phking365 Privacy Policy

01 About This Privacy Policy

phking365 is the data controller responsible for the personal information collected from Players, visitors, and users of the phking365 Platform. This Privacy Policy describes the types of personal data we collect, the purposes for which we use it, the parties with whom we may share it, how we protect it, and the rights available to you as a data subject under Philippine law.

By registering a phking365 account or using the phking365 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data in the manner described herein. Where processing is based on your consent, you have the right to withdraw that consent at any time by contacting our Data Privacy Officer at the details provided in Section 13.

This Policy should be read in conjunction with the phking365 Terms & Conditions. In the event of any inconsistency between this Policy and the Terms & Conditions on data privacy matters, this Privacy Policy shall prevail.

02 Personal Data We Collect

phking365 collects the following categories of personal data:

phking365 does not intentionally collect sensitive personal information as defined under RA 10173 (such as health data, racial or ethnic origin, religious beliefs, or political affiliations), unless specifically required by PAGCOR for responsible gaming purposes (e.g., self-exclusion records).

03 How We Use Your Personal Data

phking365 uses your personal data for the following purposes:

• Account Creation & Management: To register your phking365 account, verify your identity, manage your player profile, and maintain the security of your account;
• KYC & Regulatory Compliance: To verify your age (21+ requirement), identity, and payment method ownership as required by PAGCOR and Philippine AML regulations under Republic Act No. 9160;
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported Philippine payment methods;
• Platform Operation: To provide access to games, maintain game session records, resolve disputes, and calculate bonus eligibility;
• Customer Support: To respond to your inquiries, complaints, and requests via live chat, email, or other support channels;
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, and other illegal activities;
• Responsible Gaming: To administer deposit limits, self-exclusion requests, cooling-off periods, and other responsible gaming tools in accordance with PAGCOR requirements;
• Marketing Communications: To send you promotional offers, bonus notifications, and news about phking365 products and services, where you have provided consent or where permitted under applicable law. You may opt out at any time;
• Analytics & Improvement: To analyze Platform usage patterns and improve the phking365 user experience. Analytics data is aggregated and de-identified where possible.

04 Legal Bases for Processing

phking365 processes your personal data on the following legal bases under RA 10173:

• Contractual Necessity: Processing required to perform our obligations under the phking365 Terms & Conditions — including account management, payment processing, and game operation;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, Republic Act No. 9160 (AMLA), Republic Act No. 10927 (covering internet cafés and online gaming), and other applicable Philippine legislation;
• Legitimate Interest: Processing for fraud prevention, platform security, and internal analytics where our legitimate interests are not overridden by your rights and freedoms;
• Consent: Processing for optional marketing communications, where we have obtained your express consent. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Third-Party Disclosure

phking365 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent strictly necessary:

• Payment Processors: GCash (Mynt), Maya (PayMaya Philippines), GrabPay Philippines, BPI, BDO, Metrobank, and other licensed Philippine payment service providers — solely for the purpose of processing your deposits and withdrawals;
• KYC / Identity Verification Providers: Licensed third-party identity verification service providers engaged to assist phking365 in meeting its KYC obligations under PAGCOR rules and the AMLA;
• Game Content Providers: Licensed game studios whose game software is integrated into the phking365 Platform may receive session data (not full identity data) for game integrity and RTP certification purposes;
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and any other Philippine government authority, where disclosure is required by law, court order, or regulatory direction;
• IT & Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers operating under data processing agreements that impose obligations equivalent to those in this Policy;
• Legal & Professional Advisors: Philippine law firms, auditors, and compliance consultants engaged by phking365, subject to confidentiality obligations.

All third parties with whom phking365 shares personal data are required to handle that data in accordance with applicable Philippine privacy law and to implement appropriate security measures.

06 Cookies & Tracking Technologies

phking365 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by our web server. Cookies enable the Platform to recognise your device on return visits and to maintain session state.

phking365 uses the following types of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your phking365 account during a session. These cannot be disabled without impairing Platform functionality;
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how visitors use the Platform (e.g., pages visited, session duration). This data helps us improve Platform performance and user experience;
• Functional Cookies: Store your preferences such as preferred language, currency display, and game lobby view to personalize your phking365 experience;
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

Most browsers allow you to control cookie settings. Disabling non-essential cookies will not prevent you from using core phking365 features, though some personalization features may be affected.

