phl333 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by phl333 in connection with your use of the phl333 online casino and sports betting platform, accessible at phl333.vip ("Platform"). It covers data collected through the Platform's website, account registration process, game sessions, customer support interactions, financial transactions, and any other channel through which you engage with phl333 services.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing regulations, phl333 acts as the Personal Information Controller in respect of personal data collected through the Platform. Where phl333 engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors and are bound by contractual data processing obligations consistent with applicable Philippine data protection law.

phl333 collects the following categories of personal data in the course of providing its services to registered players:

2.1 Registration and Identity Data

• Full legal name as it appears on government-issued identification;
• Date of birth (for age verification purposes, confirming 21+ eligibility);
• Philippine mobile number;
• Email address;
• Username and encrypted account password;
• Residential address (city and province level; required for KYC).

2.2 Identity Verification (KYC) Data

• Government-issued photo ID (e.g., PhilSys National ID, UMID, Philippine Passport, Driver's License);
• Selfie photograph taken during the verification process;
• Any additional documentation requested in support of enhanced due diligence procedures.

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment methods used (e.g., GCash wallet reference, BDO/BPI account holder name);
• Wallet balance history and transaction logs;
• Bonus and promotional activity records.

2.4 Gaming Activity Data

• Game session records including game type, wager amount, outcome, and session duration;
• Responsible gaming tool settings (deposit limits, session alerts, cooling-off periods);
• Self-exclusion status and records.

2.5 Technical and Device Data

• IP address and approximate geolocation at time of login;
• Device type, operating system, and browser version;
• Session identifiers and authentication tokens;
• Cookies and similar tracking technologies (see Section 8).

2.6 Communications Data

• Records of customer support interactions, including live chat transcripts and email correspondence;
• Complaint and dispute records;
• Marketing communication preferences and response data.

phl333 collects personal data through the following channels and mechanisms:

• Directly from you during account registration, KYC verification submission, deposit and withdrawal requests, customer support communications, and completion of responsible gaming tool settings;
• Automatically through the Platform via cookies, session tracking technologies, server logs, and device fingerprinting as you browse and interact with the Platform;
• From payment service providers such as GCash, Maya, BPI, BDO, and Metrobank, to the extent necessary to verify and reconcile your deposit and withdrawal transactions;
• From identity verification service providers engaged by phl333 to assist with KYC processes, where your submitted documents are reviewed through automated and/or manual verification systems;
• From fraud prevention and risk management services, where data about your device, IP address, and behavioral patterns is assessed for account security and anti-money laundering compliance purposes.

phl333 processes your personal data for the purposes and on the legal bases set out in the table below. Under the Philippine Data Privacy Act, processing is lawful where it is necessary for the performance of a contract to which you are a party, where it is required for compliance with a legal obligation, where it serves a legitimate interest of phl333 that is not overridden by your rights, or where you have given specific consent.

Where phl333 relies on your consent as the legal basis for processing — specifically for the sending of marketing communications — you may withdraw that consent at any time by updating your communication preferences in your Account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

phl333 does not sell, rent, or disclose your personal data to third parties for their own independent marketing or commercial purposes. Personal data may be shared in the following circumstances only:

5.1 Service Providers (Personal Information Processors)

phl333 engages trusted third-party service providers to support its operations, including payment processing partners (GCash, Maya, BPI, BDO, Metrobank, Coins.ph), identity verification services, cloud infrastructure providers, fraud prevention platforms, and customer support tools. These providers process your data strictly on phl333's instructions and under contractual data processing agreements that impose data protection obligations consistent with applicable law.

5.2 Regulatory and Law Enforcement Authorities

phl333 may be required to disclose personal data to government authorities, law enforcement agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or courts of competent jurisdiction where such disclosure is required or permitted by Philippine law, including compliance with Anti-Money Laundering Act (Republic Act No. 9160, as amended) obligations.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of phl333's business or assets, personal data held by phl333 may be transferred to the relevant successor entity, subject to that entity's commitment to honour the terms of this Privacy Policy or a substantially equivalent policy. Affected players will be notified of any such transfer in advance.

Some of phl333's third-party service providers — including certain cloud infrastructure, analytics, and game software providers — may process or store data on servers located outside the Philippines. Where personal data is transferred to jurisdictions that do not provide a level of data protection equivalent to Philippine law, phl333 implements appropriate safeguards, including contractual clauses requiring the recipient to process the data in accordance with standards consistent with the Data Privacy Act of 2012.

