Data Privacy

Privacy Policy

ph265 Casino is committed to protecting the privacy and personal data of every Filipino player on our platform. This Privacy Policy explains what personal information ph265 collects, why we collect it, how we use and protect it, and the rights you hold over your data under Philippine law.

Effective Date: 1 January 2026

Jurisdiction: Philippines

Law: R.A. 10173 (DPA 2012)

Our Commitments

How ph265 Handles Your Data

Six core principles that shape how ph265 collects, processes, and protects personal information for every player in the Philippines.

Secure by Design

ph265 applies 256-bit SSL encryption across all data transmissions and enforces access controls so only authorized personnel can access personal player data — consistent with the security standards expected under the Philippine Data Privacy Act of 2012.

Minimal Data Collection

ph265 collects only the personal data that is necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data that serves no defined and documented purpose.

Your Rights Are Real

Filipino players have the right to access, correct, delete, and port their personal data. ph265 provides a clear process for exercising these rights without requiring players to navigate complex legal procedures.

Controlled Third-Party Sharing

ph265 does not sell personal data. Data is shared with third parties only where strictly necessary for platform operation — payment processors, identity verification providers, and game certification bodies — under binding data processing agreements.

Clear Retention Periods

ph265 retains personal data only for as long as required by law or legitimate business need. Once retention periods expire, data is securely deleted or anonymized in accordance with our data disposal procedures.

Breach Notification

In the unlikely event of a personal data breach that poses a real risk to players, ph265 will notify affected individuals and the National Privacy Commission within the timeframes required by the Philippine Data Privacy Act.

Data Controller
Data We Collect
How We Collect Data
Legal Basis & Purposes
Cookies & Tracking
Third-Party Sharing
Data Retention
Data Security
Your Rights
Children & Minors
Policy Updates
Contact DPO

1. Data Controller

For the purposes of the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its implementing rules and regulations, ph265 is the data controller responsible for the personal information collected and processed through the ph265 Casino platform at ph265.cam ("Platform").

ph265 operates the Platform for the Philippine market and processes the personal data of registered players and Platform visitors in accordance with this Privacy Policy and applicable Philippine law. Where ph265 engages third-party service providers to process personal data on its behalf, those providers act as data processors and are bound by contractual obligations that ensure equivalent levels of data protection.

Data Protection Officer: ph265 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA 2012. Enquiries regarding this Privacy Policy or the exercise of data subject rights may be directed to the DPO at [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

ph265 collects personal data that is adequate, relevant, and limited to what is necessary for the purposes set out in Section 4. The categories of personal data we collect include:

2.1 Identity & Registration Data

Full legal name as it appears on a government-issued identification document.
Date of birth (for age verification — players must be 21 or older).
Residential address in the Philippines (barangay, city/municipality, province).
Nationality.
Government-issued ID type and number (e.g., PhilSys ID, passport, driver's license, PRC ID, SSS/GSIS ID), collected during KYC verification.

2.2 Contact Data

Registered mobile number (Philippine network — Globe, Smart, DITO, or MVNO).
Email address.

2.3 Financial & Transaction Data

GCash account number and/or Maya account linked to your ph265 account.
Bank account details (for bank transfer withdrawals to BPI, BDO, Metrobank, or UnionBank accounts).
Deposit and withdrawal history, transaction amounts, and timestamps.
Bonus activation and wagering records.

2.4 Gaming & Behavioral Data

Game history, session logs, bet amounts, and results across all game types (slots, live dealer, sports betting, bingo, e-sabong, arcade).
Responsible gaming settings (deposit limits, self-exclusion status, cooling-off periods).
Platform usage patterns, game preferences, and session duration data.

2.5 Technical & Device Data

IP address and approximate geolocation at login.
Device type, operating system, and browser type.
Cookie identifiers and session tokens (see Section 5).
Login timestamps and login location history.

2.6 Communications Data

Records of your communications with ph265 customer support, including live chat transcripts, email correspondence, and complaint records.
Responses to surveys or promotions where you voluntarily participate.

Sensitive personal information: ph265 does not collect sensitive personal information as defined under the DPA 2012 (such as health, race, or political opinion data) unless explicitly required for a specific regulatory compliance purpose, in which case separate consent will be sought.

