ph378 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how ph378 Casino, operating through the domain ph378.cam ("ph378," "we," "us," "our"), collects, uses, stores, discloses, and otherwise processes personal information relating to individuals ("User," "Player," "Data Subject," "you") who access or use ph378's online gaming platform, website, mobile interfaces, and associated services (collectively, "Services").

ph378 is committed to safeguarding the privacy and personal data of every Filipino player who trusts us with their information. We operate in full compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). Where applicable, we also observe the standards set by the Philippine Amusement and Gaming Corporation (PAGCOR) with respect to player data confidentiality.

By accessing ph378's website or registering an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of our Services immediately. This Policy should be read in conjunction with our Terms and Conditions, which together govern the entire relationship between you and ph378.

1.1 Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and applicable regulations, ph378 acts as the Personal Information Controller (PIC) with respect to data collected through the ph378.cam platform. Inquiries regarding this Policy, data subject rights requests, or privacy-related complaints may be directed to our Data Protection Officer (DPO) at [email protected]. We aim to acknowledge receipt of all privacy-related correspondence within five (5) business days and resolve matters within thirty (30) calendar days from receipt of a complete request.

1.2 Applicability

This Policy applies to all personal data collected from individuals who: register an account on ph378; visit our website without registering; participate in promotions, tournaments, or loyalty programs; interact with ph378 customer support; subscribe to marketing communications; or engage with ph378 through third-party platforms, social media channels, or affiliated partner sites. It applies regardless of the method of access, including desktop browsers, mobile browsers, and any native or progressive web application provided by ph378.

2. Personal Data We Collect

ph378 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is processed. The categories of personal data we collect are set out below.

2.1 Registration and Identity Data

When you create a ph378 account, we collect the following information to verify your identity, confirm eligibility, and set up your gaming account in accordance with regulatory requirements:

• Full Legal Name: As it appears on your government-issued identification document.
• Date of Birth: To confirm you meet the minimum age of twenty-one (21) years required for casino gaming under Philippine law.
• Gender: Optional, collected for account personalisation purposes.
• Residential Address: Complete address including street, barangay, city or municipality, province, and postal code (Philippine or international).
• Contact Information: Valid email address and active mobile number, used for account notifications, authentication, and customer support.
• Government-Issued Identification: Scanned copies or photographs of accepted Philippine IDs (passport, driver's licence, UMID, PhilID, SSS/GSIS card, or other PAGCOR-accepted documents) and supplementary documents for Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance.
• Selfie or Liveness Verification: Where required, a live photograph or video may be requested to match against your submitted identity document.

2.2 Financial and Transaction Data

To facilitate deposits and withdrawals through Philippine payment channels, ph378 collects and processes:

• Payment Method Details: GCash account number, PayMaya account details, bank name, account name and number (for BPI, BDO, Metrobank, UnionBank, and other Philippine banks), or e-wallet identifiers. Credit and debit card information is tokenised and processed by PCI-DSS-compliant payment processors; full card numbers are never stored on ph378 servers.
• Transaction History: Records of all deposits, withdrawals, bonus credits, wagering activity, and internal account transfers, including amounts, timestamps, payment methods used, and transaction reference numbers.
• Source of Funds Information: Employment details, income documentation, or wealth source declarations requested for high-value transactions or as required by AML regulations.

2.3 Gaming and Behavioural Data

ph378 collects data about how you use our Services to deliver a seamless experience, detect fraud, and meet regulatory reporting obligations:

• Game session details including games played, bets placed, outcomes, session durations, and win/loss records.
• Bonus and promotion participation history, including claimed offers and wagering progress.
• Login and session timestamps, session duration, and logout events.
• Responsible gaming tool usage, including deposit limits set, self-exclusion requests, and cooling-off periods.
• Customer support interaction records, including chat transcripts, email correspondence, and call logs (where applicable).

2.4 Technical and Device Data

When you access ph378 through any device or browser, we automatically collect certain technical information:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, and unique device identifiers.
• Network Information: IP address, approximate geographic location derived from IP address, internet service provider, and mobile carrier.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies used to maintain login sessions, remember preferences, and analyse site usage. See Section 6 for our full Cookie Policy.
• Usage Logs: Pages visited, links clicked, features accessed, error logs, and navigation paths within the ph378 platform.

2.5 Communications Data

If you contact ph378 customer support, participate in surveys, submit feedback, or engage with our promotional campaigns, we retain records of such communications including the content of messages, your contact details, the date and time of the communication, and any resolutions reached. This data is used to resolve disputes, improve our services, and fulfil regulatory record-keeping obligations.

3. Purposes of Processing and Legal Bases

ph378 processes personal data only for specified, explicit, and legitimate purposes. In accordance with the Data Privacy Act of 2012, each processing activity is grounded in one or more of the following lawful bases: your consent, the performance of a contract to which you are a party, compliance with a legal obligation, the protection of vital interests, the performance of a task in the public interest, or the legitimate interests of ph378 (where not overridden by your fundamental rights and freedoms).