By using the phl333 platform and submitting personal data, you acknowledge that your data may be transferred to and processed in countries outside the Philippines in accordance with the safeguards described in this section.

phl333 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations;
• KYC identity documents: Retained for a minimum of five (5) years from the date of verification, as required under Republic Act No. 9160 (Anti-Money Laundering Act);
• Transaction records: Retained for a minimum of five (5) years following each transaction date;
• Game session records: Retained for a minimum of three (3) years from the date of each session;
• Customer support communications: Retained for three (3) years from the date of the last communication in each support case;
• Marketing data: Retained until you withdraw consent or for two (2) years of inactivity, whichever occurs first.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized so that it can no longer be associated with an identifiable individual, unless retention for a longer period is required or permitted by law.

phl333 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyze how players interact with the site. Cookies are small text files stored on your device by your browser when you visit the Platform.

The following categories of cookies are used on the phl333 platform:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These enable core functions such as maintaining your login session, loading game content, and processing transactions. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences (such as language settings and game lobby sort order) to improve your experience on subsequent visits.
• Analytics Cookies: Collect anonymized data about how players navigate and interact with the Platform, enabling phl333 to identify technical issues and improve the user experience. Analytics data is aggregated and does not identify individual players.
• Security Cookies: Used for device fingerprinting and session integrity purposes to detect unauthorized access attempts and suspicious login behavior.

phl333 implements a range of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and phl333 servers;
• Encrypted storage of passwords using industry-standard hashing algorithms — phl333 cannot view your account password in plaintext;
• Multi-factor authentication (OTP via SMS) for account login from new or unrecognized devices;
• Access controls restricting internal access to personal data on a strict need-to-know basis;
• Regular security assessments and vulnerability monitoring;
• Session management controls including automatic logout for inactive sessions.

No data transmission or storage system can be guaranteed to be 100% secure. In the event of a security incident affecting your personal data, phl333 will follow the breach response procedures described in Section 6 of this Policy and notify affected individuals and the National Privacy Commission as required by law.

The phl333 platform is strictly restricted to individuals aged 21 years and above, consistent with Philippine regulations governing access to gambling and casino-style gaming activities. phl333 does not knowingly collect personal data from individuals under the age of 21.

phl333 conducts age verification during the registration process and as part of KYC procedures. Any deliberate circumvention of age verification controls constitutes a breach of the phl333 Terms and Conditions and may be referred to relevant authorities.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phl333. To exercise any of these rights, please contact our Data Protection Officer through the channels set out in Section 15.

phl333 will respond to valid data subject requests within the timeframe prescribed by applicable law, typically within fifteen (15) business days of receipt of a verifiable request.

With your consent, phl333 may send you marketing communications regarding promotions, bonuses, new games, VIP offers, and other platform news via SMS, email, or in-platform notification. Your consent to receive marketing communications is obtained during account registration and can be updated at any time through your Account settings.

You may opt out of marketing communications at any time by: (a) updating your notification preferences in your phl333 Account dashboard; (b) clicking the unsubscribe link in any marketing email; or (c) contacting phl333 support directly. Opting out of marketing communications will not affect the delivery of transactional messages (such as deposit confirmations, withdrawal notifications, and OTP codes) that are necessary for account operation.

The phl333 platform may contain references to third-party services, including payment providers and game software suppliers. Where you interact with third-party services (such as initiating a GCash payment through that provider's own interface), your data is processed by that third party under their own privacy policies, which are separate from and independent of this Privacy Policy.

phl333 is not responsible for the privacy practices or data handling procedures of third-party service providers. We encourage you to review the privacy policies of any third-party services you use in connection with your phl333 account, particularly your chosen payment provider's privacy documentation.

phl333 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or operational procedures. The effective date at the top of this Policy indicates when the current version was last updated.

Where changes to this Policy are material — meaning they significantly affect your rights or the way we handle your personal data — phl333 will notify registered players by email or in-platform notification at least fourteen (14) days before the changes take effect. Your continued use of the phl333 platform following the effective date of any updated Policy constitutes acceptance of the revised terms.

We recommend reviewing this Privacy Policy periodically to stay informed about how phl333 protects and handles your personal data. The most current version of this Policy is always available on the phl333 website at phl333.vip/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by phl333, you may contact us through the following channels:

• Live Chat: Available 24/7 inside your phl333 Account dashboard — for general privacy queries and straightforward data subject requests, this is the fastest channel.
• Email (Data Privacy): [email protected] — Please include "Privacy Request" in the subject line along with your registered Account username. Allow up to fifteen (15) business days for a formal response to data subject requests.

For formal data subject right requests — including requests to access, correct, delete, or restrict processing of your personal data — please submit your request in writing to the email address above. phl333 may request proof of identity before processing requests to ensure data subject rights are exercised by the correct individual.