ph333y Privacy Policy

1 Overview & Scope

This Privacy Policy applies to all personal data collected, processed, stored, and used by ph333y ("we," "us," "our") in connection with the operation of the ph333y platform at ph333y.cam. It covers all players ("you," "your") who register for an account, access any ph333y service, or interact with the platform in any capacity, whether from Metro Manila, Cebu, Davao, or any other part of the Philippines.

This Policy applies to personal data collected through the ph333y website, any mobile-optimized versions of the site, in-app communications, email correspondence, live chat, and all other channels through which you interact with ph333y. It does not apply to third-party websites or services that may be linked from the ph333y platform.

ph333y acts as the personal information controller of the data described in this Policy. Where ph333y engages third-party service providers to process data on its behalf, those parties act as personal information processors under binding data processing agreements that impose equivalent data protection standards.

2 Personal Data We Collect

ph333y collects the minimum personal data necessary to operate a safe, compliant, and high-quality gaming platform for Filipino players. The categories of personal data we collect include, but are not limited to, the following:

2.1 Identity & Registration Data

• Full legal name as it appears on government-issued identification
• Date of birth (to verify the 21+ age requirement under Philippine gaming law)
• Gender
• Nationality and country of residence
• Username and password (stored in hashed, non-recoverable form)

2.2 Contact Data

• Registered mobile number (used for account verification, 2FA, and SMS alerts)
• Email address
• Residential address in the Philippines

2.3 Identity Verification (KYC) Data

• Copy or image of a valid government-issued Philippine ID (e.g., passport, SSS ID, PhilHealth ID, driver's license, national ID)
• Proof of residential address
• Source of funds documentation where required by applicable law or PAGCOR regulations
• Selfie or biometric verification image where required for account verification

2.4 Financial Data

• GCash mobile number and account details
• PayMaya account information
• Bank account details (BPI, BDO, Metrobank, or other Philippine bank)
• Transaction records including deposit amounts, withdrawal requests, dates, and payment method used

2.5 Gaming & Behavioral Data

• Game history, bet history, win and loss records
• Session duration and session timestamps
• Bonus and promotion usage history
• Responsible gaming tool activations (deposit limits, self-exclusion requests, cooling-off periods)

2.6 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Cookie identifiers and session tokens
• Referring URL and navigation paths within the ph333y platform

3 How We Collect Your Data

ph333y collects personal data through the following means:

• Directly from you — when you register for a ph333y account, complete KYC verification, deposit funds, withdraw winnings, contact support, or use any feature of the platform.
• Automatically through the platform — via cookies, session tracking, and server logs as you navigate and use ph333y.
• From payment service providers — including GCash and PayMaya, which may share transaction confirmation data with ph333y to verify deposits and process withdrawals.
• From identity verification services — where ph333y uses third-party KYC and AML screening tools to confirm player identity and assess risk in compliance with Philippine law.
• From regulatory and law enforcement authorities — in cases where disclosure is required or permitted under applicable Philippine law.

4 Purpose & Legal Basis for Processing

ph333y processes your personal data only for the specific purposes listed below, each of which is grounded in a lawful basis under the Data Privacy Act of 2012 and its implementing rules.

ph333y does not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human oversight, except where explicitly required by law.

5 Data Sharing & Disclosure

ph333y does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers (GCash, PayMaya, BPI, BDO, Metrobank) — to process deposits, withdrawals, and payment verifications on your ph333y account.
• Identity verification and KYC providers — engaged by ph333y to conduct identity checks, document verification, and AML screening as required by Philippine regulatory obligations.
• Game content providers — such as JILI, Pragmatic Play, and other licensed software suppliers, who may receive anonymized or pseudonymized session data to enable game delivery and report game-level RTP performance.
• Regulatory and law enforcement authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other relevant Philippine government agencies, where disclosure is required by law or court order.
• Internal technology and infrastructure providers — including cloud hosting, cybersecurity, and analytics vendors operating under binding data processing agreements with ph333y.
• Professional advisers — including legal counsel, auditors, and compliance advisers, under strict confidentiality obligations.

