368ph Privacy Policy

368ph ("we," "us," "our," "the Platform") is an online casino and sports betting platform operated for and dedicated exclusively to the Philippines market. 368ph is the data controller responsible for your personal data collected and processed through the 368ph website and all associated gaming services accessible at 368ph.org.

This Privacy Policy applies to all individuals who access or use the 368ph platform, including registered account holders, visitors who browse the site without registering, and any person who contacts 368ph customer support. It covers all personal data collected across the website, in-platform communications, customer support interactions, and payment processing flows.

For all privacy-related inquiries, data subject access requests, or complaints, you may contact 368ph's Data Privacy Officer by email at [email protected] with the subject line "Data Privacy Request." All communications are handled in English and Filipino.

368ph collects personal data from Filipino players through several channels — directly when you provide it during registration or KYC, automatically when you use the platform, and from third parties such as payment processors and identity verification services. The categories of personal data we collect include:

368ph uses your personal data for the following specific purposes:

• Account Creation and Management: To register your 368ph account, verify your identity and age (21+ requirement), maintain your account, and deliver all platform Services to you as a registered Filipino player.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted Philippine payment channels. Your financial data is shared with payment processors solely for transaction execution.
• Regulatory Compliance: To fulfil 368ph's obligations under Philippine gaming regulations (PAGCOR framework), the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act (RA 10173). This includes mandatory record-keeping, transaction reporting where required, and cooperation with lawful authority requests.
• Fraud Prevention and Security: To detect, investigate, and prevent fraud, unauthorised account access, money laundering, collusion, and other prohibited conduct. Technical data including IP addresses and device fingerprints is used for this purpose.
• Responsible Gaming: To implement and monitor deposit limits, self-exclusion requests, and other responsible gaming controls requested by players. Gaming session data is used to identify patterns consistent with problem gambling where relevant responsible gaming obligations apply.
• Platform Improvement: To analyse aggregated usage patterns, identify technical issues, and improve the 368ph platform experience for all Filipino players. This analysis uses anonymised or pseudonymised data where possible.
• Customer Support: To handle account queries, withdrawal disputes, technical issues, and all other support interactions via Live Chat, email, and phone.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. You may withdraw marketing consent at any time via account settings or by contacting support.

368ph does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except as disclosed in the context of fraud prevention systems, where human review is available upon request.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, 368ph relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to create and manage your 368ph account, process payments, and deliver the gaming Services you have contracted to receive. Without this processing, 368ph cannot provide the platform.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing requirements, AML reporting obligations under RA 9160, and tax reporting obligations. 368ph has no discretion to refuse this processing.
• Legitimate Interests: Processing for fraud prevention, platform security, technical system improvements, and internal analytics where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and the use of non-essential cookies. Consent-based processing may be withdrawn at any time by contacting 368ph support or adjusting account settings, without affecting the lawfulness of prior processing.

368ph does not sell or rent your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other Philippine payment service providers receive the financial data necessary to process your transactions. These providers operate under their own privacy policies and Philippine Bangko Sentral ng Pilipinas (BSP) regulatory obligations.
• KYC and Identity Verification Providers: Third-party identity verification services used to authenticate government-issued Philippine IDs. These providers are contractually bound to process verification data solely for the purpose of identity and age verification for 368ph.
• Game Studios and Technology Providers: Software providers who supply slot games, live dealer infrastructure, sports betting engines, and other gaming technology. These providers may receive anonymised gameplay data for technical integration purposes.
• Regulatory and Law Enforcement Authorities: 368ph discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine law enforcement agencies, and courts when required by law, court order, or regulatory demand.
• Professional Advisers: Legal counsel, auditors, and compliance consultants operating under strict confidentiality obligations where disclosure is necessary for 368ph to obtain professional advice.

368ph uses cookies and similar technologies (web beacons, session tokens, local storage) on the platform. These technologies serve the following functions:

• Essential Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in to your 368ph account, security cookies that prevent cross-site request forgery, and load-balancing cookies that ensure server performance. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language settings and previously viewed game categories to provide a more personalised experience on 368ph.
• Analytics Cookies: Collect aggregated, anonymised data about how Filipino players use the 368ph platform — pages visited, navigation paths, session duration, and feature usage. This data helps us improve the platform. Where consent is required, these cookies are only set after you have provided it.

