367ph Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 367ph ("367ph," "we," "us," or "our"), operator of the online casino and sports betting platform at 367ph.vip, collects, uses, stores, and protects the personal data of individuals ("you," "Player," or "User") who access or use our platform, including all associated pages, services, and features.

367ph is committed to protecting the privacy of all Filipino players and website visitors in compliance with the Republic Act No. 10173 — the Data Privacy Act of 2012 (DPA) of the Philippines — and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). This Policy also reflects applicable gaming data obligations under Philippine gaming regulations.

This Policy applies to all personal data processed by 367ph in connection with your use of the platform, regardless of whether you access 367ph from Metro Manila, Cebu, Davao, or any other location within the Philippines.

2. Personal Data We Collect

2.1 Registration and Identity Data

When you register a 367ph account, we collect the following personal data:

• Full legal name as it appears on your government-issued identification.
• Date of birth (required to verify that you are 21 years of age or older).
• Philippine mobile number (Globe, Smart, DITO, or other registered carrier).
• Email address.
• Residential address within the Philippines.
• Username and encrypted password (passwords are never stored in plain text).

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations under applicable Philippine regulations, 367ph may collect:

• Government-issued identification documents (e.g., Philippine passport, driver's license, SSS/UMID/PhilHealth card, Voter's ID).
• Proof of address documents (e.g., utility bill, bank statement issued within the last 90 days).
• Selfie photographs for biometric identity matching, where required.
• Source of funds declarations for high-volume accounts.

2.3 Financial and Payment Data

To process deposits and withdrawals, 367ph collects:

• GCash or PayMaya account numbers linked to your 367ph account.
• Bank account details (BPI, BDO, Metrobank) where applicable.
• Visa/Mastercard details processed through PCI-DSS compliant payment processors (full card numbers are never stored by 367ph).
• Transaction history including deposit amounts, withdrawal requests, and wallet balances.

2.4 Gaming Activity Data

367ph records all gaming activity associated with your account, including game sessions, bet amounts, wager history, game results, bonus usage, and time spent on the platform. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data

When you access 367ph, we automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, session duration, pages visited, and referring URLs. This data is used for platform security, fraud detection, and service improvement.

2.6 Communications Data

If you contact 367ph support via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and regulatory audit purposes.

3. How We Collect Your Data

367ph collects personal data through the following means:

• Directly from you: Through account registration forms, KYC submission portals, deposit and withdrawal requests, support chat interactions, and promotional opt-in forms on the 367ph platform.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you access the 367ph website or mobile platform.
• From third-party service providers: Including payment processors (GCash, PayMaya, Visa/Mastercard networks), identity verification service providers, and fraud prevention partners, who may share data with 367ph as part of their service delivery.
• From regulatory bodies: 367ph may receive data from PAGCOR or other Philippine government agencies in connection with our compliance obligations.

4. How We Use Your Personal Data

367ph uses your personal data for the following purposes:

• Account Management: Creating and maintaining your 367ph account, verifying your identity, processing login authentication, and managing your preferences.
• Service Delivery: Operating the casino, sportsbook, bingo rooms, and all other games and features of the 367ph platform.
• Financial Transactions: Processing deposits via GCash, PayMaya, or bank transfer; processing withdrawal requests; and maintaining accurate financial records.
• Regulatory Compliance: Meeting our KYC, Anti-Money Laundering (AML), and reporting obligations under applicable Philippine gaming and financial regulations, including PAGCOR requirements.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, and abuse of the 367ph platform.
• Responsible Gaming: Monitoring gaming patterns to identify potentially problematic behavior, administering self-exclusion and limit tools, and complying with responsible gaming obligations.
• Customer Support: Responding to your inquiries, resolving disputes, and improving the quality of our support services.
• Marketing and Promotions: Sending promotional offers, bonus notifications, and platform updates where you have provided consent. You may withdraw marketing consent at any time by contacting 367ph support.
• Platform Improvement: Analyzing aggregate usage data to improve the performance, design, and content of the 367ph platform.

5. Legal Basis for Processing

367ph processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the 367ph Terms and Conditions, including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR directives, AML regulations, and NPC guidelines.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing and non-essential cookies, where your prior consent has been obtained.

