ph32 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, stored, and shared by ph32 in connection with the operation of the ph32.asia online casino and sports betting platform, including all games, wallet services, promotions, customer support interactions, and communications directed at Filipino players.

ph32 acts as the Personal Information Controller (as defined under Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations) with respect to the personal data of players who register and interact with ph32.asia. ph32 is responsible for determining the purposes and means of processing personal data collected through the Platform.

This Policy applies to all individuals who access or use ph32.asia, including registered players, prospective players who browse the Platform without registering, and individuals who contact ph32 support. By using the ph32 Platform, you acknowledge that you have read and understood this Privacy Policy.

ph32 collects the following categories of personal data from players, to the extent necessary for the purposes described in this Policy:

2.1 Account Registration Data

• Philippine mobile number (primary account identifier)
• Date of birth (for age verification — 21+ requirement)
• Full legal name (collected during KYC verification)
• Password (stored in hashed, encrypted form — ph32 never stores plain-text passwords)

2.2 Identity Verification (KYC) Data

• Copies of Philippine government-issued identification documents (e.g., Philippine passport, driver's license, SSS ID, PhilSys National ID, UMID)
• Selfie or facial image submitted for document verification purposes
• Proof of address documentation (where required)
• Source of funds documentation (where required for enhanced due diligence)

2.3 Financial & Payment Data

• GCash mobile number linked to your account
• Maya (PayMaya) account details
• Bank account details for BPI, BDO, UnionBank, or Metrobank withdrawals
• USDT TRC20 wallet address (for crypto deposits/withdrawals)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used

2.4 Gaming Activity Data

• Game session history, bet amounts, win/loss records
• Game preferences and play patterns
• Responsible gaming tool settings (deposit limits, session controls, self-exclusion status)

2.5 Technical & Device Data

• IP address and approximate geolocation (country/region level)
• Device type, operating system, browser type and version
• Session timestamps and login history
• Cookie identifiers and session tokens

2.6 Communications Data

• Records of live chat conversations with ph32 support
• Email correspondence with ph32 support
• Support ticket history and complaint records

ph32 collects personal data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact support, participate in promotions, or respond to surveys.
• Automatically through the Platform — through cookies, web server logs, and session tracking technologies when you visit and interact with ph32.asia. This includes IP address logging, device fingerprinting, and clickstream data.
• From payment service providers — ph32 receives transaction confirmation data from GCash, Maya, BPI, BDO, and other payment providers when you make deposits or withdrawals. ph32 does not store full bank account or card numbers.
• From identity verification services — where ph32 uses a third-party KYC verification provider, that provider may share verification results and extracted document data with ph32 pursuant to the verification process.
• From regulatory authorities — PAGCOR or other competent Philippine authorities may provide information to ph32 in connection with regulatory compliance or law enforcement cooperation.

ph32 uses the personal data it collects for the following specific purposes:

ph32 does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review process.

ph32 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing necessary to perform the contract between you and ph32 — including account creation, payment processing, game access, and support services.
• Legal obligation: Processing required to comply with applicable Philippine law, PAGCOR regulations, Anti-Money Laundering Act (AMLA) obligations, and lawful orders from competent authorities.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your data privacy rights.
• Consent: Processing for optional activities such as promotional communications, where you have expressly opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ph32 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. ph32 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO Unibank, UnionBank of the Philippines, and other Philippine payment providers — for the purpose of processing deposits and withdrawals to and from your ph32 account.
• KYC and identity verification providers: Third-party identity verification service providers contracted by ph32 to process document verification and age verification in connection with ph32's KYC obligations.
• Game content providers: Software providers who supply the games available on ph32 may receive session and game outcome data necessary to render and validate game results.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine regulatory and law enforcement authorities — where disclosure is required by law or pursuant to a lawful order.
• IT infrastructure providers: Cloud hosting, server, and cybersecurity service providers who process data on ph32's behalf under data processing agreements that impose confidentiality and security obligations.
• Legal and compliance advisers: Legal counsel and compliance consultants engaged by ph32 in connection with regulatory matters, litigation, or dispute resolution, under strict professional confidentiality obligations.

All third-party service providers who receive personal data from ph32 are required to process such data only as instructed by ph32, to implement adequate security measures, and to comply with applicable data protection law.

ph32.asia uses cookies and similar tracking technologies to operate the Platform, maintain session state, prevent fraud, and improve the player experience. The following types of cookies are used:

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in during a play session and security cookies used to detect and prevent fraudulent activity. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings, game lobby layout preferences, and responsible gaming tool configurations to improve your experience across sessions.
• Analytics cookies: Used by ph32 to collect aggregated, anonymized data about how players navigate and use the Platform. This helps ph32 identify and resolve usability issues. Analytics data does not directly identify individual players.
• Security and fraud prevention cookies: Used to track device fingerprint data and identify patterns associated with account takeover, bonus abuse, or multi-accounting.

