ph2345 Privacy Policy

This Privacy Policy ("Policy") describes how ph2345 ("ph2345," "we," "us," or "our") collects, uses, processes, stores, shares, and protects the personal data of players, visitors, and other individuals who interact with the ph2345 online gaming platform available at ph2345.net and any associated mobile applications or subdomains (collectively, the "Platform").

ph2345 is a PAGCOR-licensed online gaming operator. As the entity that determines the purposes and means of processing your personal data, ph2345 is the personal information controller (PIC) in respect of all personal data processed in connection with the Platform, as defined under the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR").

ph2345 is registered with the National Privacy Commission of the Philippines as a personal information controller. A dedicated Data Protection Officer ("DPO") has been appointed to oversee ph2345's compliance with the DPA and to serve as the primary point of contact for all data privacy matters. DPO contact details are provided in Section 13 of this Policy.

By registering a ph2345 account or by otherwise using the Platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. This Policy should be read alongside the ph2345 Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform.

ph2345 collects personal data from you directly (when you provide it to us), automatically (when you use the Platform), and from third parties (such as payment processors and KYC verification providers). The categories of personal data we collect are described in the table below.

ph2345 does not intentionally collect special categories of sensitive personal information beyond what is necessary for KYC compliance, such as health data, religious beliefs, or political affiliations. If you voluntarily disclose such information in a support interaction, we will treat it with the heightened level of protection appropriate for sensitive personal information under the DPA.

ph2345 uses your personal data only for the specific, legitimate purposes described below. We do not use your personal data for any purpose incompatible with these stated purposes without first obtaining your consent or establishing a separate legal basis under the DPA.

• Account creation and management: To register your ph2345 account, verify your identity, maintain your account settings, and manage your relationship with ph2345 as an active player.
• Age and identity verification (KYC): To confirm that you meet the minimum age requirement of 21 years as required by PAGCOR regulations, and to verify that you are the legitimate owner of the payment methods linked to your account.
• Service delivery: To provide access to ph2345 games, process deposits and withdrawals, administer bonuses and promotions, and deliver the full functionality of the ph2345 Platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as described in the ph2345 Terms & Conditions. ph2345 uses automated fraud detection systems that analyse gaming and financial behaviour patterns to identify suspicious activity.
• Legal and regulatory compliance: To comply with our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws. This includes mandatory reporting of covered and suspicious transactions to the Anti-Money Laundering Council (AMLC).
• Customer support: To respond to your enquiries, resolve complaints, and provide technical assistance through ph2345's live chat, email, and social messaging channels.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, apply self-exclusion restrictions at your request, enforce deposit limits, and comply with PAGCOR's responsible gaming requirements.
• Marketing communications: To send you promotional offers, game updates, and ph2345 news where you have consented to receive such communications. You may withdraw this consent at any time via your account notification settings.
• Platform improvement: To analyse aggregate, anonymised usage data and improve the performance, design, and game selection of the ph2345 Platform.

Under the Data Privacy Act of 2012, ph2345 is required to identify and document a lawful basis for each processing activity involving your personal data. The legal bases on which ph2345 relies are as follows:

• Performance of contract: The majority of ph2345's data processing activities are necessary for the performance of the gaming services contract between you and ph2345 — including account management, deposits, game play, and withdrawals. Without this processing, ph2345 cannot deliver its services to you.
• Legal obligation: Certain processing activities — particularly KYC verification, AMLC transaction reporting, PAGCOR regulatory reporting, and data retention for audit purposes — are required by Philippine law regardless of your preferences.
• Legitimate interests: ph2345 processes certain technical and gaming activity data based on our legitimate interest in maintaining the security and integrity of the Platform, preventing fraud, and improving our services, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, the use of non-essential cookies, and any processing of sensitive personal information beyond what is strictly required for KYC purposes is conducted on the basis of your freely given, specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ph2345 does not sell, rent, or trade your personal data. We share your personal data with third parties only in the following limited circumstances, and always subject to appropriate contractual data protection safeguards:

• Payment processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), GrabPay, BPI, BDO, Metrobank, and InstaPay network participants receive the minimum personal data necessary to process your deposit or withdrawal transaction. All payment processors used by ph2345 are regulated by the Bangko Sentral ng Pilipinas (BSP) and maintain their own data protection obligations.
• KYC and identity verification providers: ph2345 engages third-party KYC technology providers to assist with document verification and age confirmation. These providers act as personal information processors and process your data only on ph2345's documented instructions.
• Game providers: Third-party game providers may receive a pseudonymous player ID and session data necessary to deliver game content and maintain game integrity. Game providers do not receive your full identity data.
• Regulatory authorities: ph2345 is required by law to share data with PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine government agencies upon their lawful request or as required by our licensing conditions.
• Law enforcement: ph2345 will disclose personal data to Philippine law enforcement agencies where required by a valid court order, subpoena, or other lawful directive.
• Professional advisers: ph2345's legal counsel, auditors, and compliance consultants may access personal data on a need-to-know basis and are bound by professional confidentiality obligations.

