This Privacy Policy explains how phl365 collects, uses, stores, and protects the personal data of its registered players and website visitors, in compliance with the Philippines Data Privacy Act of 2012 (Republic Act No. 10173) and PAGCOR regulatory requirements.
All data transmitted between your device and phl365.org is protected by 256-bit SSL encryption. Your personal information, account credentials, and payment details cannot be intercepted in transit.
phl365 operates in full compliance with the Philippines Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC).
phl365 does not sell, rent, or commercially transfer your personal data to unaffiliated third parties. Data is shared only where required for contracted service delivery or by Philippine law.
Under the Philippines Data Privacy Act, you have the right to access, correct, object to, and request erasure of your personal data held by phl365, subject to legal and regulatory retention obligations.
1.1 This Privacy Policy ("Policy") sets out the manner in which phl365 ("phl365," "we," "us," or "our") collects, processes, stores, uses, and protects the personal data of individuals who access phl365.org ("the Platform"), register an account, make deposits, participate in gaming activities, or interact with phl365's customer support team.
1.2 This Policy is issued pursuant to and in compliance with the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), the National Privacy Commission's (NPC) issuances, and applicable PAGCOR regulatory requirements governing the handling of player data by licensed online gaming operators.
1.3 This Policy should be read in conjunction with phl365's Terms & Conditions and Responsible Gaming Policy. By accessing the Platform or registering an account, you acknowledge that you have read, understood, and agree to the data practices described in this Policy.
1.4 If you do not agree with any part of this Policy, you should discontinue use of the phl365 Platform immediately and may contact us to request account closure in accordance with our Terms & Conditions.
Note for Filipino Players: phl365 is committed to full compliance with the Philippines Data Privacy Act of 2012. Your personal data is handled with the same care and legal discipline as your gaming funds. If you have questions about how your data is used, our support team is available 24/7 via live chat on the Platform.
2.1 For the purposes of the Philippines Data Privacy Act of 2012, phl365 is the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. As PIC, phl365 determines the purposes and means of processing personal data submitted by registered players and website visitors.
2.2 phl365 has appointed a Data Protection Officer (DPO) in accordance with the requirements of RA 10173 and NPC regulations. The DPO is responsible for overseeing compliance with applicable data privacy laws, handling data subject rights requests, and managing data breach response procedures.
2.3 Contact details for phl365's Data Protection Officer are provided in Section 16 of this Policy. All data privacy inquiries, access requests, and formal complaints should be directed to the DPO in the first instance.
3.1 phl365 collects the following categories of personal data from players and website visitors, depending on the nature of their interaction with the Platform:
| Category | Data Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number | KYC verification process |
| Contact Data | Philippine mobile number, email address (if provided) | Registration & account management |
| Account Data | Username, encrypted password hash, account preferences, loyalty tier | Account creation & ongoing use |
| Financial Data | GCash account reference, bank account details (for withdrawals), transaction history, deposit and withdrawal amounts | Payment processing & KYC |
| Gaming Data | Game session logs, bet history, win/loss records, game preferences, bonus usage | Active game participation |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Platform access (automatic) |
| Communication Data | Live chat transcripts, support ticket records, SMS OTP logs (timestamp only, not content) | Customer support interactions |
| Responsible Gaming Data | Self-exclusion records, deposit limit settings, cooling-off period logs, account restriction history | Responsible gaming tool usage |
3.2 Sensitive Personal Information. Government-issued ID documents and financial account details fall within the definition of sensitive personal information under RA 10173. phl365 collects and processes this category of data strictly for KYC identity verification and PAGCOR-mandated anti-money laundering compliance purposes only. Such data is subject to enhanced security and access controls within phl365's systems.
3.3 phl365 does not collect more personal data than is necessary for the purposes identified in this Policy (data minimisation principle). If you believe phl365 holds data about you that is not covered by this Policy, please contact our Data Protection Officer.
