This Privacy Policy explains how ph364 collects, uses, stores, discloses, and protects the personal data of users who access or interact with the ph364 platform at ph364.asia. ph364 processes personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).
Our Privacy Commitments
ph364 collects only the personal data that is strictly necessary for the specific purposes described in this Policy. We do not collect data for the sake of having it. If a piece of information is not needed to deliver the service, verify your identity, or meet a legal obligation, ph364 does not ask for it.
ph364 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Your information is shared only with the specific categories of recipient described in this Policy, and only to the extent necessary for the stated purpose.
All personal data transmitted between your device and ph364 servers is encrypted using 256-bit SSL/TLS. Stored personal data — including KYC documents, payment records, and account credentials — is encrypted at rest using industry-standard encryption protocols in ph364's secure data infrastructure.
As a data subject under the Philippine Data Privacy Act of 2012, you have clearly defined rights over your personal data — including the right to access, correct, erase, object to processing, and port your data. ph364 has established procedures to respond to all lawful data subject rights requests within the timeframes required by law.
ph364 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. Data that is no longer needed is securely deleted or anonymized in accordance with ph364's documented data retention schedule.
In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected individuals, ph364 will notify the National Privacy Commission and affected data subjects in accordance with its breach notification obligations under the Data Privacy Act and NPC Circular No. 16-03.
The data controller responsible for the personal data of ph364 users is the operating entity behind the ph364 platform, accessible at ph364.asia. For purposes of the Philippine Data Privacy Act of 2012 (R.A. 10173), ph364 is the personal information controller (PIC) in respect of the data it processes directly, and acts as a personal information processor (PIP) in respect of data it processes on behalf of third-party service providers where applicable.
ph364 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with applicable data protection law. Contact details for the DPO are provided in Section 14 of this Policy.
NPC Registration: ph364 maintains registration with the National Privacy Commission (NPC) of the Philippines as required for personal information controllers processing personal data of Filipino individuals at a scale and sensitivity warranting registration. ph364's NPC registration details are available upon request from our DPO.
This Privacy Policy applies to all personal data collected, used, stored, or disclosed by ph364 in connection with the operation of the ph364 platform, including:
This Policy applies to personal data of individuals located in the Philippines and, where applicable, of Filipino citizens regardless of their location. It does not apply to third-party websites or services linked to or from ph364, over which ph364 has no control and for which ph364 accepts no responsibility.
ph364 collects personal data from players through a variety of methods — directly from players during registration and account use, automatically through technical systems during platform interaction, and from third-party sources where necessary for verification and compliance purposes. The categories of personal data collected are described below.
When you create a ph364 account, we collect: your full legal name; date of birth; Philippine mobile number; email address; and a password (stored in hashed form — never in plain text). You may also optionally provide a preferred display name.
For the purpose of age verification and Anti-Money Laundering (AML) compliance, ph364 collects copies of government-issued identity documents — such as your PhilSys National ID, Philippine passport, driver's license, or PRC ID — together with a photograph or video for liveness verification where required. Proof of address and source of funds documentation may also be requested in higher-risk or higher-value account situations.
ph364 records all financial transactions conducted on the platform, including deposit amounts, timestamps, payment method identifiers (such as GCash account references, last four digits of linked bank accounts, or Maya wallet identifiers), withdrawal requests, and transaction outcomes. Full payment credentials — such as complete account numbers or PINs — are not stored by ph364 and are processed exclusively through the relevant payment provider's secure systems.
ph364 records all gaming activity on the platform including game sessions initiated, bets placed, games played, wager amounts, outcomes, bonus usage, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, fraud detection, and platform analytics.
When you access the ph364 platform, our technical systems automatically collect: IP address; device type and operating system; browser type and version; screen resolution; referral URL; session timestamps; and geolocation data at a country and city level. This data is used for security purposes, fraud prevention, service optimization, and regulatory compliance.
ph364 retains records of all communications between players and ph364 support, including live chat transcripts, email correspondence, and in-platform notifications. These records are used for customer service quality, dispute resolution, and compliance purposes.
Sensitive Personal Information: KYC document images and biometric data used for liveness verification are classified as sensitive personal information under the Philippine Data Privacy Act. ph364 processes this data only to the extent strictly necessary for identity verification and AML compliance, and applies enhanced security controls to its storage and handling.
ph364 processes personal data only where a lawful basis for processing exists under the Data Privacy Act of 2012. The lawful bases upon which ph364 relies are as follows:
The processing of registration data, transaction data, gameplay data, and communications data is necessary for ph364 to perform its contractual obligations to registered players — specifically, to provide the gaming services, wallet management, customer support, and related platform features that comprise the ph364 service. Without this processing, ph364 cannot perform its agreement with you.