3. How We Collect Your Data

ph265 collects personal data through the following channels:

Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
Automated collection: Technical data collected automatically through cookies, session tokens, log files, and analytics tools when you access and navigate the Platform.
Third-party sources: Identity and age verification data from KYC service providers; fraud screening data from anti-money laundering (AML) compliance tools; payment confirmation data from GCash, Maya, and Philippine bank partners.

4. Legal Basis & Purposes of Processing

ph265 processes personal data only where a valid legal basis exists under the DPA 2012. The applicable legal bases and corresponding purposes are:

Contractual necessity: Processing required to create and maintain your account, process deposits and withdrawals, provide access to games, and fulfill our obligations to you as a player.
Legal obligation: Processing required to comply with Philippine laws and regulations, including anti-money laundering (AMLA) obligations, identity verification requirements, tax reporting, and PAGCOR compliance where applicable.
Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and the improvement of Platform services — where these interests are not overridden by your data protection rights.
Consent: Processing for marketing communications and certain non-essential cookies, where you have given freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Marketing communications: ph265 may send promotional emails and SMS messages about bonuses, new games, and platform updates to players who have opted in. You may opt out of marketing communications at any time by updating your notification preferences in account settings or by contacting support. Opting out of marketing does not affect your ability to use the Platform.

5. Cookies & Tracking Technologies

ph265 uses cookies and similar tracking technologies to operate the Platform, maintain login sessions, and improve the user experience. The types of cookies in use are:

Essential cookies: Strictly necessary for the Platform to function, including session authentication tokens and security cookies. These cannot be disabled without affecting core Platform functionality.
Functional cookies: Remember your preferences such as language settings, game lobby view preferences, and responsible gaming settings.
Analytics cookies: Used to understand how players use the Platform — which game categories are most visited, typical session paths, and feature usage patterns. This data is aggregated and anonymized where possible.
Marketing cookies: Track how players arrived at ph265 (e.g., via a referral link or promotional campaign) for attribution purposes. These are only set with your consent.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect Platform functionality, including the ability to remain logged in across pages.

6. Third-Party Sharing & Disclosure

ph265 does not sell, rent, or trade personal data to third parties for their own commercial purposes. Personal data may be disclosed to the following categories of recipients only where necessary and subject to data processing agreements or legal requirements:

Payment processors: GCash (Mynt), Maya Philippines, BPI, BDO, Metrobank, UnionBank, ShopeePay — to process deposits and withdrawals in Philippine Peso.
KYC and identity verification providers: Third-party services engaged to perform identity and age verification as required for regulatory compliance.
AML screening services: Anti-money laundering and fraud prevention tools that process transaction data to detect suspicious activity patterns.
Game technology providers: Licensed game studios and live dealer operators who may process limited player data (session tokens, bet data) as part of game delivery.
Cloud and infrastructure providers: Hosting and content delivery services operating under binding data processing agreements with ph265.
Regulatory authorities: Philippine government bodies, including PAGCOR and the National Privacy Commission (NPC), where disclosure is required by law or pursuant to a lawful order.
Law enforcement: Where ph265 is legally required to disclose data in response to a court order, subpoena, or law enforcement request issued under Philippine law.

International transfers: Some third-party service providers engaged by ph265 may be located outside the Philippines. Where personal data is transferred internationally, ph265 ensures adequate safeguards are in place — including contractual clauses aligned with the NPC's cross-border data transfer requirements.

7. Data Retention

ph265 retains personal data only for as long as is necessary to fulfill the purpose for which it was collected or as required by applicable law. Indicative retention periods are:

Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with Philippine AMLA record-keeping requirements.
Transaction and financial data: Retained for at least 5 years following the date of the transaction, consistent with AMLA obligations.
Gaming and session logs: Retained for 24 months from the date of the session, unless required for longer by an ongoing investigation or regulatory audit.
Support and communications data: Retained for 24 months from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
Marketing consent records: Retained until you withdraw consent and for 12 months thereafter as evidence of the consent history.

At the end of applicable retention periods, personal data is securely deleted or irreversibly anonymized in a manner that prevents re-identification.

