ph387 Privacy
Policy

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR"), ph387 (operating at ph387.cam) is the data controller responsible for the personal data of players who register and use the ph387 Platform.

As data controller, ph387 determines the purposes and means of processing personal data. ph387 is committed to processing all personal data lawfully, fairly, and transparently, in full compliance with the DPA and applicable PAGCOR regulatory requirements governing the collection and handling of player information in the Philippine online gaming sector.

ph387 collects the following categories of personal data in connection with the registration, maintenance, and operation of your Account:

ph387 does not collect sensitive personal information (as defined under Section 3(l) of the DPA) beyond what is strictly required for age and identity verification purposes.

ph387 collects personal data through the following channels:

3.1 Direct Collection

Information you provide when you register for a ph387 Account, complete identity verification, make a deposit or withdrawal, contact customer support, participate in promotions, or submit any form or enquiry on the Platform.

3.2 Automated Collection

Technical and usage data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access or use the ph387 Platform. This includes IP addresses, session data, device identifiers, and in-platform activity patterns. Refer to Section 7 for more detail on cookies.

3.3 Third-Party Sources

ph387 may receive identity verification data from licensed Know Your Customer ("KYC") service providers used to confirm your identity in compliance with PAGCOR and anti-money laundering regulations. ph387 may also receive fraud screening data from payment processors including GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard in connection with the processing of your transactions.

ph387 processes your personal data on the following legal bases as set out in the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfil ph387's obligations under the Terms & Conditions you have agreed to, including account management, payment processing, game provision, and customer support;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the DPA, and other applicable Philippine laws;
• Legitimate Interests: Processing carried out to protect the security and integrity of the ph387 Platform, prevent fraud and abuse, and improve platform performance — where such interests are not overridden by your fundamental rights;
• Consent: Processing for optional purposes (such as marketing communications) where you have provided a specific, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ph387 uses the personal data it collects for the following purposes:

• Account Management: Creating, verifying, and maintaining your ph387 Account, including processing login authentication and two-factor verification;
• Payment Processing: Facilitating deposits via GCash, PayMaya, BPI, BDO, and other accepted Philippine payment methods; processing withdrawal requests to your verified payment account;
• Regulatory Compliance: Fulfilling PAGCOR reporting obligations, Anti-Money Laundering Act compliance, Know Your Customer verification, and age verification (21+ minimum under PAGCOR rules);
• Responsible Gaming: Monitoring account activity to identify patterns of play that may indicate problem gambling; enforcing self-exclusions, deposit limits, and loss limits set by you;
• Fraud and Security: Detecting, investigating, and preventing fraud, cheating, collusion, multi-accounting, money laundering, and other prohibited activities;
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and maintaining records of support interactions;
• Platform Improvement: Analysing aggregated usage data to improve game selection, user interface, and platform performance;
• Marketing Communications: Sending you promotional information about ph387 offers, bonuses, and new features — only where you have consented to receive such communications and have not subsequently opted out.

ph387 shares personal data only in the following limited circumstances:

6.1 Service Providers

ph387 shares necessary personal data with third-party service providers who process data on our behalf and under our instruction, subject to data processing agreements that impose equivalent or stricter data protection obligations. These providers include: payment processing partners (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, GrabPay, UnionBank); identity verification and KYC service providers; game content providers (who receive only anonymised session data); cloud hosting and infrastructure providers; and customer support platform operators.

6.2 Regulatory and Law Enforcement Disclosure

ph387 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission ("NPC"), or other Philippine government bodies where disclosure is required by applicable law, court order, or regulatory obligation. ph387 will notify affected players of such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ph387's business, personal data held by ph387 may form part of the transferred assets. Players will be notified of any such transfer and any material changes to data processing arrangements in advance.

ph387 uses cookies and similar tracking technologies to operate the Platform, maintain session state, prevent fraud, and analyse Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in to your ph387 Account and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences (such as language settings and game lobby filters) to improve your experience.
• Analytics Cookies: Collect anonymised information about how players use the Platform to help ph387 improve performance and content. Usage data is aggregated and not linked to individual accounts.
• Security Cookies: Used for fraud detection and prevention, including device fingerprinting to identify new and potentially compromised login attempts.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. ph387 does not use third-party advertising or targeting cookies.

ph387 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your active ph387 Account and for a minimum of five (5) years following Account closure, in compliance with PAGCOR and AMLA recordkeeping requirements;
• Transaction Records: Retained for a minimum of five (5) years following the transaction date in compliance with AMLA obligations;
• KYC and Identity Documents: Retained for a minimum of five (5) years following Account closure or the completion of the verification process;
• Support Communications: Retained for three (3) years following the resolution of the relevant enquiry or dispute;
• Technical and Log Data: Retained for up to twelve (12) months from collection, unless required for longer periods for fraud investigation or regulatory purposes.