You may control cookie settings through your browser settings. However, disabling essential cookies will prevent you from logging in or using the ph32 Platform. ph32 does not use third-party advertising cookies or cookies that track you across unrelated websites.

ph32 implements technical, organizational, and administrative security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and ph32 servers.
• Encryption at rest for sensitive personal data and financial records stored on ph32 infrastructure.
• Passwords are processed using industry-standard cryptographic hashing algorithms. ph32 does not store or transmit plain-text passwords.
• Role-based access controls restricting employee access to personal data to only those personnel who require it for their job functions.
• Regular security vulnerability assessments and penetration testing of the ph32 Platform.
• Multi-factor authentication required for internal administrative systems that contain player data.
• Logging and monitoring of access to systems containing personal data, with anomaly detection alerting.

In the event ph32 becomes aware of a personal data breach that creates a risk to the rights and freedoms of affected players, ph32 will notify the National Privacy Commission (NPC) and affected players within the timeframes prescribed by RA 10173 and applicable NPC regulations.

ph32 retains personal data only for as long as necessary to fulfill the specific purpose for which it was collected, or as required by Philippine law and regulatory obligations. The following general retention principles apply:

• Active account data: Retained for the duration of your active ph32 account and for a minimum of five (5) years following account closure, in compliance with the Anti-Money Laundering Act (AMLA) and PAGCOR record-keeping requirements.
• KYC documents: Retained for the period required under AMLA — generally a minimum of five (5) years from the date of the transaction or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with AMLA and applicable tax law requirements.
• Support communications: Retained for a minimum of three (3) years to support dispute resolution.
• Technical and device data (logs): Retained for a period of up to twelve (12) months for security monitoring purposes, after which they are deleted or anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual. Aggregated, anonymized analytics data may be retained indefinitely as it does not constitute personal data.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph32:

To exercise any of the above rights, contact ph32 customer support via live chat at ph32.asia or by email at the address shown in the Contact section. ph32 will respond to verifiable data subject requests within thirty (30) calendar days. ph32 may require identity verification before processing your request.

Please note that some rights are subject to limitations — for example, the right to erasure does not apply where ph32 is required to retain your data to comply with AMLA or PAGCOR record-keeping obligations. Where ph32 cannot fulfill a request in full, it will explain the applicable limitation.

The ph32 Platform is strictly restricted to individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gambling in the Philippines. ph32 does not knowingly collect personal data from individuals under the age of 21.

If ph32 becomes aware that personal data has been collected from a player who is under the age of 21 — whether through registration fraud, document falsification, or any other means — ph32 will immediately suspend the relevant account, delete or anonymize the personal data associated with that account, and forfeit any balances in accordance with ph32's Terms and Conditions.

If you have reason to believe that a person under 21 has registered on ph32, please contact ph32 support immediately via live chat or email so that the matter can be investigated and resolved promptly.

ph32 primarily processes and stores player data on servers located within the Philippines or in jurisdictions that provide adequate data protection under Philippine law. Where ph32 uses service providers (such as international cloud infrastructure providers or game content suppliers) who process data outside the Philippines, ph32 implements appropriate safeguards to ensure that such transfers comply with the requirements of the Philippine Data Privacy Act.

These safeguards include contractual clauses requiring overseas recipients to apply data protection standards equivalent to those required under Philippine law, and conducting due diligence assessments of the data protection practices of service providers before engaging them to process Philippine player data.

By using the ph32 Platform, you acknowledge that your personal data may be transferred to and processed in countries other than the Philippines in connection with the services described in this Policy, subject to the safeguards described above.

ph32 may update this Privacy Policy from time to time to reflect changes in the Platform, applicable law, or ph32's data processing practices. When material changes are made, ph32 will provide notice to players via the email address or mobile number associated with their account, or through a prominent notice on the ph32.asia homepage.

The effective date and last-updated date at the top of this Privacy Policy will be revised each time the Policy is updated. The most current version of this Privacy Policy is always available at https://ph32.asia/privacy-policy.

Your continued use of the ph32 Platform following the posting of a revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree with a material change, you may close your account before the change takes effect by contacting ph32 support.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ph32, please contact the ph32 Data Privacy team through the following channels:

• Live Chat: Available 24/7 via the live chat widget on ph32.asia. For privacy-related matters, please state "Privacy Request" at the start of your chat so your inquiry is routed to the appropriate team.
• Email: [email protected] — for formal data access requests, rectification requests, erasure requests, and other data privacy matters. Please use the subject line "Data Privacy – [Your Registered Mobile Number]" to facilitate prompt handling.

ph32 will acknowledge privacy-related inquiries within five (5) business days and provide a substantive response within thirty (30) calendar days, unless the complexity of the request requires additional time, in which case ph32 will inform you of the expected timeline.