3.1 Account Registration and Service Delivery

Purpose: To create and manage your ph378 account, verify your identity and age eligibility, process deposits and withdrawals, and deliver all gaming and ancillary services.
Legal Basis: Performance of the contract between you and ph378 (Terms and Conditions); compliance with PAGCOR licensing requirements and AML/KYC regulations under Republic Act No. 9160 as amended.

3.2 Regulatory Compliance and Anti-Money Laundering

Purpose: To meet ph378's legal obligations under the Anti-Money Laundering Act (AMLA), its amendments (Republic Act No. 10365 and 11521), PAGCOR regulations, and NPC directives, including player identity verification, transaction monitoring, suspicious activity reporting, and record retention.
Legal Basis: Compliance with legal obligations to which ph378 is subject.

3.3 Security, Fraud Prevention, and Platform Integrity

Purpose: To protect the security of your account and funds, detect and prevent fraud, abuse, collusion, money laundering, underage gambling, and other prohibited activities, and maintain the integrity of our gaming platform.
Legal Basis: Legitimate interests of ph378 in protecting its platform, its players, and the broader gaming ecosystem; compliance with legal obligations.

3.4 Customer Support and Dispute Resolution

Purpose: To respond to your enquiries, resolve complaints, investigate disputes, and maintain records of support interactions as required by PAGCOR and applicable consumer protection regulations.
Legal Basis: Performance of the contract; legitimate interests; compliance with legal obligations.

3.5 Responsible Gaming

Purpose: To monitor gaming behaviour for signs of problem gambling, administer player protection tools (deposit limits, self-exclusion, session limits), and communicate with players who may be experiencing gambling-related harm.
Legal Basis: Compliance with PAGCOR responsible gaming obligations; legitimate interests in player welfare.

3.6 Marketing and Promotional Communications

Purpose: To send you personalised promotional offers, bonus notifications, game recommendations, and newsletters about ph378 services.
Legal Basis: Your prior express consent, which you may withdraw at any time by updating communication preferences in your account settings or contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3.7 Platform Analytics and Improvement

Purpose: To analyse aggregate usage patterns, measure feature performance, conduct A/B testing, and improve the overall quality, speed, and reliability of ph378 services.
Legal Basis: Legitimate interests; where cookie-based analytics are concerned, your consent obtained through our Cookie Consent mechanism.

4. Data Sharing and Disclosure

ph378 does not sell, rent, or trade your personal information to unaffiliated third parties for their independent commercial purposes. We may share your data with the following categories of recipients solely to the extent necessary for the purposes described in this Policy:

4.1 Service Providers and Data Processors

We engage third-party companies to provide services on our behalf, including payment processing and fraud detection providers (e.g., payment gateway operators handling GCash, PayMaya, and bank transfer integrations), identity verification and KYC service providers, cloud hosting and infrastructure providers operating servers within or accessible from the Philippines, customer support platform operators, email and SMS communication service providers, and gaming software providers licensed to supply game content on our platform. All third-party processors are bound by written Data Processing Agreements that require them to process personal data only on documented instructions from ph378, maintain appropriate technical and organisational security measures, and not engage sub-processors without prior written consent from ph378.

4.2 Regulatory and Law Enforcement Authorities

ph378 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or courts of competent jurisdiction when required to do so by applicable law, court order, lawful regulatory request, or when we have a good-faith belief that disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity; to protect the safety and rights of our players, ph378 staff, or the public; or to comply with applicable legal obligations. We will, where legally permissible, notify affected users of such disclosures.

4.3 Corporate Transactions

In the event that ph378 undergoes a merger, acquisition, restructuring, asset sale, or similar corporate transaction, personal data held by ph378 may be transferred to the acquiring entity or successor organisation as part of the transaction assets. Any such transfer will be subject to confidentiality obligations, and affected users will be notified via their registered email address prior to the transfer and will be given the opportunity to withdraw consent or close their account before the transaction takes effect.

4.4 Consent-Based Disclosures

We may share your personal data with third parties not described above where we have obtained your prior express, informed, and specific consent to do so. You retain the right to withdraw such consent at any time without detriment to your account standing, except where the disclosure has already taken place on the basis of the original consent.

4.5 Cross-Border Data Transfers

Some of our third-party service providers may be located outside the Philippines. Where personal data is transferred to a foreign jurisdiction, ph378 ensures that the transfer is subject to appropriate safeguards as required by the Data Privacy Act of 2012 and NPC regulations, including contractual clauses that impose data protection obligations on the recipient equivalent to those applicable in the Philippines. ph378 will not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing such safeguards.

5. Data Retention

ph378 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the lifetime of your active account, and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLC regulations.
• Gaming Activity Logs: Retained for three (3) years from the date of the recorded session, or longer if required by an ongoing investigation or legal proceeding.
• Customer Support Records: Retained for two (2) years from the date of resolution of the support interaction.
• Marketing Consent Records: Retained for three (3) years from the date of last marketing communication sent, or until consent is withdrawn, whichever is earlier.
• Technical and Device Logs: Retained for ninety (90) days for standard logs and up to one (1) year for security-related logs.

At the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Physical documents containing personal data are shredded in accordance with secure disposal procedures.

