Privacy Policy

This Privacy Policy governs the manner in which php38 ("php38," "we," "us," or "our") collects, uses, maintains, and discloses information collected from users ("you" or "Player") of the php38 online gaming platform accessible at https://php38.org. By registering an account and using php38's services, you acknowledge that you have read, understood, and agreed to the data practices described herein. If you do not agree, please discontinue use of the platform immediately.

1. Scope and Application

This policy applies to all personal data collected through the php38 website, mobile application, live chat support system, email correspondence, and any promotional activity associated with the brand. It covers players based in the Philippines and any other jurisdiction where php38 is authorized to operate. php38 is supervised by the Philippine Amusement and Gaming Corporation (PAGCOR) and adheres to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

This policy does not apply to third-party websites, game providers, or payment processors that may be linked from within the php38 platform. We encourage players to review the privacy statements of those third-party services independently.

2. Information We Collect

php38 collects only the personal data reasonably necessary to verify your identity, process your transactions, and deliver a safe gaming experience. The categories of personal data we may collect include:

2.1 Account Registration Data

• Full legal name as it appears on a valid Philippine government-issued ID
• Date of birth (to verify that you are at least 21 years old, as required under Philippine law)
• Email address and mobile phone number
• Home address (city/municipality, province, postal code)
• Username and encrypted password

2.2 Know Your Customer (KYC) and Identity Verification

• Scanned or photographed copies of valid IDs (e.g., PhilSys national ID, passport, driver's license, UMID)
• Selfie or facial photo for liveness verification, as required by anti-money laundering regulations
• Proof of address (utility bill, barangay clearance, or similar document)

2.3 Financial and Transaction Data

• Deposit and withdrawal records, including amounts, timestamps, and payment methods (e.g., GCash, Maya, BPI, BDO, Metrobank)
• Partial payment account identifiers (e.g., last four digits of a bank account or mobile wallet number)
• Bonus and promotional credit activity

2.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser version
• Session duration, pages visited, games played, wagering patterns
• Cookies, pixel tags, and similar tracking technologies

2.5 Communications Data

• Contents of emails, live chat messages, and support tickets you submit to php38
• Responses to surveys or promotions you voluntarily participate in

3. How We Use Your Information

php38 processes your personal data on the basis of contractual necessity, legal obligation, legitimate interest, and — where required — your explicit consent. Specific purposes include:

• Account creation and management: To register your account, verify your identity, and administer your player profile.
• Regulatory compliance: To fulfill PAGCOR reporting obligations, Anti-Money Laundering Act (AMLA) requirements, and other applicable Philippine laws.
• Transaction processing: To facilitate deposits, withdrawals, and bonus credits through GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, and other channels.
• Customer support: To investigate complaints, respond to queries, and resolve disputes.
• Security and fraud prevention: To detect suspicious activity, prevent unauthorized access, and protect the integrity of the platform.
• Responsible gaming: To monitor gaming behavior, enforce self-exclusion requests, and provide access to responsible gaming resources.
• Marketing communications: To send you promotional offers, bonuses, and platform updates — but only where you have given explicit opt-in consent. You may withdraw this consent at any time.
• Platform improvement: To analyze aggregate usage patterns and optimize our games, promotions, and user interface.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act and applicable international frameworks, php38 relies on the following legal bases:

• Contract performance: Processing is necessary to deliver the services you registered for.
• Legal obligation: Processing is required to comply with PAGCOR regulations, AMLA, and other statutory duties.
• Legitimate interests: Processing for fraud detection, security operations, and platform analytics, balanced against your privacy rights.
• Consent: For optional marketing communications and non-essential cookies.

5. Data Sharing and Disclosure

php38 does not sell, rent, or lease your personal data to third parties for their own commercial use. We may share your data only with:

• Game content providers and technology vendors who process data on our behalf under strict data processing agreements.
• Payment processors (GCash, Maya, BPI, BDO, Metrobank, etc.) solely for the purpose of processing your financial transactions.
• Regulatory authorities including PAGCOR, the Anti-Money Laundering Council (AMLC), and law enforcement agencies when legally required.
• Identity verification partners engaged to assist with KYC compliance — these partners are contractually prohibited from using your data for any independent purpose.
• Corporate affiliates within the php38 corporate group for consolidated operations and compliance, subject to equivalent privacy protections.

All third-party processors are required to maintain confidentiality, adopt adequate security measures, and process personal data solely as instructed by php38.

6. Cookies and Tracking Technologies

php38 uses the following categories of cookies on its platform:

• Strictly necessary cookies: Required for login sessions, security tokens, and platform functionality. These cannot be disabled without affecting core services.
• Analytics cookies: Used to collect aggregated, anonymized data on how players use the platform, helping us improve performance and game recommendations.
• Preference cookies: Store your language, region, and display settings across sessions.
• Marketing cookies: Set only with your consent to deliver relevant promotional messages within the php38 platform.

You can manage or delete cookies through your browser's settings at any time. Disabling non-essential cookies will not prevent you from accessing your account or playing games.

7. Data Retention

php38 retains your personal data for as long as your account is active, plus an additional period required by law. Specifically:

• Account and KYC records are retained for a minimum of five (5) years from account closure to comply with AMLA record-keeping requirements.
• Transaction logs are retained for five (5) years in compliance with PAGCOR regulations.
• Support and communication records are retained for three (3) years.
• Marketing consent records are retained until consent is withdrawn, plus two (2) years thereafter as evidence of compliance.

After the applicable retention period, data is securely deleted or anonymized in accordance with php38's data disposal procedures.

8. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by php38:

• Right to be informed: To know what personal data we collect, why we collect it, and how it is used.
• Right of access: To request a copy of the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure (right to be forgotten): To request deletion of your personal data, subject to legal retention obligations.
• Right to object: To object to processing based on legitimate interests, including profiling for direct marketing.
• Right to data portability: To receive your data in a structured, machine-readable format where technically feasible.
• Right to lodge a complaint: To file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to verified requests within fifteen (15) business days.

9. Data Security Measures

php38 implements a range of technical and organizational measures to safeguard your personal data, including:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Multi-factor authentication for player accounts and internal administrative systems
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments
• Incident response procedures with mandatory breach notification to the NPC within 72 hours of discovery, where required

While php38 takes every reasonable precaution, no online system is completely immune to risk. Players are encouraged to use strong, unique passwords and to notify us immediately if they suspect unauthorized access to their account.

10. Children and Minors

php38 is strictly an adult platform. Access to gambling and casino services is permitted only for individuals aged 21 years and above, consistent with Philippine law. We do not knowingly collect personal data from persons under 21. If we discover that a minor has registered an account, we will immediately suspend the account, refund any deposits, and delete all associated personal data. If you believe a minor has created an account on our platform, please contact us immediately at [email protected].

11. International Data Transfers

php38 primarily stores and processes your data on servers located within or accessible to the Philippines. In cases where personal data is transferred to a jurisdiction outside the Philippines (for example, to a global technology vendor), php38 ensures that adequate safeguards are in place — such as data processing agreements incorporating standard contractual clauses — to provide a level of data protection equivalent to that required by Philippine law.

12. Changes to This Privacy Policy

php38 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you via a prominent notice on the platform and, where appropriate, via email. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of php38 following notification constitutes your acceptance of the revised policy.

13. Contact Our Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact php38's designated Data Protection Officer:

• Platform: php38 Online Gaming
• Email: [email protected]
• Mailing Address: php38 Data Protection Office, Makati City, Metro Manila, Philippines

For formal complaints, you may also contact the National Privacy Commission (NPC) of the Philippines at their official website or mailing address in Bonifacio Global City, Taguig.