6. Data Sharing and Disclosure

367ph does not sell your personal data to third parties. We may share your personal data with the following categories of recipients in the course of operating the 367ph platform:

• Payment processors: GCash (G-Xchange Inc.), PayMaya (Maya Bank), BPI, BDO, Metrobank, and Visa/Mastercard acquiring banks, strictly to process your financial transactions.
• Identity verification providers: Third-party KYC and biometric verification services used to fulfil our regulatory obligations.
• Gaming content providers: Game studios (such as PG Soft, Pragmatic Play, Jili, and others) whose software powers games on the 367ph platform may receive limited session and bet data necessary for game operation.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government bodies, where disclosure is required by law or court order.
• Fraud prevention and security services: Third-party providers that assist 367ph in detecting and preventing fraudulent activity.
• Professional advisers: Lawyers, auditors, and consultants bound by professional confidentiality obligations, where necessary for the operation and legal compliance of 367ph.

All third parties with whom 367ph shares personal data are contractually required to handle that data securely, use it only for the specified purpose, and comply with applicable Philippine data protection law.

7. Cookies and Tracking Technologies

The 367ph platform uses cookies and similar tracking technologies to enhance your experience and support platform operations. The categories of cookies used by 367ph include:

• Strictly necessary cookies: Required for basic platform functionality, including login session management, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, last game played, and display options to personalize your 367ph experience.
• Analytics cookies: Collect aggregated, anonymized data about how players use the 367ph platform to help us improve performance and content. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect fraudulent activity, suspicious login patterns, and account takeover attempts.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 367ph platform, including login persistence and game loading performance.

8. Data Retention

367ph retains your personal data for as long as your account remains active and for such additional periods as required by applicable Philippine law and regulation. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs are retained for a minimum of three (3) years.
• Customer support communications are retained for two (2) years from the date of the last interaction.
• Marketing data is retained until you withdraw consent or for a maximum of two (2) years of inactivity, whichever comes first.

Upon expiry of applicable retention periods, 367ph will securely delete or anonymize personal data in accordance with NPC guidelines.

9. Data Security

367ph implements robust technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 367ph servers.
• Encryption at rest for all stored personal and financial data.
• Access controls ensuring that only authorized 367ph personnel with a legitimate business need can access personal data.
• Regular security audits and penetration testing by independent cybersecurity specialists.
• PCI-DSS compliance for all payment card data handling.
• Multi-factor authentication requirements for all 367ph administrative systems.

10. Your Rights Under Philippine Data Privacy Law

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by 367ph:

• Right to be Informed: The right to know how your personal data is being collected, processed, and used by 367ph — as described in this Policy.
• Right of Access: The right to request a copy of the personal data 367ph holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by 367ph.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary or lawful, subject to our regulatory retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may withdraw marketing consent at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated. NPC contact details are available at the official NPC website.

To exercise any of these rights, please contact our Data Privacy Officer using the details in Section 13 of this Policy. 367ph will respond to all data subject requests within 15 business days of receipt, in accordance with NPC guidelines.

11. Children's Privacy

The 367ph platform is strictly restricted to individuals who are 21 years of age or older. 367ph does not knowingly collect personal data from individuals below the age of 21. If 367ph becomes aware that personal data has been collected from an individual below this age threshold, the account will be immediately closed, all funds will be forfeited in accordance with our Terms and Conditions, and the personal data will be deleted. If you believe a minor has registered on the 367ph platform, please contact our support team immediately.

12. Changes to This Privacy Policy

367ph may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, 367ph will notify registered players via their registered email address or mobile number and will display a prominent notice on the 367ph platform. The revised Policy will take effect on the date stated in the notice. Your continued use of the 367ph platform following the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how 367ph protects your personal data.

13. Contact and Data Privacy Officer

367ph has designated a Data Privacy Officer (DPO) as required under the Data Privacy Act of 2012. If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 367ph, please contact:

• Data Privacy Officer — 367ph
• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Data Privacy Request — [Your Full Name]"
• Live Chat: Available 24/7 on the 367ph platform in English and Tagalog.

367ph will acknowledge all data privacy requests within 3 business days and provide a substantive response within 15 business days, in compliance with NPC guidelines. For formal complaints regarding alleged data privacy violations, you may also contact the National Privacy Commission directly.