This Privacy Policy applies to all personal data collected by ph223 (ph223.cam) in connection with the registration, operation, and maintenance of player accounts and platform services. ph223 is registered as a personal information controller under the National Privacy Commission (NPC) of the Philippines, in accordance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.
Table of Contents
- Scope and Application
- Personal Data We Collect
- How We Collect Your Data
- Legal Basis and Purpose of Processing
- How We Use Your Personal Data
- Data Sharing and Third-Party Disclosure
- Cookies and Tracking Technologies
- Data Retention and Deletion
- Data Security Measures
- Your Rights as a Data Subject
- Cross-Border Data Transfers
- Children and Minors
- Amendments to This Policy
- Contact and Data Privacy Officer
1. Scope and Application
This Privacy Policy applies to all personal data processed by ph223 in connection with: (a) the ph223 website accessible at https://ph223.cam; (b) any mobile applications offered by ph223; (c) live chat, email, and telephone support interactions; (d) marketing communications; and (e) any other service offered under the ph223 brand.
This policy applies to all registered players, prospective players who have initiated but not completed registration, and visitors to the ph223 website. It does not apply to third-party websites, services, or platforms that may be linked from ph223 content, each of which operates under its own privacy terms.
ph223 processes personal data only to the extent necessary for the legitimate and lawful purposes described in this policy, in accordance with the principles of transparency, legitimate purpose, and proportionality as mandated by the Data Privacy Act of 2012 and the NPC's implementing regulations.
2. Personal Data We Collect
ph223 collects the following categories of personal data in the course of providing its services:
2.1 Identity and Contact Information
2.2 Financial and Payment Data
2.3 Account and Gaming Activity Data
2.4 Technical and Device Data
ph223 does not collect or process sensitive personal information as defined under the Data Privacy Act—such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation—unless specifically required by law or expressly consented to by the data subject.
3. How We Collect Your Data
ph223 collects personal data through the following methods:
- Account Registration: Information you provide directly when creating a ph223 account, including your name, date of birth, contact details, and preferred payment method.
- KYC Verification: Identity and address documents submitted to fulfill PAGCOR-mandated Know Your Customer (KYC) requirements prior to processing withdrawals.
- Payment Processing: Financial data collected when you make a deposit or withdrawal, including payment method identifiers and transaction reference numbers.
- Platform Usage: Behavioral and technical data collected automatically as you navigate and interact with the ph223 website or application, including pages visited, games played, session duration, and clickstream data.
- Cookies and Similar Technologies: Data collected through first-party cookies, session cookies, and analytics tools as described in Section 7 of this policy.
- Customer Support: Communications you initiate with our support team via live chat, email, or any other channel, including transcripts and correspondence records.
- Third-Party Sources: In certain circumstances, ph223 may receive data about you from third-party identity verification providers, fraud prevention services, or payment processors, solely for the purpose of fulfilling regulatory obligations or protecting platform integrity.
4. Legal Basis and Purpose of Processing
ph223 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The applicable legal bases for ph223's data processing activities are:
- Contractual Necessity: Processing required to fulfill ph223's obligations under the player account agreement, including account management, payment processing, game provision, and customer support.
- Legal Obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering (AML) regulations under Republic Act No. 9160 as amended, tax reporting obligations under the Bureau of Internal Revenue (BIR), and other applicable Philippine laws.
- Legitimate Interest: Processing undertaken to protect platform security, detect and prevent fraud, conduct risk assessments, improve services, and operate responsible gaming programs, where these interests are not overridden by the data subject's rights.
- Consent: Processing for direct marketing communications, analytics beyond operational necessity, and any other purpose where consent is the designated lawful basis. Consent may be withdrawn at any time without prejudice to prior processing.
