ph365.orig Privacy Policy

1. Who We Are

ph365.orig ("we," "us," "our," or "the Platform") operates the online gaming website accessible at ph365orig.co and associated subdomains. ph365.orig acts as the Data Controller in respect of personal data collected through the platform. All references to "personal data" or "personal information" in this Policy refer to information as defined under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA") of the Philippines.

For questions about this Policy or the handling of your personal data, please contact our Data Protection Officer using the contact information provided in Section 14 of this Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create a ph365.orig account, we collect:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Philippine mobile number (primary account identifier);
• Email address (where provided);
• Residential address;
• Nationality and country of residence.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations, we collect identity documents including:

• Government-issued photo identification (PhilSys National ID, Philippine Passport, Driver's License, UMID, SSS ID, or equivalent);
• Proof of address documentation where required;
• Selfie or live photograph for identity matching purposes;
• Source of funds documentation where triggered by transaction thresholds or regulatory requirements.

2.3 Financial Data

We collect transaction records including deposit amounts, withdrawal requests, payment method identifiers (e.g., the last four digits of a GCash-linked number or bank account reference), and transaction timestamps. ph365.orig does not store complete bank account numbers, full card numbers, or GCash/Maya PINs. All payment data is processed through certified third-party payment processors.

2.4 Gaming Activity Data

We maintain records of your gaming activity on the ph365.orig platform, including games played, bets placed, outcomes, session durations, and responsible gaming tool usage (e.g., deposit limit activations, self-exclusion requests).

2.5 Technical and Device Data

We automatically collect technical data when you access ph365.orig, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session identifiers and authentication tokens;
• Pages visited, features accessed, and time spent on platform sections;
• Referring URL and entry/exit points.

2.6 Communications Data

If you contact ph365.orig support via live chat, email, or any other channel, we retain records of those communications for quality assurance, compliance, and dispute resolution purposes.

3. How We Collect Your Data

ph365.orig collects personal data through the following means:

• Directly from you — through the registration form, KYC submission process, deposit/withdrawal workflows, support communications, and any promotional opt-in forms;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access the ph365.orig platform;
• From third-party service providers — including payment processors (e.g., GCash, Maya, BPI, BDO), identity verification service providers, and fraud detection partners who may share data with us in connection with your use of their services to transact on ph365.orig;
• From regulatory authorities — where legally required to receive or share information as part of AML, CTF, or other compliance obligations.

4. How We Use Your Personal Data

ph365.orig uses the personal data collected for the following purposes:

Purpose	Data Used
Account registration and authentication	Registration data, mobile number, password hash
Identity verification (KYC/AML compliance)	Government ID, date of birth, address, selfie
Processing deposits and withdrawals	Financial data, payment method identifiers
Providing gaming services	Account data, gaming activity records
Responsible gaming management	Gaming activity, deposit limits, self-exclusion records
Fraud detection and security monitoring	Technical data, IP address, financial data
Customer support and dispute resolution	Communications data, account and transaction records
Regulatory reporting and compliance	All categories as required by law
Platform improvement and analytics	Technical data, aggregated gaming activity (anonymized where possible)
Marketing communications (with consent)	Mobile number, email, gaming preferences

ph365.orig does not use personal data for purposes incompatible with those listed above without obtaining fresh consent or establishing a new lawful basis.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph365.orig processes personal data on the following lawful bases:

• Contractual necessity — processing required to fulfill the account agreement and provide gaming services;
• Legal obligation — processing required to comply with AML, CTF, tax, and gaming regulatory requirements applicable in the Philippines;
• Legitimate interests — fraud prevention, platform security, and analytics activities that do not override your data protection rights;
• Consent — where you have given specific, informed consent, including for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

6.1 Service Providers

ph365.orig shares personal data with trusted third-party service providers who assist in delivering our services, including: payment processors and e-wallet providers (GCash, Maya, BPI, BDO, and others); identity verification and KYC service providers; game content providers (who may process session data for game delivery); customer support platform operators; and fraud detection and cybersecurity firms. All service providers are contractually bound to process personal data only on ph365.orig's instructions and to maintain appropriate security standards.