4.1 Directly From You. phl365 collects personal data directly from you in the following circumstances:
4.2 Automatically Through Platform Use. Certain technical and usage data is collected automatically when you access the Platform, including through cookies and similar tracking technologies. See Section 8 for full details of phl365's Cookie Policy.
4.3 From Third-Party Service Providers. phl365 may receive personal data about you from third-party providers in the following limited circumstances:
5.1 phl365 uses the personal data it collects for the following purposes:
Purpose Limitation: phl365 will not use your personal data for any purpose that is materially different from those listed in this section without first providing you with notice and, where required by law, obtaining your consent.
6.1 Under the Philippines Data Privacy Act of 2012, phl365 processes personal data on the following legal bases:
7.1 phl365 does not sell, rent, or commercially license your personal data to unaffiliated third parties for their own marketing or commercial purposes. Data is shared only in the limited circumstances described below.
7.2 Service Providers (Personal Information Processors). phl365 engages third-party service providers who act as Personal Information Processors (PIPs) under the Philippines Data Privacy Act. These providers process data strictly on phl365's instructions and for the specific contracted purpose, including:
All Personal Information Processors engaged by phl365 are bound by contractual data processing agreements that require them to maintain data security standards equivalent to those applied by phl365, and to process data only as instructed.
7.3 Regulatory and Law Enforcement Disclosure. phl365 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or any other competent Philippine government authority where disclosure is required by law, court order, or regulatory direction. phl365 will notify affected players of such disclosures where legally permitted to do so.
7.4 Business Transfers. In the event of a merger, acquisition, or transfer of all or substantially all of phl365's business operations, player personal data may be transferred to the successor entity as part of the transaction, subject to the successor entity assuming the obligations of this Policy or providing players with reasonable notice and the opportunity to request account deletion.
Important: phl365 will never proactively share your personal data — including your mobile number, bank details, or GCash reference — with any third party for advertising, telemarketing, or unsolicited commercial purposes. Any communication purporting to be from phl365 and requesting your personal financial information should be treated as fraudulent.
8.1 phl365 uses cookies and similar tracking technologies on the Platform to support platform functionality, maintain session security, and analyse usage patterns. Cookies are small text files stored on your device's browser when you visit phl365.org.
8.2 phl365 uses the following categories of cookies:
8.3 You may manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from accessing your phl365 account. phl365 does not use third-party advertising cookies or cross-site tracking cookies.
9.1 phl365 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, in accordance with Philippine legal and regulatory requirements. The following general retention periods apply:
9.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with phl365's data disposal procedures. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for analytical purposes.
10.1 phl365 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
10.2 Data Breach Response. In the event of a personal data breach that is reasonably likely to give rise to a real risk of serious harm to affected data subjects, phl365 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03. Affected players will be notified within a reasonable timeframe where legally required and practically feasible.
Your Role in Security: While phl365 maintains robust security infrastructure, account security also depends on actions you take. Use a strong, unique password for your phl365 account, do not share your login credentials with anyone, and contact phl365 support immediately if you suspect your account has been compromised.
11.1 Under the Philippines Data Privacy Act of 2012, you have the following rights in relation to the personal data phl365 holds about you:
You have the right to request confirmation of whether phl365 holds personal data about you and, if so, to receive a copy of that data and information about how it is processed.
You have the right to request correction of any inaccurate or incomplete personal data phl365 holds about you. Certain data corrections (e.g., KYC identity data) may require re-verification.
You have the right to request deletion of your personal data where it is no longer necessary for the original purpose, subject to phl365's legal and regulatory retention obligations under PAGCOR and AML requirements.
You have the right to object to phl365's processing of your personal data on grounds of legitimate interests, including for direct marketing purposes. Where objection relates to marketing, phl365 will cease processing immediately.
Where technically feasible, you have the right to receive the personal data you provided to phl365 in a structured, commonly used, machine-readable format for transmission to another service.
Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
11.2 To exercise any of these rights, please contact phl365's Data Protection Officer using the contact details in Section 16. phl365 will respond to all valid rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you of the extension and the reason for it.
