Privacy Policy
php356 Data Protection Statement

01 About This Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by php356 ("php356", "we", "us", "our") in connection with the operation of the online casino and sports betting platform accessible at php356.vip and any associated services, mobile-optimized interfaces, or communications channels maintained by php356.

This Policy is incorporated by reference into the php356 Terms & Conditions. It should be read alongside the Terms & Conditions and the Responsible Gaming Policy, which together constitute the full regulatory framework governing your relationship with php356. In the event of any inconsistency between this Policy and the Terms & Conditions with respect to privacy matters, this Policy shall prevail.

php356 may update this Policy from time to time to reflect changes in applicable law, regulatory requirements, or platform operations. Material changes will be communicated to registered players via email or platform notice prior to taking effect. The most current version of this Policy will always be available at php356.vip/privacy-policy.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, php356 is the Personal Information Controller (PIC) in respect of the personal data processed in connection with the php356 platform.

php356 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection laws. The DPO may be contacted through the details set out in Section 16 of this Policy. All data privacy concerns, rights requests, and complaints relating to php356's handling of personal data should be directed to the DPO in the first instance.

03 Personal Data We Collect

php356 collects the following categories of personal data in connection with the operation of the platform:

php356 does not collect special categories of sensitive personal data (such as health data, biometric data, religious beliefs, or political opinions) except where expressly required by applicable regulatory obligations — for example, responsible gaming assessments that may involve the voluntary disclosure of personal circumstances.

04 How We Collect Your Data

php356 collects personal data through the following channels:

• Direct Registration: Information you provide when creating your php356 account, completing KYC verification, or updating your account profile;
• Platform Interaction: Data generated automatically through your use of the php356 platform, including game sessions, betting activity, and navigation patterns;
• Payment Transactions: Financial data received from payment processors (GCash, Maya, BPI, BDO, Metrobank, etc.) in connection with deposits and withdrawals;
• Customer Support: Information provided when you contact the php356 support team via live chat or email;
• Cookies and Tracking Technologies: Technical data collected automatically when you visit php356.vip (see Section 9 for full details);
• Third-Party Verification Providers: Identity and fraud data from KYC and AML screening service providers used to verify your identity and comply with anti-money laundering obligations;
• Publicly Available Sources: Information obtained from public records, government databases, or other legitimate publicly accessible sources for fraud prevention and AML compliance purposes.

05 Legal Basis for Processing

php356 processes personal data on the following legal bases as recognized under RA 10173:

• Contractual Necessity: Processing required to perform the contract between you and php356 — including account management, payment processing, and game service delivery;
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering laws (AMLA), PAGCOR licensing requirements, and the Data Privacy Act;
• Legitimate Interest: Processing for fraud prevention, platform security, abuse detection, and responsible gaming monitoring, where php356's legitimate interests do not override your fundamental rights;
• Consent: Processing for marketing communications and optional personalization features, conducted only where you have provided explicit, freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 How We Use Your Data

php356 uses the personal data it collects for the following purposes:

6.1 Platform Operations

To create and maintain your php356 account; to authenticate your identity at login; to process deposits, withdrawals, and bonus credits; to provide access to casino games, live dealer tables, and the sportsbook; to manage your account balance and transaction history; and to communicate essential account information including security alerts, transaction confirmations, and platform updates.

6.2 Legal & Regulatory Compliance

To verify your identity and age (21+) as required by PAGCOR regulations and applicable law; to conduct anti-money laundering (AML) and counter-terrorist financing (CTF) screening; to maintain records required under Philippine gaming and financial regulations; to respond to lawful requests from regulatory authorities, law enforcement, or courts; and to fulfill php356's obligations as a regulated gaming operator.

6.3 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent transactions, unauthorized account access, bonus abuse, multi-accounting, chargebacks, and other prohibited activities; to monitor platform usage for security anomalies; and to protect the legitimate interests of php356, its players, and its payment partners.

6.4 Responsible Gaming

To monitor gambling patterns for indicators of problem gambling; to enforce deposit limits, loss limits, and self-exclusion restrictions set by the player; to facilitate the responsible gaming tools described in the php356 Responsible Gaming Policy; and to comply with obligations relating to the protection of vulnerable players.

6.5 Platform Improvement

To analyze aggregate usage patterns and game performance data for the purpose of improving the php356 platform; to test new features; to optimize the mobile and desktop experience for Filipino players; and to develop new games and services based on demonstrated player preferences.

6.6 Marketing (Consent-Based)

Where you have explicitly opted in, to send you promotional communications about php356 bonuses, new games, tournaments, and special offers via email or SMS. Marketing communications are always clearly identified as such and include a simple one-click unsubscribe mechanism.

07 Data Sharing & Disclosure

php356 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial use. php356 may share your personal data with third parties only in the following limited circumstances:

• Payment Processors: GCash (Mynt), Maya (PayMaya Philippines, Inc.), BPI, BDO, Metrobank, and other payment service providers strictly as required to process your deposits and withdrawals;
• KYC / AML Providers: Identity verification and anti-money laundering screening service providers engaged by php356 to fulfill regulatory compliance obligations;
• Game Software Providers: Licensed game technology partners (such as live dealer studios) who may receive session data necessary to deliver their games on the php356 platform — governed by strict data processing agreements;
• Fraud Prevention Services: Third-party fraud detection and cybersecurity service providers engaged to protect the platform and its players;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities as required by law or lawful order;
• Law Enforcement: Philippine law enforcement agencies where disclosure is required by a valid court order, warrant, or other lawful legal process;
• Business Transfers: In the event of a merger, acquisition, or sale of php356 assets, personal data may be transferred to the acquiring entity subject to equivalent data protection obligations and prior notification to affected players.

All third-party service providers who process personal data on behalf of php356 are required to do so under written data processing agreements that impose obligations at least equivalent to those applicable to php356 under RA 10173.

08 Data Retention

php356 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by applicable Philippine law and regulatory obligation:

• Account and Identity Data: Retained for a minimum of five (5) years from account closure, as required by PAGCOR licensing conditions and AMLA record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act of 2001 (as amended);
• KYC Verification Documents: Retained for a minimum of five (5) years from account closure or the last transaction, whichever is later;
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer where the subject matter of a support ticket relates to an unresolved dispute or regulatory matter;
• Marketing Consent Records: Retained for the duration of your subscription to marketing communications, plus three (3) years following unsubscription as evidence of lawful consent;
• Technical Logs: Retained for twelve (12) months in standard security logs, and for up to five (5) years where logs relate to a security incident under investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual.

09 Cookies & Tracking Technologies

php356.vip uses cookies and similar tracking technologies (such as web beacons and session tokens) to operate the platform, maintain your logged-in session, remember your preferences, and analyze platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your php356 account. These cannot be disabled without preventing access to the platform;
• Functional Cookies: Remember your preferences such as language settings and your last visited game category. These improve your php356 experience but are not essential to platform operation;
• Analytics Cookies: Collect anonymized or pseudonymized data about how players navigate php356.vip to help us improve the platform. php356 uses internal analytics only — no third-party advertising trackers;
• Security Cookies: Support fraud detection and platform security functions, including session integrity verification and suspicious activity detection.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging into your php356 account. Blocking functional and analytics cookies will not prevent you from using the platform but may affect your experience.

10 Data Security

php356 implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and php356 servers;
• AES-256 encryption for sensitive data at rest, including financial information and identity documents;
• Role-based access controls restricting employee access to personal data on a strictly need-to-know basis;
• Multi-factor authentication required for all php356 staff accessing production systems;
• Regular security audits, vulnerability assessments, and penetration testing of the php356 platform;
• Intrusion detection systems and real-time security event monitoring;
• Comprehensive data breach response procedures, including notification to the National Privacy Commission (NPC) within seventy-two (72) hours of discovering a breach that poses a real risk of serious harm to affected players.

