phl333 Privacy Policy

1. Who We Are – Data Controller

phl333 operates the online gaming platform accessible at phl333.net and is the Data Controller for all personal information processed in connection with the Platform. phl333 is a PAGCOR-licensed online gaming operator operating within the Republic of the Philippines.

As the Data Controller, phl333 determines the purposes and means by which your personal data is processed. phl333 has appointed a Data Protection Officer (DPO) who oversees compliance with the Data Privacy Act of 2012 (RA 10173) and is the primary point of contact for data privacy matters. Contact details for the DPO are provided in Section 15 of this Policy.

This Privacy Policy applies to all personal information collected through the phl333 website, mobile-optimized interfaces, customer support channels, and any other services operated by phl333.

2. Personal Data We Collect

phl333 collects only personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect are described below:

2.1 Account Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (required for age verification — you must be 21 or older)
• Philippine mobile number
• Email address
• Account password (stored in hashed, non-reversible form — we cannot view your password)
• Preferred username (if applicable)

2.2 Identity Verification (KYC) Data

• Government-issued Philippine ID (PhilSys, UMID, Driver's License, Passport, SSS/GSIS ID, PRC ID, or Voter's ID) — document type, ID number, expiry date, and photograph of the document
• Selfie photograph (for liveness verification where required)
• Proof of address (utility bills, bank statements — if required for enhanced due diligence)

2.3 Financial Transaction Data

• Deposit amounts, dates, and payment method identifiers (e.g., GCash number, Maya account reference, bank account details)
• Withdrawal requests, amounts, and destination payment method details
• Transaction history and wallet balance records

2.4 Gaming Activity Data

• Game sessions played, bets placed, game outcomes, and win/loss records
• Bonus claims, wagering activity, and promotion participation
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, session reminders)

2.5 Technical and Device Data

• IP address and approximate geolocation (used for compliance verification that you are located in the Philippines)
• Device type, operating system, and browser type and version
• Session logs, login timestamps, and access records
• Cookies and similar tracking technology data (see Section 7)

2.6 Communications Data

• Content of customer support interactions (live chat transcripts, email correspondence)
• Complaint and dispute records
• Voluntary feedback and survey responses

3. How We Collect Your Data

phl333 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or otherwise interact with the Platform.
• Automatically: When you visit or use the Platform, our systems automatically collect technical data including your IP address, device information, browser details, and session logs through cookies and server logs.
• From payment providers: When you make a deposit or withdrawal, our payment processing partners (GCash, Maya, GrabPay, BPI, BDO, Metrobank, etc.) provide transaction confirmation and reference data to phl333. These providers operate under their own privacy policies and have their own data processing obligations.
• From identity verification services: phl333 may use third-party KYC verification services to assist in validating the authenticity of government-issued IDs. These services process only the data necessary for verification and are bound by confidentiality and data processing agreements.
• From fraud prevention and AML monitoring services: phl333 uses automated systems and third-party services to monitor for unusual activity, fraud patterns, and potential money laundering in compliance with the Anti-Money Laundering Act (RA 9160, as amended).

4. How We Use Your Personal Data

phl333 uses the personal data it collects for the following purposes:

phl333 does not use your personal data for automated decision-making that produces legal effects on you without human review, except where required for fraud prevention and AML compliance screening, which are subject to human oversight.

5. Legal Basis for Processing

phl333 processes your personal data on the following legal bases as recognized under RA 10173 and its Implementing Rules:

• Contractual necessity: Processing required to perform the contract between you and phl333 — including account management, processing bets, and executing payments.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable statutes. Regulatory reporting to PAGCOR and the AMLC falls under this basis.
• Legitimate interest: Processing necessary for phl333's legitimate interests, including fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring, provided these interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as marketing communications and certain cookie uses, where phl333 has obtained your specific, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

6. Disclosure of Personal Data to Third Parties

phl333 does not sell, rent, or trade your personal information. We share personal data only in the following limited circumstances:

6.1 Service Providers (Data Processors)

phl333 engages third-party service providers who process personal data on our behalf and under our instructions. These include payment processors (GCash/Maya/GrabPay/banks), KYC verification services, cloud hosting providers, fraud detection services, and customer support platform providers. All service providers are bound by data processing agreements that require them to protect your data and prohibit them from using it for their own purposes.

6.2 Regulatory Authorities

phl333 is legally required to share certain personal data with regulatory bodies, including PAGCOR (for licensing compliance and player dispute purposes) and the Anti-Money Laundering Council (AMLC) (for AML reporting obligations). Disclosures to regulatory authorities are made strictly as required by law.

6.3 Game Providers

phl333 operates games developed by third-party game providers (including live casino studios). These providers receive session data necessary to deliver the game — including the player's bet amounts and account reference ID — but do not receive your full identity details. Game providers are contractually bound to process this data only for game delivery purposes.

6.4 Legal Proceedings

phl333 may disclose personal data to courts, law enforcement agencies, or other authorized Philippine government bodies where required by a valid legal order, warrant, or lawful direction.

7. Cookies & Tracking Technologies

phl333 uses cookies and similar tracking technologies (including local storage, session storage, and web beacons) to operate and improve the Platform.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function — including session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform — which pages are visited most, session duration, and navigation paths — to help phl333 improve the user experience. Individual players are not identified in analytics reports.
• Security and fraud prevention cookies: Detect unusual patterns that may indicate unauthorized access attempts, bot activity, or fraud, without storing identifiable personal information beyond the session.

phl333 does not currently use third-party advertising or behavioural tracking cookies that share data with external advertising networks.

