At ph366, your privacy is not an afterthought — it is a core commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you hold as a player under Philippine law.
This Privacy Policy ("Policy") is issued by ph366 ("ph366", "we", "us", "our"), the operator of the online gaming platform accessible at https:// ph366.app. This Policy governs the collection, use, storage, and disclosure of personal data provided by users ("you", "your", "player") when accessing or using the ph366 platform, including our website, mobile interface, and all associated services.
This Policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). By registering an account or continuing to use the ph366 platform, you acknowledge that you have read, understood, and agreed to the terms of this Policy.
ph366 is committed to protecting the privacy and personal data of all players who use our platform. We understand that trust is the foundation of any relationship between a gaming operator and its players, and we take our data protection obligations seriously — not just because the law requires it, but because it is the right thing to do.
This Policy applies to all personal data collected through the ph366 website, account registration process, customer support interactions, payment transactions, and any other touchpoint where you provide us with information. It applies to all players accessing the platform from within the Philippines and to Filipino players accessing the platform from abroad.
ph366 acts as the Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable Philippine law.
ph366 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:
ph366 collects personal data through the following means:
ph366 processes your personal data for the following specific, legitimate purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact data | Contract performance |
| Age and identity verification (KYC) | ID documents, date of birth | Legal obligation (PAGCOR / AMLA) |
| Processing deposits and withdrawals | Financial, transaction data | Contract performance |
| Fraud prevention and security | Technical, financial, identity data | Legitimate interest / Legal obligation |
| Anti-money laundering (AMLA) compliance | Transaction, identity data | Legal obligation |
| Responsible gaming monitoring | Gaming activity, session data | Legal obligation / Legitimate interest |
| Customer support | Communications, account data | Contract performance |
| Marketing communications (opt-in only) | Contact, preference data | Consent |
| Platform improvement and analytics | Technical, gaming activity data | Legitimate interest |
| Regulatory reporting to PAGCOR / AMLC | Identity, transaction data | Legal obligation |
Under the Data Privacy Act of 2012, ph366 processes your personal data on the following legal bases:
ph366 does not sell your personal data to any third party. We may share your personal data only in the following limited circumstances:
We engage trusted third-party service providers to assist in operating the ph366 platform. These include KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, cloud hosting providers, and customer support platforms. All such providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing services to ph366.
ph366 is required by Philippine law to disclose certain data to regulatory and law enforcement authorities, including:
Game providers such as Pragmatic Play and Evolution Gaming may receive limited technical data (such as session tokens and game round identifiers) necessary to deliver their games on the ph366 platform. These providers do not receive your full identity or financial data.
ph366 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | AMLA / PAGCOR requirements |
| KYC documents | Duration of account + 5 years after closure | AMLA / PAGCOR requirements |
| Transaction records | 5 years from transaction date | AMLA requirements |
| Gaming activity logs | 3 years from date of activity | Regulatory / dispute resolution |
| Customer support records | 3 years from last interaction | Legitimate interest |
| Marketing preferences | Until consent is withdrawn | Consent |
| Technical / log data | 12 months from collection | Security / fraud prevention |
Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with NPC-approved disposal methods. Where data is anonymized, it may be retained indefinitely for statistical and analytical purposes as it can no longer be linked to you as an individual.
ph366 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:
The ph366 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform usage. The types of cookies we use are:
You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the ph366 platform. For more information on managing cookies in popular browsers used in the Philippines (Chrome, Firefox, Safari), please refer to your browser's help documentation.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph366. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.
We will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.
As a ph366 player, you have full rights over your personal data under Republic Act No. 10173. Here's what you can request at any time.
You have the right to request a copy of the personal data ph366 holds about you, along with information on how it is being used and with whom it has been shared.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AMLA and PAGCOR regulations.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest where your rights override our interests.
Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
If you believe ph366 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.
During the registration process, ph366 requires all applicants to confirm that they are at least 21 years of age and to provide a date of birth. We conduct age verification as part of our KYC process and may request government-issued ID documents to confirm age at any time.
If ph366 discovers that personal data has been collected from a person under the age of 21, we will immediately close the associated account, return any deposited funds to the originating payment method after investigation, and securely delete all personal data associated with that account. If you believe that a minor has registered on the ph366 platform, please contact our Data Protection Officer immediately using the details in Section 13.
ph366 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made to this Policy, we will notify registered players via email or through a prominent notice on the platform at least seven (7) days before the changes take effect.
The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how ph366 protects your personal data. Your continued use of the platform after any amendments take effect constitutes your acceptance of the revised Policy.
ph366 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-01. Our DPO is responsible for overseeing compliance with this Policy and applicable data privacy laws, and serves as the primary point of contact for all data privacy-related inquiries, requests, and complaints.
When submitting a data subject request, please include your full name, registered email address, and a clear description of your request. For identity verification purposes, we may ask you to provide a copy of a valid government-issued ID before processing your request.
If you are not satisfied with our response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.
Beyond legal compliance, ph366 has built privacy protection into the core of how we operate — from the moment you register to every transaction you make.
Every piece of data you send to ph366 — from your login credentials to your GCash withdrawal request — is protected by SSL/TLS encryption and AES-256 storage encryption.
ph366 will never sell, rent, or trade your personal data to third-party marketers or data brokers. Your information is used solely to operate and improve the ph366 platform for you.
Our data practices are fully aligned with the Data Privacy Act of 2012 (RA 10173), NPC issuances, PAGCOR regulations, and the Anti-Money Laundering Act — giving you the full protection of Philippine law.
Our appointed Data Protection Officer is your direct line for any privacy concern. Whether you want to access your data, request deletion, or raise a complaint, our DPO responds within 3 business days.
We follow the principle of data minimization — collecting only what is strictly necessary for account management, regulatory compliance, and delivering a great gaming experience on ph366.
In the unlikely event of a data breach, ph366 will notify the NPC within 72 hours and inform affected players promptly — because you deserve to know immediately if your data is ever at risk.
Play slots, bingo, and live casino games knowing that your personal data is handled with the highest standards of security and transparency. Join thousands of Filipino players who trust ph366 for a safe, fair, and responsible gaming experience. Must be 21 years or older to register.
By using ph366, you agree to our Terms & Conditions and this Privacy Policy. 21+ only. Play responsibly.