ph265 Privacy Policy

1 Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how ph265 ("ph265," "we," "our," "us"), the operator of the online gaming platform at https://ph265.vip, collects, processes, stores, uses, and protects the personal information of its users ("Player," "you," "your") in connection with their use of the ph265 Platform and all related services.

ph265 operates as a PAGCOR (Philippine Amusement and Gaming Corporation)-licensed online gaming operator and is subject to the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. This Policy is also consistent with the Anti-Money Laundering Act (AMLA) as amended, and PAGCOR's data governance requirements.

This Policy applies to all personal data collected through the ph265 website (ph265.vip), the ph265 mobile interface, ph265 customer support channels (including live chat and email), and all associated promotional communications. By registering an account on ph265, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Identity of the Data Controller

For the purposes of the Data Privacy Act of 2012 (RA 10173) and all applicable Philippine data protection legislation, the personal data controller responsible for your data is ph265, the operator of the https://ph265.vip platform, duly licensed by PAGCOR to offer online gaming services in the Philippines.

ph265 has designated a Data Privacy Officer (DPO) in accordance with Section 21 of RA 10173 and Rule VIII of its Implementing Rules and Regulations. The DPO is responsible for overseeing ph265's data governance program, ensuring compliance with applicable privacy laws, and serving as the primary point of contact for data subject requests and NPC inquiries.

Contact details for the ph265 Data Privacy Officer are provided in Section 15 of this Policy.

3 Personal Data We Collect

ph265 collects personal data in the following categories:

3.1 Data You Provide Directly

3.2 Data Collected Automatically

4 Purpose & Legal Basis for Processing

ph265 processes your personal data on one or more of the following lawful bases as recognized under RA 10173 and its Implementing Rules:

• Performance of a Contract: Processing necessary to create and manage your ph265 account, process deposits and withdrawals, provide gaming services, and fulfill our obligations under the ph265 Terms and Conditions.
• Compliance with Legal Obligations: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), PAGCOR's Know Your Customer (KYC) directives, NPC data governance requirements, and other applicable Philippine laws and regulations.
• Legitimate Interests: Processing necessary for ph265's legitimate business interests, including fraud prevention, platform security, responsible gaming program administration, customer service delivery, and statistical analysis — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by law or where we have specifically requested your consent (e.g., for direct marketing communications), we process your data on the basis of your informed and freely given consent, which you may withdraw at any time without detriment.

5 How ph265 Uses Your Personal Data

ph265 uses the personal data it collects for the following specific purposes:

• Account Creation & Management: Creating and maintaining your ph265 account, verifying your identity and age (21+ requirement), processing login and session authentication, and maintaining account security;
• Payment Processing: Processing GCash, Maya, BPI, BDO, and USDT deposits and withdrawals; verifying payment instrument ownership; maintaining financial records as required by law;
• Gaming Services: Delivering games, recording game sessions and bet history, calculating winnings and losses, applying promotional bonuses to your account;
• KYC & AML Compliance: Verifying identity documents as required by PAGCOR and the AMLC; monitoring transactions for indicators of money laundering or fraudulent activity;
• Responsible Gaming: Enforcing deposit, loss, and session limits; managing self-exclusion requests; monitoring play patterns to identify potential problem gambling indicators; delivering responsible gaming communications;
• Customer Support: Responding to inquiries, resolving disputes, and maintaining support interaction records;
• Platform Security: Detecting and preventing unauthorized access, fraud, and abuse of the ph265 Platform;
• Marketing (with consent): Sending promotional emails, SMS alerts, and in-platform notifications about bonuses, new games, and special offers — only where you have not opted out;
• Analytics & Improvement: Analyzing aggregate, anonymized usage data to improve platform performance, game selection, and user experience for Filipino players.

6 Sharing & Disclosure of Personal Data

ph265 does not sell, rent, or trade your personal data. ph265 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Regulatory Authorities

ph265 is legally obligated to share certain data with PAGCOR (as our licensing authority), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where required by law, court order, or valid legal process. ph265 will not notify you of such disclosures where prohibited by applicable law.

6.2 Payment Processors

To process your GCash, Maya, BPI, BDO, and USDT transactions, ph265 shares necessary financial and identity data with payment processing partners. These partners are required by contract to process your data only for the purpose of completing the specific transaction and are prohibited from using it for their own purposes.

6.3 Game Software Providers

ph265's game library is powered by third-party game software providers. These providers may receive your account identifier and game session data to deliver the game service and calculate outcomes. They do not receive your full identity information, contact details, or financial data.

6.4 Technology & Security Service Providers

ph265 engages technology service providers for hosting infrastructure, cybersecurity monitoring, fraud detection, and platform analytics. These providers process data on ph265's behalf under strict data processing agreements and are prohibited from using your data for any purpose beyond the services they provide to ph265.

6.5 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving ph265's business, personal data held by ph265 may be transferred to the successor entity, subject to the same privacy protections described in this Policy. ph265 will notify affected users of any such transfer where required by RA 10173.

7 Cookies & Tracking Technologies

ph265 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyze how the Platform is used. Below is a summary of the types of cookies deployed by ph265:

You may configure your browser to refuse or delete cookies at any time. Disabling strictly necessary cookies will impair your ability to use the ph265 Platform. Disabling functional or analytics cookies will not prevent you from accessing gaming services but may affect your experience and session personalization.

