Privacy Policy – How ph399 Protects Your Personal Data

1. Introduction and Scope

ph399 ("we," "us," "our," or "the Platform") operates as a PAGCOR-licensed online casino and sports betting platform accessible at https://ph399.cam and associated mobile applications. This Privacy Policy applies to all personal data collected from users ("you," "your," or "Player") who register accounts, make deposits, place bets, or otherwise interact with ph399 services.

By creating a ph399 account or using our services, you acknowledge that you have read, understood, and consent to the data collection and processing practices described in this Privacy Policy. If you do not agree with any provision herein, you must discontinue use of the Platform and refrain from providing personal information.

1.1 Legal Framework and Compliance

ph399 processes personal data in accordance with:

• Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC)
• PAGCOR Regulatory Standards for licensed online gaming operators
• Anti-Money Laundering Act (Republic Act No. 9160) and related customer due diligence requirements
• NPC Circulars on data breach notification, consent mechanisms, and cross-border data transfers

ph399 is registered with the National Privacy Commission as a Personal Information Controller (PIC) and has appointed a Data Protection Officer (DPO) to oversee compliance with privacy obligations.

1.2 Data Controller Information

Entity Name: ph399 Online Gaming Platform
PAGCOR License Number: PAGCOR-OL-2020-XXX
Business Address: [Registered address on file with PAGCOR and NPC]
Data Protection Officer: [email protected]
Customer Support: [email protected]

2. What Personal Data We Collect

2.1 Information You Provide Directly

When you register a ph399 account, make deposits, request withdrawals, or contact Customer Support, we collect:

Data Category	Examples	Purpose
Identity Information	Full legal name, date of birth, gender, nationality	Age verification, account creation, regulatory compliance
Contact Information	Email address, phone number, residential address	Account notifications, customer support, identity verification
Financial Information	Bank account details, e-wallet numbers (GCash, Maya), cryptocurrency wallet addresses, payment history	Deposit and withdrawal processing, anti-fraud measures, AML compliance
Identification Documents	Government-issued ID (passport, driver's license, UMID, postal ID), proof of address (utility bills, bank statements)	Identity verification, withdrawal authorization, preventing underage gambling
Account Credentials	Username, password (encrypted), security questions	Account authentication, security, access control
Communication Records	Live chat transcripts, email correspondence, phone call recordings, support tickets	Customer service, dispute resolution, quality assurance

2.2 Information Collected Automatically

When you access ph399, we automatically collect technical and behavioral data through cookies, server logs, and analytics tools:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers
• Usage Data: Pages visited, games played, bet amounts and frequencies, session duration, click patterns, feature usage
• Location Data: Approximate geographic location derived from IP address (used to enforce jurisdictional restrictions and prevent access from prohibited territories)
• Transaction Data: Deposit and withdrawal amounts, payment method used, transaction timestamps, transaction success/failure status
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies to maintain login sessions, remember preferences, detect fraud, and analyze site performance

2.3 Information from Third Parties

ph399 may receive personal data from third-party sources including:

• Payment Processors: Transaction confirmation, payment verification, fraud risk assessment data from GCash, Maya, banks, and cryptocurrency payment gateways
• Identity Verification Services: Document authentication results, facial recognition matching, address validation from third-party KYC (Know Your Customer) providers
• Game Providers: Gameplay data, betting patterns, win/loss records from third-party casino game suppliers and live dealer studios
• Marketing Partners: Referral source information, affiliate tracking data (only if you accessed ph399 through a partner link)

3. How We Use Your Personal Data

3.1 Legitimate Purposes for Data Processing

ph399 processes your personal information for the following purposes, each of which is based on a lawful ground under the Data Privacy Act:

Account Management and Service Delivery (Legal Basis: Contract Performance)

• Create and maintain your ph399 account
• Process deposits and withdrawals
• Enable gameplay across casino games, live dealers, and sports betting products
• Apply bonuses, promotions, and loyalty rewards
• Provide customer support and respond to inquiries
• Communicate important account updates, transaction confirmations, and service changes

Legal and Regulatory Compliance (Legal Basis: Legal Obligation)

• Verify your age and identity to prevent underage gambling
• Conduct Know Your Customer (KYC) and Customer Due Diligence (CDD) checks as required by PAGCOR and AMLC regulations
• Monitor and report suspicious transactions to prevent money laundering and terrorist financing
• Maintain accurate records as required by gaming regulations and tax authorities
• Respond to lawful requests from law enforcement, regulators, and government agencies

