ph344 Privacy Policy

1.1 This Privacy Policy ("Policy") describes how ph344 ("ph344," "we," "us," "our") collects, uses, stores, and protects the personal data of users ("Player," "User," "you") who access or use the ph344 platform, including the website at https://ph344.app and any associated mobile or digital services (collectively, the "Platform").

1.2 ph344 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC") of the Philippines.

1.3 By registering for a ph344 account or using the Platform in any manner, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

1.4 This Policy should be read together with ph344's Terms & Conditions, which are available at /terms-conditions, and which are incorporated herein by reference.

2.1 For the purposes of the Data Privacy Act of 2012, ph344 is the personal information controller in respect of the personal data collected through the Platform. ph344 determines the purposes and means of processing your personal data.

2.2 ph344 has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at any time with questions or concerns regarding the processing of your personal data. Contact details are provided in Section 15 of this Policy.

2.3 Where ph344 engages third-party service providers to process personal data on its behalf, such providers act as personal information processors and are bound by data processing agreements that require them to process data only on ph344's documented instructions and in compliance with applicable Philippine data protection law.

3.1 ph344 collects the following categories of personal data from players:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (to verify the 21+ age requirement);
• Nationality and country of residence;
• Username and account credentials (password stored in hashed form only);
• Government-issued identification number (e.g., PhilSys ID, passport, driver's licence).

3.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (city, province, postal code).

3.3 Financial Data

• GCash or Maya (PayMaya) account reference (masked);
• Bank account details for withdrawal processing (account name and number, masked);
• Debit card details (card number masked, expiry date);
• Transaction history including deposits, withdrawals, and wager records.

3.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration, login timestamps, and activity logs;
• Game history, betting patterns, and platform interaction data.

3.5 Verification Data

• Copies of government-issued identification documents submitted for KYC verification;
• Selfie or liveness check images submitted during identity verification;
• Source of funds documentation where required by AML regulations.

4.1 ph344 uses your personal data for the following specific purposes:

4.2 ph344 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate legal basis for such processing.

5.1 ph344 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Consent: Where you have given clear, informed, and freely given consent to the processing of your personal data for a specific purpose, such as receiving marketing communications from ph344;
• Contract Performance: Where processing is necessary for the performance of the contract between you and ph344, including account management, game provision, and payment processing;
• Legal Obligation: Where processing is necessary for ph344 to comply with a legal obligation under Philippine law, including KYC/AML requirements, PAGCOR regulatory reporting, and tax obligations;
• Legitimate Interest: Where processing is necessary for the purposes of ph344's legitimate interests, such as fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your rights and interests.

5.2 Where ph344 relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent may be effected through your account settings or by contacting ph344 support.

6.1 ph344 does not sell, rent, or trade your personal data to third parties. ph344 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify your identity and comply with regulatory requirements;
• Payment Processors: Philippine payment service providers (including GCash, Maya, and partner banks) engaged to process your deposits and withdrawals;
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities where disclosure is required by law;
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers engaged to operate and secure the Platform;
• Customer Support Providers: Third-party customer support platforms used to manage player inquiries and complaints;
• Professional Advisers: Legal, accounting, and auditing firms engaged by ph344 in the ordinary course of business, subject to professional confidentiality obligations.

6.2 All third-party recipients of personal data are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with ph344's instructions and applicable Philippine data protection law.

6.3 In the event of a merger, acquisition, or sale of all or substantially all of ph344's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

7.1 ph344 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help ph344 recognize you, remember your preferences, and analyze how the Platform is used.

7.2 ph344 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality;
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations;
• Analytics Cookies: Collect anonymized data about how players use the Platform to help ph344 improve the user experience. Data collected is aggregated and does not identify individual players;
• Marketing Cookies: Used to deliver relevant promotional content to you based on your interests and Platform activity. These are only activated with your explicit consent.

7.3 You may manage your cookie preferences at any time through your browser settings or through the cookie preference centre available on the Platform. Please note that disabling certain cookies may affect the functionality of the Platform.

8.1 ph344's security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph344's servers;
• AES-256 encryption for sensitive data stored at rest, including financial information and identity documents;
• Bcrypt hashing for all stored passwords — ph344 never stores passwords in plain text;
• Multi-factor authentication options for player accounts;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• 24/7 security monitoring and intrusion detection systems;
• Regular staff training on data protection and information security best practices.

8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph344 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the requirements of the Data Privacy Act of 2012.

8.3 While ph344 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your ph344 account credentials and for notifying ph344 immediately of any suspected unauthorized access.

9.1 ph344 retains your personal data for as long as your account remains active and for such additional period as is necessary to comply with ph344's legal and regulatory obligations under Philippine law.

9.2 The following retention periods apply to the main categories of personal data held by ph344:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and AML obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments;
• KYC verification documents: Retained for a minimum of five (5) years following account closure;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

9.3 Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymized. Anonymized data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

10.1 Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph344:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy;
• Right of Access: The right to obtain a copy of the personal data ph344 holds about you, along with information about how it is being processed;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected or updated;
• Right to Erasure: The right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph344's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

10.2 To exercise any of the above rights, please contact ph344's Data Protection Officer using the contact details provided in Section 15. ph344 will respond to all valid requests within thirty (30) days of receipt, in accordance with the requirements of the DPA.

10.3 ph344 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to unauthorized parties.

11.1 The ph344 Platform is strictly intended for individuals who are 21 years of age or older. ph344 does not knowingly collect personal data from individuals under the age of 21.

11.2 If ph344 becomes aware that personal data has been collected from an individual under the age of 21, ph344 will take immediate steps to delete such data and close the associated account. Any funds held in such an account will be handled in accordance with applicable Philippine law and PAGCOR regulations.

11.3 If you believe that ph344 may have inadvertently collected personal data from a minor, please contact ph344 support immediately using the contact details in Section 15.

12.1 With your consent, ph344 may send you promotional communications about new games, bonuses, and special offers available on the Platform. You may provide or withdraw your consent to receive marketing communications at any time through your account settings or by following the unsubscribe instructions included in any marketing email.

12.2 Even if you opt out of marketing communications, ph344 will continue to send you transactional and service-related communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.

12.3 ph344 will not send marketing communications to players who have activated a self-exclusion or cooling-off period under ph344's responsible gaming tools, for the duration of such exclusion or cooling-off period.

13.1 The ph344 Platform may contain links to third-party websites or services. This Privacy Policy applies solely to the ph344 Platform and does not extend to any third-party websites or services. ph344 is not responsible for the privacy practices of any third-party websites and encourages you to review the privacy policies of any third-party sites you visit.

13.2 The inclusion of any link on the ph344 Platform does not imply endorsement by ph344 of the linked website or service.

14.1 ph344 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email and/or a prominent notice on the Platform at least seven (7) days before the changes take effect.

14.2 The date of the most recent revision of this Policy is indicated at the top of this page. Your continued use of the ph344 Platform following the effective date of any revision constitutes your acceptance of the revised Policy.

14.3 If you do not agree with any changes to this Policy, you must cease using the Platform and may request account closure by contacting ph344 support.

15.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ph344, please contact our Data Protection Officer:

15.2 If you are not satisfied with ph344's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the supervisory authority responsible for enforcing the Data Privacy Act of 2012 in the Philippines.

15.3 This Privacy Policy was last updated on January 1, 2026. By continuing to use the ph344 Platform after this date, you confirm your acceptance of this Policy.