5. How We Use Your Personal Data
ph223 uses personal data for the following purposes, each grounded in one of the lawful bases described in Section 4:
- Creating, verifying, and managing your ph223 player account
- Processing deposits, withdrawals, and all financial transactions
- Verifying your identity and age to ensure compliance with the 21+ minimum age requirement
- Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and bonus abuse
- Fulfilling PAGCOR reporting obligations and complying with lawful requests from Philippine regulatory authorities
- Providing customer support, resolving disputes, and responding to inquiries
- Operating and improving responsible gaming tools, including deposit limits, self-exclusion enforcement, and problem gambling detection algorithms
- Personalizing your gaming experience and recommending games or promotions based on your activity history, where you have consented to this
- Sending transactional communications such as account confirmations, deposit receipts, withdrawal notifications, and security alerts
- Sending promotional communications regarding ph223 offers, bonuses, and new game launches, where you have opted in to receive these
- Conducting internal analytics, platform performance monitoring, and service improvement activities
- Enforcing ph223's Terms & Conditions and protecting the legal rights of the platform and its players
6. Data Sharing and Third-Party Disclosure
6.1 Permitted Disclosures
ph223 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. ph223 shares personal data only in the following circumstances:
- Game Providers: Technical data necessary for game session integrity may be shared with licensed game providers (such as Evolution Gaming, Pragmatic Play, JILI, and PG Soft) under strict data processing agreements.
- Payment Processors: Financial data shared with GCash, PayMaya, BPI, BDO, and other payment providers is limited to what is strictly necessary to process transactions, and is governed by each provider's own privacy terms.
- Identity Verification Providers: KYC documentation may be shared with accredited third-party identity verification services engaged by ph223 under contractual data processing obligations.
- Fraud and AML Service Providers: Data may be shared with fraud detection and anti-money laundering screening services as required to fulfill PAGCOR and AMLC (Anti-Money Laundering Council) compliance obligations.
- Regulatory and Law Enforcement Authorities: ph223 will disclose personal data to PAGCOR, the NPC, the AMLC, the BIR, or any other authorized Philippine government body when required by law, court order, or valid regulatory request.
- Corporate Transactions: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the succeeding entity, subject to equivalent privacy protections and NPC notification requirements.
6.2 Data Processing Agreements
All third parties with whom ph223 shares personal data as data processors are bound by written data processing agreements that require them to: (a) process data only on ph223's documented instructions; (b) implement appropriate technical and organizational security measures; (c) not engage sub-processors without ph223's prior written authorization; and (d) delete or return all personal data upon termination of the engagement.
Important: ph223 will never disclose your personal data to third parties for direct marketing purposes without your explicit consent. You may withdraw marketing consent at any time by updating your account preferences or contacting our Data Privacy Officer.
7. Cookies and Tracking Technologies
7.1 Types of Cookies Used
ph223 uses the following categories of cookies and similar tracking technologies on its platform:
- Strictly Necessary Cookies: Essential for platform operation, including session management, login authentication, and security tokens. These cannot be disabled without breaking platform functionality.
- Functional Cookies: Enable personalized features such as language preferences, game lobby layout settings, and cached login credentials where you have opted to save them.
- Analytical Cookies: Used to understand how players navigate and use the ph223 platform, identify popular games, and detect technical errors. Data collected is aggregated and does not personally identify individual players.
- Security Cookies: Used to detect fraudulent behavior, bot activity, and unauthorized account access attempts through device fingerprinting and behavioral pattern analysis.
7.2 Cookie Management
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent access to ph223 services. Analytical and functional cookies may be disabled through your account privacy settings or by adjusting browser cookie controls. ph223 does not use third-party advertising cookies or behavioral tracking cookies for external advertising networks.
8. Data Retention and Deletion
ph223 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following standard retention periods apply:
- Account and KYC Records: Retained for a minimum of 5 years following account closure, as required by PAGCOR's record-keeping requirements and AML regulations under Republic Act No. 9160.
- Transaction Records: Retained for 5 years from the date of each transaction for BIR tax compliance and AMLC reporting purposes.
- Game Session Logs: Retained for 12 months from the date of each session, or longer if required in connection with an active dispute or regulatory inquiry.
- Customer Support Records: Retained for 3 years from the date of each interaction, to support dispute resolution and quality assurance.
