Privacy Policy

ph365.net ("the Platform," "we," "us," or "our") is the data controller responsible for the personal information collected through the ph365.net website and associated services. As data controller, ph365.net determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

If you have any questions about how ph365.net handles your personal data, or if you wish to exercise any of your data subject rights, please refer to Section 15 (Contact & DPO) of this policy.

ph365.net collects the following categories of personal data, depending on how you interact with the platform:

ph365.net does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government-issued ID submitted for KYC incidentally contains such information, in which case it is processed solely for identity verification purposes and not retained separately.

ph365.net collects personal data through the following means:

• Directly from you: When you register a ph365.net account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically: When you access and use the ph365.net platform, we automatically collect technical data such as your IP address, device identifiers, browser type, and session activity through cookies and similar tracking technologies. See Section 9 for details.
• From payment processors: When you make a deposit or withdrawal via GCash, Maya, or a Philippine bank, the relevant payment processor may share transaction confirmation data with ph365.net to reconcile your account.
• From identity verification services: ph365.net may use third-party KYC service providers to assist in verifying the authenticity of identity documents submitted by players. These providers process data on ph365.net's behalf under strict data processing agreements.
• From regulatory authorities: In limited circumstances, ph365.net may receive information from PAGCOR or other Philippine regulatory bodies in connection with compliance obligations.

ph365.net processes your personal data for the following specific purposes:

• Account creation and management: To register your ph365.net account, verify your identity, and maintain your account in good standing.
• Service delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver all features of the ph365.net platform.
• KYC and age verification: To verify that you are at least 21 years of age and to confirm your identity as required by Philippine gaming regulations before processing withdrawals.
• Payment processing: To facilitate deposits and withdrawals via GCash, Maya, and Philippine bank transfers, and to maintain accurate financial records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other security threats.
• Regulatory compliance: To fulfil ph365.net's obligations under the Data Privacy Act of 2012, Anti-Money Laundering Act, and PAGCOR regulations, including mandatory record-keeping and suspicious transaction reporting.
• Customer support: To respond to your enquiries, resolve complaints, and provide technical assistance.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications. You may opt out at any time via your account settings.
• Platform improvement: To analyse aggregated usage data and improve the ph365.net platform, game selection, and user experience.

Under the Data Privacy Act of 2012, ph365.net processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ph365.net — including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including KYC verification, AML record-keeping, and regulatory reporting obligations.
• Legitimate interests: Processing necessary for ph365.net's legitimate interests in fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 Third-Party Service Providers. ph365.net shares personal data with carefully selected third-party service providers who process data on our behalf under written data processing agreements. These include: licensed game providers, payment processors (GCash, Maya, Philippine banks), KYC verification services, customer support platform providers, and cloud infrastructure providers. All such providers are contractually required to process data only as instructed by ph365.net and in compliance with applicable data protection laws.

6.2 Regulatory Authorities. ph365.net may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and are logged for accountability purposes.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of ph365.net's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer via your registered contact details.

6.4 No Sale of Data. ph365.net does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or any other commercial third parties for their own marketing purposes.

ph365.net retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account and identity data: Retained for the duration of your active ph365.net account, plus a minimum of five (5) years after account closure, as required by Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act and PAGCOR record-keeping requirements.
• KYC documents: Retained for the duration of your account plus five (5) years after closure, or longer if required by a regulatory investigation or legal proceeding.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication relates to an ongoing dispute or regulatory matter.
• Marketing preferences and consent records: Retained for the duration of your account plus three (3) years, to demonstrate compliance with consent requirements.
• Technical and session logs: Retained for twelve (12) months for security and fraud detection purposes, after which they are anonymised or deleted.

