1
Introduction
This Privacy Policy ("Policy") describes how ph399 ("ph399," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of players and visitors ("you" or "your") who access or use the ph399 online casino platform at ph399.club and any associated mobile applications or services.
ph399 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC).
This Privacy Policy should be read alongside the ph399
Terms & Conditions. By registering a ph399 account or using the ph399 platform, you acknowledge that you have read and understood this Policy.
If you have any questions about how ph399 handles your personal data, please contact our Data Protection Officer (DPO) using the details provided in Section 14 of this Policy.
2
Data Controller
For the purposes of the Philippine Data Privacy Act of 2012, ph399 acts as the Personal Information Controller (PIC) in respect of the personal data collected through the ph399 platform. ph399 determines the purposes and means of processing your personal information.
ph399 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the ph399 DPO at any time using the contact details set out in Section 14 of this Policy.
3
Personal Data We Collect
ph399 collects the following categories of personal data from players and platform visitors:
Identity & Contact Data:
- Full legal name
- Date of birth
- Philippine mobile number
- Email address
- Residential address (province, city/municipality)
- Government-issued ID details (for KYC verification purposes)
Financial Data:
- GCash or Maya account number (for payment processing)
- Philippine bank account details (for bank transfer transactions)
- Transaction history (deposits, withdrawals, and game wagers)
Technical & Usage Data:
- IP address and approximate geolocation
- Device type, operating system, and browser information
- Platform usage data (pages visited, games played, session duration)
- Login timestamps and access logs
Communications Data:
- Records of communications with ph399 customer support (live chat transcripts, email correspondence)
- Feedback and survey responses
ph399 does not collect sensitive personal information (as defined under the DPA 2012) such as health data, religious beliefs, or political affiliations, except where strictly required by law (e.g., responsible gaming assessments).
4
How We Collect Your Data
ph399 collects personal data through the following means:
- Direct Collection: Information you provide when registering a ph399 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
- Automated Collection: Technical and usage data collected automatically when you access the ph399 platform, including through cookies, web beacons, and server logs. See Section 8 for more details on cookies.
- Third-Party Sources: Identity verification data from KYC service providers; payment data from GCash, Maya, and Philippine banking partners; fraud prevention data from third-party risk management services.
- PAGCOR & Regulatory Sources: Information received from PAGCOR or other Philippine regulatory authorities
in connection with licensing, compliance, or regulatory investigations.
5
How We Use Your Data
ph399 uses your personal data for the following purposes:
- Account Management: To register and maintain your ph399 player account, verify your identity and age (21+), and manage your account settings and preferences.
- Service Delivery: To provide access to ph399 games, process deposits and withdrawals in Philippine Peso (PHP / ₱), and deliver customer support services.
- Legal & Regulatory Compliance: To comply with PAGCOR licensing requirements, Philippine anti-money laundering (AML) laws, the DPA 2012, and any other applicable Philippine legislation.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the ph399 platform.
- Responsible Gaming: To monitor gameplay patterns and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
- Platform Improvement: To analyze usage patterns, troubleshoot technical issues, and improve the features, performance, and user experience of the ph399 platform.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications. You may withdraw consent at any time through your account settings.
- Dispute Resolution: To investigate and resolve complaints, disputes, or legal claims arising from your use of the ph399 platform.
ph399 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by the DPA 2012.
6
Legal Basis for Processing
ph399 processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:
- Contractual Necessity: Processing is necessary to perform the contract between you and ph399 — specifically, to provide the ph399 gaming service, process transactions, and manage your player account.
- Legal Obligation: Processing is required to comply with ph399's legal and regulatory obligations under Philippine law, including PAGCOR licensing conditions, AML regulations, and tax reporting requirements.
- Legitimate Interests: Processing is necessary for ph399's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, platform security, and service improvement — provided these interests are not overridden by your rights and freedoms.
- Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — ph399 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
7
Data Sharing & Disclosure
ph399 does not sell, rent, or trade your personal data to third parties. ph399 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
- Payment Processors: GCash, Maya, and Philippine banking partners, for the purpose of processing deposits and withdrawals in PHP.
- KYC & Identity Verification Providers: Third-party service providers engaged to verify your identity and age in compliance with PAGCOR requirements and AML regulations.
- IT & Platform Service Providers: Cloud hosting, data storage, cybersecurity, and platform infrastructure providers who process data on ph399's behalf under strict data processing agreements.