11.3 phl365 may request proof of identity before processing a data subject rights request to prevent fraudulent access to another player's personal data.
12.1 The phl365 Platform is strictly intended for individuals who are 21 years of age or older. phl365 does not knowingly collect personal data from individuals under the age of 21.
12.2 In the event that phl365 discovers or is notified that personal data has been collected from an individual who is under 21 years of age, phl365 will immediately suspend the associated account, delete all collected personal data to the extent permitted by applicable law, and report the incident to PAGCOR as required under phl365's licensing conditions.
12.3 If you believe that a minor may have accessed or registered an account on phl365.org, please contact phl365 support immediately via live chat so that the matter can be investigated and resolved without delay.
21+ Platform: phl365 is an adults-only online gaming platform. Access by persons under 21 years of age is strictly prohibited by Philippine law and PAGCOR regulations. Please ensure that minor children in your household cannot access devices on which your phl365 account is accessible by enabling appropriate parental controls.
13.1 Certain third-party service providers engaged by phl365 — including game content providers, cloud infrastructure services, and KYC verification platforms — may process personal data in jurisdictions outside the Philippines. Where personal data is transferred outside the Philippines, phl365 ensures that appropriate safeguards are in place as required by the Data Privacy Act of 2012 and NPC regulations.
13.2 These safeguards may include: contractual data processing agreements requiring equivalent data protection standards; adequacy determinations by the NPC; or other transfer mechanisms approved under Philippine data privacy law.
13.3 phl365 does not transfer personal data to jurisdictions that do not provide adequate protections for personal information, as assessed against the standards of RA 10173. Where any third-party provider operates in a jurisdiction of concern, phl365 applies additional contractual and technical safeguards accordingly.
14.1 phl365 may send you promotional SMS messages, push notifications, or email communications (if an email address is associated with your account) regarding new games, promotions, bonuses, and platform updates. These communications are sent only to players who have not opted out of marketing at registration or subsequently.
14.2 Opt-Out. You may opt out of marketing communications from phl365 at any time by:
Opt-out requests will be processed within five (5) business days. Opting out of marketing communications does not affect your ability to receive transactional messages related to your account, deposits, withdrawals, and security alerts — these are essential communications that phl365 is required to send regardless of marketing preferences.
14.3 phl365 does not send marketing communications to players who have activated self-exclusion or cooling-off periods on their accounts, in accordance with its Responsible Gaming commitments.
15.1 phl365 may update or amend this Privacy Policy from time to time to reflect changes in Philippine data privacy law, NPC guidance, PAGCOR regulatory requirements, or phl365's data processing practices. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision.
15.2 Where changes to this Policy are material — meaning they significantly affect your rights or phl365's data processing activities — phl365 will notify registered players via SMS to their registered Philippine mobile number, or by prominent notice on the Platform, at least seven (7) days before the changes take effect.
15.3 Your continued use of the phl365 Platform following the effective date of any Policy amendment constitutes your acceptance of the updated Policy. If you do not agree with the amended Policy, you should discontinue use of the Platform and may request account closure in accordance with the Terms & Conditions.
16.1 For any questions, concerns, or requests relating to this Privacy Policy, the personal data phl365 holds about you, or to exercise any of your rights under the Philippines Data Privacy Act, please contact phl365's Data Protection Officer through the following channels:
16.2 Complaints to the National Privacy Commission. If you believe that phl365 has processed your personal data in breach of the Philippines Data Privacy Act of 2012, and you are not satisfied with phl365's response to your complaint, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. Information on the NPC complaints process is available on the NPC's official government website.
16.3 phl365 takes all data privacy complaints seriously and will cooperate fully with the NPC in the resolution of any complaint submitted against the Company.
PAGCOR-regulated, Philippines DPA-compliant, and built for Filipino players who expect the best — from game fairness to data security. 500+ games. GCash payouts. 21+ only.
By registering at phl365, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.