ph33a Privacy Policy 🔒

1. Introduction

ph33a ("ph33a," "we," "us," or "our") operates the online casino and sports betting platform accessible at https://ph33a.cam (the "Platform"). We are committed to protecting the personal data of all individuals who interact with our Platform, including registered players, prospective players, and visitors to our website.

This Privacy Policy describes how ph33a collects, uses, stores, discloses, and protects your personal information in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (the "DPA"), its Implementing Rules and Regulations, the issuances of the National Privacy Commission (NPC), and the requirements of the Philippine Amusement and Gaming Corporation (PAGCOR) under whose license ph33a operates.

By registering an account on the ph33a Platform or by continuing to use our services, you acknowledge that you have read, understood, and consent to the data processing practices described in this Privacy Policy. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

This Privacy Policy should be read alongside ph33a's Terms and Conditions and Responsible Gaming Policy, both of which are accessible on this Platform.

2. Data Controller

ph33a is the personal information controller ("PIC") in respect of your personal data as defined under the Data Privacy Act of 2012. As the PIC, ph33a determines the purposes for which and the means by which your personal data is processed.

Our Data Protection Officer ("DPO") is responsible for overseeing compliance with this Privacy Policy and applicable data privacy laws. You may contact our DPO through the contact details provided in Section 15 of this Policy. All data privacy inquiries, requests to exercise data subject rights, and complaints should be directed to the DPO in the first instance.

3. Personal Data We Collect

ph33a collects the following categories of personal data in connection with the operation of the Platform and the provision of our services:

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth and proof of age (minimum 21 years)
• Nationality and country of residence
• Government-issued identification number (PhilSys ID, UMID, passport number, driver's license number)
• Copies of identification documents submitted for KYC verification
• Username and encrypted account password

3.2 Contact Data

• Email address (primary contact for account notifications)
• Mobile phone number (used for OTP verification and account security)
• Residential address (province, city/municipality, barangay, ZIP code)

3.3 Financial and Transaction Data

• GCash or PayMaya mobile wallet number
• Bank account details (for BPI, BDO, Metrobank, UnionBank transfers)
• Visa or Mastercard details (card number stored in tokenized form only)
• Deposit history, withdrawal history, and account balance records
• Source of funds declarations where required by PAGCOR AML regulations

3.4 Gaming and Activity Data

• Game session history, wagers placed, and game outcomes
• Betting patterns and sports betting selections
• Bonus claims, promotional participation records, and wagering requirement progress
• Responsible gaming settings (deposit limits, session timers, self-exclusion records)
• Customer support interaction records, including live chat transcripts and email correspondence

3.5 Technical and Device Data

• IP address and geolocation data derived from IP
• Device type, operating system, and browser information
• Session timestamps and Platform navigation logs
• Cookie identifiers and similar tracking technologies (see Section 10)

4. How We Collect Your Data

ph33a collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing identity verification (KYC), making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party verification: Identity and age verification data obtained from PAGCOR-approved identity verification service providers, as required by our licensing obligations.
• Payment processors: Transaction data received from our payment processing partners (GCash, PayMaya, banks, and card networks) to confirm and reconcile deposits and withdrawals.
• AML/compliance checks: Data obtained from sanctions screening services, politically exposed persons (PEP) databases, and adverse media sources as required under our PAGCOR license and Philippine anti-money laundering obligations.

5. Purposes of Processing

ph33a processes your personal data for the following specific and legitimate purposes:

Purpose	Data Categories Used
Account registration and identity verification (KYC)	Identity, Contact, Government ID
Processing deposits and withdrawals	Financial, Identity, Contact
Delivering gaming services and maintaining game history	Gaming Activity, Technical
PAGCOR regulatory compliance and audit reporting	Identity, Financial, Gaming Activity
Anti-money laundering (AML) and fraud prevention	Identity, Financial, Technical
Responsible gaming monitoring and intervention	Gaming Activity, Contact, Identity
Customer support and dispute resolution	Identity, Contact, Gaming Activity, Financial
Platform security and fraud detection	Technical, Identity, Financial
Marketing communications (with consent)	Contact, Gaming Activity
Platform analytics and product improvement	Technical, Gaming Activity (anonymized)

6. Legal Basis for Processing

ph33a processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing necessary to perform the contract between you and ph33a (i.e., providing gaming services, processing payments, maintaining your account).
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, National Privacy Commission requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics — where these interests are not overridden by your data privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided freely given, specific, and informed consent. You may withdraw consent at any time.

