ph233 Privacy Policy

1. Overview & Scope

ph233 ("ph233," "we," "us," or "our") operates an online casino and sports betting platform licensed under the regulatory framework of the Philippine Amusement and Gaming Corporation ("PAGCOR"). In the course of providing our services to Filipino players across the Philippines — from Metro Manila and Cebu to Davao and every province in between — we process personal data as a necessary part of platform operations.

This Privacy Policy ("Policy") governs the collection, use, disclosure, storage, and protection of personal data processed by ph233 in connection with all platform services, including but not limited to: account creation and management, identity verification (KYC), financial transactions via GCash, PayMaya, BPI, BDO, and Metrobank, gaming activity across all game categories, customer support communications, and any marketing activities directed at registered Users.

This Policy is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). It is also consistent with PAGCOR's data governance requirements as applicable to licensed online gaming operators.

2. Data Controller

ph233 acts as the Personal Information Controller ("PIC") for all personal data processed through the ph233 platform. As PIC, ph233 determines the purposes for which personal data is processed and the means by which it is processed, in accordance with the DPA and PAGCOR regulations.

ph233 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and the DPA. Contact details for the DPO are provided in Section 15 of this Policy. Players may address data privacy concerns, requests, or complaints directly to the DPO.

3. Personal Data We Collect

3.1 Identity and Contact Data

• Full legal name as appearing on Philippine government-issued identification;
• Date of birth and age verification information;
• Philippine residential address;
• Philippine mobile number (Smart, Globe, or DITO);
• Email address;
• Government-issued ID numbers (PhilSys, UMID, Driver's License, SSS/GSIS, Voter's ID, or Passport);
• Selfie or biometric photograph submitted for KYC verification.

3.2 Financial Data

• GCash or PayMaya mobile wallet numbers linked to your account;
• BPI, BDO, or Metrobank account details (where provided for withdrawal processing);
• Deposit and withdrawal transaction history;
• Account balance and bonus credit records.

3.3 Gaming Activity Data

• Game session logs including game type, duration, wager amounts, and outcomes;
• Sports betting selection history and settlement records;
• Bonus utilization and wagering requirement progress;
• Responsible gaming tool settings (deposit limits, session alerts, self-exclusion status).

3.4 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session timestamps and login history;
• Cookie identifiers and analytics data (see Section 8).

3.5 Communications Data

• Customer support chat transcripts and email correspondence;
• Responses to surveys or feedback requests;
• Marketing communication preferences and opt-out records.

4. How We Collect Your Data

ph233 collects personal data through the following methods:

• Direct provision — information you submit during account registration, KYC verification, deposit and withdrawal requests, or customer support interactions;
• Automated collection — technical data collected automatically through your use of the Platform, including cookies, log files, and session tracking systems;
• Third-party verification — identity and age verification data obtained through licensed KYC service providers and government ID verification systems in compliance with PAGCOR requirements;
• Payment processors — transaction confirmation data received from GCash, PayMaya, and Philippine banking institutions when you make deposits or withdrawals;
• Regulatory sources — data received from PAGCOR or other competent Philippine government authorities as required by our operating license.

5. Legal Basis for Processing

ph233 processes your personal data on the following legal grounds under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our contractual obligations to you as a registered ph233 player, including account management, game delivery, and payment processing;
• Legal obligation — processing required to comply with PAGCOR licensing conditions, Republic Act No. 9160 (Anti-Money Laundering Act), the DPA, NPC issuances, and other applicable Philippine laws;
• Legitimate interests — processing for fraud prevention, security monitoring, platform improvement, and responsible gaming compliance, where our legitimate interests are not overridden by your rights;
• Consent — processing for optional marketing communications, where you have provided explicit, informed consent that may be withdrawn at any time.

6. How We Use Your Personal Data

ph233 uses your personal data for the following purposes:

• Creating and managing your ph233 account, including login authentication and account security;
• Conducting mandatory identity and age verification (KYC) as required by PAGCOR;
• Processing deposits and withdrawals via GCash, PayMaya, and Philippine bank accounts;
• Delivering gaming services, settling wagers, and maintaining accurate game and transaction records;
• Administering bonuses, promotions, and loyalty program benefits;
• Providing customer support in English and Filipino (Tagalog);
• Detecting and preventing fraud, money laundering, bonus abuse, and unauthorized account access;
• Complying with PAGCOR reporting obligations and anti-money laundering transaction reporting requirements;
• Enforcing responsible gaming measures including deposit limits, cool-off periods, and self-exclusion;
• Improving platform performance, user experience, and game offerings through aggregated analytics;
• Sending marketing communications where you have provided consent (opt-out available at any time).

7. Data Sharing and Disclosure

ph233 may share your personal data with the following categories of recipients:

7.1 Regulatory and Government Authorities

ph233 is required by law to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is mandated by our operating license or applicable law. ph233 will not notify you of such disclosures where prohibited by law from doing so.

7.2 Service Providers

ph233 engages licensed third-party service providers who process personal data on our behalf as Personal Information Processors ("PIPs") under Data Processing Agreements consistent with the DPA. These include KYC and identity verification providers, payment gateway operators (GCash, PayMaya, and banking partners), IT infrastructure and hosting providers, fraud detection systems, and customer support platforms. All PIPs are contractually required to process data only as instructed by ph233 and to maintain security standards consistent with the DPA.

7.3 Game Providers

Third-party game providers (including JILI, PG Soft, Pragmatic Play, and others) may receive limited session data necessary to deliver game content and calculate outcomes. Game providers receive only the minimum data required for game delivery and are prohibited from using ph233 player data for any independent purpose.

7.4 Legal Proceedings

ph233 may disclose your personal data where required by court order, subpoena, or other binding legal process issued by a competent Philippine authority.

8. Cookies and Tracking Technologies

ph233 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies — required for Platform functionality including session management, login authentication, and security. These cannot be disabled without affecting Platform access;
• Performance cookies — aggregate analytics data used to understand how players navigate the Platform and to improve performance. No individually identifiable information is collected through performance cookies;
• Preference cookies — used to remember your Platform settings and language preferences;
• Security cookies — used for fraud detection, bot prevention, and account security monitoring.

ph233 does not use third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings; however, disabling essential cookies will affect your ability to use the Platform.

9. Data Retention

ph233 retains personal data for the periods specified below, after which data is securely deleted or anonymized:

• Account and KYC data — retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and Philippine anti-money laundering law;
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, consistent with the Anti-Money Laundering Act requirements;
• Gaming activity logs — retained for two (2) years from the date of each gaming session;
• Customer support communications — retained for two (2) years from the date of the interaction;
• Marketing consent records — retained for the duration of consent plus two (2) years following withdrawal of consent.

Where a legal dispute, regulatory investigation, or law enforcement matter is ongoing, ph233 may retain relevant data beyond the standard retention periods until the matter is fully resolved.

10. Data Security

ph233 implements technical, organizational, and procedural security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph233's servers;
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication for all ph233 internal system access;
• Regular third-party security audits and penetration testing;
• Automated anomaly detection and fraud monitoring systems;
• Physical access controls at all data processing facilities.

In the event of a personal data breach that is likely to result in serious harm to affected individuals, ph233 will notify the National Privacy Commission within 72 hours of discovering the breach, and will notify affected individuals without undue delay, consistent with the requirements of the DPA and NPC Circular No. 16-03.

11. Your Data Privacy Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by ph233:

• Right to be informed — the right to know what personal data ph233 collects, why it is collected, and how it is used;
• Right to access — the right to request a copy of the personal data ph233 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations;
• Right to data portability — the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to object — the right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to withdraw consent — the right to withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission (NPC) if you believe ph233 has violated your data privacy rights.

To exercise any of the above rights, contact ph233's Data Protection Officer using the details in Section 15. ph233 will respond to all data subject requests within thirty (30) days. Some rights may be subject to limitations where processing is required by PAGCOR regulatory obligations or Philippine law.

12. Children's Privacy and Minors

If you are a parent or guardian and believe that a minor has accessed ph233 or provided personal data to ph233 without your knowledge, please contact ph233 customer support or the DPO immediately so that appropriate action can be taken.

13. Cross-Border Data Transfers

Some of ph233's service providers and game content partners operate infrastructure located outside the Philippines. Where personal data is transferred to recipients in other countries, ph233 ensures that such transfers are subject to appropriate safeguards consistent with the DPA and NPC requirements, including:

• Binding Data Processing Agreements requiring overseas PIPs to maintain privacy and security standards equivalent to Philippine DPA requirements;
• Transfer to jurisdictions recognized by the NPC as providing adequate data protection;
• Standard Contractual Clauses approved or recognized by the NPC where other safeguards are insufficient.

ph233 does not transfer personal data to countries or entities that cannot demonstrate adequate data protection safeguards consistent with the DPA.

14. Policy Updates

ph233 may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, applicable law, or NPC guidance. Material changes will be communicated to registered Users via email notification or prominent in-platform notice at least seven (7) days before taking effect, except where immediate changes are required by law or regulatory direction.

The date of the most recent update is stated at the top of this Policy. We encourage you to review this Policy periodically. Continued use of the ph233 platform following notification of changes constitutes acknowledgment of the updated Policy.

15. Contact & Data Protection Officer

For any questions, requests, or complaints regarding this Privacy Policy or ph233's personal data processing practices, please contact:

If you are dissatisfied with ph233's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC) through NPC's official channels.