ph387 Privacy Policy

This Privacy Policy ("Policy") describes how ph387 ("ph387," "we," "us," "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," "the Player") who access or use the ph387 online casino and sports betting platform available at ph387.net ("the Platform").

ph387 is committed to processing your personal data lawfully, fairly, and transparently in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "the DPA"), its Implementing Rules and Regulations ("IRR"), and all applicable issuances of the National Privacy Commission ("NPC") and the Philippine Amusement and Gaming Corporation ("PAGCOR").

This Policy should be read together with the ph387 Terms and Conditions, which govern the overall relationship between you and ph387. Capitalised terms not defined in this Policy have the meanings given to them in the Terms and Conditions.

ph387 acts as the personal information controller ("PIC") for all personal data collected through the ph387 Platform. As PIC, ph387 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with the DPA and this Policy.

ph387 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing data protection compliance within the organisation, handling data subject requests, and serving as the point of contact with the NPC. The ph387 DPO can be contacted at the details set out in Section 13 of this Policy.

ph387 collects personal data from you directly when you register an account, make a deposit or withdrawal, contact our support team, or interact with the Platform in any way. We also collect certain data automatically through technical means when you access the Platform. The categories of personal data we collect are as follows:

3.1 Identity and Contact Data

• Full legal name as it appears on your Philippine government-issued identification document;
• Date of birth and age verification information;
• Residential address in the Philippines;
• Valid email address;
• Philippine mobile number.

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., PhilSys National ID, passport, driver's licence, SSS/GSIS card, PRC ID, voter's ID);
• Proof of address documentation (e.g., utility bill, bank statement);
• Proof of payment method ownership;
• Selfie or liveness verification image where required.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment methods used (GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, USDT, Coins.ph);
• Account balance history;
• Bonus and promotion claim records;
• Betting and gaming activity records, including game type, wager amounts, results, and timestamps.

3.4 Technical and Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features accessed on the Platform;
• Login timestamps and access logs;
• Cookie identifiers and similar tracking data (see Section 7).

3.5 Communications Data

• Records of your communications with ph387 support staff, including live chat transcripts, emails, and any other correspondence;
• Complaint and dispute records.

ph387 uses the personal data we collect about you for the following specific purposes:

Under the Data Privacy Act of 2012, ph387 processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and ph387, including providing platform access, processing transactions, and managing your player account;
• Legal Obligation: Processing is required for ph387 to comply with its legal obligations under Philippine law, PAGCOR regulations, AML legislation, and NPC requirements;
• Legitimate Interests: Processing is necessary for ph387's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent: For non-essential processing such as direct marketing communications, ph387 relies on your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ph387 does not sell, rent, or trade your personal data to third-party marketers or data brokers. We share your personal data only in the following limited circumstances:

6.1 Service Providers and Processors

ph387 engages trusted third-party service providers who process personal data on our behalf as personal information processors ("PIPs") under the DPA. These include payment processing partners (GCash, Maya, BPI, BDO, Metrobank, UnionBank, Coins.ph), identity verification and KYC technology providers, game software providers (including JILI Games and PG Soft), cloud hosting and infrastructure providers, and customer support platform providers. All PIPs are contractually required to process your data only on ph387's documented instructions, maintain appropriate security measures, and comply with the DPA.

6.2 Regulatory and Law Enforcement Bodies

ph387 may be required to disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), Philippine law enforcement authorities, and the courts of the Philippines where such disclosure is required by applicable law, regulation, court order, or lawful authority instruction.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or part of ph387's business assets, your personal data may be transferred to the relevant successor entity, subject to that entity's agreement to be bound by obligations no less protective than those in this Policy.

