ph398 Privacy
Policy

Welcome to ph398. This Privacy Policy describes how ph398 ("we," "us," "our," or the "Company") collects, processes, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the ph398 online gaming platform, including our website at ph398.net, any associated mobile web interface, and all services offered thereon.

ph398 is committed to protecting the privacy and personal data of all its players in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its implementing rules and regulations, and the guidelines issued by the National Privacy Commission (NPC). As a PAGCOR-regulated online gaming operator, ph398 also adheres to data privacy requirements stipulated under PAGCOR's regulatory framework.

This Privacy Policy applies to all personal data processed by ph398 in connection with your use of the platform, regardless of where you access the platform from within the Philippines. It covers data collected through our website, live chat systems, email communications, and any other interaction you have with ph398 as an operator.

ph398 collects personal data that is necessary and proportionate to the purposes outlined in this Privacy Policy. We collect data through several channels: directly from you during registration and account use, automatically through your interaction with our platform, and in limited cases from third-party verification and payment providers. The categories of personal data we collect include:

We do not intentionally collect sensitive personal information (as defined under RA 10173 — such as health data, religious affiliation, or political views) unless it is voluntarily provided by you in the context of a responsible gaming self-declaration or a specific regulatory requirement. Any such sensitive data is handled with heightened protection measures.

ph398 processes your personal data only for specific, legitimate purposes that are compatible with operating a regulated online gaming platform in the Philippines. We do not use your data for purposes beyond those listed below without first obtaining your consent or establishing a new lawful basis for processing. The primary purposes for which we use your personal data are:

• Account Registration & Management: To create and maintain your ph398 player account, verify your identity, and manage your account preferences, settings, and responsible gaming tool elections.
• KYC & Regulatory Compliance: To verify your age (21+ requirement), identity, and source of funds in accordance with PAGCOR licensing conditions, Philippine AML obligations under Republic Act No. 9160, and NPC data privacy requirements.
• Transaction Processing: To process deposits, withdrawals, and bonus credits to and from your ph398 account using your selected payment methods (GCash, PayMaya, BPI, BDO, Metrobank, USDT).
• Platform Delivery & Personalization: To deliver gaming content, display your account balance and history, personalize your lobby experience, and ensure the platform functions correctly on your device.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, multi-accounting, bot usage, collusion, and other prohibited conduct described in our Terms & Conditions.
• Anti-Money Laundering (AML) Monitoring: To monitor transactions for patterns consistent with money laundering or terrorist financing, and to report suspicious transactions to the Anti-Money Laundering Council (AMLC) as legally required.
• Customer Support: To respond to your support inquiries, resolve complaints, and communicate with you regarding your account status, verification requirements, or platform changes.
• Responsible Gaming: To administer your elected responsible gaming tools (deposit limits, session reminders, self-exclusion), and to monitor for behavioral indicators of problem gambling in accordance with PAGCOR's responsible gaming standards.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have given your consent, and you may opt out at any time.
• Legal Obligations: To comply with court orders, regulatory investigations, tax reporting requirements, and any other legal obligations applicable to ph398 as a PAGCOR-licensed operator.

Under the Data Privacy Act of 2012 and NPC guidelines, ph398 must have a recognized legal basis for each category of personal data it processes. The legal bases upon which ph398 relies are as follows:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and ph398 — namely, operating your player account and delivering the gaming and payment services you have signed up for. Without this data, we cannot provide the ph398 service.
• Legal Obligation: Processing your KYC documents, transaction records, and AML monitoring data is required for ph398 to comply with PAGCOR licensing conditions, Philippine AML laws (RA 9160), tax regulations, and NPC data privacy obligations. We have no discretion to waive these requirements.
• Legitimate Interests: Processing technical data (IP addresses, device data, session logs) and gaming activity data for fraud prevention, security monitoring, platform optimization, and responsible gaming monitoring serves ph398's legitimate interests as a regulated operator — interests that do not override your fundamental rights and freedoms as a data subject.
• Consent: Sending marketing communications via email or SMS is based on your explicit consent at the time of registration. You may withdraw this consent at any time, and withdrawal will not affect the lawfulness of any processing carried out prior to withdrawal.

