All third-party processors engaged by ph388 are required to maintain data confidentiality, implement appropriate security measures, and process personal data only in accordance with ph388's documented instructions and applicable Philippine law.

ph388 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and collect aggregate analytics data. The categories of cookies used by ph388 include:

• Essential Cookies: Strictly necessary for the platform to function — including session authentication tokens, security cookies, and load balancing identifiers. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as display language, game filters, and notification settings. These improve your experience but are not essential.
• Analytics Cookies: Used by ph388 to collect anonymised, aggregated data about how players navigate the platform — helping us identify technical issues and improve the user experience. No individually identifiable data is retained.
• Security Cookies: Used to detect and mitigate fraudulent login attempts, bot activity, and account takeover attacks.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the performance of ph388 platform features. ph388 does not use cookies to serve third-party advertising.

ph388 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, including compliance with legal, regulatory, tax, and accounting obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with ph388 and for a period of five (5) years following account closure.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with PAGCOR and AMLC record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the relevant transaction, as required by the AMLA and its Revised Implementing Rules and Regulations.
• Customer Support Records: Retained for three (3) years from the date of the relevant interaction, or longer if the interaction relates to a dispute or regulatory matter.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, to demonstrate compliance.

When personal data is no longer required for retention, ph388 will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.

The security measures implemented by ph388 include, without limitation:

• TLS 1.3 protocol and 256-bit SSL encryption for all data in transit between players' devices and ph388 servers.
• Encryption of sensitive personal data at rest, including identity documents and financial records.
• Multi-factor authentication requirements for internal system access by ph388 personnel.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular vulnerability assessments and penetration testing of platform infrastructure.
• Intrusion detection systems and real-time security monitoring.
• Staff training on data protection obligations and information security practices.
• Incident response procedures including NPC breach notification protocols.

In the event of a personal data breach that is likely to result in harm to affected individuals, ph388 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03 and its amendments. Affected players will be notified without undue delay where the breach poses a high risk to their rights and interests.

Under the Data Privacy Act of 2012, Filipino players registered with ph388 are entitled to exercise the following data subject rights with respect to their personal data:

To exercise any of the above rights, please contact the ph388 Data Protection Officer at the details provided in Section 14. ph388 will respond to verified data subject requests within thirty (30) days of receipt, in accordance with NPC requirements. Requests may be subject to identity verification before processing.

If you believe that ph388 has not adequately addressed your data protection concerns, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph (plain text — not a clickable link from ph388).

ph388 does not knowingly collect or process personal data from individuals below the age of 21. Age verification is conducted as part of the mandatory KYC process during account registration. Where ph388 discovers or is notified that it has inadvertently collected personal data from an underage individual, we will:

• Immediately suspend the associated account pending investigation.
• Permanently close the account upon confirmation that the individual is under 21 years of age.
• Securely delete the personal data of the minor subject to any mandatory regulatory retention obligations.
• Return any deposits made to the minor's account in accordance with applicable law.
• Report the matter to PAGCOR as required by our licensing conditions.

If you believe a minor has created or is using a ph388 account, please contact our support team immediately at [email protected] (plain text — not a clickable link).

ph388 primarily processes and stores personal data on servers located in or within the Asia-Pacific region. In certain circumstances, personal data may be transferred to or accessed from jurisdictions outside the Philippines — for example, where ph388 engages cloud infrastructure providers or game software platforms with international operations.

Any international transfer of personal data by ph388 is conducted in accordance with the requirements of the Data Privacy Act of 2012, including the requirement that the recipient jurisdiction provides an adequate level of data protection or that appropriate contractual safeguards (such as standard contractual clauses approved by the NPC) are in place prior to the transfer.

ph388 will not transfer your personal data to jurisdictions that do not provide adequate protection for personal data without implementing appropriate safeguards and, where required, obtaining your prior consent.

ph388 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. The "Last updated" date at the top of this Policy indicates when the most recent version was published.

When material changes are made to this Policy, ph388 will notify registered players by email or via an on-platform notification at least fourteen (14) days before the changes take effect, where practicable. Your continued use of ph388 following the effective date of a revised Policy constitutes acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how ph388 protects your personal data. Previous versions of this Policy are available on request from the Data Protection Officer.

If you have any questions, concerns, or requests regarding this Privacy Policy or ph388's personal data processing practices, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Subject Request – [Your Account Username]"
• Live Chat: Available 24/7 from within your ph388 account dashboard — request to speak with a Data Privacy representative.
• Response time: ph388 will acknowledge receipt of all data subject requests within five (5) business days and respond in full within thirty (30) days.

For matters relating to responsible gaming, account self-exclusion, or player protection, please visit our Responsible Gaming page. For general platform questions, please visit our FAQ page.