7.2 Managing Cookies

You may configure your browser to refuse or delete cookies. However, disabling strictly necessary cookies will prevent core Platform features from working, including logging in to your Account. Instructions for managing cookies are available in your browser's help documentation.

8. Data Retention

phl333 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

After the applicable retention period, personal data is securely deleted or permanently anonymized. Anonymized, aggregated data (from which individual players cannot be identified) may be retained indefinitely for platform analytics and service improvement purposes.

9. Data Security

phl333 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Our security measures include:

• Encryption: All data in transit is encrypted using 256-bit TLS/SSL. Sensitive data at rest (including financial records and KYC documents) is encrypted using AES-256.
• Access control: Personal data is accessible only to phl333 staff who require it for their specific role. Access is controlled by role-based permissions, multi-factor authentication, and access logs.
• Network security: The Platform infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning and penetration testing.
• Password security: Account passwords are stored using one-way cryptographic hashing with salting. phl333 cannot view your plaintext password.
• Physical security: Data is hosted in secure, access-controlled data center facilities.
• Staff training: All phl333 staff with access to personal data receive regular training on data privacy obligations and security practices.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is perfectly secure. In the event of a personal data breach that poses a risk to your rights and freedoms, phl333 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights regarding your personal data held by phl333:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed. This Privacy Policy fulfills that right.
• Right of access: You may request a copy of the personal data phl333 holds about you, along with information about how it is processed.
• Right to rectification: If your personal data is inaccurate or incomplete, you have the right to request correction. For identity-related data, updated documentation may be required.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected and where there is no overriding legal obligation to retain it. Note that certain data (e.g., AML transaction records) must be retained by law regardless of your erasure request.
• Right to object: You may object to processing of your personal data based on phl333's legitimate interests, or to processing for direct marketing purposes. Objecting to marketing processing will not affect your ability to use the Platform.
• Right to data portability: Where processing is based on your consent or on a contract with you, you may request that phl333 provide your personal data in a structured, machine-readable format.
• Right to lodge a complaint: If you believe phl333 has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact the phl333 Data Protection Officer using the contact details in Section 15. phl333 will respond to all data subject requests within thirty (30) days of receipt, or notify you if an extension is required. Identity verification may be requested before a data access or erasure request is processed.

11. Children and Minors

The phl333 Platform is strictly for persons who are 21 years of age or older in accordance with PAGCOR requirements for online gaming in the Philippines. phl333 does not knowingly collect personal data from individuals under 21 years of age.

If phl333 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21, the relevant Account will be immediately closed and all associated personal data will be handled in accordance with PAGCOR guidance on under-age accounts. Any Real Money Balance will be returned to the deposit source; bonus funds will be forfeited.

Parents or guardians who believe their child under 21 has registered an account at phl333 should contact our support team immediately to report the matter and request account closure.

12. Responsible Gaming and Data Processing

As part of phl333's responsible gaming obligations under PAGCOR regulations, phl333 monitors gaming activity data for patterns that may indicate problem gambling behavior. This monitoring is conducted on the basis of legitimate interest (preventing harm to vulnerable players) and regulatory obligation, and is subject to human review when automated systems flag a potential concern.

When responsible gaming monitoring identifies a player who may be at risk, phl333 may: send a responsible gaming information message; offer deposit limit or session limit tools; conduct a voluntary check-in; or in serious cases, apply a temporary restriction pending a review conversation with the player.

Self-exclusion data — including the fact that you have self-excluded, the date of self-exclusion, and the exclusion type — is retained permanently (or for the duration of a temporary exclusion). This data is shared with PAGCOR as required by the exclusion notification obligation. Self-exclusion data cannot be deleted at your request because its retention is a regulatory requirement designed to protect you.

13. International Data Transfers

phl333 primarily processes and stores personal data within the Philippines. However, some third-party service providers (including certain cloud infrastructure providers and game technology vendors) may be located or maintain data centers in other countries.

Where personal data is transferred outside the Philippines, phl333 ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. These safeguards may include data processing agreements that incorporate standard contractual clauses, or transfers to countries that have been recognized as providing an adequate level of data protection.

phl333 does not transfer personal data to jurisdictions known to provide inadequate data protection without ensuring that appropriate contractual protections are in place.

14. Changes to This Privacy Policy

phl333 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform services. Updates will be published on this page with a revised "Last Updated" date.

For material changes that significantly affect how we process your personal data or your rights as a data subject, phl333 will notify registered Players via the email address on file at least fourteen (14) days before the change takes effect.

Continued use of the phl333 Platform after the effective date of any Privacy Policy update constitutes your acknowledgment of the updated Policy. If you do not agree with a material change, you may close your Account before the change takes effect.

15. Contact Us & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how phl333 processes your personal data, please contact the phl333 Data Protection Officer:

• Email: [email protected] — subject line: "Data Privacy Request"
• In-Platform: Live chat (available 24/7 after login) — request escalation to the Data Protection team
• Response Time: Formal data subject requests acknowledged within 5 business days; substantive response within 30 days

If you are not satisfied with phl333's response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority for data protection under RA 10173.