Privacy Policy - 38ph

1. Overview and Scope

This Privacy Policy applies to all personal information collected by 38ph through our website, mobile applications, customer service channels, and any other platforms or services we operate. By using 38ph services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

38ph operates as a licensed online gaming platform under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR). As such, we are required to collect and maintain certain personal information to comply with regulatory requirements, prevent fraud, verify player identity, and ensure responsible gaming practices.

We respect your privacy and are committed to transparency about our data practices. This policy outlines what information we collect, why we collect it, how we use it, who we share it with, and what rights you have regarding your personal information.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account, use our services, or communicate with us, you provide certain personal information directly to 38ph:

• Registration Information: Full legal name, date of birth, gender, email address, mobile phone number, physical address, and citizenship
• Identification Documents: Government-issued ID (passport, driver's license, UMID, SSS ID, or other valid Philippine identification) for age and identity verification
• Financial Information: Payment method details (GCash account, PayMaya account, bank account information), transaction history, deposit and withdrawal records
• Account Credentials: Username, password, security questions and answers, and two-factor authentication settings
• Communication Data: Content of messages you send to customer support, chat logs, email correspondence, and feedback submissions
• Verification Documents: Proof of address (utility bills, bank statements), proof of payment method ownership, and any other documents requested for compliance purposes

2.2 Information Collected Automatically

When you access or use 38ph services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, unique device identifiers, mobile network information
• Usage Data: Pages visited, features used, games played, betting history, time spent on platform, clickstream data, referring URLs
• Location Information: IP address, geolocation data to verify you are accessing our services from within the Philippines
• Cookies and Similar Technologies: Session cookies, persistent cookies, web beacons, pixel tags, and local storage for authentication, preferences, and analytics
• Gaming Activity: Game choices, betting patterns, win/loss records, bonus usage, jackpot participations

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment processors (GCash, PayMaya, banks) providing transaction verification and fraud prevention data
• Identity verification services confirming your identity and age
• Credit reference agencies and fraud prevention databases (where permitted by law)
• Marketing partners and affiliates (if you accessed 38ph through their referral)
• Social media platforms (if you choose to link your social accounts)

3. How We Use Your Information

38ph uses your personal information for the following purposes, all of which are necessary for the provision of our services and compliance with legal obligations:

3.1 Account Management and Service Provision

• Creating and maintaining your 38ph account
• Authenticating your identity and verifying your age (21+ requirement)
• Processing deposits, withdrawals, and other financial transactions
• Providing customer support and responding to inquiries
• Enabling game play and managing betting activities
• Administering bonuses, promotions, and loyalty programs

3.2 Legal and Regulatory Compliance

• Complying with PAGCOR licensing requirements and gaming regulations
• Meeting Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under Philippine law
• Preventing fraud, money laundering, and other illegal activities
• Cooperating with law enforcement and regulatory investigations
• Maintaining records as required by Philippine gaming and financial regulations
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) when required

3.3 Security and Fraud Prevention

• Detecting and preventing unauthorized access to accounts
• Identifying suspicious betting patterns or fraudulent activity
• Protecting against cheating, collusion, and game manipulation
• Monitoring for duplicate accounts and prohibited jurisdictions
• Securing our platform against cyberattacks and technical vulnerabilities

3.4 Responsible Gaming

• Implementing deposit limits, loss limits, and session time reminders
• Identifying problem gambling behaviors and at-risk players
• Processing self-exclusion requests
• Providing access to responsible gaming resources and support
• Preventing underage gambling

3.5 Marketing and Communications

• Sending promotional offers, bonus notifications, and tournament announcements (with your consent)
• Providing personalized game recommendations based on your preferences
• Communicating important account updates, policy changes, and service notifications
• Conducting customer satisfaction surveys and feedback requests

You may opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in promotional emails. Please note that you cannot opt out of transactional or service-related communications.

3.6 Analytics and Platform Improvement

• Analyzing usage patterns to improve user experience
• Conducting research and statistical analysis (using anonymized data)
• Testing new features and optimizing platform performance
• Understanding player preferences to enhance game selection

Purpose	Legal Basis	Retention Period
Account registration and service provision	Contractual necessity	Duration of account + 5 years
PAGCOR compliance and regulatory reporting	Legal obligation	10 years from account closure
AML/KYC verification	Legal obligation	10 years from transaction date
Fraud prevention and security	Legitimate interest	7 years from detection
Marketing communications	Consent	Until consent withdrawn

4. How We Share Your Information

38ph does not sell your personal information to third parties. However, we may share your information with the following categories of recipients for the purposes described:

4.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: GCash, PayMaya, Philippine banks, and other payment gateways to process deposits and withdrawals
• Game Providers: Software providers supplying casino games, slots, and live dealer services
• Identity Verification Services: Third-party KYC providers verifying your identity and age
• Cloud Storage Providers: Secure data hosting and backup services
• Customer Support Platforms: Live chat, email, and ticketing system providers
• Marketing Services: Email service providers and analytics platforms (for users who opt in to marketing)

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with Philippine data protection laws.