6. Security Measures

ph378 implements a comprehensive information security programme incorporating technical, administrative, and physical safeguards appropriate to the nature and sensitivity of the personal data we process. Key security measures include:

• Encryption in Transit: All communications between your device and ph378 servers are encrypted using TLS 1.2 or higher, equivalent to the 256-bit SSL standard used by Philippine banks and major financial institutions.
• Encryption at Rest: Sensitive personal data, including identity documents, financial records, and authentication credentials, are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a need-to-know basis. All ph378 staff with access to personal data are subject to background checks, confidentiality agreements, and mandatory data privacy training. Multi-factor authentication is required for all administrative system access.
• Intrusion Detection and Prevention: Our infrastructure is continuously monitored by automated intrusion detection systems, and regular penetration tests are conducted by qualified third-party security firms.
• Data Segregation: Player financial data and identity documents are stored in isolated database environments segregated from general operational systems and accessible only through strictly controlled internal APIs.
• Incident Response: ph378 maintains a documented data breach response plan. In the event of a personal data breach, we will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

7. Cookies and Tracking Technologies

ph378 uses cookies and similar tracking technologies to operate and improve our platform, maintain your login session, remember your preferences, and analyse usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the operation of the ph378 website, including session management, authentication, and security features. These cannot be disabled without preventing you from using core platform functions.
• Functional Cookies: Allow us to remember your preferences (such as language settings, display options, and responsible gaming limit settings) to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregate statistical information about how users interact with our platform. This data helps us understand which features are used most frequently and identify areas for improvement. Analytics cookies do not identify individual users.
• Marketing and Retargeting Cookies: Used to deliver relevant promotional content based on your gaming interests and browsing behaviour. These are only activated with your prior consent and are strictly limited to ph378's own promotional communications.

You may manage your cookie preferences through the Cookie Settings panel accessible from our website footer, or through your browser settings. Please note that disabling certain cookies may affect the functionality of ph378 services.

8. Minors and Age-Restricted Services

ph378 services are strictly restricted to individuals aged twenty-one (21) years and above, in accordance with Philippine gaming regulations. ph378 does not knowingly collect or process personal data from individuals under the legal gambling age. If we become aware that personal data of a minor has been collected, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their child may have accessed ph378 services are encouraged to contact us immediately at [email protected] so that prompt action can be taken. We strongly recommend the use of parental control software to restrict minors' access to online gaming platforms.

9. Exercising Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have a number of rights in relation to your personal data. ph378 is committed to honouring these rights efficiently and without undue delay. To exercise any of the rights described below, please submit a written request to [email protected], clearly identifying yourself and specifying the right you wish to exercise. We may request proof of identity before processing your request to prevent unauthorised access to your data.

9.1 Right to Be Informed

You have the right to be informed of the existence of processing operations involving your personal data, the purposes for which your data is processed, the categories of data collected, and the identity of the personal information controller. This Privacy Policy constitutes ph378's primary means of exercising this obligation of transparency.

9.2 Right of Access

You have the right to obtain from ph378 confirmation as to whether personal data concerning you is being processed, and where that is the case, access to that personal data and supplementary information including the purposes of processing, the categories of data processed, and the retention period. We will provide a copy of your personal data in a structured, commonly used format within thirty (30) calendar days of a complete access request.

9.3 Right to Correction

You have the right to require ph378 to correct inaccurate personal data concerning you without undue delay. You may update basic account information (such as your email address, contact number, or residential address) directly through your account settings. For corrections to sensitive data such as your full legal name or date of birth, please contact customer support with documentary evidence supporting the requested correction.

9.4 Right to Erasure and Blocking

You may request that ph378 erase your personal data where the data is no longer necessary for the purposes for which it was collected; where you have withdrawn consent and there is no other legal ground for processing; where you have objected to processing and there are no overriding legitimate grounds for continued processing; or where the data has been unlawfully processed. Please note that the right to erasure is not absolute — ph378 may retain personal data where required by law (e.g., AML record-keeping obligations under the AMLA) or where retention is necessary for the establishment, exercise, or defence of legal claims.

9.5 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling for marketing purposes. You may also object to processing based on ph378's legitimate interests on grounds relating to your particular situation. Upon receipt of a valid objection to direct marketing processing, ph378 will cease processing your data for that purpose without delay.

9.6 Right to Data Portability

Where processing is based on your consent or on a contractual relationship, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller. ph378 will provide portable data exports in JSON or CSV format upon request.

10. Updates to This Privacy Policy

ph378 reserves the right to update, amend, or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the scope of our services. Material changes will be communicated to registered users via email notification to the address on file and by posting a prominent notice on the ph378 website at least fourteen (14) days before the changes take effect. We encourage you to review this Policy periodically to stay informed of how we protect your personal data. The date of the most recent revision is indicated at the top of this Policy. Your continued use of ph378 services after the effective date of any updated Policy constitutes your acceptance of the changes.

11. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or ph378's data processing practices, please contact our Data Protection Officer at:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the ph378 website
• Response Commitment: Acknowledgement within five (5) business days; resolution within thirty (30) calendar days for routine requests

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), the independent authority responsible for administering and implementing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through the Commission's official channels.