6.4 With Your Consent

ph387 may share your data with third parties in circumstances not described above where you have given your explicit prior consent to such sharing.

ph387 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, improve your experience, and support fraud prevention and analytics. The types of cookies we use are:

• Strictly Necessary Cookies: These are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without affecting Platform functionality;
• Functional Cookies: These remember your preferences and settings, such as your language preference and login details, to provide a more personalised experience;
• Analytics Cookies: These collect aggregated, anonymised data about how players use the Platform, helping ph387 identify areas for improvement. No personally identifiable information is shared with analytics providers;
• Security and Fraud Prevention Cookies: These help ph387 detect and prevent fraudulent activity, including the use of automation tools and the creation of multiple accounts.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the ph387 Platform. For further information about the cookies we use, please contact the ph387 DPO.

ph387 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by applicable Philippine law and PAGCOR regulations. Our standard data retention periods are as follows:

Upon expiry of the applicable retention period, ph387 will securely delete or anonymise your personal data in accordance with our data disposal procedures, unless further retention is required by a specific legal obligation or ongoing legal proceedings.

ph387 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the ph387 Platform is protected using Transport Layer Security (TLS) 1.2 or higher. Sensitive data at rest is encrypted using AES-256 or equivalent industry-standard encryption;
• Access Controls: Access to personal data is restricted to ph387 personnel and authorised service providers on a strict need-to-know basis. All access is logged and regularly audited;
• Two-Factor Authentication: ph387 supports two-factor authentication for player accounts and requires it for all internal administrative access to systems containing personal data;
• Security Audits: ph387 conducts regular penetration testing and vulnerability assessments of its platform infrastructure;
• Staff Training: All ph387 personnel with access to personal data receive mandatory data protection and information security training;
• Incident Response: ph387 maintains a documented data breach response procedure and will notify affected players and the NPC within 72 hours of becoming aware of a notifiable personal data breach.

Whilst ph387 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph387 account credentials and for notifying ph387 immediately if you suspect any unauthorised access to your account.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph387:

• Right to be Informed: The right to be told how your personal data is being processed, as described in this Policy;
• Right to Access: The right to request a copy of the personal data ph387 holds about you, together with information about how it is processed;
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ph387's legal and regulatory retention obligations;
• Right to Object: The right to object to the processing of your personal data, including for direct marketing purposes;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to Damages: The right to claim compensation for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph387 has violated your data privacy rights.

To exercise any of the above rights, please contact the ph387 Data Protection Officer using the contact details in Section 13. ph387 will acknowledge your request within 3 business days and provide a substantive response within 15 business days, as required by the DPA IRR. We may be required to verify your identity before processing your request.

The ph387 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations and applicable Philippine gaming law. ph387 does not knowingly collect personal data from any individual under the age of 21.

All players are required to verify their age and identity as part of the ph387 registration and KYC process. Any account where ph387 reasonably suspects the account holder is under the age of 21 will be immediately suspended pending investigation. If we become aware that we have collected personal data from an individual under the age of 21, we will take prompt steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to ph387, please contact our DPO immediately using the contact details in Section 13.

ph387 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulations, or NPC guidance. When material changes are made to this Policy, ph387 will notify registered players by email to the address associated with their ph387 account and/or through a prominent notice on the Platform.

The effective date of the current version of this Policy is displayed at the top of this page and in the notice at the bottom of this section. Your continued use of the ph387 Platform following the publication of any updated Policy constitutes your acceptance of the revised terms, to the extent permitted by applicable law.

We recommend reviewing this Privacy Policy periodically to stay informed about how ph387 protects your personal data. Previous versions of this Policy are available upon request from the ph387 DPO.

If you have any questions, concerns, or requests regarding this Privacy Policy or ph387's data processing practices, or if you wish to exercise your data subject rights under the Philippine Data Privacy Act of 2012, please contact the ph387 Data Protection Officer through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through your ph387 account dashboard
• Language: Requests can be submitted in English or Tagalog

ph387 acknowledges all data subject requests within 3 business days and will provide a substantive response within 15 business days. Where a request is complex or involves a large volume of data, ph387 may extend this period by up to an additional 15 business days, with prior notification to the requestor.

If you are not satisfied with ph387's response to your data subject request or believe ph387 has violated your data privacy rights, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines.