Privacy Policy – ph388 Online Gaming Platform
ph388 is committed to protecting the personal data of every Filipino player who uses our platform. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have as a ph388 Member.
Table of Contents
- Scope & Who We Are
- Information We Collect
- How We Collect Your Information
- Legal Basis for Processing
- How We Use Your Information
- Sharing & Disclosure of Information
- Cookies & Tracking Technologies
- Data Retention
- Data Security
- Your Rights as a Data Subject
- Children & Minors
- Changes to This Privacy Policy
- Contact Us
1. Scope & Who We Are
This Privacy Policy applies to the ph388 platform accessible at ph388.vip and all associated services, including the sports betting, live casino, slots, bingo, and any other gaming or account-management features made available to Members through the Platform.
ph388 operates as the data controller responsible for the personal data you provide when registering and using the ph388 platform. ph388 operates within the PAGCOR regulatory framework applicable to Philippine-market online gaming. As a PAGCOR-regulated operator, ph388 is subject to applicable Philippine data privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations (IRR). This Privacy Policy is designed to be consistent with those requirements.
By registering a ph388 account or using any feature of the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.
2. Information We Collect
2.1 Registration & Identity Information
When you open a ph388 account, we collect the personal information you provide during the registration process, including:
- Full legal name as it appears on your government-issued ID;
- Date of birth (used to verify the mandatory 21+ age requirement);
- Philippine mobile number (used for account verification, OTP delivery, and communications);
- Email address (where provided);
- Username and encrypted password credentials.
2.2 Identity Verification (KYC) Documents
For the purpose of Know Your Customer (KYC) compliance, age verification, and anti-money laundering (AML) screening, ph388 may collect copies of government-issued identification documents, including Philippine passports, driver's licenses, SSS IDs, or PhilSys national IDs. We may also collect a selfie photograph taken alongside the identification document to confirm that the document belongs to the account holder.
2.3 Financial & Transaction Information
ph388 collects financial information relating to your account activity, including deposit amounts and payment method identifiers (e.g., GCash account numbers, bank account details used for transactions), withdrawal requests and processing records, transaction history, bet history, and wallet balance records. ph388 does not store full payment card numbers or complete bank account credentials — transaction processing is handled by regulated third-party payment processors.
2.4 Device & Technical Information
When you access the ph388 platform, our systems automatically collect certain technical information from your device and browser, including IP address and approximate geographic location; device type, operating system, and browser version; session duration, pages visited, and feature interactions; and referral URLs where applicable.
2.5 Communications Data
Where you contact ph388 via live chat support, email, or any other channel, we retain records of those communications, including the content of messages and the date and time of contact, for quality assurance, dispute resolution, and regulatory compliance purposes.
3. How We Collect Your Information
ph388 collects personal data through the following means:
- Directly from you — at registration, during account verification, when you deposit or withdraw, when you contact support, and when you update your account settings;
- Automatically — through cookies, server logs, and similar tracking technologies when you access the Platform (see Section 7 for details);
- From third-party payment processors — transaction confirmations, payment method verification outcomes, and fraud screening results from providers such as GCash, Maya, and bank transfer processors;
- From identity verification service providers — document authentication and liveness check results from KYC service providers engaged by ph388;
- From fraud and AML screening services — watchlist screening results and risk scores from third-party compliance providers.
4. Legal Basis for Processing
ph388 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable Philippine privacy regulations:
- Contractual necessity — processing required to perform the contract between you and ph388, including account management, bet settlement, payment processing, and customer support;
- Legal obligation — processing required to comply with applicable laws including PAGCOR regulatory requirements, AML obligations, KYC verification requirements, and tax reporting obligations;
- Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of ph388 services, where such interests are not overridden by your rights and freedoms;
- Consent — where you have provided explicit consent to specific processing activities, such as receiving promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
5. How We Use Your Information
ph388 uses the personal data we collect for the following purposes:
- Creating and managing your ph388 account, verifying your identity, and confirming eligibility to use the Platform;
- Processing deposits, withdrawals, and settling winning wagers;
- Delivering live chat support and resolving account or betting disputes;
- Sending account-critical communications — including OTPs, login security alerts, withdrawal confirmations, and responsible gaming notifications — via SMS to your registered Philippine mobile number;
- Detecting and preventing fraud, money laundering, collusion, and other prohibited conduct on the Platform;
- Fulfilling our obligations under PAGCOR regulatory requirements and applicable Philippine law;
- Monitoring responsible gaming indicators and, where appropriate, contacting you with information about responsible gaming support;
- Improving the ph388 platform through analysis of aggregated, anonymized usage data;
- Where you have opted in, sending promotional offers, bonus information, and event announcements relevant to your gaming preferences.
Marketing Communications: ph388 will only send you promotional SMS or email communications where you have explicitly opted in during registration or subsequently through your account settings. You may opt out at any time by updating your communication preferences in your account or by contacting ph388 live chat support.
6. Sharing & Disclosure of Information
ph388 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ph388 may share your personal data with third parties only in the following circumstances:
- Payment processors — GCash, Maya, BPI, BDO, Metrobank, and other payment service providers require transaction data to process your deposits and withdrawals;
- KYC and identity verification providers — third-party services engaged to authenticate identity documents and perform liveness checks for account verification;
- AML and fraud screening services — compliance service providers used to screen against sanctions lists and identify suspicious transaction patterns;
- Game content providers — Pragmatic Play, PG Soft, Evolution Gaming, and other game studios integrated into the ph388 platform receive the technical data necessary to operate their games within our platform, subject to their own data processing agreements;
- Regulatory authorities — PAGCOR and other Philippine regulatory or law enforcement bodies where disclosure is required by applicable law or regulatory direction;
- Professional advisors — legal counsel, auditors, and financial advisors subject to binding confidentiality obligations, where reasonably necessary for ph388's business operations.