The ph2345 Platform uses cookies and similar tracking technologies to deliver core Platform functionality, improve user experience, and — where you have given consent — to serve relevant promotions. The types of cookies used by ph2345 are described below.

You may manage your cookie preferences at any time through the cookie settings panel accessible via the footer of the ph2345 Platform. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics and marketing cookies will not affect your access to games or account functionality.

ph2345 does not use third-party advertising network cookies that track your browsing activity across external websites unrelated to the ph2345 Platform.

ph2345 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• AES-256 encryption for all personal data stored in ph2345 databases
• TLS 1.3 protocol for all data transmitted between your device and ph2345 servers
• Salted cryptographic hashing of account passwords — ph2345 staff cannot view your password in plaintext
• Multi-factor authentication (MFA) options available for all ph2345 player accounts
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• 24/7 security monitoring and automated anomaly detection on all Platform systems
• PCI-DSS-compliant payment processing — payment card data is never stored on ph2345 servers
• Regular staff data privacy and security training programmes

In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected individuals, ph2345 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay in accordance with our obligations under the DPA and NPC Circular No. 16-03.

ph2345 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or for such longer period as is required by applicable Philippine law or PAGCOR licensing conditions. The principal retention periods applied by ph2345 are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and Platform improvement purposes.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph2345. To exercise any of these rights, contact ph2345's Data Protection Officer using the details in Section 13. ph2345 will respond to all data subject requests within 15 business days of receipt.

The ph2345 Platform is strictly for adults aged 21 years and above, as required under PAGCOR regulations. ph2345 does not knowingly collect personal data from individuals under the age of 21. If ph2345 becomes aware that a minor has registered an account or provided personal data to the Platform, the account will be immediately suspended, the personal data will be securely deleted without undue delay, and the matter will be reported to PAGCOR in accordance with our licensing obligations.

Parents and guardians who have reason to believe that a minor in their household has accessed the ph2345 Platform or provided personal data to ph2345 are encouraged to contact ph2345 support immediately at [email protected]. ph2345 will investigate and act on such reports as a matter of priority.

Some of ph2345's third-party service providers — including certain game providers and technology platform partners — may be located outside the Philippines. Where ph2345 transfers personal data to a recipient in a country that has not been recognised by the NPC as providing an adequate level of data protection, ph2345 ensures that one of the following safeguards is in place prior to the transfer:

• A data processing agreement incorporating the NPC's standard contractual clauses or equivalent binding contractual protections
• Binding corporate rules where the transfer is within a corporate group subject to NPC-approved privacy governance
• Your explicit consent to the specific transfer, where the transfer is not covered by the above and consent is the appropriate mechanism

ph2345 maintains a register of all cross-border data transfers and reviews the adequacy of safeguards on an annual basis or whenever a material change occurs in the circumstances of a transfer. This register is available for review by the NPC upon request.

ph2345 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. The date of the most recent update is always displayed at the top of this page.

Where ph2345 makes a material change to this Policy — meaning a change that significantly affects the way in which we process your personal data or that limits your rights — we will notify you by email to the address registered on your ph2345 account and by displaying a prominent notice on the Platform for a period of no less than 14 days before the change takes effect. Your continued use of the ph2345 Platform after the effective date of any material change constitutes your acceptance of the updated Policy.

For minor or administrative updates — such as correcting typographical errors, clarifying existing practices, or updating contact details — ph2345 may make the change effective immediately upon publication. The version number and effective date displayed at the top of this page will always reflect the current version of this Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a potential data privacy concern, please contact ph2345's Data Protection Officer using the details below. All data subject requests and privacy enquiries are handled exclusively by the DPO team to ensure consistent, compliant responses.

When submitting a data subject request, please include your full name, registered email address, and a clear description of the right you wish to exercise or the concern you wish to raise. ph2345 may need to verify your identity before processing your request to ensure that personal data is not disclosed to unauthorised parties.

If you are not satisfied with ph2345's response to your data subject request or privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC's official contact and complaints portal is available through Philippine government channels. ph2345 fully cooperates with all NPC investigations and inquiries.