ph388 Privacy Policy
ph388 is committed to protecting your personal data. This Privacy Policy explains what information ph388 collects from you, how it is used, how it is protected, and what rights you have over it — all in compliance with the Philippine Data Privacy Act of 2012.
ph388's Privacy Commitments at a Glance
These highlights summarize ph388's core data protection commitments. They do not replace the full Policy text below, which all players should read in its entirety.
Data Collected Only as Needed
ph388 collects only the personal data that is necessary for account registration, identity verification, transaction processing, and regulatory compliance. ph388 does not collect personal data speculatively or in excess of what the law and platform operations require.
Bank-Grade Encryption
All personal data transmitted between your device and ph388's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Philippine commercial banks. Data stored on ph388's systems is encrypted at rest with equivalent security controls.
Your Data Belongs to You
As a ph388 account holder, you have the right to access the personal data ph388 holds about you, to request corrections, to ask for deletion, and to object to certain uses — all as guaranteed under Republic Act No. 10173 (the Philippine Data Privacy Act of 2012).
No Selling of Personal Data
ph388 does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial purposes. Data is shared with third parties only where necessary for platform operations (such as payment processors and KYC verification providers) or where required by law.
Philippine Law Compliance
ph388's data practices are governed by and designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines and orders issued by the National Privacy Commission (NPC) of the Philippines.
Breach Notification
In the event of a personal data breach that is likely to result in harm to you, ph388 will notify the National Privacy Commission and affected players within the timeframes required by Philippine data protection law — typically within 72 hours of becoming aware of the breach.
Contents
- 1. Introduction & Scope
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. Purpose & Legal Basis
- 6. Data Sharing
- 7. International Transfers
- 8. Data Retention
- 9. Security Measures
- 10. Cookies & Tracking
- 11. Your Rights
- 12. Children & Minors
- 13. Responsible Gaming Data
- 14. Policy Amendments
- 15. Contact & Complaints
01 Introduction & Scope
This Privacy Policy ("Policy") describes how ph388 ("ph388", "we", "us", or "the Company") collects, uses, stores, protects, and discloses the personal data of individuals ("you", "the Player", or "User") who access or use the ph388 online gaming platform at ph388.club (the "Platform").
This Policy applies to all personal data collected through the Platform, including data collected during account registration, during gameplay and transaction processing, through customer support interactions, and through the use of cookies and similar tracking technologies on the Platform.
This Policy should be read together with ph388's Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with ph388. In the event of any inconsistency between this Policy and the Terms & Conditions in relation to data protection matters, this Policy shall prevail.
02 Data Controller
ph388 is the data controller in respect of your personal data collected and processed through the Platform. As data controller, ph388 determines the purposes for which and the means by which your personal data is processed.
ph388 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Policy. You may contact ph388's DPO at any time using the contact details provided in Section 15 of this Policy. All data protection inquiries directed to ph388 support are forwarded to the DPO for handling.
03 Personal Data We Collect
ph388 collects personal data from you in the following categories. The specific data collected in each category depends on the nature of your interaction with the Platform.
| Category | Examples of Data Collected | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID type and number | Registration, KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address | Registration, account updates |
| Financial Data | GCash number, bank account details (BPI, BDO, Metrobank), card type and last four digits | Deposit and withdrawal transactions |
| Transaction Data | Deposit and withdrawal amounts, dates, payment methods, transaction reference numbers | Every financial transaction on the Platform |
| Gaming Activity Data | Games played, bet amounts, win/loss records, session durations, game preferences | During all gameplay sessions |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution | Every Platform session |
| Support Data | Live chat transcripts, email correspondence, complaint records | Customer support interactions |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, cooling-off period elections | When responsible gaming tools are used |
ph388 does not intentionally collect sensitive personal information beyond what is required for identity verification and legal compliance. ph388 does not collect data regarding racial or ethnic origin, political opinion, religious beliefs, or health status except where directly relevant to a responsible gaming assessment and with your explicit consent.
04 How We Collect Your Data
4.1 Directly from Youph388 collects data directly from you when you: register for a ph388 account; complete KYC verification; make a deposit or request a withdrawal; contact ph388 customer support; set responsible gaming limits; or update your account profile information.
4.2 Automaticallyph388 automatically collects certain Technical Data each time you access the Platform, including your IP address, device information, and session data. This data is collected through server logs and cookies (see Section 10). Automated data collection is necessary for the security, performance, and integrity of the Platform.
