ph223 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

1. Scope and Application

This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, and shared by ph223 in connection with the operation of the ph223 online gaming platform accessible at ph223.org. It applies to all registered players, website visitors, and any individual who interacts with ph223's customer support services.

ph223 acts as a Personal Information Controller (PIC) as defined under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations. ph223 has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and the rules of the National Privacy Commission (NPC) of the Philippines.

By registering an account on ph223, depositing funds, or otherwise using the ph223 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the ph223 platform.

2. Personal Data We Collect

ph223 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth
• Nationality
• Philippine mobile number
• Email address
• Residential address
• Username and encrypted account credentials

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine National ID, UMID, passport, driver's license)
• Proof of address documents where required
• Source of funds documentation where required under Anti-Money Laundering Act (AMLA) obligations

2.3 Financial and Transaction Data

• GCash account details, Maya account details, or other payment method identifiers used for deposits and withdrawals
• Deposit history, withdrawal history, and complete transaction ledger
• Bank account details where applicable for bank transfer transactions

2.4 Gaming Activity Data

• Game session history, including games played, wager amounts, outcomes, and timestamps
• Bonus and promotion utilisation records
• Loyalty program points and tier status

2.5 Technical and Device Data

• IP address and geographic location data derived therefrom
• Device type, operating system, and browser information
• Session logs and login history
• Cookies and similar tracking data as described in Section 6

2.6 Communications Data

• Records of communications with ph223 customer support, including Live Chat transcripts and email correspondence
• Feedback and complaints submitted to ph223

3. Legal Basis for Processing

ph223 processes your personal data on the following legal bases as defined under the Data Privacy Act of 2012:

4. How We Use Your Personal Data

ph223 uses the personal data we collect for the following specific purposes:

• Account Administration: Creating, maintaining, and managing your ph223 player account, including authenticating your identity upon each login.
• Regulatory Compliance: Fulfilling ph223's obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act (RA 10173). This includes filing mandatory reports with PAGCOR and the Anti-Money Laundering Council (AMLC) where required.
• Payment Processing: Facilitating deposits and withdrawals through your chosen payment methods, verifying payment source legitimacy, and maintaining accurate financial records.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling indicators, administering self-exclusion and deposit limit tools, and reaching out to players who exhibit signs of gambling harm.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of communications for quality assurance and compliance purposes.
• Fraud and Security: Detecting unauthorised access, preventing fraud, and protecting the integrity of the ph223 platform and its player community.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the ph223 product, game offering, and user experience.
• Marketing: Sending promotional communications to players who have opted in to receive them. You may withdraw marketing consent at any time by contacting ph223 Support.

5. Sharing and Disclosure of Personal Data

ph223 does not sell, rent, or trade your personal data to third parties for commercial purposes. ph223 shares personal data only in the following limited circumstances:

5.1 Service Providers and Data Processors

ph223 engages third-party service providers who process personal data on ph223's behalf under binding data processing agreements. These include payment processors (GCash / Maya / banking partners), KYC verification providers, game studios, fraud detection services, and IT infrastructure providers. All processors are required to implement security measures consistent with the Data Privacy Act.

5.2 Regulatory and Law Enforcement Authorities

ph223 is required by law to share personal data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities upon lawful request or as required by applicable regulations. ph223 will comply with valid legal orders requiring disclosure of player data.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ph223's assets, personal data held by ph223 may be transferred to the successor entity. Affected players will be notified prior to such transfer and given the opportunity to request deletion of their data where permitted by law.

5.4 Consent-Based Disclosures

ph223 may share your personal data with third parties where you have provided explicit, informed consent to such sharing for a specific purpose.

6. Cookies and Tracking Technologies

ph223 uses cookies and similar technologies (web beacons, pixel tags, local storage) to operate the platform, personalise your experience, and analyse usage patterns. The categories of cookies used by ph223 include:

• Strictly Necessary Cookies: Required for the platform to function. These cannot be disabled and do not require consent. They include session authentication cookies and security tokens.
• Functional Cookies: Remember your preferences, such as language settings and game lobby filters, to improve your experience on subsequent visits.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the ph223 platform. This helps ph223 identify areas for improvement.
• Marketing Cookies: Used, with your consent, to deliver promotional content relevant to your gaming preferences. You may withdraw marketing cookie consent at any time through your browser settings or by contacting ph223 Support.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair platform functionality including the ability to log in to your ph223 account.

7. Data Retention

ph223 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal and regulatory requirements. Key retention periods include:

• Account and identity data: Retained for the duration of the active account plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Financial transaction records: Retained for a minimum of five (5) years following the transaction date in accordance with AMLA requirements.
• Customer support communications: Retained for three (3) years from the date of the final communication.
• Marketing consent records: Retained until consent is withdrawn plus one (1) year to document compliance.
• Technical logs: Retained for up to twelve (12) months for security and fraud detection purposes, then permanently deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.

8. Data Security

ph223 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Security measures include, but are not limited to:

• AES-256 encryption of personal data at rest
• TLS encryption of all data transmitted between your device and ph223 servers
• Two-factor authentication available for all player accounts
• Role-based access controls restricting employee access to personal data on a need-to-know basis
• Regular penetration testing and vulnerability assessments
• An information security incident response plan consistent with NPC Circular 16-03 requirements

Despite these measures, no system is entirely immune from security risks. ph223 encourages players to use strong, unique passwords for their ph223 accounts and to enable two-factor authentication to maximise account security.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph223:

• Right to be Informed: The right to know what personal data ph223 holds about you and how it is being processed.
• Right of Access: The right to obtain a copy of the personal data ph223 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure or Blocking: The right to request deletion or blocking of personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to Object: The right to object to processing of your personal data for specific purposes, including direct marketing.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe ph223 has violated your data privacy rights.

To exercise any of these rights, contact ph223's Data Privacy Officer via Live Chat or by email at the address provided in Section 13. ph223 will respond to valid data subject requests within fifteen (15) business days.

10. Children and Minors

ph223 does not knowingly collect personal data from individuals under the age of twenty-one (21). The ph223 platform is strictly for adult players of legal gambling age in the Philippines. If ph223 discovers that personal data has been collected from a person under 21, ph223 will immediately close the account, delete the associated personal data, and report the matter to PAGCOR as required. If you believe a minor has registered on ph223, please notify ph223 Support immediately via Live Chat.

11. Cross-Border Data Transfers

Some of ph223's third-party service providers (including game studio partners and certain IT infrastructure providers) are located outside the Philippines. Where personal data is transferred to recipients in other countries, ph223 ensures that such transfers are subject to appropriate safeguards consistent with the Data Privacy Act, including contractual data processing agreements that impose obligations equivalent to those required under Philippine law. ph223 does not transfer personal data to jurisdictions that do not provide adequate levels of data protection without implementing appropriate transfer mechanisms.

12. Changes to this Privacy Policy

ph223 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Material changes will be communicated to registered players via email to their registered address or via a notice within the ph223 account dashboard, with at least fourteen (14) days' notice before the changes take effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the ph223 platform following the effective date of any update constitutes acceptance of the revised Policy.

13. Contact and Data Privacy Officer

For questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact ph223's Data Privacy Officer:

• 24/7 Live Chat: Available from your ph223 account dashboard
• Email: [email protected]
• Subject Line: Data Privacy Request – [Your Name]
• Response Time: Within 15 business days for formal data subject requests

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines at privacy.gov.ph if you believe your data privacy rights have been violated.

This Privacy Policy was last reviewed on 1 June 2026. ph223 is operated under the PAGCOR regulatory framework. This document is provided in English as the governing language. Nothing in this Policy constitutes legal advice.