8 Data Retention Periods

ph265 retains personal data only for as long as is necessary to fulfill the purposes outlined in this Policy, or as required by applicable Philippine law:

• Account & Identity Data: Retained for the duration of your active ph265 account plus a minimum of five (5) years following account closure, as required by PAGCOR record-keeping obligations and the AMLA;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC directives and BIR record-keeping requirements;
• KYC Documents: Retained for the duration of the account relationship plus five (5) years following account closure;
• Gaming Session Records: Retained for five (5) years from session date for audit and dispute resolution purposes;
• Customer Support Records: Retained for three (3) years from the date of the last interaction;
• Marketing Consent Records: Retained for three (3) years following withdrawal of consent or last interaction, whichever is later;
• Analytics Data: Retained in anonymized, aggregated form for up to five (5) years for platform improvement purposes.

After the applicable retention period, personal data will be securely deleted, anonymized beyond re-identification, or destroyed in accordance with NPC-approved disposal procedures.

9 Data Security Measures

ph265 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and ph265 servers is encrypted using TLS 1.2 or higher (HTTPS). Sensitive fields such as passwords and payment data are additionally encrypted at the application layer;
• Encryption at Rest: Sensitive personal data stored on ph265 databases is encrypted at rest using industry-standard AES-256 encryption;
• Access Controls: Access to personal data is strictly limited to ph265 personnel and authorized service providers who require it to perform their duties. Role-based access controls and multi-factor authentication are enforced for all staff accessing production systems;
• Password Security: Player account passwords are never stored in plain text. ph265 uses a strong, salted cryptographic hashing algorithm for all password storage;
• Intrusion Detection: ph265 maintains 24/7 automated monitoring for suspicious access patterns, data breach attempts, and unauthorized system access;
• Data Breach Response: In the event of a personal data breach affecting the rights of Filipino data subjects, ph265 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by RA 10173, and will notify affected players without undue delay.

10 Children & Minors — Strict 21+ Policy

ph265 employs mandatory age verification processes during registration and may request documentary proof of age at any time. If ph265 discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately, the account will be closed, and the matter will be handled in accordance with PAGCOR's underage gambling protocols.

If you are a parent or guardian and believe that a minor under your care has created an account on ph265, please contact our Data Privacy Officer immediately at [email protected] with subject line "MINORS — Urgent Data Deletion Request." ph265 will investigate and act within forty-eight (48) hours of receiving such a report.

11 Your Data Subject Rights Under RA 10173

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules, every Filipino data subject whose personal information is processed by ph265 has the following rights:

12 Cross-Border Data Transfers

ph265 is primarily a Philippine-based platform serving Filipino players. Some of ph265's service providers — including game software providers, cloud infrastructure operators, and cybersecurity services — may be located in jurisdictions outside the Philippines. Where personal data is transferred outside the Philippines, ph265 ensures that:

• The receiving country provides an adequate level of data protection recognized by the NPC, or
• Appropriate safeguards are in place through contractual clauses that impose data protection obligations equivalent to Philippine standards, or
• The transfer is necessary for the performance of your gaming contract or the execution of payment transactions requested by you.

ph265 maintains a record of all international data transfers and the safeguards applicable to each. You may request information about specific international transfer arrangements by contacting the Data Privacy Officer.

13 Marketing Communications & Opt-Out

With your consent, ph265 may contact you via SMS to your registered Philippine mobile number, by email to your registered address, and via in-platform notifications about bonus offers, new game releases, promotions, and VIP program updates.

You can opt out of marketing communications at any time through any of the following methods:

• Adjusting your communication preferences in your ph265 Account Settings page;
• Replying "STOP" to any SMS message sent by ph265;
• Clicking the unsubscribe link in any ph265 marketing email;
• Contacting the ph265 Data Privacy Officer at [email protected] to request complete marketing opt-out.

Opting out of marketing communications does not affect ph265's ability to send you transactional or service-related messages — such as deposit confirmations, withdrawal notifications, KYC verification requests, and responsible gaming alerts. These communications are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

14 Changes to This Privacy Policy

ph265 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, PAGCOR directives, or NPC guidance. All revisions will be published on this page with an updated "Last Revised" date at the top of the Policy.

For material changes that significantly affect how ph265 processes your personal data — particularly changes to data sharing practices or your rights — ph265 will provide advance notice via in-platform notification and/or email to your registered address at least fourteen (14) days prior to the effective date of the change.

Your continued use of the ph265 Platform following the effective date of a revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree with any revision, please discontinue use of the Platform and contact the Data Privacy Officer to request account closure.

15 Data Privacy Officer — Contact Information

For all data privacy matters including data subject rights requests, privacy complaints, questions about this Policy, or suspected personal data breaches involving your ph265 account, please contact the ph265 Data Privacy Officer:

When contacting the Data Privacy Officer, please include your ph265 registered mobile number or username in your message to allow us to locate your account, the specific right you wish to exercise or the privacy concern you wish to raise, and any supporting information relevant to your request.