Where ph388 engages third-party processors to process your personal data on its behalf, those processors are required to handle your data in accordance with this Privacy Policy and applicable Philippine data privacy law.
7. Cookies & Tracking Technologies
ph388 uses cookies and similar technologies to operate and improve the Platform. Cookies are small data files stored on your device by your browser. ph388 uses the following types of cookies:
- Essential cookies — required for the Platform to function, including session authentication, login persistence, and security features. These cannot be disabled without affecting your ability to use ph388;
- Functional cookies — remember your preferences such as language settings, display options, and default sportsbook views;
- Analytics cookies — collect anonymized data about how Members navigate the Platform, which features they use, and where they encounter issues. This data is used to improve platform performance and user experience;
- Security cookies — detect and prevent fraudulent access attempts, account takeovers, and automated bot activity.
You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in to and use ph388.
8. Data Retention
ph388 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, and in accordance with applicable Philippine legal and regulatory retention requirements. Specifically:
- Account registration data and KYC documentation are retained for a minimum of five (5) years following account closure, as required by PAGCOR and AML regulations;
- Transaction and betting records are retained for a minimum of five (5) years in accordance with financial record-keeping requirements under Philippine law;
- Support communication records are retained for a minimum of two (2) years to support dispute resolution and quality assurance;
- Device and technical log data is retained for up to twelve (12) months for security and fraud investigation purposes, after which it is deleted or anonymized.
Upon the expiry of applicable retention periods, ph388 will securely delete or anonymize your personal data so that it can no longer be attributed to you.
9. Data Security
ph388 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your device and ph388 servers;
- Encrypted storage of sensitive personal data and financial records;
- OTP-based two-factor authentication for account access on unrecognized devices;
- Access controls limiting staff access to personal data on a strict need-to-know basis;
- Regular security assessments and vulnerability testing of Platform infrastructure.
Notwithstanding these measures, no internet transmission is completely secure. ph388 cannot guarantee absolute security of your data during transmission. You are responsible for keeping your login credentials secure and for notifying ph388 immediately if you suspect unauthorized access to your account.
10. Your Rights as a Data Subject
Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data held by ph388:
- Right to be informed — the right to know what personal data ph388 collects, how it is used, and to whom it may be disclosed;
- Right of access — the right to request a copy of the personal data ph388 holds about you;
- Right to rectification — the right to request correction of inaccurate or incomplete personal data;
- Right to erasure — the right to request deletion of your personal data, subject to applicable legal retention requirements;
- Right to object — the right to object to certain processing activities, including direct marketing;
- Right to data portability — the right to receive a structured copy of your personal data in a commonly used format;
- Right to lodge a complaint — the right to submit a complaint to the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.
To exercise any of these rights, please contact ph388 support via live chat. ph388 will respond to data rights requests within thirty (30) calendar days of receipt, subject to identity verification.
11. Children & Minors
The ph388 platform is strictly for persons aged 21 years and above in accordance with Philippine law and PAGCOR regulations. ph388 does not knowingly collect personal data from persons under 21 years of age. If ph388 discovers that an account has been registered by a person under 21, the account will be immediately closed and all personal data associated with it will be deleted, subject to any mandatory retention obligations under applicable law.
If you have reason to believe that a person under 21 has registered a ph388 account, please report this to ph388 support immediately via live chat.
12. Changes to This Privacy Policy
ph388 reserves the right to update this Privacy Policy at any time. Where changes are material, ph388 will notify active Members via the Platform or by SMS to their registered Philippine mobile number at least seven (7) days before the changes take effect. The date of the most recent update is displayed at the top of this page.
Continued use of the ph388 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any changes, you must stop using the Platform and may request account closure by contacting ph388 support.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ph388, please contact our Data Privacy team through ph388's 24/7 live chat support channel, accessible from your account after logging in at ph388.vip.
ph388 takes data privacy concerns seriously. All legitimate data rights requests will be acknowledged within 72 hours and fully resolved within the timeframes required by the Data Privacy Act of 2012 and NPC regulations.
How ph388 Protects Your Privacy
Six concrete commitments ph388 makes to every Filipino player regarding their personal data.
SSL Encryption on Every Session
Every page on ph388 — from login to live casino to deposit — is served over HTTPS with SSL/TLS encryption. Your data travels between your device and ph388's servers in an encrypted channel that cannot be intercepted in plaintext.
No Sale of Your Personal Data
ph388 does not sell, rent, or trade your personal information to any third party for marketing purposes. Data shared with service providers is limited to what is necessary for them to perform their specific function — no more.
DPA 2012 Compliance
ph388 operates in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and NPC regulations. Filipino players have the same data rights as any data subject under Philippine law — access, rectification, erasure, and more.
OTP Security Layer
Critical account actions — login from new devices, withdrawals, and security changes — require OTP verification to your registered Philippine mobile number. Even if your password is compromised, your account and funds remain protected.
Minimal Data Collection
ph388 collects only the personal data necessary to operate your account, comply with PAGCOR and AML requirements, and deliver the services you've signed up for. We don't collect data for its own sake.
Direct Access to Support
Have a question about your data? ph388's live chat support handles data rights requests directly — no lengthy web forms or waiting weeks for a response. Most requests are acknowledged within 72 hours and resolved within 30 days.
Questions About Your ph388 Data?
Our support team is available around the clock to answer any privacy questions or handle data rights requests. You can also review our Terms & Conditions and Responsible Gaming policy for related information.