Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you register an account with ph345, we collect personal information necessary to verify your identity, process transactions, and comply with PAGCOR regulatory requirements. This information includes your full legal name as it appears on government-issued identification; date of birth to verify you meet the minimum age requirement of 21 years; valid Philippine mobile number for account verification and two-factor authentication; email address for account communications and notifications; complete residential address including street, barangay, city or municipality, and province; and government-issued identification details such as Unified Multi-Purpose ID (UMID), Philippine passport, driver's license, or Postal ID number.

During the Know Your Customer (KYC) verification process, you may be required to submit scanned copies or photographs of government-issued identification documents, proof of address documents such as utility bills or bank statements dated within the last three months, and selfie photographs holding your identification document for biometric verification. For enhanced verification levels or larger withdrawal limits, we may request additional documentation including source of funds declarations, employment verification, or certified true copies of identification documents.

1.2 Financial and Transaction Information

To process deposits and withdrawals, ph345 collects payment information including GCash mobile number, Maya account number, bank account numbers and names for InstaPay and PesoNet transfers, credit or debit card details (though we do not store full card numbers and rely on PCI-DSS compliant payment processors), and cryptocurrency wallet addresses if you use digital currency payment methods. We maintain comprehensive transaction records including deposit amounts and timestamps, withdrawal requests and approval status, payment method used for each transaction, and transaction identifiers provided by payment processors.

All financial data is encrypted using industry-standard 256-bit SSL (Secure Socket Layer) encryption during transmission and AES-256 encryption at rest in our secure databases. We do not store complete credit card numbers, card verification codes (CVV), or banking PINs on our servers. Payment card data is tokenized and processed through PCI-DSS Level 1 compliant payment gateways, with only tokenized references retained for transaction reconciliation and fraud prevention purposes.

1.3 Automatically Collected Information

When you access ph345 services, we automatically collect certain technical information through cookies, web beacons, and server logs. This includes IP address and geolocation data to verify you are physically located within the Philippines as required by our gaming license; device information such as device type (mobile, tablet, desktop), operating system, browser type and version, and screen resolution; gameplay data including games played, bet amounts, win and loss records, session duration, and last login timestamp; and website usage data such as pages visited, referring URLs, navigation paths, and click patterns.

We use cookies and similar tracking technologies to maintain your login session, remember your preferences and settings, analyze site traffic and user behavior patterns, detect and prevent fraud and security threats, and deliver targeted promotional content. You may configure your browser to refuse cookies; however, doing so may limit your ability to use certain features of ph345 services. Our Cookie Policy, available as part of this Privacy Policy, provides detailed information about the types of cookies we use and how to manage them.

2. How We Use Your Information

ph345 uses your personal information for the following legitimate business purposes: account creation and management, including verifying your identity and eligibility to use our services; processing deposits, withdrawals, and other financial transactions; complying with PAGCOR licensing requirements and Philippine gaming regulations; preventing fraud, money laundering, and other illegal activities through transaction monitoring and behavioral analysis; providing customer support and responding to your inquiries and complaints; sending account notifications, transaction confirmations, security alerts, and other service-related communications; marketing and promotional purposes, subject to your consent and communication preferences; improving our services through data analysis, user behavior research, and platform optimization; enforcing our Terms and Conditions and resolving disputes; and maintaining records for legal and regulatory compliance purposes.

We process your personal data based on the following legal grounds as defined by the Data Privacy Act: performance of a contract, as your personal information is necessary to provide gaming services under our Terms and Conditions; legal obligation, as we are required by PAGCOR regulations and anti-money laundering laws to collect and retain certain information; legitimate interests, such as fraud prevention, security, and service improvement, provided these interests do not override your fundamental rights; and consent, particularly for marketing communications and optional data processing activities, which you may withdraw at any time without affecting the lawfulness of processing based on consent before withdrawal.

3. Data Sharing and Disclosure

3.1 Third-Party Service Providers

ph345 shares your personal information with carefully selected third-party service providers who perform services on our behalf under strict contractual obligations to protect your data. These include payment processors such as GCash, Maya, BPI, BDO, Metrobank, and other financial institutions that process your deposits and withdrawals; identity verification services that conduct KYC checks and validate government-issued identification documents; game content providers including Evolution Gaming, Pragmatic Play, Microgaming, and other licensed software suppliers who deliver casino games on our platform; cloud hosting providers that maintain our secure server infrastructure; customer support platforms that help us respond to your inquiries; and email and SMS communication services that deliver transactional and promotional messages.

All third-party service providers are contractually required to implement appropriate technical and organizational security measures, process personal data only for specified purposes and in accordance with our instructions, maintain confidentiality and comply with the Data Privacy Act, and promptly notify us of any data breaches or security incidents. We conduct due diligence on all service providers before engagement and periodically review their security practices and compliance status.

3.2 Legal and Regulatory Disclosures

ph345 may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to comply with PAGCOR regulations and gaming licensing requirements; respond to lawful requests from law enforcement agencies, courts, or government authorities; comply with Anti-Money Laundering Council (AMLC) directives and submit Covered Transaction Reports (CTR) and Suspicious Transaction Reports (STR) as mandated by Republic Act No. 9160 (Anti-Money Laundering Act) as amended; protect the rights, property, or safety of ph345, our users, or the public; enforce our Terms and Conditions and investigate suspected fraud or violations; and participate in legal proceedings, respond to subpoenas, or defend against legal claims.

3.3 No Sale of Personal Information

ph345 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your data with advertisers or data brokers. Any data sharing is limited to service provision, legal compliance, and fraud prevention as described in this Policy. You have the right to know what personal information we hold about you and to request correction or deletion subject to legal retention requirements.

