ph32 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by ph32 ("ph32," "we," "us," or "the Company"), the operator of the online gaming platform at ph32.one. ph32 is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

This Policy applies to all personal information collected from players, website visitors, and any individual who interacts with the ph32 platform — whether through our website, mobile browser experience, live chat support, or email correspondence. By registering a ph32 account or using any ph32 service, you acknowledge that you have read and understood this Policy.

2 Personal Data We Collect

ph32 collects personal data only to the extent necessary for legitimate business and regulatory purposes. The categories of data we collect include:

ph32 does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for regulatory compliance, including government ID data collected solely for age and identity verification purposes.

3 How ph32 Uses Your Personal Data

ph32 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your ph32 account; verifying your identity and age (21+ as required by PAGCOR); processing login and authentication requests;
• Financial Transactions: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods; preventing and detecting fraud and unauthorized transactions;
• Regulatory Compliance: Fulfilling ph32's obligations under PAGCOR licensing conditions, the Philippine Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012. This includes reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) where required by law;
• Platform Operations: Delivering games and platform features; maintaining platform security and integrity; detecting and preventing cheating, collusion, and bonus abuse;
• Responsible Gaming: Monitoring usage patterns to identify potential problem gambling behavior; administering self-exclusion, deposit limit, and session limit tools;
• Customer Support: Responding to your queries, complaints, and dispute resolution requests;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent and subject to your opt-out rights.

ph32 does not use your personal data for automated profiling that produces legal effects or significantly affects you without human review, except where required for fraud prevention and AML screening.

4 Legal Basis for Processing

ph32 processes personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to provide ph32 services under your account agreement, including account management, game delivery, and financial transactions;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, tax regulations, and other applicable Philippine law;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where ph32's interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, where you have explicitly opted in. You may withdraw consent at any time by updating your notification preferences in your ph32 account settings or by contacting support.

5 Sharing Your Personal Data

ph32 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BancNet, and other payment infrastructure providers — solely to process your transactions;
• Game Studios: Licensed game providers (e.g., JILI, PG Soft, Pragmatic Play, Evolution Gaming) receive technical session data necessary to operate games. These providers are contractually prohibited from using your data for their own marketing;
• Regulatory Authorities: PAGCOR, the AMLC, the National Privacy Commission, and Philippine law enforcement agencies — where disclosure is required by law or regulatory directive;
• KYC and Fraud Prevention Providers: Third-party identity verification and fraud screening services used to verify player identity and prevent financial crime;
• Professional Advisers: Legal, accounting, and audit firms — subject to professional confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to a successor entity subject to equivalent privacy protections and notification to you.

6 Data Retention

ph32 retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory requirements. Our standard retention periods are as follows:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Game and betting history: Retained for a minimum of three (3) years;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as an audit record.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with ph32's data disposal procedures.

7 Cookies and Tracking Technologies

ph32 uses cookies and similar tracking technologies on the ph32.one platform. These are small data files placed on your device that help us deliver and improve our services. The types of cookies ph32 uses include:

• Strictly Necessary Cookies: Essential for platform operation — maintaining your session, keeping you logged in, and enabling security features. These cannot be disabled;
• Analytics Cookies: Aggregate, anonymised data used to understand how players navigate and use the ph32 platform, enabling us to improve functionality and content;
• Functionality Cookies: Remember your preferences — such as language settings and display options — to personalise your ph32 experience;
• Security Cookies: Detect and prevent fraudulent activity, including bot traffic and unauthorized access attempts.

ph32 does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

8 Data Security

ph32 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph32 servers;
• Encryption of sensitive data at rest, including financial information and authentication credentials;
• Role-based access controls ensuring that ph32 staff access personal data only on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• Two-factor authentication (2FA) for player accounts and all internal ph32 systems;
• Secure data centres with physical access controls and 24/7 monitoring.

While ph32 implements robust security measures, no system can guarantee absolute security. In the event of a personal data breach that poses a real risk of serious harm to you, ph32 will notify affected individuals and the National Privacy Commission within 72 hours of discovery, in accordance with NPC Circular 16-03.

9 Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph32:

• Right to be Informed: The right to know how your personal data is collected, processed, and used — which this Policy fulfils;
• Right to Access: The right to obtain a copy of your personal data held by ph32 and information about how it is processed;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to Erasure / Blocking: The right to request deletion or blocking of personal data where it is no longer necessary for its original purpose, subject to overriding legal or regulatory retention requirements;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Object: The right to object to the processing of your personal data for direct marketing or for processing based on legitimate interests;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe ph32 has not complied with the Data Privacy Act.

To exercise any of the above rights, contact ph32's Data Protection Officer at support at ph32.one. ph32 will respond to verified data subject requests within fifteen (15) business days of receipt.

10 Children and Minors

ph32 does not knowingly collect personal data from individuals under the age of 21 years. The ph32 platform is strictly for adults aged 21 and above, as required by PAGCOR regulation and Philippine law. Age verification is conducted at account registration as part of the KYC process.

If ph32 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all funds held pending investigation in accordance with applicable regulatory requirements, and the personal data deleted or returned to the extent legally permissible. If you believe a minor has registered on ph32, please notify us immediately at support at ph32.one.

11 Changes to This Privacy Policy

ph32 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via email or a prominent notice on the ph32 platform at least seven (7) days before the amendments take effect, unless a shorter notice period is required for legal compliance.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of ph32 following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how ph32 protects your data.

12 Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or ph32's handling of your personal data, please contact:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) if you believe ph32 has not processed your personal data in accordance with the Data Privacy Act of 2012.