368ph does not use third-party advertising or tracking cookies. Your browsing behaviour on 368ph is not shared with external advertising networks for cross-site targeting purposes.

You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in and use the 368ph platform. Disabling analytics cookies will not affect your gameplay experience.

368ph retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to overriding legal retention obligations. Our general retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active 368ph account and for a minimum of five (5) years following account closure, as required under Philippine AML regulations (RA 9160).
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML law and gaming regulatory record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of three (3) years to support dispute resolution, regulatory audits, and responsible gaming monitoring obligations.
• Customer Support Communications: Retained for two (2) years from the date of the last communication, unless the content relates to an open dispute or regulatory matter that requires longer retention.
• Marketing Consent Records: Retained for the duration of the marketing relationship and for one (1) year following withdrawal of consent, to demonstrate compliance with consent requirements.

Following the expiry of applicable retention periods, 368ph will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 368ph:

• Right to be Informed: You have the right to be informed about how your personal data is collected, processed, and used. This Privacy Policy is the primary mechanism through which 368ph fulfils this obligation.
• Right of Access: You may request a copy of the personal data 368ph holds about you at any time. 368ph will respond to verified access requests within thirty (30) days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data in your 368ph account. Some data corrections (such as name changes) require supporting documentary evidence.
• Right to Erasure / Right to be Forgotten: You may request deletion of your personal data where processing is no longer necessary, where you have withdrawn consent, or where processing is unlawful. Note that 368ph may be required by Philippine law to retain certain data (financial records, KYC data) even following an erasure request — in such cases, 368ph will explain what data must be retained and why.
• Right to Data Portability: You may request that personal data you provided to 368ph be returned to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing at any time. You may also object to other processing based on legitimate interests — 368ph will assess such objections and cease the processing where your rights override our legitimate interests.
• Right to Lodge a Complaint: If you believe 368ph has not handled your personal data in accordance with the Data Privacy Act, you may lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact 368ph's Data Privacy Officer at [email protected] with the subject line "Data Privacy Request." We will verify your identity before processing any request and respond within the timeframes prescribed by the Data Privacy Act.

368ph implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, and destruction. Our security framework includes:

• Transport Layer Security (TLS): All communications between your browser and 368ph servers are encrypted using TLS 1.2 or higher, preventing interception of data in transit.
• Encryption at Rest: Sensitive personal data — including KYC documents, financial information, and account credentials — is encrypted when stored in 368ph databases.
• Access Controls: Access to personal data within 368ph is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular access reviews.
• Two-Factor Authentication: Internal 368ph systems that hold personal data require two-factor authentication for all staff access.
• Regular Security Audits: 368ph conducts periodic security audits and vulnerability assessments to identify and remediate potential weaknesses in our data protection infrastructure.
• Incident Response: 368ph maintains a data breach incident response plan. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 368ph will notify the National Privacy Commission within seventy-two (72) hours of discovery and will notify affected players without undue delay where required.

While 368ph takes all reasonable technical measures to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the security of your own 368ph account credentials — including choosing a strong password and enabling two-factor authentication.

Policy Amendments: 368ph reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable Philippine law. The "Last Updated" date at the top of this page will reflect the most recent revision. Where changes are material, we will notify registered players via the platform or registered contact details where practicable. Continued use of 368ph following publication of a revised Privacy Policy constitutes acceptance of the updated terms.

Related Policies: This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which contain provisions that interact with how your data is processed on the 368ph platform.

Contact Us: For all privacy-related questions, data subject rights requests, or concerns about how 368ph handles your personal data, please contact:

• Email: [email protected] (Subject: "Data Privacy Request")
• Live Chat: Available 24/7 via the 368ph platform in English and Filipino
• Coverage: All Philippine regions — Manila, Cebu, Davao, Quezon City, and nationwide

We are committed to resolving all privacy enquiries promptly, transparently, and in a manner that upholds your rights as a Filipino data subject under Republic Act 10173.