6 Cookies & Tracking Technologies

ph333y uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyze how players use our services. The following types of cookies are used on ph333y:

• Essential cookies: Required for the ph333y platform to function correctly. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without impacting platform functionality.
• Functional cookies: Used to remember your preferences, language settings, and game lobby configuration between sessions.
• Analytics cookies: Used to collect aggregated, anonymized data about how players navigate ph333y — which pages are visited most, session lengths, and feature usage — to help us improve the platform.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized account access, and bot traffic on ph333y.

By continuing to use ph333y after being presented with our cookie notice, you consent to the use of the cookies described above. You may manage cookie preferences through your browser settings; however, disabling essential cookies may prevent some ph333y features from functioning correctly.

7 Data Retention

ph333y retains personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable Philippine law, whichever is longer. The following retention periods apply as general guidelines:

• Account data and KYC records: Retained for a minimum of five (5) years following account closure, as required under Philippine anti-money laundering regulations.
• Transaction and financial records: Retained for a minimum of five (5) years in accordance with Republic Act 9160 (Anti-Money Laundering Act) requirements.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Gaming and betting history: Retained for five (5) years to facilitate dispute resolution and comply with PAGCOR audit requirements.
• Marketing preferences and consent records: Retained for as long as your account is active, plus one (1) year following closure.
• Technical logs and access data: Typically retained for twelve (12) months unless a longer period is required for security investigation purposes.

When personal data is no longer required for any lawful purpose, ph333y will securely delete or anonymize it in accordance with our internal data destruction policy and NPC guidance.

8 Data Security

ph333y implements technical, organizational, and administrative security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit Secure Socket Layer (SSL) encryption for all data transmitted between your device and ph333y servers.
• End-to-end encryption for sensitive data fields including payment credentials and KYC documents at rest.
• Role-based access controls ensuring that ph333y staff can only access personal data to the extent required for their specific function.
• Two-factor authentication (2FA) available for all ph333y player accounts as an additional layer of protection.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified cybersecurity professionals.
• Automatic session timeout to mitigate the risk of unauthorized access from unattended devices.
• Incident response protocols compliant with the NPC's mandatory personal data breach notification requirements under Circular 16-03.

In the event of a personal data breach that is likely to give rise to a real risk of serious harm to any ph333y player, ph333y will notify the National Privacy Commission and affected individuals within seventy-two (72) hours of becoming aware of the breach, in accordance with applicable Philippine data breach notification requirements.

9 Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ph333y:

To exercise any of the above rights, please contact ph333y's Data Protection Officer using the contact details in Section 13. ph333y will respond to all verified data subject requests within fifteen (15) business days. Where a request is complex or voluminous, we may extend this period by a further thirty (30) days with prior written notice to you.

If you are not satisfied with ph333y's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

10 Protection of Minors

ph333y does not knowingly collect personal data from persons under the age of twenty-one (21). If ph333y becomes aware that personal data has been collected from a minor, that account will be immediately suspended, any associated balances will be withheld pending investigation, and the personal data will be deleted in compliance with applicable law.

If you are a parent or guardian and believe that a minor under your care has created a ph333y account or accessed the platform, please contact our support team immediately using the contact details in Section 13. We will investigate promptly and take appropriate remedial action.

11 Third-Party Links

The ph333y platform may contain links to third-party websites, services, or resources. This Privacy Policy applies solely to personal data collected and processed by ph333y. ph333y is not responsible for the privacy practices, data handling, or content of any third-party website or service, including those operated by game content providers, payment processors, or other external parties.

We encourage you to review the privacy policies of any third-party service you access through or in connection with ph333y before providing them with your personal information.

12 Updates to This Privacy Policy

ph333y reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. When material changes are made, ph333y will notify registered players via their registered email address and/or by displaying a prominent notice on the Platform.

The date of the most recent revision is indicated at the top of this page. Your continued use of ph333y following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree to the revised Policy, please discontinue use of ph333y and contact our support team to close your account.

We recommend reviewing this Privacy Policy periodically to stay informed of how ph333y protects and manages your personal data.

13 Contact & Data Protection Officer

ph333y has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012 and NPC Circular 17-01. If you have any questions, concerns, or requests regarding this Privacy Policy or ph333y's data processing practices, you may contact us through the following channels: