367ph Privacy
Policy

This Privacy Policy ("Policy") sets out how 367ph, operating through the website 367ph.org ("the Platform," "we," "us," or "our"), collects, processes, stores, shares, and protects the personal data of individuals who register for an account, access the Platform, or otherwise interact with 367ph's services.

367ph operates in compliance with the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the National Privacy Commission's issuances, and all applicable PAGCOR data handling directives. This Policy applies to all personal data collected from players and visitors located in or accessing the Platform from within the Philippines, as well as any personal data processed in connection with the provision of 367ph's services.

By registering a 367ph account, depositing funds, playing any game on the Platform, or continuing to browse 367ph.org after being presented with this Policy, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to this Policy, you must cease using the Platform immediately.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 367ph is the personal information controller responsible for your personal data collected and processed in connection with the Platform and services described in this Policy.

367ph has designated a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing 367ph's data protection compliance program, handling data subject rights requests, and acting as the primary point of contact with the National Privacy Commission (NPC) of the Philippines.

Contact details for 367ph's Data Protection Officer and general privacy inquiries are set out in Section 16 of this Policy.

367ph collects personal data through multiple channels during the course of your relationship with the Platform. The categories of personal data we collect, and the primary source of each, are set out in the table below:

367ph does not intentionally collect sensitive personal information (as defined under Section 3(l) of RA 10173) except where expressly required for regulatory compliance — for example, government ID numbers collected as part of the mandatory KYC process. Such sensitive data is subject to enhanced security controls and access restrictions within 367ph's systems.

367ph processes your personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The legal bases upon which 367ph relies are:

• Contractual Necessity: Processing that is necessary to enter into and perform the contract between you and 367ph — including account creation, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with 367ph's legal obligations under Philippine law, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, KYC and age verification requirements, and tax reporting.
• Consent: Processing for purposes beyond contractual necessity or legal obligation, such as marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legitimate Interests: Processing for 367ph's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided that such processing does not override your fundamental rights and freedoms.

367ph uses your personal data for the following specific purposes, each supported by the legal basis identified in Section 4:

• Account Management: To create and maintain your 367ph account, verify your identity, authenticate your login sessions, and manage your account preferences and settings.
• Service Delivery: To provide access to games, process bets and payouts, credit winnings, and deliver the full suite of 367ph platform services.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, and other supported Philippine payment methods, and to maintain accurate financial records of all transactions.
• KYC and Regulatory Compliance: To verify your age (21+), confirm your identity, conduct anti-money laundering checks, and fulfill all reporting obligations to PAGCOR and other relevant Philippine regulatory authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, collusion, and other conduct prohibited by the 367ph Terms and Conditions.
• Responsible Gaming: To monitor gameplay patterns for indicators of problematic gambling behavior and to administer deposit limits, session controls, self-exclusion measures, and other responsible gaming tools at your request or in accordance with our regulatory obligations.
• Customer Support: To respond to your inquiries, investigate account disputes, process complaints, and provide ongoing support in English and Tagalog.
• Platform Improvement: To analyze usage patterns and player behavior data (in aggregated, anonymized form where possible) to improve the 367ph platform, game selection, and user experience.
• Marketing: To send promotional communications, bonus offers, and platform updates where you have consented to receive such communications.

367ph will not use your personal data for any purpose materially different from those listed above without first providing you with notice and, where required, obtaining your consent.

367ph uses cookies and similar tracking technologies on the Platform to support essential functionality, improve performance, and where you have consented, to personalize your experience and measure marketing effectiveness.

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens, security cookies, and load balancing cookies. These cannot be disabled without preventing Platform use.
• Functional Cookies: Used to remember your preferences, such as language settings, last-played game, and lobby layout. These improve your 367ph experience but are not essential to Platform operation.
• Analytics Cookies: Used to collect anonymized data about how players use the Platform, which pages are visited most frequently, and where navigation errors occur. This data is used solely to improve the Platform. Deployed only with your consent.
• Marketing Cookies: Used to measure the effectiveness of 367ph promotional campaigns and to serve relevant offers to consenting players. Deployed only with your explicit consent.

You may manage your cookie preferences through your browser settings or, for consent-based cookies, through the cookie preference center accessible on the Platform. Note that disabling strictly necessary cookies will impair your ability to use 367ph.

367ph does not sell your personal data to any third party under any circumstances. Your data is shared only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Game Content Providers: Licensed game providers (including but not limited to Evolution Gaming, JILI, PG Soft, and Pragmatic Play) receive anonymized session tokens necessary to deliver games to your browser. These providers do not receive your personal identity data or payment details.
• Payment Processors: Philippine e-wallet and banking infrastructure providers (including GCash and Maya) receive transaction data strictly necessary to process your deposit and withdrawal requests. All payment data shared with these providers is tokenized.
• KYC Verification Providers: Identity document verification is conducted by certified third-party providers operating under data processing agreements with 367ph. These providers process your documents solely for verification purposes and are contractually prohibited from using your data for any other purpose.
• Regulatory Authorities: 367ph is required to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory authorities where legally required or upon lawful request. 367ph will notify you of such disclosures where permitted by law to do so.
• Legal and Law Enforcement: Where required by court order, valid legal process, or to protect the rights and safety of 367ph, its players, or the public.

Some of 367ph's third-party service providers — including game platform infrastructure providers and cloud hosting services — may be located outside of the Philippines. Where personal data is transferred to recipients in jurisdictions outside the Philippines, 367ph ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under RA 10173.

