php38 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how php38 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal information of individuals ("User", "Player", "you", "your") who access or use the php38 online casino platform at https://php38.net and its associated services.

php38 is committed to protecting the privacy and personal data of all players, with particular regard to the rights of Filipino users under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. We take our obligations as a personal information controller seriously and have implemented appropriate technical and organisational measures to safeguard your data.

This Policy should be read alongside the php38 Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of php38.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, php38 acts as the personal information controller in respect of the personal data collected through the php38 platform. As the controller, php38 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions or concerns regarding the processing of your personal data by php38, you may contact our Data Protection Officer through the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

php38 collects the following categories of personal data from players and platform users:

3.1 Identity and Contact Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (for age verification — players must be 21 years or older);
• Residential address, including city, province, and postal code;
• Email address and mobile phone number;
• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys ID, driver's licence) submitted for KYC verification.

3.2 Financial Data

• GCash or PayMaya / Maya account details (mobile number associated with the e-wallet);
• Bank account details for bank transfer transactions (bank name, account name, account number);
• Debit card details (card number, expiry date — stored in tokenised form only);
• Transaction history, including deposit and withdrawal records.

3.3 Gaming and Account Data

• php38 account username and encrypted password;
• Gaming history, including games played, bets placed, wins, and losses;
• Bonus and promotion usage history;
• Responsible gaming settings, including deposit limits and self-exclusion status;
• Customer support communications and complaint records.

3.4 Technical and Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used on the php38 platform;
• Cookie identifiers and similar tracking technologies (see Section 10).

4 How We Collect Your Data

php38 collects personal data through the following means:

• Direct collection: Information you provide when registering a php38 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access the php38 platform, including through cookies, log files, and analytics tools;
• Third-party sources: Identity verification data from KYC service providers; payment confirmation data from payment processors such as GCash, Maya, and partner banks; fraud prevention data from third-party screening services.

5 How We Use Your Personal Data

php38 uses your personal data for the following purposes:

php38 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6 Legal Basis for Processing

php38 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the php38 Terms & Conditions, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, PAGCOR regulatory requirements, and tax obligations;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing and Disclosure

7.1 Service Providers

php38 shares personal data with carefully selected third-party service providers who assist in operating the platform, including: KYC and identity verification providers; payment processors (GCash, Maya, partner banks); game software providers; customer support platform providers; and IT infrastructure and hosting providers. All service providers are contractually bound to process personal data only on php38's instructions and to maintain appropriate security standards.

7.2 Regulatory and Law Enforcement Authorities

php38 may disclose personal data to regulatory authorities (including PAGCOR and the Anti-Money Laundering Council), law enforcement agencies, or courts where required by applicable Philippine law or a valid legal order. php38 will notify affected users of such disclosures where legally permitted to do so.

7.3 No Sale of Personal Data

php38 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Any sharing of data is limited to what is strictly necessary for the purposes described in this Policy.

8 Data Retention

php38 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your php38 account and for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations;
• Gaming history: Retained for the duration of your account and for three (3) years following account closure;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, php38 will securely delete or anonymise your personal data in accordance with our data disposal procedures.

9 Data Security

php38 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the php38 platform is encrypted using 256-bit SSL/TLS technology. Sensitive data at rest is encrypted using industry-standard algorithms;
• Access controls: Access to personal data is restricted to authorised php38 personnel and service providers on a strict need-to-know basis;
• Secure infrastructure: php38 operates on secure, regularly audited server infrastructure with firewalls, intrusion detection systems, and regular vulnerability assessments;
• Password security: Player passwords are stored in hashed form and are never accessible in plain text by php38 staff;
• Incident response: php38 maintains a data breach response procedure and will notify affected users and the National Privacy Commission in the event of a breach that poses a risk to your rights and freedoms, as required by law.

While php38 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your php38 login credentials and for notifying us immediately of any suspected unauthorised access to your account.

10 Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the php38 platform. They help us recognise your device, remember your preferences, and understand how you use our platform so we can improve your experience.

10.2 Types of Cookies Used by php38

• Strictly necessary cookies: Essential for the php38 platform to function, including session management and security features. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and login status to provide a more personalised experience;
• Analytics cookies: Help php38 understand how players use the platform, which pages are most visited, and where improvements can be made. Data collected is aggregated and anonymised where possible;
• Marketing cookies: Used only with your consent to deliver relevant promotional content about php38 offers and games.

10.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the php38 platform. Instructions for managing cookies are available in your browser's help documentation.

11 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by php38:

• Right to be informed: The right to know what personal data php38 collects and how it is processed — as set out in this Policy;
• Right of access: The right to request a copy of the personal data php38 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the php38 Data Protection Officer using the contact details in Section 15. php38 will respond to all verified requests within fifteen (15) business days of receipt.

12 Minors and Age Restriction

The php38 platform is strictly restricted to individuals who are 21 years of age or older. php38 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If php38 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on php38, please contact our support team immediately.

13 International Data Transfers

In the course of operating the php38 platform, your personal data may be transferred to and processed in countries outside the Philippines, for example where our technology infrastructure or service providers are located. Where such transfers occur, php38 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law, including through contractual data protection clauses with recipient organisations.

php38 will not transfer your personal data to a foreign country or international organisation unless that country or organisation provides an adequate level of protection for personal data, or appropriate safeguards have been implemented.

14 Changes to This Privacy Policy

php38 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, php38 will notify registered players by posting a notice on the platform or by email. The date of the most recent revision is displayed at the top of this page.

Your continued use of the php38 platform following notification of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how php38 protects your personal data.

15 Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by php38, please contact our Data Protection Officer. Our support team is available 24 hours a day, 7 days a week through the live chat feature on the php38 platform.

You may also reach us by email. Our support email address is displayed in the footer of every php38 page as plain text. We aim to respond to all privacy-related enquiries within five (5) business days.

For complaints that cannot be resolved directly with php38, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.