phl33 Privacy Policy

1. Introduction

phl33 ("phl33," "we," "us," or "our") operates the online gaming platform accessible at phl33.net, providing casino games, sports betting, bingo, live dealer games, and related services to players in the Philippines. We are committed to protecting the privacy and personal data of all users of the phl33 platform ("you," "your," or "Player").

This Privacy Policy ("Policy") describes how phl33 collects, uses, stores, shares, and protects your personal data in connection with your use of the phl33 website, mobile platform, and all associated services (collectively, the "Platform"). This Policy is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations.

This Policy should be read together with our Terms & Conditions and any other policies or notices published on the phl33 Platform. By using the Platform, you confirm your acceptance of this Policy.

2. Data We Collect

phl33 collects the following categories of personal data from players and visitors to the Platform:

2.1 Identity & Contact Data

This includes your full legal name, date of birth, nationality, residential address in the Philippines (including city — whether you're based in Manila, Cebu, Davao, Quezon City, Makati, or elsewhere), email address, and mobile phone number. This data is collected during the registration and KYC verification process.

2.2 Financial Data

This includes your payment method details (such as GCash account number, PayMaya account, BPI, BDO, or Metrobank account information), transaction history, deposit and withdrawal records, and account balance information. phl33 does not store full card numbers or full bank account credentials on its servers.

2.3 Account & Gaming Data

This includes your phl33 username, account ID, login history, game play history, betting records, bonus usage, wagering activity, and any preferences or settings you configure within your account.

2.4 Technical & Device Data

This includes your IP address, browser type and version, operating system, device identifiers, screen resolution, time zone, and referring URLs. This data is collected automatically when you access the Platform.

2.5 Communications Data

This includes records of any communications you have with phl33's support team, including emails, live chat transcripts, and any feedback or complaints you submit.

2.6 Verification Documents

For KYC purposes, phl33 may collect copies of government-issued identification documents such as a Philippine passport, driver's license, SSS card, UMID, or other valid ID, as well as proof of address and proof of payment method ownership.

3. How We Collect Data

phl33 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you browse or use the Platform.
• Third-party sources: Data received from payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), identity verification service providers, fraud prevention agencies, and analytics partners, where permitted by applicable law.
• Publicly available sources: In limited circumstances, phl33 may supplement your data with information from publicly available sources for fraud prevention or compliance purposes.

4. How We Use Your Data

phl33 uses your personal data for the following purposes:

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phl33 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR regulatory requirements, and tax reporting duties.
• Legitimate interests: Processing carried out for phl33's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, particularly for direct marketing communications. You may withdraw your consent at any time by contacting [email protected].

6. Data Sharing

phl33 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity and comply with regulatory obligations.
• Technology and hosting providers: Cloud hosting, data storage, and IT infrastructure providers who process data on our behalf under strict data processing agreements.
• Analytics providers: Service providers who help us analyze Platform usage and improve user experience, operating under confidentiality obligations.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory directive.
• Law enforcement: Philippine law enforcement agencies or courts, where phl33 is legally required to disclose information.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of phl33's business, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the phl33 Platform. They help us recognize your device, remember your preferences, keep you logged in, and understand how you use the Platform.

7.2 Types of Cookies We Use

• Essential cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional cookies: Remember your preferences and settings, such as language and display options, to improve your experience on phl33.
• Analytics cookies: Help us understand how players use the Platform, which pages are most visited, and where improvements can be made. Data collected is aggregated and anonymized.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns, where you have consented.

7.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phl33 Platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

8. Data Retention

phl33 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Account and gaming data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with Philippine AML regulations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of collection or from the date of the last transaction, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act of the Philippines.
• Communications and support records: Retained for up to three (3) years from the date of the communication.
• Marketing consent records: Retained until you withdraw your consent or for three (3) years from the date of last interaction, whichever is earlier.

When personal data is no longer required, phl33 will securely delete or anonymize it in accordance with our data disposal procedures.

9. Data Security

phl33 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phl33 Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform.
• Multi-factor authentication options for player accounts.
• Secure data centers with physical access controls and environmental safeguards.
• Staff training on data privacy and security obligations under the Philippine DPA.

10. Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phl33:

• Right to be informed: The right to be notified of how your personal data is collected, used, and processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data phl33 holds about you and information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days, in accordance with the DPA and NPC regulations.

11. Children's Privacy

The phl33 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. phl33 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on phl33 or provided personal data to us, please contact us immediately at [email protected] so that we can take appropriate action.

12. International Data Transfers

phl33 primarily processes and stores personal data within the Philippines. In certain circumstances, your data may be transferred to, or processed by, service providers located outside the Philippines — for example, cloud hosting providers or technology partners operating in other jurisdictions.

Where such transfers occur, phl33 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under the Philippine Data Privacy Act of 2012. By using the phl33 Platform, you consent to such transfers where they are necessary for the provision of our services.

13. Third-Party Links

The phl33 Platform may contain links to third-party websites or services for informational purposes. phl33 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to data collected by phl33 through the phl33 Platform.

14. Policy Updates

phl33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform. The date of the most recent revision is indicated at the top of this page.

Your continued use of the phl33 Platform following the publication of any amendments constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how phl33 protects your personal data.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by phl33, please contact our Data Protection Officer (DPO). We are committed to addressing all privacy-related inquiries promptly and transparently.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. For more information on your rights under the Data Privacy Act, visit the NPC's official resources.

For responsible gaming concerns, self-exclusion requests, or gaming-related support, please visit our Responsible Gaming page.