6.2 Regulatory and Legal Disclosures

ph365.orig may disclose personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), law enforcement agencies, or courts where disclosure is required by law, court order, or regulatory direction. ph365.orig will notify affected users of such disclosures where legally permitted to do so.

6.3 No Sale of Personal Data

ph365.orig does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Data shared with third parties is limited to what is necessary for the stated purpose.

7. Cookies and Tracking Technologies

ph365.orig uses cookies and similar technologies (web beacons, local storage, session identifiers) to operate the platform, maintain your login session, detect fraud, and analyze platform usage. The categories of cookies used are:

• Strictly necessary cookies — required for platform functionality (session management, authentication, security). These cannot be disabled without impairing platform use.
• Analytical cookies — used to understand how players use the platform, which pages are visited most, and where errors occur. Data is aggregated and anonymized where possible.
• Preference cookies — storing user preferences such as language settings and responsible gaming tool configurations.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the ph365.orig platform.

8. Data Retention

ph365.orig retains personal data for as long as necessary to fulfill the purposes for which it was collected, including for the satisfaction of any legal, regulatory, accounting, or reporting requirements. Specific retention periods include:

• Account and KYC records — retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction;
• Gaming activity records — retained for three (3) years for responsible gaming monitoring and dispute resolution purposes;
• Communications records — retained for two (2) years from the date of the communication.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph365.orig's data disposal procedures.

9. Data Security

ph365.orig implements industry-standard technical and organizational security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption on all data transmissions between your device and ph365.orig servers;
• Encryption of sensitive data at rest (including identity documents and financial data);
• Access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability management;
• Incident response procedures to detect, respond to, and notify affected individuals and the National Privacy Commission in the event of a personal data breach.

No method of transmission over the internet or electronic storage is completely secure. While ph365.orig takes all reasonable precautions, we cannot guarantee absolute security of your personal data.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph365.orig:

• Right to be informed — to be told what personal data we hold and how it is used;
• Right of access — to request a copy of your personal data held by ph365.orig;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data where there is no longer a lawful basis for its retention (subject to regulatory retention obligations);
• Right to data portability — to receive your personal data in a structured, commonly used format;
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting prior lawful processing;
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact ph365.orig's Data Protection Officer at the contact details in Section 14. We will respond to verified requests within thirty (30) calendar days.

11. Children's Privacy and the 21+ Requirement

ph365.orig does not knowingly collect personal data from individuals under the age of 21. The platform is strictly restricted to adults aged 21 years or older under Philippine gaming regulations. Age is verified at the point of registration and confirmed during KYC. If we become aware that personal data has been collected from an individual under 21 without parental or guardian consent, we will delete such data immediately and close the associated account.

12. International Data Transfers

Some of ph365.orig's service providers are located outside the Philippines. Where personal data is transferred internationally, ph365.orig ensures that appropriate safeguards are in place to protect that data, consistent with the requirements of the Data Privacy Act of 2012 and the rules and regulations of the National Privacy Commission. Such safeguards may include contractual clauses, data processing agreements, or transfers to jurisdictions recognized as providing adequate levels of data protection.

13. Changes to This Privacy Policy

ph365.orig may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered users via the mobile number or email address on file, or by prominent notice on the ph365.orig platform, at least fourteen (14) days before the changes take effect. The revised Policy will specify its effective date. Continued use of ph365.orig following the effective date constitutes acceptance of the revised Privacy Policy.

14. Contact and Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or complaints, please contact the ph365.orig Data Protection Officer:

Email: support@ph365orig.co (plain text — not a clickable link)

Please include "Privacy Request" and your registered mobile number in the subject line of your email to ensure your request is directed to the appropriate team. We aim to acknowledge all privacy requests within five (5) business days and to resolve them within thirty (30) calendar days.

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) if you believe ph365.orig has not handled your personal data in accordance with the Data Privacy Act of 2012.