Privacy Policy

Last Updated: January 1, 2024 | Effective Date: January 1, 2024 | Governing Law: Republic Act No. 10173 – Data Privacy Act of 2012

About This Policy

This Privacy Policy explains how phl365 ("the Company", "we", "us", or "our") collects, processes, stores, and protects the personal data you provide when you use the phl365 platform at phl365.cam. By registering an account, accessing our website, or using any of our gaming services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of our services immediately.

1. Scope and Applicability
2. Personal Data We Collect
3. How We Collect Your Data
4. Purposes of Processing
5. Legal Basis for Processing
6. Data Sharing and Disclosure
7. Data Retention
8. Data Security Measures
9. Cookies and Tracking Technologies
10. Your Privacy Rights
11. Protection of Minors
12. Cross-Border Data Transfers
13. Amendments to This Policy
14. Contact and DPO Information

1. Scope and Applicability

1.1. This Privacy Policy applies to all personal data collected and processed by phl365 in connection with the operation of its online gaming platform, website, mobile interfaces, customer support channels, and any associated services provided to registered and prospective players in the Republic of the Philippines.

1.2. This Policy is incorporated by reference into the phl365 Terms and Conditions. Together, they form the complete legal framework governing your relationship with phl365.

1.3. phl365 complies with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the directives issued by the National Privacy Commission (NPC) of the Philippines.

1.4. As a PAGCOR-licensed operator, phl365 also fulfills data reporting and record-keeping obligations mandated by the Philippine Amusement and Gaming Corporation, the Anti-Money Laundering Council (AMLC), and other relevant regulatory bodies.

2. Personal Data We Collect

2.1. Identity and Registration Data

When you register an account with phl365, we collect the following categories of personal data:

Full legal name as it appears on your government-issued identification
Date of birth (used to verify you are at least 21 years of age)
Nationality and country of residence
Permanent residential address, including barangay, city/municipality, province, and postal code
Mobile phone number (Philippine number required for SMS verification)
Email address
Username and encrypted password
Copies of government-issued identification documents (e.g., Philippine Passport, Driver's License, UMID, National ID, or Postal ID)
Selfie or live photograph submitted for identity verification purposes
Proof of address documents (e.g., utility bill, bank statement, or government correspondence dated within three months)

2.2. Financial and Transaction Data

Deposit and withdrawal history, including amounts, timestamps, and transaction reference numbers
Payment method details (GCash mobile number, PayMaya account, bank account name and number for BDO, BPI, UnionBank, and other participating institutions)
Gaming activity records, including bets placed, wagers won or lost, games accessed, and session durations
Bonus and promotional credit history
Account balance at any given time

2.3. Technical and Device Data

IP address and geolocation data
Device type, model, operating system version, and browser type
Unique device identifiers
Login timestamps, session duration, and logout timestamps
Clickstream data and pages visited within the phl365 platform

2.4. Communications Data

Chat transcripts from live support interactions
Emails and support tickets submitted to phl365
Survey responses, feedback forms, and promotional opt-in/opt-out records

2.5. Responsible Gaming Data

Where you voluntarily use our responsible gaming tools, we record deposit limits, session time limits, self-exclusion requests, and any referrals or interactions with responsible gaming support resources. This data is processed in the strict interest of player welfare and regulatory compliance.

3. How We Collect Your Data

3.1. Directly from you: Information you provide when completing our registration form, submitting identity verification documents, contacting customer support, making deposits or withdrawals, or interacting with any feature of the phl365 platform.

3.2. Automatically: Technical data collected via cookies, web beacons, server logs, and similar tracking technologies when you browse our website or use our gaming platform.

3.3. From third-party service providers: Identity verification agencies, payment processors (GCash, PayMaya, banking partners), fraud prevention services, and analytics providers may share data with us to fulfill their contracted services.

3.4. From regulatory authorities: PAGCOR, the AMLC, the NPC, and law enforcement agencies may provide or request data in connection with our licensing obligations and legal compliance duties.

4. Purposes of Processing

phl365 processes your personal data for the following lawful purposes:

Account Creation and Management: To register your account, verify your identity, and maintain your player profile.
Age Verification: To confirm that you are at least 21 years of age before granting access to gaming services, as required by Philippine law and PAGCOR regulations.
Gaming Services: To facilitate gameplay, process bets, credit winnings, and provide access to all platform features.
Payment Processing: To process deposits, execute withdrawals, detect and prevent payment fraud, and comply with anti-money laundering requirements.
Customer Support: To respond to inquiries, resolve disputes, and provide technical assistance in English, Tagalog, and other Filipino languages.
Security and Fraud Prevention: To detect unauthorized access, prevent cheating, identify suspicious betting patterns, and protect the integrity of the platform.
Regulatory Compliance: To fulfill mandatory reporting obligations to PAGCOR, the AMLC, the NPC, and other authorities.
Responsible Gaming: To monitor player behavior, enforce self-exclusion requests, apply deposit limits, and provide access to problem gambling resources.
Marketing and Promotions: Where you have consented, to send you information about bonuses, new games, and promotions relevant to your preferences.
Platform Improvement: To analyze usage patterns, conduct A/B testing, and improve the overall phl365 player experience.

5. Legal Basis for Processing

5.1. Contractual Necessity: Processing is necessary to perform our obligations under the Terms and Conditions you accepted upon registration, including providing gaming services and processing financial transactions.

5.2. Legal Obligation: Certain processing activities are mandated by Philippine law, including the Data Privacy Act, the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR regulatory requirements, and applicable taxation laws.

5.3. Legitimate Interests: We process technical and behavioral data to detect fraud, maintain platform security, and improve our services, provided such interests do not override your fundamental privacy rights.

5.4. Consent: Where we send marketing communications or use optional cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

7. Data Retention

7.1. phl365 retains your personal data for as long as your account is active and for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act's record-keeping requirements.

7.2. Financial transaction records may be retained for up to ten (10) years pursuant to applicable tax and AML regulations.

7.3. Communications records, including live chat transcripts and support tickets, are retained for three (3) years from the date of the interaction.

7.4. Where data is no longer required for any lawful purpose, phl365 will securely delete or anonymize it in accordance with our internal data destruction procedures.

7.5. You may request deletion of your personal data after account closure, subject to any retention obligations imposed by law. We will inform you of any data that cannot be deleted and the legal basis for retaining it.

8. Data Security Measures

8.1. phl365 implements a comprehensive, multi-layered security framework to protect your personal and financial data from unauthorized access, disclosure, alteration, or destruction.

8.2. Our key technical and organizational security measures include:

256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using the same standard employed by major Philippine banks.
At-Rest Encryption: Stored personal data and financial records are encrypted using AES-256 encryption on secured servers.
Two-Factor Authentication (2FA): Optional SMS-based 2FA is available and recommended for all phl365 account holders.
Role-Based Access Controls: Access to personal data by phl365 employees is strictly limited to those with a legitimate operational need.
Intrusion Detection and Monitoring: Our security team monitors platform activity 24/7 for anomalies, unauthorized access attempts, and suspicious patterns.
Regular Security Audits: We conduct periodic penetration testing and independent security assessments.
Staff Training: All phl365 employees with access to personal data undergo regular data privacy training and are bound by strict confidentiality obligations.

8.3. In the event of a personal data breach that poses a real risk to your rights and freedoms, phl365 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay.

Your Security Responsibilities

You are responsible for maintaining the confidentiality of your phl365 login credentials. Never share your password with anyone, including phl365 staff. Our support team will never ask for your password. If you suspect unauthorized access to your account, contact customer support immediately.

9. Cookies and Tracking Technologies

9.1. phl365 uses cookies and similar tracking technologies to operate and improve our platform, personalize your experience, and fulfill certain legal and security obligations.

9.2. Types of Cookies We Use

Strictly Necessary Cookies: Required for the platform to function correctly, including maintaining your login session and preventing fraudulent access. These cannot be disabled.
Functional Cookies: Remember your preferences, language settings, and customizations to provide a more personalized experience.
Analytics Cookies: Collect anonymized data about how players interact with the platform, helping us identify technical issues and improve usability.
Security Cookies: Assist in detecting and preventing bot activity, account takeover attempts, and other malicious behavior.

9.3. You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using phl365, but some features may work less effectively.

9.4. phl365 does not use cookies to track your activity on third-party websites outside of our platform.