4. Data Security Measures

ph345 implements comprehensive technical, physical, and administrative security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Our security infrastructure includes advanced firewalls and intrusion detection systems that monitor and block suspicious network activity; regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms; secure socket layer (SSL) and transport layer security (TLS) protocols for all data transmission; multi-factor authentication (MFA) for account access and sensitive operations; role-based access controls that limit employee access to personal data on a need-to-know basis; encrypted database storage with separate encryption keys for different data categories; regular automated backups stored in geographically distributed, secure data centers; and 24/7 security monitoring with real-time threat detection and incident response capabilities.

Our employees and contractors who have access to personal information are bound by strict confidentiality agreements and undergo regular data privacy and security training. All personnel are subject to background checks before being granted access to sensitive systems. We maintain detailed audit logs of all access to personal data, and any unauthorized access attempts trigger immediate alerts to our security team. Despite our security measures, no system is completely impenetrable, and we cannot guarantee absolute security of information transmitted over the Internet. You are responsible for maintaining the confidentiality of your account password and should immediately notify us if you suspect unauthorized account access.

5. Your Privacy Rights Under Philippine Law

The Data Privacy Act of 2012 grants you specific rights regarding your personal information. You have the right to be informed about how your data is collected, used, and shared; access your personal data held by ph345 and request copies in a structured, commonly used, and machine-readable format; correct inaccurate or incomplete personal information; erase or block personal data that is no longer necessary for the purposes for which it was collected, subject to legal retention requirements; object to processing of your personal data for direct marketing purposes or based on legitimate interests; restrict processing in certain circumstances, such as when you contest data accuracy or object to processing; data portability, allowing you to receive your data in a portable format and transmit it to another service provider where technically feasible; and withdraw consent for processing based on consent, without affecting the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. Include your full name, registered email address, account username, and a detailed description of your request. We will respond to all valid requests within fifteen (15) business days as required by Philippine law. For complex requests requiring additional time, we will notify you of the extension and the reasons for delay. Please note that certain requests may require identity verification to prevent unauthorized access to personal information. We reserve the right to refuse requests that are manifestly unfounded, excessive, or repetitive, or that would compromise the privacy of others or violate legal retention obligations.

6. Data Retention and Deletion

ph345 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Account information and transaction records are retained for a minimum of five (5) years from the date of your last transaction as required by PAGCOR regulations and anti-money laundering laws. Identification documents and KYC verification records are retained for five (5) years following account closure. Marketing and promotional communication records are retained until you withdraw consent or for three (3) years, whichever is earlier. Technical logs and security monitoring data are retained for one (1) year unless required for ongoing investigations or legal proceedings.

After the applicable retention period expires and no legal hold or investigation requires continued retention, your personal information is securely deleted or anonymized in a manner that renders it unrecoverable. Deleted data is overwritten using industry-standard data sanitization methods to prevent recovery. You may request early deletion of personal data that is no longer necessary for service provision; however, such requests are subject to our legal obligations to retain records for regulatory compliance, fraud prevention, and financial audit purposes. Anonymous or aggregated data that cannot identify you may be retained indefinitely for statistical analysis and service improvement.

7. International Data Transfers

ph345 primarily stores and processes your personal information within the Philippines using data centers located in Metro Manila and Cebu. However, certain third-party service providers, particularly international game content providers and cloud infrastructure services, may process your data in jurisdictions outside the Philippines. When we transfer personal data internationally, we ensure that such transfers comply with the Data Privacy Act and are subject to appropriate safeguards including standard contractual clauses approved by the National Privacy Commission; adequacy decisions recognizing that the receiving country provides adequate data protection; binding corporate rules for intra-group transfers; and explicit consent for transfers where required by law.

We conduct due diligence on all international service providers to verify their data protection practices and ensure they provide a level of protection substantially similar to Philippine standards. You have the right to obtain information about international transfers of your personal data and the safeguards in place by contacting our Data Protection Officer. Please note that certain international game providers may be subject to their own privacy policies, which we encourage you to review independently.

8. Children's Privacy

ph345 services are strictly intended for adults aged 21 years and older. We do not knowingly collect, use, or retain personal information from individuals under the age of 21. Our registration process includes age verification, and we employ technical measures to prevent minors from accessing real-money gaming services. If we become aware that we have inadvertently collected personal information from a person under 21 years of age, we will take immediate steps to delete such information from our systems and permanently close the associated account without refund of any remaining balance.

Parents and guardians are encouraged to monitor their children's online activities and prevent access to gambling websites. If you believe that ph345 has inadvertently collected information from a minor, please contact us immediately at [email protected] with details of the suspected underage account. We take underage gambling seriously and cooperate fully with authorities investigating violations of age restrictions. Players who allow minors to use their accounts or who facilitate underage gambling will have their accounts permanently closed and may face legal consequences.

9. Changes to This Privacy Policy

ph345 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through prominent notice on our website, email notification to registered users, or in-app notification upon your next login. The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of ph345 services following publication of revised Privacy Policy constitutes acceptance of the changes. If you do not agree with the modified terms, you should discontinue use of our services and may request account closure and data deletion subject to applicable retention requirements. For significant changes that require fresh consent under the Data Privacy Act, we will seek your explicit consent before applying the new practices to your existing personal information.

10. Contact Information and Complaints

For questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer at [email protected] with "Privacy Inquiry" in the subject line. We are committed to resolving privacy complaints within thirty (30) days of receipt. If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines at [email protected] or through their online complaint system at https://www.privacy.gov.ph. The NPC has authority to investigate privacy complaints and enforce compliance with the Data Privacy Act.