11 Your Data Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by php356:

To exercise any of the above rights, please contact the php356 Data Protection Officer through live chat or via email at [email protected]. php356 will respond to all verifiable rights requests within fifteen (15) business days of receipt. We may require identity verification before processing a rights request to protect against unauthorized access to personal data.

If you are dissatisfied with php356's response to a rights request or any aspect of our data handling, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for enforcing RA 10173.

12 Children's Privacy

The php356 platform is strictly for adults who are twenty-one (21) years of age or older, in accordance with Philippine gaming regulations. php356 does not knowingly collect personal data from persons under the age of 21. If php356 discovers that personal data has been collected from a person below the minimum age, the relevant account will be immediately suspended and the personal data will be securely deleted.

If you are a parent or guardian and believe that a minor has created a php356 account or submitted personal data to the platform without your knowledge, please contact php356 support immediately. php356 will take prompt action to investigate and, where confirmed, delete the minor's data and close the associated account.

13 Marketing Communications

php356 sends promotional email and SMS communications — including bonus offers, tournament invitations, new game announcements, and seasonal promotions — only to players who have explicitly opted in to receive such communications during account registration or through account settings.

Every marketing communication from php356 includes a clear, functional opt-out mechanism. You may unsubscribe from all marketing communications at any time by: (a) clicking the unsubscribe link in any php356 marketing email; (b) updating your communication preferences in your account settings; or (c) contacting php356 support directly via live chat.

Opting out of marketing communications does not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, security alerts, and account verification messages), which php356 must deliver to operate your account effectively and securely.

14 Third-Party Services

The php356 platform integrates third-party services necessary for its operation — including payment processors, game software providers, identity verification services, and cloud infrastructure providers. These third parties may process personal data on php356's behalf as Personal Information Processors (PIPs) under RA 10173.

All third-party processors engaged by php356 are required to:

• Process personal data only for the specific, documented purposes for which they are engaged by php356;
• Implement security standards at least equivalent to those maintained by php356;
• Not sub-process personal data without php356's prior written authorization;
• Assist php356 in fulfilling its obligations under RA 10173, including responding to data subject rights requests and reporting data breaches;
• Delete or return all personal data to php356 upon termination of their engagement.

php356 is not responsible for the independent privacy practices of third parties that are not engaged as data processors — such as the payment apps (GCash, Maya) or banks (BPI, BDO, Metrobank) that you use to fund your account. Please review the privacy policies of those services directly.

15 Policy Changes

php356 may revise this Privacy Policy periodically to reflect changes in applicable law, NPC guidance, PAGCOR regulatory requirements, or php356 platform operations. The most current version of this Policy will always be published at php356.vip/privacy-policy with the effective date clearly stated at the top.

For material changes that significantly affect the way php356 processes your personal data — such as a change to the categories of data collected, a new third-party sharing arrangement, or a change in retention periods — php356 will notify registered players via email to their registered address at least fourteen (14) days before the change takes effect. For non-material changes (such as clarifications of existing language), php356 may update the Policy without advance notice.

Your continued use of the php356 platform after any updated Privacy Policy takes effect constitutes your acknowledgment of the updated terms. If you do not agree to the updated Policy, you should close your php356 account and cease using the platform.

16 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or php356's handling of your personal data, please contact the php356 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 through the php356 platform — the fastest channel for urgent data privacy matters;
• Email: [email protected] — for formal data rights requests, privacy complaints, or detailed correspondence. Please mark the subject line "Data Privacy Request" for prompt routing to the DPO.

php356 will acknowledge all privacy requests within three (3) business days and provide a substantive response within fifteen (15) business days of receiving full details of your request. Where a request requires additional investigation, php356 may extend this period by a further fifteen (15) days with prior notice and explanation.

If you are not satisfied with php356's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, the independent authority established under RA 10173. The NPC accepts complaints through its official channels.