- Game Content Providers: Licensed game studios and software providers whose games are available on the ph399 platform, to the extent necessary for game delivery and fairness auditing.
- Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or court order.
- Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by ph399, subject to professional confidentiality obligations.
All third-party service providers engaged by ph399 are required to process personal data only on ph399's documented instructions and to implement appropriate technical and organizational security measures.
Cross-Border Data Transfers: Where ph399 transfers personal data outside the Philippines (e.g., to cloud infrastructure providers), ph399 ensures that appropriate safeguards are in place as required by the DPA 2012 and NPC regulations, including contractual data transfer agreements that provide an equivalent level of data protection.
8
Cookies & Tracking Technologies
ph399 uses cookies and similar tracking technologies on the ph399 platform to enhance your user experience, maintain session security, and analyze platform usage. The following types of cookies are used:
- Strictly Necessary Cookies: Essential for the operation of the ph399 platform, including maintaining your login session and ensuring platform security. These cookies cannot be disabled.
- Functional Cookies: Used to remember your preferences (such as language settings and game display options) to provide a more personalized experience.
- Analytics Cookies: Used to collect aggregated, anonymized data about how players use the ph399 platform, helping us identify areas for improvement. These cookies are only set with your consent.
- Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of ph399 marketing campaigns. These cookies are only set with your explicit consent.
You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ph399 platform. For strictly necessary cookies, no consent is required as they are essential to the service.
9
Data Security
ph399 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the ph399 platform.
- Encryption of sensitive stored data, including account credentials and financial information.
- Role-based access controls limiting ph399 staff access to personal data on a strict need-to-know basis.
- Regular security assessments, penetration testing, and vulnerability scanning of ph399 systems.
- Two-factor authentication (2FA) options for player accounts.
- Comprehensive incident response procedures for detecting, containing, and reporting personal data breaches.
While ph399 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. ph399 cannot guarantee absolute security but is committed to promptly addressing any security incidents that may arise.
10
Data Retention
ph399 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:
- Active Account Data: Retained for the duration of your ph399 account and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AML regulations.
- Transaction Records: Financial transaction records are retained for a minimum of five (5) years as required by the Anti-Money Laundering Act of 2001 (RA 9160, as amended).
- KYC & Identity Verification Documents: Retained for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
- Customer Support Records: Retained for three (3) years following the resolution of the relevant support interaction.
- Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent given.
Upon expiry of the applicable retention period, ph399 will securely delete or anonymize your personal data in accordance with its data disposal procedures.
11
Your Data Privacy Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph399:
- Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
- Right of Access: The right to request a copy of the personal data ph399 holds about you, along with information about how it is being processed.
- Right to Rectification: The right to request correction of any inaccurate or incomplete personal data ph399 holds about you.
- Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph399's legal retention obligations.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
- Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on ph399's legitimate interests.
- Right to Restrict Processing: The right to request that ph399 restrict the processing of your personal data in certain circumstances.
- Right to Damages: The right to claim compensation for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
To exercise any of these rights, please contact the ph399 Data Protection Officer using the details in Section 14. ph399 will respond to all verified data subject requests within thirty (30) days of receipt, as required by the DPA 2012.
ph399 may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties. You will not be charged a fee for exercising your data privacy rights in most circumstances.
12
Children's Privacy
The ph399 platform is strictly intended for adults aged 21 years and above, in accordance with the minimum legal gambling age in the Philippines as set by PAGCOR. ph399 does not knowingly collect personal data from individuals under the age of 21.
If ph399 becomes aware that personal data has been collected from a person under the age of 21, ph399 will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered a ph399 account, please contact our support team immediately.
ph399 employs mandatory age verification checks during the registration process and reserves the right to request government-issued ID at any time to confirm that a player meets the 21+ age requirement.
13
Changes to This Privacy Policy
ph399 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this Policy.
Where changes to this Policy are material, ph399 will notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the ph399 platform following notification of any changes constitutes your acceptance of the revised Privacy Policy.
ph399 encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected.
14
Contact Us & NPC Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or ph399's handling of your personal data, please contact the ph399 Data Protection Officer:
ph399 will acknowledge all privacy-related inquiries within five (5) business days and will endeavor to resolve them within thirty (30) days of receipt.
Right to Lodge a Complaint: If you are not satisfied with ph399's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012. Contact details for the NPC are available through official Philippine government channels.