Security, Fraud Prevention, and Risk Management (Legal Basis: Legitimate Interest)

• Detect and prevent fraudulent account creation, bonus abuse, and payment fraud
• Monitor gameplay patterns to identify collusion, chip dumping, and other prohibited activities
• Enforce betting limits and detect problem gambling behaviors
• Secure the Platform against hacking, DDoS attacks, and unauthorized access
• Investigate disputes, chargebacks, and suspicious account activity

Marketing and Personalization (Legal Basis: Consent)

• Send promotional emails about new games, bonuses, and special offers (only with your explicit consent)
• Provide personalized game recommendations based on your play history
• Conduct surveys and request feedback to improve services
• Display targeted advertisements on the Platform

You may withdraw marketing consent at any time by clicking "unsubscribe" in promotional emails or adjusting your account communication preferences.

Analytics and Service Improvement (Legal Basis: Legitimate Interest)

• Analyze user behavior to optimize Platform performance and user experience
• Track feature adoption and game popularity to guide product development
• Monitor system performance, uptime, and technical errors
• Conduct A/B testing to improve interface design and functionality

3.2 Data Minimization and Purpose Limitation

ph399 adheres to data minimization principles, collecting only the personal information necessary to fulfill the purposes outlined above. We do not use your data for unrelated purposes without obtaining additional consent. Personal data is retained only for as long as necessary to achieve the specified purposes or to comply with legal retention requirements.

4. How We Share Your Personal Data

4.1 Third-Party Service Providers

ph399 engages trusted third-party service providers to perform functions on our behalf. These providers are contractually obligated to protect your data and use it only for the specified purposes. Categories of third parties include:

• Payment Processors: GCash, Maya (PayMaya), bank payment gateways, cryptocurrency exchanges, and payment aggregators that facilitate deposits and withdrawals
• Identity Verification Services: KYC providers that authenticate government-issued IDs, perform facial recognition matching, and validate addresses
• Game Providers: Third-party casino game developers, live dealer studios, and sports betting data suppliers that deliver gaming content on the Platform
• Cloud Hosting and Infrastructure Providers: Secure servers and cloud storage services that host ph399 systems and databases
• Customer Support Tools: Live chat platforms, ticketing systems, and email service providers that enable customer service operations
• Analytics and Monitoring Services: Website analytics, performance monitoring, and fraud detection tools that help optimize Platform security and user experience

4.2 Regulatory and Law Enforcement Disclosures

ph399 may disclose your personal data to government authorities, regulators, and law enforcement agencies when:

• Required by Philippine law, court order, or valid legal process
• Necessary to comply with PAGCOR audit requests or regulatory investigations
• Requested by the Anti-Money Laundering Council (AMLC) in connection with suspicious transaction reports
• Required to respond to lawful requests from the National Privacy Commission, Bureau of Internal Revenue, or other government bodies
• Necessary to protect ph399's legal rights, prevent fraud, or defend against legal claims

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or corporate restructuring, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer, and the new data controller will be required to comply with this Privacy Policy or provide you with notice of any changes.

4.4 No Sale of Personal Data

ph399 does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. Any data sharing is limited to the purposes described in this Privacy Policy and is governed by strict contractual protections.

5. International Data Transfers

5.1 Cross-Border Data Processing

Some of ph399's service providers and technology infrastructure are located outside the Philippines. When personal data is transferred internationally, ph399 ensures that appropriate safeguards are in place, including:

• Data Processing Agreements incorporating Standard Contractual Clauses approved by the National Privacy Commission
• Transfers to countries recognized by the NPC as having adequate data protection standards
• Implementation of technical and organizational measures to protect data in transit and at rest
• Compliance with NPC requirements for cross-border data transfer accountability

By using ph399 services, you consent to the transfer of your personal data to third-party service providers located in jurisdictions necessary to deliver our services, subject to the protections outlined in this Privacy Policy.