Where ph398 relies on legitimate interests as a legal basis, we have conducted and documented a balancing test to confirm that our interests do not override your interests or fundamental rights. You may request a copy of this assessment by contacting our Data Protection Officer using the details in Section 13.

ph398 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes — ever. However, to operate a regulated online gaming platform in the Philippines, ph398 must share certain personal data with a limited set of trusted third-party partners and authorities. All such sharing is governed by strict data processing agreements and is limited to what is necessary for the specific purpose.

The categories of third parties with whom ph398 may share your personal data include:

• PAGCOR and Regulatory Authorities: ph398 is obligated to provide player account data, transaction records, and KYC documentation to PAGCOR upon request as part of its regulatory oversight functions. We may also be required to share data with the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other Philippine government agencies where legally compelled.
• Payment Processors: To process your deposits and withdrawals via GCash, PayMaya/Maya, BPI, BDO, Metrobank, and USDT, ph398 shares relevant transaction data with the respective payment service providers. These providers are bound by their own regulatory frameworks and data protection obligations.
• KYC & Identity Verification Providers: ph398 may use regulated third-party KYC technology providers to assist with identity document verification and age confirmation. These providers process your ID documents and selfie data solely for verification purposes under strict contractual data processing terms.
• Game Software Providers: Third-party game studios and live casino operators whose games are featured on ph398 may receive limited technical and session data necessary to deliver their games. These providers do not receive your full identity or financial data.
• IT and Infrastructure Providers: ph398 uses cloud hosting, content delivery, and cybersecurity service providers who may process technical data as part of platform operations. All such providers are contractually bound to process data only on ph398's instructions.
• Legal and Professional Advisors: In the event of a legal dispute, regulatory investigation, or audit, ph398 may share relevant data with lawyers, accountants, or regulators on a strictly need-to-know basis.

ph398 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform, enhance your user experience, and gather analytics data that helps us improve our services. A cookie is a small text file placed on your device by our web server when you visit ph398.net.

The types of cookies used by ph398 are:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and enable the security features of your account. These cannot be disabled without breaking the platform.
• Performance and Analytics Cookies: These cookies collect anonymized data about how players interact with ph398 — such as which game categories are most popular, how long sessions last, and which pages generate support requests. This data helps ph398 optimize the platform for Filipino players.
• Functional Cookies: These cookies remember your personalization choices, such as preferred lobby layout, notification preferences, and responsible gaming settings, so you do not have to re-enter them each visit.
• Marketing Cookies: These cookies are used only where you have given consent, and help ph398 deliver relevant promotional content based on your gaming preferences. You can withdraw consent for marketing cookies at any time through your browser settings or account preferences.

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies at the browser level; however, disabling strictly necessary cookies may impair your ability to log in or use certain features of ph398. For detailed guidance on managing cookies, refer to your browser's help documentation.

ph398 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, comply with applicable legal and regulatory obligations, and resolve any disputes or enforce our agreements. The following general retention periods apply:

• Active Account Data: All personal data associated with an active ph398 player account is retained for the duration of the account's existence plus a minimum period after account closure as required by applicable law.
• KYC and AML Records: Identity documents, verification records, and transaction history are retained for a minimum of five (5) years from the date of the last transaction or account closure — as required under the Anti-Money Laundering Act (RA 9160) and its amendments.
• Financial Transaction Records: Deposit and withdrawal records, payment method details, and bonus transaction histories are retained for a minimum of five (5) years for tax, regulatory audit, and dispute resolution purposes.
• Support and Communication Records: Live chat transcripts and support email records are retained for two (2) years from the date of the interaction, unless they relate to an ongoing dispute or investigation, in which case they are retained until the matter is resolved.
• Marketing Consent Records: Records of your consent to (or withdrawal from) marketing communications are retained for the duration of your account plus three (3) years, to demonstrate compliance with NPC consent requirements.

After the applicable retention period expires, ph398 will securely delete or anonymize your personal data in a manner that prevents reconstruction or identification. Anonymized, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph398. You may exercise any of these rights by contacting our Data Protection Officer using the details provided in Section 13.