The processing of KYC identity verification data, AML transaction monitoring data, and related compliance records is necessary for ph364 to comply with its obligations under applicable Philippine law and PAGCOR regulatory requirements — including the Anti-Money Laundering Act (R.A. 9160, as amended), KYC requirements under BSP and PAGCOR guidelines, and the reporting obligations imposed on gaming operators.
ph364 processes technical and device data, and certain communications data, on the basis of legitimate interests — specifically, the interest in operating a secure, fraud-free platform; detecting and preventing account takeover, identity fraud, and bonus abuse; and improving platform performance for all players. ph364 balances its legitimate interests against the rights and interests of affected players and processes only the minimum data necessary for each legitimate purpose.
Where ph364 sends direct marketing communications — including promotional offers, bonus notifications, and platform updates — it does so on the basis of player consent obtained during registration or subsequently through account preferences. Players may withdraw consent to marketing communications at any time through their account notification settings, without affecting the lawfulness of processing that occurred prior to withdrawal.
ph364 uses cookies and similar tracking technologies on the ph364.asia platform to support essential functionality and to understand how players use the service. The categories of cookies used by ph364 are as follows:
These cookies are essential for the platform to function correctly. They include session authentication tokens that keep you logged in to your ph364 account during a session, CSRF protection tokens, and cookies that support load balancing and CDN routing. These cookies cannot be disabled without fundamentally breaking platform functionality.
Functional cookies allow ph364 to remember your platform preferences — such as your preferred game lobby view, language setting, and notification preferences — so that your experience is consistent across sessions. These cookies persist between visits on trusted devices.
ph364 uses aggregated analytics data — collected through first-party cookies and server-side logging — to understand how players navigate the platform, which features are most used, and where performance improvements should be prioritized. This data is analyzed in aggregate and is not used to profile individual players for commercial purposes.
ph364 uses cookies as part of its device fingerprinting and anomaly detection systems, which form part of the platform's fraud prevention and account security infrastructure. These cookies help identify whether a given login attempt is coming from a recognized device associated with your account.
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your ph364 account. ph364 does not use third-party advertising cookies or cookies that track your activity across unrelated websites.
ph364 does not sell personal data to third parties. ph364 shares personal data only with the categories of recipient described below, and only to the extent strictly necessary for the stated purpose.
ph364 shares transaction-related personal data with its payment processing partners — including GCash, Maya, BPI, BDO, and other payment service providers — to the extent necessary to process deposits and withdrawals. Each payment processor acts as an independent data controller for the data it receives and processes in connection with payment transactions, subject to its own privacy policy and BSP licensing obligations.
To deliver gaming services, ph364 shares limited player data — including player identifiers, session tokens, and wager data — with its licensed game providers in real time. Game providers receive only the data needed to deliver the game session and record outcomes. ph364 contracts with game providers require them to maintain data security standards consistent with industry norms.
ph364 may engage third-party identity verification service providers to assist with KYC document verification, liveness checks, and sanctions screening. These providers process KYC data on ph364's behalf as personal information processors under documented data processing agreements.
ph364 is legally required to share personal data with the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), PAGCOR, and other competent Philippine government authorities where required by law — including in response to valid legal process, regulatory examination, or law enforcement requests. ph364 does not provide advance notice to affected players where such notice would be legally prohibited or would compromise the integrity of an investigation.
ph364 may share personal data with its legal advisers, auditors, and compliance consultants to the extent necessary for the provision of their services, subject to professional confidentiality obligations.
No selling of data. ph364 has never sold, and will never sell, your personal data to data brokers, advertisers, or marketing companies. Your information stays within the operational ecosystem described in this Section.
Some of ph364's service providers — including certain game providers and technical infrastructure providers — are based outside the Philippines and may process personal data on servers located in other jurisdictions, including Singapore, Hong Kong, and other locations in the Asia-Pacific region.
Where personal data is transferred outside the Philippines, ph364 implements appropriate safeguards to ensure that the transferred data receives a standard of protection consistent with the requirements of the Philippine Data Privacy Act of 2012. These safeguards include contractual clauses equivalent to those prescribed by the NPC, and where applicable, reliance on the recipient country's adequacy of protection as assessed by the NPC.
Players who have concerns about cross-border data transfers may contact ph364's DPO for further information about the safeguards in place for specific transfer situations.
ph364 retains personal data for as long as necessary to fulfil the purposes for which it was collected, as required by applicable law, and as necessary to protect ph364's legitimate interests. The general retention principles applied by ph364 are as follows:
Upon expiry of the applicable retention period, ph364 securely destroys or irreversibly anonymizes the relevant data in accordance with its documented data disposal procedures.
ph364 implements technical, organizational, and physical security measures commensurate with the nature and sensitivity of the personal data it processes. Key security measures include:
Your responsibility: While ph364 implements robust security measures on its side, the security of your account also depends on you maintaining the confidentiality of your login credentials. ph364 will never ask for your password or OTP via any channel. If you suspect your credentials have been compromised, contact ph364 support immediately.
Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data processed by ph364. ph364 will respond to verified data subject rights requests within thirty (30) calendar days of receipt, or within any shorter period required by the NPC.
You may request a copy of the personal data ph364 holds about you, together with information about how it is being processed and on what legal basis.
You may request correction of inaccurate or incomplete personal data. Account details such as email and mobile number may be updated directly in Account Settings.
You may request deletion of personal data that is no longer necessary, processed without lawful basis, or subject to a successful objection. This right is subject to ph364's legal retention obligations.
You may object to the processing of your personal data where ph364 relies on legitimate interests as the lawful basis, unless ph364 can demonstrate compelling grounds that override your interests.
You may request a machine-readable copy of the personal data you provided to ph364 directly, to be transferred to another controller where technically feasible.
You may request restriction of processing pending resolution of a dispute about accuracy, lawfulness, or an objection to processing. During restriction, ph364 may store but not actively use the data.
To exercise any of the above rights, please contact ph364's DPO at the contact details provided in Section 14. ph364 may require you to verify your identity before processing a data subject rights request, to protect against unauthorized disclosure.
If you believe ph364 has failed to comply with its obligations under the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
ph364 is strictly prohibited to persons under 21 years of age, in accordance with Philippine law governing casino-style gaming. ph364 does not knowingly collect personal data from individuals under 21 years old.
Age verification is conducted at the registration stage through date of birth declaration and, where warranted by risk indicators, through KYC identity document verification. Accounts where ph364's systems or KYC review identify an account holder who may be under 21 are immediately suspended pending verification, and any associated personal data is handled in accordance with applicable law — which may require prompt deletion of the data to the extent not retained for legal purposes.
If a parent or guardian becomes aware that a person under 21 has created a ph364 account, they should contact ph364's DPO immediately. ph364 will take prompt action to investigate and, if confirmed, close the account and handle associated data appropriately.
21+ strictly enforced. The collection and processing of personal data from minors for gambling purposes is prohibited under Philippine law. ph364 cooperates fully with NPC and PAGCOR in all matters relating to underage access to its platform.
ph364 processes gameplay data, transaction data, session data, and account behavior data for the purpose of responsible gaming monitoring — specifically, to identify players who may be exhibiting patterns associated with problem gambling, to deliver responsible gaming notifications, and to administer self-exclusion and account restriction tools.
This processing is necessary for ph364 to comply with its obligations as a gaming operator under PAGCOR-aligned regulatory standards, and is carried out on the basis of legal obligation and legitimate interests in player wellbeing. Responsible gaming data is treated with heightened confidentiality and is not used for commercial profiling or marketing targeting purposes.
Players who activate self-exclusion on ph364 will have their self-exclusion status recorded and maintained for the duration of the self-exclusion period. Self-excluded players will be identified and access to their accounts blocked for the duration of the exclusion, even if the player attempts to re-register using different credentials. ph364 retains self-exclusion records for a period consistent with its responsible gaming obligations beyond the expiry of the exclusion period.
For more information about ph364's responsible gaming tools and policies, please visit ph364.asia/responsible-gaming.
ph364 may update this Privacy Policy periodically to reflect changes in its data processing practices, changes in applicable law, or guidance from the National Privacy Commission. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.
Where changes to this Policy are material — meaning they significantly affect your rights or the way ph364 processes your personal data — ph364 will notify registered players via email or in-platform notification at least 7 days before the changes take effect, except where a shorter notice period is required by law or regulatory instruction.
Continued use of the ph364 platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the updated terms. If you do not accept the revised Policy, you should discontinue use of the platform and request account closure before the changes take effect.
For all data privacy inquiries, data subject rights requests, or to contact ph364's designated Data Protection Officer, please use the following channels:
ph364 will acknowledge receipt of your data subject rights request within five (5) business days. Full responses will be provided within thirty (30) calendar days of receipt of a verified request, consistent with the NPC's prescribed response timeframe.
If you are not satisfied with ph364's response to your data privacy inquiry or data subject rights request, you have the right to file a complaint with the National Privacy Commission of the Philippines.
Your privacy matters. ph364's DPO is an independent function with direct reporting responsibility for data protection compliance. Data subject rights requests are treated as priority matters and are not handled through standard customer service queues — they go directly to the data privacy team.
Philippine Data Privacy Act compliant. Encrypted. Never sold. Ready when you are.
Create Your ph364 AccountMust be 21 years or older. Please gamble responsibly. PAGCOR aligned.