4.2 Regulatory and Legal Authorities

We may disclose your information to government agencies, regulators, and law enforcement when required by law:

• PAGCOR for licensing compliance and regulatory audits
• Anti-Money Laundering Council (AMLC) for suspicious transaction reporting
• Philippine National Police (PNP) or National Bureau of Investigation (NBI) in response to lawful requests
• Courts and legal tribunals pursuant to court orders or subpoenas
• National Privacy Commission (NPC) for data protection compliance matters

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change and the new entity will be required to honor this Privacy Policy.

4.4 With Your Consent

We may share your information with other parties when you provide explicit consent, such as participating in co-branded promotions or connecting your 38ph account to third-party services.

5. Data Security Measures

38ph implements comprehensive technical, physical, and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security

• Encryption: All data transmissions use 256-bit SSL/TLS encryption. Sensitive data at rest is encrypted using industry-standard algorithms.
• Access Controls: Role-based access restrictions ensure only authorized personnel can access personal data on a need-to-know basis.
• Firewall Protection: Multi-layer firewalls protect our servers from external threats and unauthorized intrusions.
• Intrusion Detection: Real-time monitoring systems detect and respond to suspicious activities and potential security breaches.
• Secure Authentication: Two-factor authentication (2FA) available for all accounts, with mandatory 2FA for high-value withdrawals.
• Regular Security Audits: Independent third-party security assessments and penetration testing conducted quarterly.

5.2 Organizational Security

• Strict confidentiality agreements and data protection training for all employees
• Background checks for personnel with access to sensitive data
• Incident response procedures and breach notification protocols
• Regular review and updating of security policies
• Compliance with ISO 27001 information security standards

5.3 Data Retention and Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations:

• Active account data is retained throughout your relationship with 38ph
• After account closure, transaction records are retained for ten (10) years to comply with PAGCOR and AML requirements
• Marketing data is deleted within thirty (30) days of consent withdrawal
• Server logs and analytics data are anonymized and aggregated after ninety (90) days

When retention periods expire, we securely delete or anonymize personal information using industry-standard data destruction methods.

6. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can access most of your data directly through your 38ph account dashboard. For additional information, contact our Data Protection Officer.

6.2 Right to Rectification

You may update or correct your personal information at any time through your account settings. For changes to verified information (name, date of birth), contact customer support with supporting documentation.

6.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when it is no longer necessary for the purposes collected, or when you withdraw consent. However, this right is subject to legal retention requirements—we must retain certain data for regulatory compliance even after account closure.

6.4 Right to Object

You may object to processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests, though we may demonstrate compelling grounds to continue processing.

6.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

6.6 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

6.7 Right to Lodge a Complaint

If you believe your privacy rights have been violated, you may file a complaint with 38ph's Data Protection Officer or with the National Privacy Commission of the Philippines.

7. Cookies and Tracking Technologies

38ph uses cookies, web beacons, and similar tracking technologies to enhance your user experience and analyze platform performance. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Necessary for platform functionality, authentication, and security. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use 38ph to improve our services.
• Functionality Cookies: Remember your preferences, language settings, and customizations.
• Marketing Cookies: Track your activity across websites to deliver personalized advertising (only with your consent).

You can control cookies through your browser settings. However, disabling essential cookies may affect platform functionality. Refer to your browser's help documentation for instructions on managing cookies.

8. Children's Privacy

38ph services are strictly intended for individuals twenty-one (21) years of age or older. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from someone under 21, we will take immediate steps to delete that information and terminate the associated account.

Parents or guardians who believe their child has provided information to 38ph should contact us immediately at [email protected] so we can take appropriate action.

9. Changes to This Privacy Policy

38ph reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to your registered email address
• Prominent notice on the 38ph platform
• Pop-up notification upon your next login

The "Effective Date" at the top of this policy indicates when it was last updated. We encourage you to review this policy periodically. Your continued use of 38ph services after changes are posted constitutes acceptance of the updated Privacy Policy.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact:

38ph Data Protection Officer
Email: [email protected]
Customer Support: [email protected]
Live Chat: Available 24/7 on the 38ph platform

National Privacy Commission (Philippines)
For complaints regarding data protection violations:
Website: privacy.gov.ph
Email: [email protected]
Hotline: (02) 8234-2228