6. Data Security and Retention

6.1 Security Measures

ph399 implements industry-standard technical, administrative, and physical security measures to protect personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: 256-bit SSL/TLS encryption for all data transmitted between your device and ph399 servers
• Secure Data Storage: Encrypted databases stored in secure, access-controlled data centers with redundancy and disaster recovery protocols
• Access Controls: Role-based access restrictions ensuring that only authorized personnel can access personal data on a need-to-know basis
• Regular Security Audits: Periodic penetration testing, vulnerability assessments, and third-party security reviews
• Incident Response: Documented data breach response procedures in compliance with NPC breach notification requirements
• Employee Training: Mandatory data privacy and security training for all ph399 staff members

Despite these measures, no online platform can guarantee absolute security. You acknowledge that data transmission over the internet carries inherent risks. ph399 is not liable for unauthorized access resulting from circumstances beyond our reasonable control.

6.2 Data Retention Periods

ph399 retains personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal, regulatory, and accounting requirements. Retention periods vary by data type:

Data Type	Retention Period	Justification
Account Information	Duration of account + 5 years after closure	PAGCOR regulatory requirements, AML record-keeping obligations
Transaction Records	5 years from transaction date	AMLC compliance, tax reporting, dispute resolution
Identification Documents	5 years after last use for verification	AML/KYC compliance, audit trail
Gameplay and Betting History	5 years from last bet	PAGCOR requirements, dispute resolution, problem gambling monitoring
Marketing Consent Records	Duration of consent + 1 year	DPA consent documentation requirements
Support Communications	3 years from last interaction	Quality assurance, dispute resolution

After the applicable retention period expires, personal data is securely deleted or anonymized to prevent identification. You may request earlier deletion of your data subject to legal retention obligations (see Section 8).

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

ph399 uses cookies and similar tracking technologies to enhance user experience, maintain security, and analyze Platform performance. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences.

Essential Cookies (Required)
These cookies are necessary for the Platform to function. They enable account login, maintain session state, and facilitate secure transactions. You cannot opt out of essential cookies without losing access to core functionality.

Performance and Analytics Cookies (Optional)
These cookies collect aggregated data about how users interact with ph399, including page views, popular games, and navigation patterns. We use this data to optimize Platform performance and user experience.

Functional Cookies (Optional)
These cookies remember your preferences such as language selection, game favorites, and display settings to provide a personalized experience.

Advertising and Marketing Cookies (Optional)
These cookies track your activity to deliver targeted advertisements and promotional content relevant to your interests.

7.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings or the cookie consent banner displayed on your first visit to ph399. Most browsers allow you to block or delete cookies, though this may impair Platform functionality. To learn more about cookies and how to manage them, visit allaboutcookies.org.

8. Your Privacy Rights Under Philippine Law

8.1 Data Subject Rights

The Philippine Data Privacy Act grants you the following rights regarding your personal data:

Right to Access (Right to Information)
You may request confirmation of whether ph399 processes your personal data and obtain a copy of that data in a structured, commonly used format.

Right to Rectification (Right to Correction)
You may request correction of inaccurate or incomplete personal data. You can update most account information directly through your ph399 account settings.

Right to Erasure (Right to be Forgotten)
You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent. Note that certain data must be retained to comply with legal obligations.

Right to Object to Processing
You may object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to Data Portability
You may request a copy of your personal data in a machine-readable format to transfer to another service provider.

Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to Lodge a Complaint
You have the right to file a complaint with the National Privacy Commission if you believe ph399 has violated your privacy rights.

8.2 Exercising Your Rights

To exercise any of the above rights, contact ph399's Data Protection Officer at [email protected] or submit a request through Customer Support. We will respond to verified requests within fifteen (15) business days as required by the Data Privacy Act. Identity verification may be required to prevent unauthorized disclosure of personal data.

9. Children's Privacy

ph399 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal data from minors. If we become aware that a user is under 21, we will immediately suspend the account, prohibit further access, and delete all associated personal data. Parents or guardians who believe their child has provided information to ph399 should contact us immediately at [email protected].

10. Changes to This Privacy Policy

ph399 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service offerings. Material changes will be communicated via email, prominent website notice, or account notification at least thirty (30) days before taking effect. Your continued use of ph399 services after the effective date constitutes acceptance of the revised Privacy Policy. We recommend reviewing this policy periodically to stay informed of how we protect your data.

11. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or ph399's data practices, contact:

Data Protection Officer
ph399 Online Gaming Platform
Email: [email protected]

Customer Support
Email: [email protected]
Live Chat: Available 24/7 on the ph399 website

PAGCOR Licensing Authority
Philippine Amusement and Gaming Corporation
For regulatory inquiries: pagcor.ph