ph33b Privacy Policy

1 Introduction

ph33b ("ph33b," "we," "us," "our") operates the online gaming platform accessible at https://ph33b.vip and its associated mobile interface (the "Platform"). In the course of providing gaming, payment, and related services to Filipino players, ph33b collects and processes personal data. We are committed to handling that data responsibly, transparently, and in accordance with the Data Privacy Act of 2012, the regulations issued by the National Privacy Commission ("NPC") of the Philippines, and other applicable data protection legislation.

This Privacy Policy applies to all personal data we collect and process in connection with your use of ph33b — whether you are a registered account holder, a visitor browsing the Platform without an account, or a person who contacts our support team. By accessing or using ph33b, you acknowledge that you have read and understood this Privacy Policy. If you are a registered ph33b account holder, this Policy forms part of the agreement between you and ph33b and should be read alongside our Terms & Conditions.

ph33b acts as the personal information controller ("PIC") in respect of the personal data described in this Policy, except where we act as a personal information processor on behalf of a third-party controller, in which case the relevant controller's privacy policy will apply. Our Data Protection Officer ("DPO") contact details are provided in Section 14.

2 Personal Data We Collect

ph33b collects personal data in the following categories, depending on your level of engagement with the Platform:

ph33b does not collect sensitive personal information as defined under the DPA (such as racial/ethnic origin, religious beliefs, health/medical data, or trade union membership) except where strictly required to comply with AML/KYC obligations imposed by applicable law or regulatory authority. Where such data is required, explicit consent will be obtained.

3 How We Collect Personal Data

ph33b collects personal data through the following means:

• Direct Provision: Data you provide voluntarily when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Technical Collection: Data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the Platform. This includes IP addresses, device identifiers, and browsing behavior within ph33b.
• Third-Party Sources: Data received from payment service providers (GCash, Maya, BPI, BDO, UnionBank, and others) in connection with payment processing; identity verification data from KYC/AML service providers; and fraud-prevention signals from cybersecurity services engaged by ph33b.
• Regulatory Sources: In limited circumstances, data from PAGCOR, the Anti-Money Laundering Council ("AMLC"), or other competent authorities in connection with ph33b's regulatory obligations.

4 Purpose of Processing

ph33b processes your personal data for the following specific purposes:

1. Account Management: To create, maintain, verify, and administer your ph33b account, including identity verification and KYC compliance required under applicable Philippine gaming and financial regulations.
2. Service Delivery: To provide you access to ph33b's gaming services — including slots, live casino, sports betting, sabong, bingo, and fishing games — and to process your deposits, wagers, winnings, and withdrawals.
3. Regulatory Compliance: To meet ph33b's legal obligations under PAGCOR regulations, the Anti-Money Laundering Act ("AMLA"), Republic Act No. 9160 as amended, the DPA, and other applicable Philippine law. This includes transaction monitoring, suspicious activity reporting, and retention of records for the periods prescribed by law.
4. Security and Fraud Prevention: To detect, prevent, and investigate fraud, account compromise, money laundering, unauthorized access, cheating, and other prohibited conduct on the Platform.
5. Customer Support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance.
6. Responsible Gaming: To administer voluntary self-exclusion, deposit limits, and cooling-off periods; to identify players who may be exhibiting problem gambling behaviors; and to fulfill ph33b's duty of care obligations.
7. Marketing (with consent): To send you promotional offers, bonus notifications, and gaming updates via SMS or email — only where you have explicitly opted in. You may withdraw marketing consent at any time through your account settings or by contacting support.
8. Platform Improvement: To analyze aggregated, anonymized usage data to improve ph33b's user interface, game library, and payment systems.

ph33b will not use your personal data for any purpose incompatible with those described above without first providing you with notice and, where required by law, obtaining your consent.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, ph33b processes your personal data on the following lawful bases:

• Contractual Necessity: Processing required to perform the agreement between you and ph33b (account operation, payment processing, game delivery).
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR licensing requirements, AMLA obligations, NPC directives, and court orders.
• Legitimate Interests: Processing for fraud prevention, security, platform improvement, and responsible gaming monitoring, where our legitimate interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing purposes, where consent has been explicitly given and can be withdrawn at any time without detriment to your use of the Platform.

6 Sharing Your Personal Data

ph33b does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Service Providers: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, UnionBank, and other payment partners, for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy frameworks and Philippine BSP regulations.
• Game Providers: Licensed game studios including JILI Games, Pragmatic Play, PG Soft, and Spadegaming receive session-level technical data (session tokens, bet events) required to deliver gameplay. They do not receive your identity or full financial data.
• KYC / AML Service Providers: Third-party identity verification and anti-money laundering screening services engaged by ph33b to fulfill regulatory KYC obligations.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law, court order, or lawful regulatory demand.
• Cybersecurity and Fraud Prevention Partners: Service providers engaged to monitor platform security, detect fraud, and prevent unauthorized access.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers engaged by ph33b are bound by contractual data processing agreements requiring them to process personal data only as directed by ph33b, maintain appropriate technical and organizational security measures, and comply with applicable Philippine data protection law.