- Marketing Data: Retained until you withdraw consent or for a maximum of 2 years from your last active engagement with marketing communications, whichever is earlier.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures. Players may request early deletion of non-essential personal data by contacting the ph223 Data Privacy Officer, subject to the platform's legal retention obligations.
9. Data Security Measures
ph223 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption: All data transmitted between your device and ph223 servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest—including payment credentials and identity documents—is encrypted using AES-256 encryption standards.
- Access Controls: Access to personal data within ph223 systems is restricted on a strict need-to-know basis. All staff with data access undergo background screening and are bound by confidentiality obligations. Privileged access is logged and regularly audited.
- Two-Factor Authentication (2FA): ph223 offers 2FA for all player accounts and enforces it for all internal staff accounts with access to player data systems.
- Penetration Testing: ph223 engages accredited third-party cybersecurity firms to conduct regular penetration testing and vulnerability assessments of platform systems.
- Incident Response: ph223 maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk of harm to affected data subjects, ph223 will notify the National Privacy Commission within 72 hours and affected players as promptly as practicable.
- Vendor Security: All third-party service providers processing ph223 player data are required to maintain security standards equivalent to or exceeding ph223's own, as verified through contractual requirements and periodic security assessments.
10. Your Rights as a Data Subject
As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data processed by ph223. These rights may be exercised by submitting a written request to the ph223 Data Privacy Officer at the contact details provided in Section 14.
Right to Be Informed
You have the right to be informed whether ph223 processes your personal data and to receive clear, accessible information about what data is collected and how it is used—as provided in this Privacy Policy.
Right to Access
You have the right to request a copy of all personal data ph223 holds about you, including a description of the data, the purposes for which it is processed, and details of any third parties with whom it has been shared.
Right to Rectification
If any personal data ph223 holds about you is inaccurate or incomplete, you have the right to request correction. ph223 will update inaccurate data within a reasonable timeframe upon receipt of a valid rectification request.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and ph223 has no legal obligation to retain it. Legal retention obligations may limit the scope of erasure requests.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on ph223's legitimate interests. Objections to legally required processing may not be upheld.
Right to Data Portability
You have the right to receive a structured, commonly used, and machine-readable copy of personal data you have provided to ph223, for the purpose of transmitting it to another controller where technically feasible.
Right to Damages
You have the right to be indemnified for any damages sustained as a result of ph223's inaccurate, incomplete, outdated, false, or unlawfully obtained personal data in accordance with the Data Privacy Act.
Right to Complain
If you believe ph223 has violated your data privacy rights, you have the right to file a complaint directly with the National Privacy Commission (NPC) at privacy.gov.ph, without prejudice to other legal remedies.
ph223 will respond to all data subject rights requests within 15 business days of receipt. Where a request is complex or involves large volumes of data, ph223 may extend this period by a further 15 business days, with written notice to you explaining the reason for the extension.
11. Cross-Border Data Transfers
ph223's primary data processing infrastructure is located within the Philippines. However, certain operational activities—such as game platform hosting by international providers and cloud-based analytics services—may involve the transfer of personal data to servers located outside of Philippine territory.
All cross-border transfers of personal data are conducted in compliance with Section 21 of the Data Privacy Act and the NPC's guidelines on data transfers outside the Philippines. Specifically, ph223 ensures that:
- The recipient country's data protection laws provide at least the same level of protection as the Data Privacy Act of 2012;
- Standard contractual clauses or binding corporate rules are in place with international data processors;
- Data transferred internationally is limited to what is strictly necessary for the relevant processing purpose; and
- NPC approval is obtained where required for specific categories of cross-border transfer.
12. Children and Minors
ph223 services are strictly for individuals aged 21 years and older. ph223 does not knowingly collect, process, or retain any personal data from persons under 21 years of age. The registration process includes mandatory age declaration and ph223 employs age verification technology to prevent minors from accessing the platform.
