phl333 Privacy Policy

Introduction

At phl333, we take privacy seriously — not just because it is required by Philippine law, but because we believe that every Filipino player has a genuine right to know how their personal information is being used. This Policy is intended to be clear and readable, not buried in unnecessary jargon. If anything in this Policy is unclear, you are always welcome to contact us at [email protected] for a plain-language explanation.

This Policy applies to all personal data processed by phl333 in connection with the operation of the platform, whether collected through account registration, gameplay activity, customer support interactions, or payment transactions. It applies to all Filipino players and to any person who accesses phl333 from the Philippines or in connection with a Philippine-registered account.

This Policy should be read alongside phl333's Terms and Conditions, which govern the overall use of the platform, and the Responsible Gaming Policy, which outlines our approach to player protection and welfare.

Data Controller

For the purposes of the Data Privacy Act of 2012, phl333 acts as the Personal Information Controller ("PIC") with respect to personal data collected through the phl333 platform. As PIC, phl333 determines the purposes and means of processing your personal information.

phl333 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. The DPO can be contacted at the email address provided in Section 14 of this Policy. Players who wish to exercise their data rights, submit complaints, or raise concerns about data handling may direct their communications to the DPO.

Personal Data We Collect

phl333 collects personal data that is necessary for the provision of our online gaming services, compliance with Philippine law, and the protection of our players and platform. The categories of personal data we collect are described below.

How We Collect Personal Data

phl333 collects personal data through the following channels and mechanisms:

• Direct Collection: Information you provide directly when you register an account, complete identity verification, deposit funds, contact customer support, or respond to platform surveys;
• Automated Collection: Technical data collected automatically when you access phl333, including IP address, device identifiers, browser type, and session activity logs, via cookies and similar tracking technologies;
• Payment Processors: Transaction confirmation data shared by Philippine payment providers such as GCash and Maya when you initiate deposits or withdrawals;
• Third-Party Verification: Identity verification data confirmed through licensed third-party KYC service providers where required to meet Philippine regulatory obligations;
• Platform Interactions: Gameplay data generated as a natural result of your use of phl333 games, including bets placed, outcomes, session durations, and game preferences.

Purposes & Legal Basis for Processing

phl333 processes personal data only for specified, explicit, and legitimate purposes. We rely on one or more of the following legal bases for each processing activity:

• Contractual Necessity — Processing required to fulfill our obligations under the Terms and Conditions you have accepted, including account management, payment processing, and gameplay facilitation;
• Legal Obligation — Processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act, Data Privacy Act of 2012, and gaming regulations administered by relevant authorities;
• Legitimate Interest — Processing necessary for phl333's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your data protection rights;
• Consent — Processing of personal data for optional purposes such as marketing communications, where you have given explicit consent and retain the right to withdraw consent at any time without affecting prior processing.

The specific purposes for which phl333 processes your personal data include: account creation and authentication; processing of deposits and withdrawals via GCash, Maya, and Philippine banks; identity and age verification; fraud detection and prevention; responsible gaming monitoring and enforcement; customer support; legal and regulatory compliance reporting; and improvement of platform features and user experience.

Data Sharing & Disclosure

phl333 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Personal data is shared only in the following limited circumstances and always subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, QR Ph, BPI, BDO, and other licensed Philippine payment service providers, for the sole purpose of processing deposits and withdrawals on your behalf;
• Identity Verification Providers: Licensed third-party KYC and age verification service providers engaged by phl333 to verify your identity and age in compliance with Philippine regulatory requirements;
• Game Providers: Licensed game software providers whose games you access through phl333 may receive anonymized or session-level technical data necessary for game delivery and fairness certification;
• Legal and Regulatory Authorities: The Anti-Money Laundering Council (AMLC), National Privacy Commission (NPC), and other competent Philippine government authorities where disclosure is required by law, court order, or regulatory mandate;
• Professional Advisors: Legal counsel, auditors, and accountants operating under binding confidentiality obligations, where disclosure is necessary for phl333's legitimate legal or compliance requirements.