Following the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is used, the anonymised data may be retained indefinitely for aggregate analytics purposes.

ph387 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS 1.3) encryption for all data in transit between your device and ph387 servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents, financial data, and account credentials;
• Multi-factor authentication requirements for access to ph387 systems that process personal data;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security professionals;
• Strict access controls ensuring that personal data is accessible only to ph387 staff and service providers with a legitimate need to process it;
• Employee data privacy and security training as a condition of employment for all staff with access to personal data.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph387. To exercise any of these rights, contact ph387 at [email protected] with the subject line "Data Rights Request." ph387 will respond within fifteen (15) working days of receiving a valid request.

10.1 Right to be Informed

You have the right to be informed about what personal data ph387 holds about you, the purposes for which it is processed, the legal basis for processing, how long it will be retained, and with whom it may be shared. This Privacy Policy fulfils ph387's obligation to inform you.

10.2 Right of Access

You have the right to request a copy of the personal data ph387 holds about you. ph387 will provide this in a structured, commonly used format within fifteen (15) working days of a verified request.

10.3 Right to Rectification

You have the right to request that ph387 correct any inaccurate or incomplete personal data held about you. Certain data (such as verified identity documents) may require re-verification before correction can be applied.

10.4 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing was based, or where processing is unlawful. This right is subject to ph387's legal obligations to retain data under PAGCOR and AMLA requirements. Where legal retention obligations apply, ph387 will restrict processing of data beyond those obligations.

10.5 Right to Data Portability

You have the right to receive a copy of your personal data in a machine-readable format (JSON or CSV) for transfer to another service provider, where processing is based on consent or contractual necessity and is carried out by automated means.

10.6 Right to Object

You have the right to object to ph387's processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case ph387 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Lodge a Complaint

If you believe that ph387 has processed your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC's complaint procedures is available through official Philippine government channels.

If ph387 discovers or is notified that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, ph387 will take immediate steps to delete such data and suspend the relevant Account. If you believe that ph387 holds data relating to a minor, please contact ph387 immediately at [email protected].

ph387 employs age verification procedures at registration and reserves the right to request documentary proof of age at any point during the Account lifecycle. Misrepresentation of age during registration constitutes a breach of ph387's Terms & Conditions and applicable Philippine law.

ph387 may transfer certain categories of personal data to countries outside the Philippines in connection with the provision of cloud hosting, game content delivery, payment processing infrastructure, and KYC verification services. Such transfers are made only where:

• The recipient country has been assessed to provide an adequate level of protection for personal data comparable to that required under the Philippine DPA; or
• Appropriate contractual safeguards have been put in place with the receiving entity, including data processing agreements with binding data protection obligations; or
• The transfer is necessary for the performance of ph387's contractual obligations to you (for example, processing a GCash withdrawal that routes through international payment infrastructure).

ph387 does not transfer personal data internationally beyond what is strictly necessary for the operational purposes described in this Privacy Policy.

ph387 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they substantially affect how your personal data is processed or your rights in relation to it — ph387 will notify players in advance via the Platform and/or by direct communication to registered contact details, with a minimum of fourteen (14) days' notice before the updated Policy takes effect.

Non-material amendments (such as corrections of typographical errors or clarifications that do not change the substance of data processing practices) may be made without advance notice. The "Last updated" date at the top of this document reflects the date of the most recent revision.

For any questions, concerns, or requests relating to this Privacy Policy or ph387's handling of your personal data, please contact ph387 using the following channels:

• Data Privacy Enquiries: [email protected] — subject line "Privacy Policy" or "DPO Enquiry"
• Data Rights Requests: [email protected] — subject line "Data Rights Request"
• Live Support: Available 24/7 through the ph387 Platform — Filipino-speaking agents are on duty at all hours.
• Response Time: ph387 aims to acknowledge all data privacy enquiries within two (2) business days and to provide a substantive response within fifteen (15) working days.

For complaints that remain unresolved following ph387's internal process, you may contact the National Privacy Commission of the Philippines (NPC) through official government channels to file a formal complaint.

This Privacy Policy is published in English. In the event of any conflict between an English-language version and any translated version, the English-language version shall prevail. This Policy is governed by and construed in accordance with Philippine law.