ph333z Privacy Policy

1 Who We Are

ph333z ("ph333z," "we," "us," or "our") operates the online casino and gaming platform accessible at ph333z.org (the "Platform"). ph333z is the data controller responsible for the personal data collected from users ("you," "your," or "Player") who register and interact with the Platform.

For the purposes of Philippine data protection law — specifically Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA") and its Implementing Rules and Regulations ("IRR") — ph333z is the Personal Information Controller (PIC) in respect of the personal data it processes about you.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected, processed, stored, or used by ph333z in connection with your use of the Platform, including:

• Registration and account creation on ph333z.org.
• Identity verification (KYC) processes.
• Deposit and withdrawal transactions via GCash, Maya, BPI, BDO, USDT, and other supported payment methods.
• Gameplay activity on ph333z, including slots, bingo, fish shooting, crash games, and other titles.
• Communications between you and ph333z support staff, including live chat, email, and Messenger/Viber interactions.
• Responsible gaming tool usage, including self-exclusion requests and deposit limit settings.

This Policy does not apply to third-party websites or services that may be referenced in ph333z communications. ph333z is not responsible for the privacy practices of third-party providers whose game software is accessible through the Platform.

3 Personal Data We Collect

ph333z collects the following categories of personal data from Players:

4 How We Collect Your Data

ph333z collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, submitting a withdrawal request, or contacting customer support.
• Automated collection: Technical and usage data collected automatically when you access ph333z.org, including IP address, device identifiers, session data, and cookie-based analytics.
• Third-party collection: Identity verification data received from KYC service providers, fraud detection signals from payment processors, and session data from game providers (JILI, Pragmatic Play, PG Soft, Spadegaming) in connection with gameplay conducted on the Platform.
• Publicly available sources: In limited circumstances, ph333z may supplement account information with data from publicly accessible sources for the purpose of fraud prevention or AML compliance.

5 Legal Basis for Processing

ph333z processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act and its IRR:

1. Contractual necessity: Processing required to fulfill the agreement between you and ph333z — including account creation, transaction processing, and gameplay facilitation.
2. Legal obligation: Processing necessary to comply with applicable Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), and the Data Privacy Act itself.
3. Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights.
4. Consent: Processing for marketing communications and optional personalization features, where you have provided explicit, freely given, and specific consent. You may withdraw this consent at any time by contacting ph333z support.

6 How We Use Your Personal Data

ph333z uses the personal data it collects for the following specific purposes:

• Creating and managing your ph333z player account, including authentication and access control.
• Processing deposits and withdrawals via GCash, Maya, BPI, BDO, USDT, and other payment channels, and verifying that transactions originate from the account holder.
• Conducting identity verification (KYC) as required by PAGCOR and Anti-Money Laundering regulations applicable to Philippine online gaming operators.
• Detecting, investigating, and preventing fraud, money laundering, and other illegal activity on the Platform.
• Monitoring and enforcing responsible gaming obligations, including identifying players who may be exhibiting problem gambling behaviors and applying self-exclusion or cooling-off restrictions.
• Providing customer support in Tagalog and English via live chat, email, and Messenger/Viber.
• Sending transactional communications relating to your account — including deposit confirmations, withdrawal notifications, and security alerts.
• Sending promotional communications (newsletters, bonus offers, new game announcements) only to players who have consented to receive such communications, and only in compliance with the DPA's requirements for direct marketing.
• Analyzing aggregate, anonymized gameplay and transaction data to improve Platform performance, game selection, and user experience.
• Complying with requests from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine regulatory bodies.

7 Data Sharing and Disclosure

ph333z does not sell, rent, or trade your personal data to third parties. We disclose personal data only in the following limited circumstances:

• Payment processors: GCash (GXI), Maya (Voyager Innovations), BPI, BDO, and crypto payment processors receive transaction data necessary to process deposits and withdrawals. These parties are contractually bound to use your data only for payment processing purposes.
• KYC and identity verification providers: Third-party KYC service providers may receive copies of your identity documents and verification data for the purpose of conducting identity checks required under PAGCOR licensing conditions.
• Game providers: JILI Games, Pragmatic Play, PG Soft, Spadegaming, and other game providers receive your Player ID and session data necessary to deliver and audit gameplay. These providers do not receive your full identity data unless required for regulatory compliance purposes.
• Regulatory authorities: ph333z will disclose personal data to PAGCOR, the AMLC, the National Privacy Commission, law enforcement agencies, or courts when required to do so by Philippine law, valid legal process, or regulatory order.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by ph333z may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third parties with whom ph333z shares personal data are required to process that data in a manner consistent with this Privacy Policy and applicable Philippine data protection law.