Data Retention

phl333 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The general retention principles applied by phl333 are as follows:

• Account and identity data for active accounts is retained for the duration of the account relationship plus a minimum of five (5) years after account closure, as required for anti-money laundering compliance;
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction in accordance with Philippine banking and AML requirements;
• Gameplay logs are retained for three (3) years from the date of the recorded session;
• Customer support communications are retained for two (2) years from the date of the last interaction;
• Technical and device data collected via cookies may be retained for shorter periods as specified in our cookie settings.

Upon expiration of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification.

Security Measures

phl333 implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the phl333 platform is encrypted using the same standard employed by Philippine banks including BPI and BDO;
• Password Security: Account passwords are stored using industry-standard salted hashing algorithms. phl333 does not store passwords in retrievable plain text;
• Access Controls: Access to personal data is restricted to authorized phl333 personnel on a strict need-to-know basis. All access is logged and subject to regular audit;
• Two-Factor Authentication: Optional 2FA using your Philippine mobile number is available for all accounts and strongly recommended;
• Security Monitoring: phl333 employs continuous monitoring for unusual account activity, login anomalies, and potential data breaches;
• Regular Security Audits: phl333's platform security is subject to regular internal and external security reviews.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms as a data subject, phl333 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

Cookies & Tracking Technologies

phl333 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit phl333. The types of cookies used on phl333 are described below:

• Essential Cookies: Required for the platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without significantly affecting platform functionality;
• Preference Cookies: Store your platform settings, language preferences, and responsible gaming limit choices so these are remembered between sessions;
• Analytics Cookies: Collect anonymized data about how players use phl333 — such as which pages are most visited and how long sessions last — to help us improve the platform;
• Security Cookies: Support fraud detection and suspicious activity monitoring by identifying unusual access patterns or bot-like behavior.

You may manage or disable non-essential cookies through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of some phl333 features. phl333 does not use cookies to deliver third-party advertising.

Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the following rights with respect to your personal data held by phl333:

To exercise any of the above rights, please submit a written request to phl333's Data Protection Officer at [email protected]. phl333 will respond to all rights requests within fifteen (15) calendar days of receipt and will process requests without undue delay and at no cost to you, unless the request is manifestly unfounded or excessive.

Minors & Age Restriction

phl333 strictly prohibits access by persons under the age of twenty-one (21) years, in accordance with applicable Philippine gaming regulations. phl333 does not knowingly collect personal data from individuals under 21 years of age.

If phl333 becomes aware that personal data has been collected from a person under the age of 21, we will promptly take steps to delete such data and close the associated account. If you believe a minor has registered on phl333, please notify us immediately at [email protected].

Cross-Border Data Transfers

In limited circumstances, phl333 may transfer personal data to third-party service providers located outside the Philippines — for example, certain game software providers or cloud infrastructure services that operate regional data centers. Any such cross-border transfer is conducted only where:

• The recipient country or organization provides an adequate level of data protection as assessed by the National Privacy Commission or through equivalent safeguards;
• Appropriate contractual safeguards are in place, including data processing agreements containing standard contractual clauses;
• The transfer is necessary for the performance of our contract with you or for the fulfilment of a legal obligation.

Where personal data is transferred cross-border, phl333 ensures that your data receives the same level of protection as required under the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

Changes to This Privacy Policy

phl333 may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or platform features. Material changes to this Policy will be communicated to registered users via email notification to the address on file or through a prominent in-platform notice.

The date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically. Your continued use of phl333 following the effective date of any updated Policy constitutes your acknowledgment of the changes.

If changes are material and require your consent, phl333 will seek your explicit agreement before the revised Policy takes effect with respect to your data.

Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a concern about phl333's data handling practices, please contact our Data Protection Officer:

• Email: [email protected] — please include "Privacy Request" in the subject line;
• Live Chat: Available 24/7 from within your phl333 account dashboard;
• Response Time: phl333 will acknowledge all privacy-related inquiries within three (3) Philippine business days and resolve them within fifteen (15) calendar days.

If you are not satisfied with phl333's response to your privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about the NPC and how to file a complaint is available through official Philippine government channels.