7 International Data Transfers

Some of ph33b's third-party service providers — including game studios and cloud infrastructure providers — may be located outside the Republic of the Philippines. Where personal data is transferred internationally, ph33b ensures that such transfers comply with Section 21 of the DPA and applicable NPC guidelines, including through the use of standard contractual clauses, adequacy assessments, or other lawful transfer mechanisms recognized under Philippine data protection law.

ph33b will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your explicit consent.

8 Data Retention

ph33b retains your personal data for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law, whichever is longer. The following general retention periods apply:

• Account and KYC records: Retained for a minimum of five (5) years from account closure or the last transaction date, in accordance with AMLA record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC and BSP reporting obligations.
• Gaming records: Retained for a minimum of three (3) years from the date of each gaming session, for the purpose of dispute resolution and regulatory audit.
• Support communications: Retained for two (2) years from the date of resolution of the relevant query or complaint.
• Marketing preferences: Retained until you withdraw consent, or until your account is closed, whichever is earlier.

Upon expiry of the applicable retention period, ph33b will securely delete or anonymize personal data unless retention is required by a specific legal obligation, court order, or ongoing regulatory investigation.

9 Cookies & Tracking Technologies

ph33b uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help us operate and improve the Platform. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential to the functioning of ph33b, including maintaining your login session, processing transactions, and preventing fraudulent access. These cannot be disabled without impairing your ability to use the Platform.
• Performance & Analytics Cookies: Used to collect anonymized data about how Players navigate ph33b — which pages are visited most, load times, and error rates — to improve Platform performance.
• Functionality Cookies: Used to remember your preferences such as language settings, preferred game categories, and responsible gaming limits.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and account compromise attempts.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of ph33b. ph33b does not use third-party advertising cookies or behavioral profiling cookies for cross-site advertising purposes.

10 Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph33b:

• Right to Be Informed: The right to know how your personal data is collected, stored, and used — which this Privacy Policy provides.
• Right to Access: The right to request a copy of the personal data ph33b holds about you, and information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your ph33b account settings.
• Right to Erasure / Right to Be Forgotten: The right to request deletion of your personal data, subject to ph33b's legal retention obligations (e.g., AMLA requirements that mandate retention of certain records).
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time, and to object to other processing based on legitimate interests where your rights and freedoms override those interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible and where processing is based on consent or contractual necessity.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph33b has violated your data privacy rights.

To exercise any of the above rights, contact ph33b's Data Protection Officer at the details provided in Section 14. ph33b will respond to verified data subject requests within fifteen (15) business days, in accordance with NPC guidelines.

11 Children & Minors

ph33b's gaming services are strictly restricted to individuals who are 21 years of age or older, consistent with PAGCOR online gaming regulations and Philippine law. ph33b does not knowingly collect personal data from individuals under 21 years of age.

If ph33b discovers or is informed that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete all personal data collected from that individual to the extent not required to be retained by law, and take appropriate steps to prevent recurrence.

12 Security Measures

ph33b implements a range of technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and ph33b's servers.
• Encryption of sensitive data at rest, including financial records and government ID references.
• Access controls limiting employee access to personal data on a strict need-to-know basis, with activity logging for all privileged access events.
• Multi-factor authentication for internal administrative systems.
• Regular security assessments, penetration testing, and vulnerability scanning conducted by qualified cybersecurity professionals.
• Incident response procedures enabling ph33b to detect, contain, and notify the NPC and affected data subjects of personal data breaches within the timeframes prescribed by the DPA and NPC regulations.

While ph33b employs industry-standard security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph33b login credentials and for reporting any suspected unauthorized access to your account promptly.

13 Amendments to This Privacy Policy

ph33b reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered ph33b account holders via email or a prominent notice on the Platform at least seven (7) calendar days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. Continued use of ph33b after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree to any change, you must stop using ph33b and may request account closure in accordance with the Terms & Conditions.

14 Contact & Data Protection Officer

ph33b has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have questions, concerns, or wish to exercise your data subject rights, please contact the ph33b DPO:

ph33b endeavors to acknowledge all data privacy inquiries within three (3) business days and to resolve them within fifteen (15) business days of receiving a complete and verified request. For matters that cannot be resolved directly with ph33b, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.