8 Cookies & Tracking Technologies

ph333z uses cookies and similar tracking technologies to operate the Platform and enhance your experience. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences — such as language settings and last-used payment method — to provide a more personalized experience on return visits.
• Analytics cookies: Collect anonymized data about how players navigate ph333z — including pages visited, time on site, and error events — to help us improve the Platform. No personally identifiable information is included in analytics reports.
• Fraud and security cookies: Detect irregular access patterns and potential account takeover attempts by comparing session fingerprints across visits.

9 Data Retention

ph333z retains personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:

• Account data and KYC records: Retained for a minimum of 5 years from account closure or last transaction, as required by the Anti-Money Laundering Act (RA 9160) and PAGCOR licensing conditions.
• Transaction records (deposits and withdrawals): Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each game session.
• Customer support communications: Retained for 2 years from the date of the last interaction in each support case.
• Marketing consent records: Retained for the duration of your consent plus 1 year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, ph333z will securely delete or anonymize your personal data in accordance with industry-standard data destruction protocols, unless retention is required by an ongoing legal obligation or regulatory investigation.

10 Data Security

ph333z implements technical and organizational security measures appropriate to the risk and sensitivity of the personal data it processes. These measures include, but are not limited to:

• TLS/SSL encryption for all data in transit between your device and ph333z servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment details.
• Role-based access controls limiting access to personal data to ph333z personnel who require it for their specific job functions.
• Multi-factor authentication for internal staff access to systems containing personal data.
• Regular security assessments and penetration testing of the ph333z Platform.
• Incident response procedures aligned with the National Privacy Commission's Breach Notification requirements under the DPA.

11 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph333z:

To exercise any of these rights, please contact the ph333z Data Protection Officer via live chat or by emailing [email protected] with the subject line "Data Rights Request." We will acknowledge your request within 5 business days and respond fully within 15 business days.

Certain rights are subject to limitations. For example, ph333z may be unable to delete your data where retention is required by Philippine law (such as AML record-keeping obligations) or where your data is necessary to resolve an outstanding dispute or legal claim involving your account.

12 Children's Privacy and the 21+ Requirement

ph333z does not knowingly collect personal data from individuals under the age of 21. Access to ph333z is strictly prohibited for persons below 21 years of age, in accordance with PAGCOR's age restriction policy for online gaming in the Philippines.

During registration, ph333z collects date of birth information and may conduct age verification checks using identity documents. If ph333z determines that an account was registered by a person under 21 years of age, the account will be immediately closed, all deposits refunded (net of any applicable transaction fees), and any winnings generated forfeited.

13 Responsible Gaming and Data Processing

ph333z processes certain categories of your gaming activity data specifically for responsible gaming purposes. This includes monitoring patterns of play that may indicate problem gambling behavior, enforcing self-exclusion restrictions, and applying deposit or session limits you have set.

Self-exclusion data — including the fact that you have self-excluded and the duration of your exclusion — is treated with particular sensitivity. This information is:

• Accessible only to ph333z's responsible gaming compliance team and support staff with a demonstrated need.
• Never used for marketing purposes.
• Retained for the duration of your self-exclusion period plus 5 years thereafter, to prevent re-registration during an active exclusion period and to satisfy regulatory record-keeping requirements.
• Not shared with third parties except as required by PAGCOR or other regulatory bodies.

For more information on the responsible gaming tools available on ph333z, including how to set deposit limits or request self-exclusion, please visit our Responsible Gaming page.

14 Cross-Border Data Transfers

In delivering the ph333z Platform, some of your personal data may be processed by service providers or game providers located outside the Philippines — for example, game providers like JILI Games, Pragmatic Play, PG Soft, and Spadegaming, which operate servers in multiple jurisdictions.

Where personal data is transferred outside the Philippines, ph333z ensures that appropriate safeguards are in place to protect your data at a level equivalent to the protections afforded by the DPA. These safeguards may include:

• Contractual data processing agreements with standard data protection clauses.
• Transfers to jurisdictions recognized by the National Privacy Commission as providing an adequate level of protection.
• Where required by the DPA, obtaining your express consent to the cross-border transfer.

15 Amendments to This Privacy Policy

ph333z reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via the email address associated with their account at least 7 days before the amendment takes effect.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. We encourage you to review this Policy periodically. Continued use of ph333z after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

16 Governing Law

This Privacy Policy is governed by the laws of the Republic of the Philippines, including but not limited to Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations as administered by the National Privacy Commission.

Any dispute arising from or relating to this Privacy Policy that cannot be resolved informally through ph333z's internal complaints process shall be subject to the jurisdiction of the appropriate courts or regulatory bodies in the Philippines.

17 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph333z, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat icon on ph333z.org — the fastest way to reach us.
• Email (DPO): [email protected] — use subject line "Privacy / DPO Inquiry" for data rights or privacy-related matters.
• Support languages: Tagalog and English, 24 hours a day, 7 days a week.

ph333z commits to acknowledging all privacy-related communications within 5 business days and resolving substantive data rights requests within 15 business days of receipt.