Where retention beyond these periods is required by law, court order, or ongoing regulatory investigation, ph365.net will retain the relevant data until the legal obligation is satisfied.

ph365.net implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and ph365.net servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal data stored on ph365.net servers is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised ph365.net personnel on a strict need-to-know basis. All staff with access to personal data undergo data privacy training and are bound by confidentiality obligations.
• Two-factor authentication: ph365.net supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised access.
• Penetration testing: ph365.net conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the platform.
• Incident response: ph365.net maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, ph365.net will notify the National Privacy Commission within 72 hours and affected players without undue delay, as required by the Data Privacy Act.

While ph365.net takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph365.net login credentials and for notifying us immediately if you suspect unauthorised access to your account.

ph365.net uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in to your ph365.net account and security cookies that help detect fraudulent activity. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations. Disabling these may affect your experience.
• Analytics cookies: Collect aggregated, anonymised data about how players use the ph365.net platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve the platform.
• Marketing cookies: Used only where you have provided explicit consent, to deliver relevant promotional content within the ph365.net platform. ph365.net does not use third-party advertising networks.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using the ph365.net platform. For analytics and marketing cookies, you may withdraw consent at any time via your account settings.

ph365.net strictly prohibits the use of its platform by persons under 21 years of age. The ph365.net platform is not directed at minors, and we do not knowingly collect personal data from individuals under 21.

Age verification is a mandatory step in the KYC process before any withdrawal is processed. If ph365.net discovers that personal data has been collected from a person under 21, the account will be immediately suspended, all funds will be frozen pending investigation, and the personal data will be deleted in accordance with applicable law.

If you believe that a minor has registered a ph365.net account, please contact our customer support team immediately so that we can take appropriate action.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph365.net:

To exercise any of the above rights, please contact ph365.net's Data Protection Officer as described in Section 15. We will respond to all verified requests within 15 business days. We may need to verify your identity before processing your request.

ph365.net's primary data processing infrastructure is located within the Philippines. In limited circumstances, personal data may be transferred to or accessed from servers located outside the Philippines — for example, where a licensed game provider or cloud infrastructure provider operates internationally.

Any cross-border transfer of personal data is conducted in compliance with Section 21 of the Data Privacy Act of 2012 and the NPC's rules on cross-border data flows. ph365.net ensures that adequate safeguards are in place, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under Philippine law.

ph365.net does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

ph365.net is subject to the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended) and PAGCOR's AML compliance framework. In fulfilment of these obligations, ph365.net:

• Monitors all player transactions for patterns indicative of money laundering, terrorist financing, or other financial crimes.
• Files Suspicious Transaction Reports (STRs) and Covered Transaction Reports (CTRs) with the Anti-Money Laundering Council (AMLC) as required by law. Such reports are filed without notifying the subject player, as required by the tipping-off prohibition under the AMLA.
• Maintains transaction records for a minimum of five years as required by the AMLA.
• Conducts enhanced due diligence on players identified as politically exposed persons (PEPs) or where transactions exceed regulatory thresholds.

Processing of personal data for AML and fraud prevention purposes is based on ph365.net's legal obligations and cannot be restricted or objected to by data subjects, as it is required by Philippine law.

ph365.net may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where changes are material, ph365.net will provide at least 14 days' advance notice via your registered mobile number or email address, or by displaying a prominent notice on the platform.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically. Your continued use of the ph365.net platform after the effective date of any update constitutes your acknowledgement of the revised policy.

Previous versions of this Privacy Policy are available upon request by contacting our Data Protection Officer.

ph365.net has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the ph365.net platform — the fastest way to reach our support team for general enquiries.
• Data Privacy Requests (DPO): [email protected] — for formal data subject rights requests, privacy complaints, and DPO correspondence. Please copy and paste this address into your email client; it is not a clickable link.
• General Support: [email protected] — for account-related enquiries and customer support matters.

ph365.net will acknowledge all data privacy requests within 3 business days and provide a substantive response within 15 business days. For complex requests, we may require up to 30 business days and will keep you informed of progress.

If you are not satisfied with ph365.net's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC's contact details are available at the official NPC website.

This Privacy Policy was last updated on January 1, 2026. It supersedes all previous versions. Previous versions are available upon request.