7. Sharing Your Personal Data

7.1 Third Parties We Share Data With

ph33a does not sell your personal data. We share your personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• PAGCOR: As our licensing authority, PAGCOR may require access to player data for regulatory audit, compliance verification, and investigation purposes. Such disclosures are mandatory under our license.
• Payment processors: GCash, PayMaya, banks (BPI, BDO, Metrobank, UnionBank), and card networks (Visa, Mastercard) receive the data necessary to process your deposits and withdrawals.
• Identity verification providers: PAGCOR-approved KYC/AML service providers receive identity documents and personal data for the purpose of age and identity verification.
• Game software providers: Game developers and RNG certification bodies receive anonymized or pseudonymized gaming activity data as required for technical operation and auditing of games.
• IT and cloud service providers: Providers of hosting, database, security, and analytics infrastructure who process data on our behalf under data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, courts, or government regulators where disclosure is required by applicable Philippine law or valid legal process.

7.2 Processors and Data Processing Agreements

All third parties who process personal data on ph33a's behalf act as personal information processors ("PIP") under the Data Privacy Act. ph33a maintains data processing agreements with all PIPs requiring them to process personal data only on ph33a's documented instructions, maintain appropriate security measures, and comply with the Data Privacy Act of 2012.

8. Data Retention

ph33a retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years after the date of the transaction, in compliance with AMLA record-keeping requirements.
• Gaming activity records: Retained for three (3) years after the last activity on your account, or longer if required by PAGCOR audit requirements.
• Customer support records: Retained for three (3) years from the date of the last support interaction.
• Marketing consent records: Retained for the duration of your consent plus two (2) years for evidence purposes, or until you withdraw consent.
• Technical and device logs: Retained for twelve (12) months in standard security logs; extended retention may apply where logs relate to active fraud or security investigations.

Upon expiration of applicable retention periods, personal data is securely deleted or anonymized in accordance with ph33a's data disposal procedures.

9. Data Security

ph33a implements technical and organizational measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph33a Platform.
• Encryption at rest for sensitive personal data stored in our databases, including identity documents and financial account details.
• Payment card tokenization: Cardholder data is tokenized at the point of entry and stored only in tokenized form; ph33a never stores raw card numbers on our servers.
• Access controls: Personal data is accessible only to ph33a personnel with a verified operational need, subject to role-based access controls and multi-factor authentication requirements.
• Regular security audits and penetration testing conducted by independent security specialists.
• Two-factor authentication (2FA) available for all player accounts to protect against unauthorized access.
• Incident response plan in place to detect, investigate, and report personal data breaches to the National Privacy Commission within 72 hours of discovery, as required under the Data Privacy Act.

While ph33a employs robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying ph33a immediately if you suspect unauthorized access to your account.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the ph33a Platform. They help us recognize your device, remember your preferences, keep you logged in securely, and understand how you use our Platform so we can improve it.

10.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function — session authentication, security tokens, and basic navigation. These cannot be disabled.
• Functional cookies: Remember your preferences (language, game settings, responsible gaming limits) to provide a more personalized experience.
• Analytics cookies: Collect anonymized data about how visitors use the Platform (pages visited, session duration, errors encountered) to help us improve. Used with your consent.
• Marketing cookies: Used to deliver relevant promotional content to you on the ph33a Platform based on your gaming interests. Used only with your explicit consent.

10.3 Managing Cookies

You can control non-essential cookies through the cookie preference settings available in your ph33a account settings, or by adjusting your browser's cookie settings. Note that disabling strictly necessary cookies will affect the Platform's functionality and may prevent you from logging in or completing transactions.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph33a:

To exercise any of the above rights, please contact ph33a's Data Protection Officer using the details in Section 15. ph33a will respond to all data subject rights requests within fifteen (15) days of receipt. Some rights are subject to limitations where ph33a has legal obligations that require continued processing (such as AMLA record-keeping requirements).

12. Minors and Age Restriction

The ph33a Platform is strictly restricted to individuals who are at least twenty-one (21) years of age, in accordance with PAGCOR regulations governing casino-style gambling in the Philippines. ph33a does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered an account on ph33a, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13. International Data Transfers

Some of ph33a's service providers — including game software licensors, cloud infrastructure providers, and security service vendors — may operate servers or processing facilities outside the Philippines. Where personal data is transferred outside the Philippines, ph33a ensures that adequate safeguards are in place as required by the National Privacy Commission, including data processing agreements incorporating standard contractual clauses or equivalent protections.

ph33a will not transfer your personal data to any jurisdiction that does not provide an adequate level of data protection without implementing appropriate safeguards and, where required, obtaining your prior consent to the transfer.

14. Changes to This Privacy Policy

ph33a may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to you via a notice posted prominently on the Platform and, where practicable, via email to your registered address, at least thirty (30) days before the changes take effect.

Your continued use of the ph33a Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with any revisions, you may request account closure before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision.

15. Contact Us and Data Protection Officer

For all personal data inquiries, requests to exercise your data subject rights, or complaints regarding ph33a's data processing practices, please contact our Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24 hours a day, 7 days a week via the ph33a Platform
• Phone Support: 10:00 AM – 10:00 PM PHT, Monday to Sunday

If you are not satisfied with ph33a's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.