10. Your Privacy Rights

10.1. Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by phl365:

Right to Be Informed: To know how your personal data is being collected and used, as described in this Privacy Policy.
Right of Access: To request a copy of the personal data we hold about you, free of charge, once per calendar year.
Right to Rectification: To request correction of inaccurate or incomplete personal data in your account.
Right to Erasure or Blocking: To request deletion or blocking of your personal data where it is no longer necessary, subject to our legal retention obligations.
Right to Object: To object to the processing of your personal data for marketing purposes or where processing is based on legitimate interests.
Right to Data Portability: To request your personal data in a structured, commonly used, machine-readable format.
Right to Lodge a Complaint: To file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.
Right to Damages: To seek indemnity for actual damages caused by inaccurate, incomplete, outdated, false, or unlawfully obtained personal data.

10.2. To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all valid requests within thirty (30) days.

10.3. Some requests may be limited or declined where processing is required by law (e.g., AML record-keeping) or is necessary to prevent fraud. We will explain any limitations in our response.

11. Protection of Minors

11.1. phl365 strictly prohibits access by individuals under 21 years of age. We do not knowingly collect personal data from minors.

11.2. Age verification is performed during the account registration process and again before the first withdrawal is processed. Documents confirming date of birth are required from all new registrants.

11.3. If we discover that personal data has been collected from an individual under 21, we will immediately close the account, refund any deposits net of withdrawals (subject to AML review), delete all associated personal data, and report the matter to PAGCOR as required.

11.4. Parents and guardians who suspect a minor may have accessed phl365 are encouraged to contact our customer support team immediately so we can take appropriate action.

21+ Age Restriction Strictly Enforced

Gambling is only for adults 21 years or older in the Philippines. If you are under 21, you are not permitted to use phl365 under any circumstances. If you know a minor who has accessed this platform, please report it to us immediately at [email protected].

12. Cross-Border Data Transfers

12.1. Some of our technology and service providers may be located outside the Philippines. Where your personal data is transferred internationally, phl365 ensures appropriate safeguards are in place, including contractual data protection clauses that meet the standards set by the National Privacy Commission.

12.2. phl365 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing additional safeguards.

12.3. All cross-border transfers of personal data are disclosed to the NPC in accordance with applicable regulations.

13. Amendments to This Policy

13.1. phl365 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements.

13.2. Material changes will be communicated to registered users via email to the address on file and by displaying a prominent notice on the phl365 platform for at least thirty (30) days before the amended Policy takes effect.

13.3. The "Last Updated" date at the top of this Policy will always reflect when the most recent revision was made.

13.4. Continued use of phl365 services after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you must discontinue use and request account closure.

14. Contact and DPO Information

14.1. For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by phl365, please contact our Data Protection Officer:

Email: [email protected]
Subject Line: "Data Privacy Request – [Your Account Username]"
Live Chat: Available 24/7 on phl365.cam – select "Privacy & Data" from the support menu
Response Time: We aim to acknowledge all inquiries within 48 hours and resolve them within 30 calendar days

14.2. If you are dissatisfied with our response to your privacy request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines:

Website: privacy.gov.ph
Email: [email protected] (displayed as plain text only)

14.3. Our registered business address and complete legal entity information are available upon request by contacting the Data Protection Officer at the email above.

Our Privacy Commitments

Six ways phl365 keeps your personal data safe and respects your rights

Bank-Grade Encryption

Every byte of data exchanged between your device and our servers is encrypted with 256-bit SSL — the same standard used by BDO, BPI, and major Philippine financial institutions. Your details are never transmitted in plain text.

DPA Compliance

phl365 fully complies with Republic Act No. 10173, the Data Privacy Act of 2012. We have a registered Data Protection Officer, maintain a Privacy Management Program, and submit required reports to the National Privacy Commission.

You Own Your Data

We never sell your personal information to third parties for their own marketing. Your data is used exclusively to operate your account, process payments, and comply with PAGCOR and AML requirements — nothing more.

No Unwanted Contact

phl365 will never send you promotional emails or SMS without your explicit opt-in consent. You can unsubscribe from marketing communications at any time through your account settings, and we honor opt-outs within 48 hours.

Transparent Retention

We retain your data only as long as legally required — typically five years after account closure under PAGCOR rules. When the retention period ends, your data is securely deleted or irreversibly anonymized.

Fast Breach Notification

In the unlikely event of a data breach affecting your information, we commit to notifying the National Privacy Commission within 72 hours and informing you directly without unnecessary delay, as required by Philippine data privacy law.

Your Privacy Is Protected.
Your Gaming Can Begin.

Now that you know how phl365 safeguards your data, explore our full game library and enjoy a secure, PAGCOR-licensed gaming experience trusted by players across Manila, Cebu, Davao, and beyond.

Explore phl365