• Right to Be Informed: You have the right to know whether ph398 holds personal data about you, the purposes for which it is processed, and how it is used. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data ph398 holds about you. We will respond to verified access requests within fifteen (15) business days.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most account information directly through your ph398 account settings, or by contacting our support team.
• Right to Erasure: In certain circumstances — such as where your data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for processing — you may request that ph398 delete your personal data. Note that this right is subject to overriding legal obligations (e.g., AML record-keeping requirements).
• Right to Object: You have the right to object to ph398's processing of your data where that processing is based on legitimate interests, including the right to object to direct marketing at any time without providing any justification.
• Right to Data Portability: Where technically feasible, you may request that ph398 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another organization.
• Right to File a Complaint: If you believe ph398 has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. ph398 cooperates fully with all NPC investigations.

ph398 implements a comprehensive range of technical, organizational, and procedural security measures to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• TLS 1.3 Encryption in Transit: All data transmitted between your device and ph398's servers is encrypted using Transport Layer Security (TLS 1.3), the current industry standard for secure web communications.
• AES-256 Encryption at Rest: Personal data and financial records stored in ph398's databases are encrypted at rest using AES-256 encryption, one of the strongest commercially available encryption standards.
• Access Controls: Access to personal data within ph398's systems is granted on a strict need-to-know basis. All staff with access to player data undergo background checks and regular data privacy training. Administrative access is protected by multi-factor authentication (MFA).
• Penetration Testing: ph398's platform and infrastructure undergo regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: ph398 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, ph398 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will inform affected players without undue delay.
• Fraud Detection Systems: Automated fraud detection systems continuously monitor transactions and account activity for anomalous patterns that may indicate unauthorized access or compromised accounts.

While ph398 takes all reasonable steps to protect your personal data, no system is completely immune to risk. You also have a role to play: please use a strong, unique password for your ph398 account, enable two-factor authentication if available, and never share your login credentials with anyone — including ph398 support staff, who will never ask for your password.

ph398 is an online gambling platform strictly intended for adults. Under Philippine law, the minimum age for casino-style gambling and online betting is 21 years. ph398 does not knowingly collect personal data from individuals under 21 years of age, and it is strictly forbidden for minors to register or use the ph398 platform.

ph398 uses age verification tools as part of the KYC process to confirm that all registered players meet the 21+ age requirement before they are permitted to make deposits or access real-money gaming. Parents and guardians are encouraged to use parental control software to prevent underage access to online gambling platforms.

The ph398 platform may contain references or links to third-party services, including game studios, payment gateway interfaces, and PAGCOR's official website. ph398 is not responsible for the privacy practices or content of any third-party website or service. This Privacy Policy applies solely to the ph398 platform and the data we collect and process directly.

Game software providers whose titles appear on ph398 operate under their own privacy policies and data processing agreements with ph398. While ph398 conducts due diligence on all third-party providers to ensure they meet acceptable data protection standards, we encourage you to review the privacy policies of any third-party service you interact with independently.

Payment service providers such as GCash (G-Xchange, Inc.), PayMaya/Maya, BPI, BDO, and Metrobank are independently regulated financial institutions subject to Bangko Sentral ng Pilipinas (BSP) oversight and their own privacy frameworks. When you initiate a deposit or withdrawal through these providers, your transaction data is subject to both ph398's and the respective provider's privacy policies.

ph398 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws and regulations, or the structure of the ph398 platform. Any material changes to this Privacy Policy will be communicated to registered players via email notification to the address on your account, and a prominent notice will be displayed on the ph398 platform for a minimum of thirty (30) days following the update.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how ph398 protects your personal data. Your continued use of the ph398 platform following notification of any changes constitutes your acknowledgment of the updated Privacy Policy.

If any proposed change materially affects your rights as a data subject or alters the legal basis upon which ph398 processes your personal data, we will seek fresh consent where required by the Data Privacy Act of 2012 before the new processing begins.

ph398 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a suspected privacy concern, please contact our DPO using the details below:

When contacting us regarding a data rights request, please include your full name, registered email address, and a clear description of your request. We may ask you to verify your identity before processing the request to protect against unauthorized access to your account data.

If you are not satisfied with ph398's response to your data privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines. The NPC is the government authority responsible for administering and implementing the Data Privacy Act of 2012, and accepts complaints from data subjects whose rights have been violated.