Safeguards used by 367ph for international data transfers include:

• Standard contractual clauses approved by the National Privacy Commission of the Philippines.
• Data processing agreements incorporating the applicable provisions of RA 10173 and its Implementing Rules.
• Transfers only to jurisdictions that have been assessed to provide an adequate level of data protection.

You may request further information about the specific safeguards applied to international data transfers involving your personal data by contacting 367ph's Data Protection Officer as described in Section 16.

367ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your browser or device and the 367ph Platform is encrypted using TLS 1.3 protocol. This applies to login sessions, payment data, gameplay data, and all support communications.
• Encryption at Rest: Sensitive personal data and KYC documents stored on 367ph servers are encrypted at rest using AES-256 encryption standards.
• Password Security: Player passwords are never stored in plain text. 367ph uses industry-standard one-way hashing with salt to ensure that passwords cannot be recovered even in the event of unauthorized database access.
• Access Controls: Access to personal data within 367ph's internal systems is governed by role-based access controls. Only personnel with a documented operational need may access player personal data, and all such access is logged and audited.
• KYC Document Isolation: Identity documents submitted for KYC verification are stored on isolated, access-restricted servers that are logically separated from the main gameplay and transactional systems.
• Security Audits: 367ph conducts regular internal and third-party security assessments, penetration testing, and vulnerability scanning to identify and address potential security weaknesses.
• Incident Response: 367ph maintains a documented data breach response plan. In the event of a personal data breach, 367ph will notify affected players and the National Privacy Commission in accordance with the timeframes and procedures required by RA 10173 and the NPC's Circular on Personal Data Breach Management.

Notwithstanding the security measures described above, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. You accept residual security risk inherent in internet-based services when using the 367ph Platform.

367ph retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:

• Active Account Data: Retained for the duration of your active 367ph account relationship.
• Post-Closure Account Data: Following account closure, core account and transaction records are retained for a minimum of 5 years in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act.
• KYC Identity Documents: Retained for the same minimum 5-year post-closure period and then securely destroyed or anonymized.
• Support Communications: Chat and email support transcripts are retained for 2 years from the date of the interaction, or longer where relevant to an ongoing dispute or investigation.
• Technical and Log Data: Server logs and IP data are retained for 12 months from collection for security and fraud investigation purposes.
• Marketing Consent Records: Opt-in consent records are retained for as long as we send you marketing communications plus 2 years thereafter as evidence of consent.

When personal data is no longer required, 367ph ensures it is securely deleted, anonymized, or otherwise rendered unrecoverable in accordance with our documented data destruction procedures.

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by 367ph. You may exercise any of these rights by contacting our Data Protection Officer as described in Section 16:

367ph will respond to all verified data subject rights requests within 15 business days from the date of receipt. Requests that are complex or involve large volumes of data may require an extension, in which case 367ph will notify you of the extended timeline within the initial 15-day window.

367ph's services are strictly intended for individuals aged 21 years and older, in accordance with PAGCOR's age restriction requirements for online casino and sports betting services in the Philippines. 367ph does not knowingly collect, process, or retain personal data from individuals under the age of 21.

Age verification is conducted as part of the 367ph registration process and again at the KYC verification stage. Any account found to have been created by an individual under 21 years of age will be immediately closed, all associated data deleted (subject to any legal retention obligations), and any funds in the account dealt with in accordance with 367ph's Terms and Conditions.

367ph sends promotional emails, SMS messages, and in-platform notifications to players who have provided explicit consent to receive such communications. Marketing consent is obtained at registration and can be updated at any time through your 367ph account settings.

You may opt out of any or all marketing communications at any time by:

• Logging into your 367ph account and updating your communication preferences in the account settings section.
• Clicking the "Unsubscribe" link included in every marketing email sent by 367ph.
• Replying "STOP" to any promotional SMS message received from 367ph.
• Contacting 367ph's customer support team via live chat or email and requesting removal from all marketing lists.

Opt-out requests are processed within 48 hours. Following an opt-out, you may still receive transactional communications related to your account (such as payment confirmations, security alerts, and KYC notifications), as these are not marketing communications and are sent on the basis of contractual necessity.

Players who have exercised self-exclusion from the 367ph Platform in accordance with the responsible gaming tools will have all marketing communications suspended immediately and will not be targeted with any promotional materials for the duration of their self-exclusion period.

The 367ph Platform may contain references to or integrations with third-party services — including licensed game providers, payment infrastructure, and live streaming platforms for sabong and live casino content. 367ph is not responsible for the privacy practices of these third parties, and this Policy does not apply to any data collected directly by third-party services.

Where you interact with a third-party service that is integrated within the 367ph Platform (for example, a live dealer game hosted by Evolution Gaming), your interaction with that service is also subject to the privacy policy of the relevant third-party provider. 367ph recommends that you review the privacy policies of any third-party service providers whose services you access through the 367ph Platform.

367ph exercises due diligence in selecting third-party service partners, requiring all processors of personal data on 367ph's behalf to operate under data processing agreements that mandate compliance with RA 10173 standards.

367ph may update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The most current version of this Policy will always be accessible at 367ph.org/privacy-policy, with the effective date displayed prominently at the top of the page.

For material changes — those that significantly affect how your personal data is collected, used, or shared — 367ph will provide advance notice via:

• An email or SMS notification to your registered 367ph contact details.
• A prominent notice within the Platform visible on your next login session.

Continued use of the 367ph Platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and request account closure before the effective date of the amendment.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 367ph, please contact us through the following channels:

367ph is committed to resolving all privacy inquiries promptly and fairly. We aim to acknowledge receipt of all privacy requests within 2 business days and to provide a substantive response within 15 business days of receiving a verified request.