4.3 From Third Partiesph388 may receive data about you from third parties in the following circumstances: (a) from payment service providers (including GCash, PayMaya, and banking partners) in connection with transaction verification; (b) from KYC and identity verification service providers during the account verification process; (c) from fraud prevention and anti-money laundering screening services; and (d) from publicly available sources where relevant to regulatory compliance.
05 Purpose & Legal Basis for Processing
ph388 processes your personal data only where it has a valid legal basis for doing so under the Philippine Data Privacy Act of 2012. The following table sets out the principal purposes for which ph388 processes your data and the corresponding legal basis.
| Purpose of Processing | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (your ph388 account agreement) |
| Identity verification (KYC) | Legal obligation (anti-money laundering regulations) |
| Processing deposits and withdrawals | Performance of contract; legal obligation |
| Providing gaming and betting services | Performance of contract |
| Fraud prevention and security monitoring | Legitimate interests; legal obligation |
| Regulatory compliance and record-keeping | Legal obligation |
| Customer support and dispute resolution | Performance of contract; legitimate interests |
| Responsible gaming monitoring and intervention | Legal obligation; legitimate interests |
| Direct marketing communications | Consent (separately obtained; may be withdrawn) |
| Platform improvement and analytics | Legitimate interests (using anonymized or aggregated data) |
Where ph388 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal. To withdraw consent, contact ph388 support or update your communication preferences in your Account settings.
06 Data Sharing & Disclosure
ph388 does not sell, rent, or trade your personal data to third parties for their own independent commercial purposes. ph388 may disclose your personal data to third parties only in the following circumstances:
- Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard — for the purpose of processing deposits and withdrawals to and from your ph388 Account;
- KYC and Identity Verification Providers: Third-party services engaged to verify your identity documents and confirm your eligibility to hold a ph388 Account;
- Fraud Prevention and AML Screening Services: Services used to screen transactions and player activity for indicators of fraud, money laundering, or match-fixing;
- Game and Platform Technology Providers: Licensed game studios and platform technology partners who provide the games and infrastructure that power ph388 — bound by data processing agreements;
- Legal and Regulatory Authorities: Where ph388 is required to disclose data by law, court order, or the direction of a competent regulatory authority, including PAGCOR and the National Privacy Commission;
- Professional Advisors: Legal, financial, or compliance advisors engaged by ph388 who are subject to professional confidentiality obligations.
All third-party service providers engaged by ph388 to process personal data are bound by contractual data processing agreements that impose data security and confidentiality standards at least equivalent to those applied by ph388 itself.
07 International Data Transfers
Some of ph388's third-party technology providers and service partners may be located outside the Philippines and may process your personal data in jurisdictions other than the Philippines. Where such transfers occur, ph388 takes reasonable steps to ensure that your personal data continues to receive a standard of protection equivalent to that provided under Philippine law.
ph388 relies on standard contractual clauses, binding corporate rules, or adequacy decisions as the legal mechanism for such transfers, where applicable. If you wish to obtain further information about the specific safeguards in place for international data transfers, please contact ph388's Data Protection Officer using the contact details in Section 15.
08 Data Retention
ph388 retains your personal data for as long as is necessary for the purposes for which it was collected, and in compliance with applicable legal and regulatory retention obligations. The following general retention periods apply:
- Account and Identity Data: Retained for the duration of your account relationship with ph388 and for a minimum of 5 years following account closure, in compliance with anti-money laundering retention requirements under Philippine law;
- Transaction Records: Retained for a minimum of 5 years from the date of the transaction, as required by applicable financial regulations;
- Gaming Activity Data: Retained for 3 years from the date of the session, unless a longer retention period is required for regulatory compliance or dispute resolution purposes;
- Customer Support Records: Retained for 3 years from the date of the last support interaction;
- Responsible Gaming Records: Retained for the duration of any active self-exclusion arrangement and for a minimum of 5 years thereafter.
Following the expiry of applicable retention periods, ph388 will securely delete or anonymize your personal data so that it can no longer be associated with you.
09 Security Measures
ph388 implements appropriate technical and organizational security measures designed to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and ph388's servers;
- Encryption of sensitive data stored on ph388's servers at rest;
- Role-based access controls limiting access to personal data to those employees and contractors whose job functions require it;
- Two-factor authentication (2FA) options for all player accounts;
- Continuous monitoring of platform systems for unauthorized access attempts and anomalous activity;
- Regular security audits and penetration testing by independent third-party security professionals;
- Employee training on data protection obligations and information security best practices.