If ph223 discovers or is notified that personal data belonging to a person under 21 years of age has been collected, ph223 will immediately suspend the associated account, delete the data concerned, and notify the relevant guardian where appropriate. Parents and guardians who believe a minor may have accessed ph223 should contact the Data Privacy Officer immediately.
Zero Tolerance: ph223 maintains a zero-tolerance policy toward underage gambling. If you are under 21 years of age, you are not permitted to register, deposit, or play on ph223 under any circumstances.
13. Amendments to This Policy
ph223 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, platform services, or data processing practices. Material changes to this policy will be communicated to registered players via email notification or a prominent notice on the ph223 website at least 7 days prior to the changes taking effect.
The "Last Updated" date at the top of this policy reflects the date of the most recent revision. Continued use of the ph223 platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not accept the revised policy, you must cease using ph223 services and may request account closure in accordance with the account termination procedures set out in ph223's Terms & Conditions.
Archived versions of prior Privacy Policies are retained by ph223 and are available upon written request to the Data Privacy Officer.
14. Contact and Data Privacy Officer
ph223 has appointed a Data Privacy Officer (DPO) in accordance with Section 21(c) of the Data Privacy Act of 2012 and NPC Circular 16-01. The DPO is responsible for overseeing ph223's data protection program, handling data subject rights requests, and serving as the point of contact for NPC communications.
To exercise any of your data subject rights, request information about ph223's data processing activities, or lodge a privacy-related concern, please contact the ph223 Data Privacy Officer through the following channels:
- Email: [email protected] (subject line: "Data Privacy Request – [Your Name]")
- Live Chat: Available 24/7 on the ph223 platform; request to be connected to a privacy-related specialist
- Response Time: ph223 will acknowledge all data privacy requests within 3 business days and provide a substantive response within 15 business days
For matters relating to data breaches, urgent privacy concerns, or complaints that remain unresolved after engaging ph223's DPO, you may contact the National Privacy Commission directly:
- National Privacy Commission (NPC): 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila 1307, Philippines
- NPC Website: privacy.gov.ph (plain text — not a clickable link)
ph223 takes all data privacy requests seriously. We are committed to responding promptly, fairly, and transparently to every inquiry in full compliance with our obligations under the Philippine Data Privacy Act of 2012. Your trust matters to us—and protecting it is something we work on every day.
ph223's Privacy Commitments to You
DPA 2012 Compliant
ph223 is registered as a personal information controller with the National Privacy Commission and fully complies with Republic Act No. 10173. Our data practices are reviewed regularly against current NPC guidance to ensure ongoing compliance.
256-Bit Encryption
Every piece of data you share with ph223—from your name and GCash number to your game history—is protected by the same AES-256 and TLS encryption standards used by Philippine banks. Your information is never transmitted or stored in plaintext.
Dedicated Data Privacy Officer
ph223 has a designated Data Privacy Officer available to handle your data subject rights requests, privacy inquiries, and compliance questions. Every request receives a substantive written response within 15 business days—no automated, templated dismissals.
We Never Sell Your Data
ph223 does not sell, rent, trade, or broker your personal data to third-party advertisers, data brokers, or commercial partners. Data shared with service providers is strictly limited to what is necessary for operational and regulatory purposes, under binding data processing agreements.
Breach Notification in 72 Hours
In the event of a data breach posing real risk to players, ph223 commits to notifying the National Privacy Commission within 72 hours and affected players as promptly as possible—ahead of the NPC's mandatory notification requirements. Transparency during security incidents is non-negotiable.
Clear Retention Schedules
ph223 maintains a published data retention schedule—no data is held indefinitely "just in case." When a retention period expires, data is securely deleted or anonymized using NPC-approved disposal procedures. You can request early deletion of non-essential data at any time.
Your Data Is Safe With ph223
We built our data privacy framework around Philippine law and genuine player protection—not compliance checkboxes. Questions about your data? Our Data Privacy Officer and 24/7 support team are here to help in English and Tagalog.
Must be 21 years or older. PAGCOR-licensed. Play responsibly.