07 Data Retention

phking365 retains personal data for the minimum period necessary to fulfil the purposes set out in this Policy, subject to the following minimum retention periods required by Philippine law:

• KYC & Identity Records: Five (5) years from the date of the last transaction, as required under the AMLA IRR;
• Financial Transaction Records: Five (5) years from the date of the transaction;
• Game Session Logs: Two (2) years from the date of the session, unless required longer for an active dispute;
• Customer Support Records: Two (2) years from the date of the last interaction;
• Self-Exclusion Records: For the duration of the exclusion period plus five (5) years thereafter, as required by PAGCOR responsible gaming rules;
• Marketing Consent Records: Until consent is withdrawn and for one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, phking365 will securely delete, anonymize, or destroy the relevant personal data in accordance with our data disposal procedures.

08 Data Security

phking365 implements technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the phking365 Platform;
• Encryption of sensitive data fields (including payment data) at rest in our databases;
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
• Two-factor authentication required for all phking365 staff accessing production systems;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms;
• Formal data breach response plan with documented procedures for containment, investigation, and notification.

While phking365 employs industry-standard security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your phking365 login credentials on your end.

09 Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by phking365:

• Right to Access: You may request a copy of the personal data phking365 holds about you and information about how it is being processed;
• Right to Correction: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure / "Right to be Forgotten": You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, and to processing based on legitimate interests where your rights override our interests;
• Right to Block: You may request that phking365 suspend processing of your personal data in certain circumstances;
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to phking365;
• Right to Complain: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phking365 has violated your privacy rights.

To exercise any of the above rights, contact our Data Privacy Officer using the details in Section 13. phking365 will respond to all verified requests within the timeframe prescribed by the NPC, generally not exceeding fifteen (15) working days.

10 Children & Minors

The phking365 Platform is strictly intended for individuals aged 21 years and older. phking365 does not knowingly collect personal data from individuals under the age of 21. The 21+ age threshold applicable to phking365 exceeds the standard "minor" threshold under RA 10173 (18 years), reflecting the higher age restriction mandated by PAGCOR for online gambling.

If phking365 becomes aware that personal data of an individual under the age of 21 has been collected, it will immediately close the associated account, void all gameplay, return any deposits to the originating payment method, and delete or anonymize the individual's personal data as soon as practicable.

If you believe that an individual under 21 has registered a phking365 account, please contact our Data Privacy Officer immediately using the details in Section 13.

11 Cross-Border Data Transfers

phking365 primarily processes personal data within the Republic of the Philippines. Certain service providers (such as game content studios or cloud infrastructure providers) may be located outside the Philippines. Where personal data is transferred to a country or territory outside the Philippines, phking365 ensures that such transfer complies with Section 21 of RA 10173, which requires that the recipient country provides an adequate level of protection for personal data, or that adequate contractual safeguards are in place through a data sharing agreement with appropriate data protection clauses.

phking365 does not transfer financial data (GCash numbers, bank details) outside the Philippines. All Philippine payment processing occurs entirely within Philippine payment infrastructure.

12 Amendments to This Privacy Policy

phking365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine law, PAGCOR regulations, our data processing practices, or the structure of the Platform. The "Last Updated" date at the top of this Policy will be revised accordingly.

Material changes to this Privacy Policy — such as changes to how we use your data or changes to your rights — will be communicated to registered Players via SMS to the mobile number on file or via a notification displayed upon next login to phking365.

Continued use of the phking365 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you disagree with any amendments, you should cease use of the Platform and contact our Data Privacy Officer to request account closure and data deletion.

13 Data Privacy Officer & Contact

phking365 has appointed a Data Privacy Officer (DPO) as required under Section 21 of RA 10173. The DPO is responsible for overseeing phking365's data protection program, handling data subject rights requests, managing data breach response, and liaising with the National Privacy Commission.

To exercise your data rights, submit a privacy inquiry, or raise a concern, contact our Data Privacy Officer through the following channels:

• Live Chat: Available 24/7 via the phking365 Platform. Select "Privacy & Data" from the support menu.
• Email: [email protected] — mark your subject line "Data Privacy Request". Responses within two (2) business days.

If you are not satisfied with phking365's response to your privacy request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) through official NPC channels.