10 Cookies & Similar Technologies
10.1 What Are CookiesCookies are small text files placed on your device by websites you visit. ph388 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, maintain session integrity, detect fraud, and analyze Platform usage.
10.2 Types of Cookies Used by ph388- Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, login authentication, and security features. These cannot be disabled without impairing your use of ph388;
- Performance and Analytics Cookies: Used to collect anonymized information about how players use the Platform, enabling ph388 to improve performance, identify errors, and optimize the user experience;
- Functional Cookies: Used to remember your preferences (such as language settings and game category selections) to personalize your experience on the Platform;
- Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and abuse of ph388's platform and promotional offers.
You may configure your browser to refuse or delete cookies. Note that disabling strictly necessary cookies will impair the functionality of the ph388 Platform and may prevent you from logging in or placing wagers. ph388 does not currently respond to browser "Do Not Track" signals, as there is no industry standard for their interpretation.
11 Your Data Protection Rights
Under the Philippine Data Privacy Act of 2012, ph388 account holders have the following rights in respect of their personal data. To exercise any of these rights, contact ph388 support or ph388's Data Protection Officer using the details in Section 15.
Right to Access
You have the right to request a copy of the personal data ph388 holds about you, along with information about how it is processed, for what purpose, and with whom it is shared.
Right to Rectification
You have the right to request that ph388 correct any inaccurate or incomplete personal data it holds about you. You can update certain data directly from your Account settings; other corrections should be submitted to ph388 support.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires ph388 to retain it. Note that regulatory retention requirements may limit ph388's ability to fully erase certain records.
Right to Object
You have the right to object to the processing of your personal data where ph388 relies on legitimate interests as its legal basis. You also have the right to opt out of direct marketing communications at any time, without affecting your account status.
Right to Data Portability
Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that ph388 transmit that data to another service provider where technically feasible.
Right to Withdraw Consent
Where ph388 processes your data based on your consent (for example, for direct marketing), you may withdraw that consent at any time by contacting support or updating your communication preferences in Account settings. Withdrawal does not affect processing conducted before withdrawal.
ph388 will respond to all verified data subject requests within 30 calendar days of receipt. In complex cases, ph388 may extend this period by a further 30 days, in which case ph388 will notify you of the extension and the reason for it. ph388 will not charge a fee for handling standard data subject requests.
12 Children & Minors
If ph388 discovers or has reason to believe that an account has been registered by or is being used by an individual under 21 years of age, the account will be immediately suspended. Any personal data collected in connection with the underage account will be securely deleted following the resolution of any regulatory reporting obligations that may apply.
Parents and guardians who believe their child (under 21) has registered for a ph388 account should contact ph388 support immediately. ph388 will act on such reports promptly and will delete the minor's data as quickly as applicable law permits.
13 Responsible Gaming Data
Personal data collected in connection with responsible gaming tools — including self-exclusion requests, deposit limit settings, loss limit configurations, and cooling-off period elections — is processed by ph388 for the purpose of fulfilling ph388's responsible gaming obligations and protecting player welfare.
Responsible gaming data is treated with heightened sensitivity. It is not used for marketing or promotional purposes and is not shared with third parties except where required by law or by the direction of a regulatory authority. Self-exclusion data may be shared with other licensed gaming operators where mandated by applicable PAGCOR responsible gaming frameworks.
Players seeking guidance on managing their gambling activity are encouraged to visit ph388's Responsible Gaming page, which outlines all available tools and resources in detail.
14 Amendments to This Policy
ph388 reserves the right to amend this Privacy Policy at any time. Amendments will be published on this page with a revised Effective Date. For material changes to how ph388 uses your personal data, ph388 will provide notice through the Platform or by email to your registered address, where practicable, prior to the change taking effect.
Continued use of the ph388 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you must cease using the Platform and may request account closure by contacting ph388 support.
15 Contact, Complaints & the DPO
If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to report a concern about ph388's data handling practices, please contact ph388 using the following details:
- Customer Support (General): Live chat available 24/7 on the ph388 Platform
- Data Protection Officer (DPO) Email: [email protected] — mark the subject line "Data Privacy / DPO Request"
- Response Time: ph388 targets a substantive response to all data protection inquiries within 5 business days, and full resolution within 30 calendar days.
If you are not satisfied with ph388's response to your data protection concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about filing a complaint with the NPC is available through the NPC's official channels.
Ready to Play on ph388 with Confidence?
ph388 keeps your personal data secure, processes it only for legitimate purposes, and gives you full control over it under Philippine law. Join Filipino players from Manila to Mindanao on the platform that takes privacy as seriously as it takes payouts.