8. Data Security

ph265 implements technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, or alteration. Key security measures include:

256-bit SSL/TLS encryption for all data in transit between the Platform and player devices.
Encryption at rest for sensitive stored data including identity documents and financial records.
Access controls limiting internal access to personal data on a strict need-to-know basis, with access logging and audit trails.
Two-factor authentication (2FA) available to all players and mandatory for internal administrative access.
Regular security assessments including vulnerability scanning and penetration testing conducted by qualified security professionals.
Incident response procedures enabling ph265 to detect, contain, and report personal data breaches in accordance with DPA 2012 notification requirements.

While ph265 applies industry-standard security measures, no transmission of data over the internet is entirely risk-free. Players are encouraged to use strong, unique passwords for their ph265 account and to enable 2FA from their account security settings.

9. Your Data Subject Rights

Under the Republic Act No. 10173 (Data Privacy Act of 2012), Filipino players have the following rights with respect to their personal data held by ph265:

Right	What It Means	How to Exercise
Right to be Informed	You have the right to know how your personal data is being collected and processed by ph265.	This Privacy Policy and in-app disclosures fulfill this obligation.
Right of Access	You have the right to request a copy of the personal data ph265 holds about you.	Contact ph265 support or DPO in writing. Requests processed within 30 days.
Right to Rectification	You have the right to request correction of inaccurate or incomplete personal data.	Update via account settings, or contact support for data requiring formal correction.
Right to Erasure	You have the right to request deletion of your personal data, subject to legal retention obligations.	Submit a formal erasure request to the DPO. Note: AMLA-required data cannot be erased early.
Right to Data Portability	You have the right to receive your personal data in a structured, commonly used format.	Request a data export via ph265 support. Provided within 30 days in CSV or JSON format.
Right to Object	You have the right to object to processing based on legitimate interests or for direct marketing.	Opt out of marketing via account settings; object to other processing by contacting the DPO.
Right to Lodge a Complaint	You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.	Visit the NPC website at privacy.gov.ph (type manually into browser).

Verification: ph265 may need to verify your identity before processing a data subject rights request to ensure we do not disclose personal data to an unauthorized party. Identity verification does not affect your right to make the request.

10. Children & Underage Persons

The ph265 Platform is strictly intended for individuals aged 21 years and older. ph265 does not knowingly collect personal data from persons below the age of 21. The Platform's registration process includes age verification measures, and accounts discovered to belong to underage individuals are immediately terminated.

If ph265 becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly and the account closed. Any balance in the account will be forfeited in accordance with ph265's Terms & Conditions and applicable Philippine gaming regulations.

If you have reason to believe that a person under 21 has registered an account on the ph265 Platform, please contact ph265 support immediately.

Parental controls: ph265 encourages parents and guardians to use available device-level parental controls and internet filtering tools to prevent minors from accessing online gambling platforms. The 21+ age restriction is a legal requirement and ph265 takes its enforcement seriously.

11. Updates to This Privacy Policy

ph265 reserves the right to update or revise this Privacy Policy at any time to reflect changes in the Platform, applicable law, or ph265's data processing practices. Where material changes are made, ph265 will notify registered players via email to their registered address and/or through a prominent notice on the Platform, with a minimum notice period of 14 days before the updated policy takes effect.

The effective date at the top of this Privacy Policy indicates when it was last updated. Players are encouraged to review the Privacy Policy periodically. Continued use of the ph265 Platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

Where any update requires fresh consent under applicable law, ph265 will obtain that consent before processing data under the revised terms.

12. Contact the Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights, please contact the ph265 Data Protection Officer:

Email: [email protected] (plain text — not a clickable link). Please include "Privacy / DPO Request" in the subject line.
Live Chat: Available on the Platform 24 hours a day after logging in to your ph265 account.

ph265 will acknowledge all formal data subject rights requests within 5 business days and will fulfill requests within 30 days, or notify you of any extension where the complexity of the request requires additional time.

If you are not satisfied with ph265's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

Related policies: This Privacy Policy should be read in conjunction with the ph265 Terms & Conditions and our Responsible Gaming page, both of which contain additional commitments relevant to the protection of players' data and wellbeing.

Play Safely at ph265

Your Data Is Protected. Your Game Awaits.

ph265 Casino keeps your personal information secure so you can focus on what matters — enjoying 1,200+ certified games, instant GCash withdrawals, and a platform built for Filipino players.

Open ph265 Casino