This Privacy Policy describes how 367ph collects, uses, stores, protects, and discloses personal information relating to registered account holders and visitors of the 367ph platform. Your privacy matters to us — please read this document carefully before registering or using any 367ph service.
367ph ("we," "us," "our," or the "Platform") is committed to safeguarding the personal information of all individuals who interact with our platform, including registered players, account applicants, and website visitors. This Privacy Policy ("Policy") explains what personal data 367ph collects, the purposes for which it is collected, how it is used and stored, to whom it may be disclosed, and the rights available to data subjects under applicable Philippine law.
This Policy applies to all personal data processed by 367ph in connection with: (a) the registration, verification, and ongoing management of 367ph player accounts; (b) the conduct of gaming, betting, and related transactions on the platform; (c) the provision of customer support, bonus administration, and promotional communications; and (d) the operation, monitoring, and security of the 367ph website at https://367ph.app and its associated services.
By completing the 367ph registration process or by continuing to use the 367ph platform following publication of this Policy, you acknowledge that you have read, understood, and consented to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not register an account or use the 367ph platform.
For the purposes of the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its Implementing Rules and Regulations, 367ph is the personal information controller responsible for the processing of personal data described in this Policy.
All inquiries, requests, and complaints relating to the processing of personal data under this Policy should be directed to the 367ph Data Protection Officer via the contact details specified in Section 15 of this Policy. 367ph has designated a Data Protection Officer in accordance with the requirements of the DPA and the National Privacy Commission's Implementing Rules.
367ph collects the following categories of personal data, depending on your relationship with the platform:
| Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number, photograph (from ID and selfie) | KYC verification process |
| Contact Data | Philippine mobile number, email address (if provided) | Registration and account updates |
| Financial Data | GCash or bank account details associated with transactions, deposit and withdrawal history, transaction amounts and timestamps | Deposits, withdrawals, and cashier activity |
| Gaming Data | Game session logs, bet history, wagering amounts, game outcomes, bonus activity, session duration | During active gameplay and betting |
| Technical Data | IP address, device type, browser type and version, operating system, geolocation data (city level), login timestamps | Automatically upon platform access |
| Communication Data | Live chat transcripts, support ticket content, feedback messages | During support interactions |
| Preference Data | Responsible gaming settings, notification preferences, marketing opt-in status | Account settings and onboarding |
Sensitive personal information: KYC identity documents (ID photographs, selfies) and financial account data constitute sensitive personal information under the DPA. 367ph processes this data exclusively under the legal bases specified in Section 6 and applies the highest level of technical protection described in Section 9.
367ph collects personal data through the following channels and mechanisms:
367ph processes personal data for the following specific, documented purposes:
367ph does not use personal data for automated decision-making that produces significant legal effects on individual players without human review, except where mandated by applicable law or expressly consented to by the account holder.
367ph processes personal data on the following legal bases under Section 12 and Section 13 of the Data Privacy Act of 2012:
367ph does not sell, rent, or commercially share personal data with any third party for marketing or advertising purposes. Personal data is shared with third parties only where necessary and on a strictly limited basis, as set out below.
Categories of Third Parties Who May Receive Data
All third parties engaged by 367ph to process personal data on its behalf are bound by data processing agreements requiring them to process data only on 367ph's documented instructions, to maintain appropriate security standards, and to delete or return data upon termination of the engagement.
367ph retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory retention obligations, and to resolve any outstanding disputes or complaints. The following retention periods apply as a general framework:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML and PAGCOR compliance |
| KYC identity documents | Duration of account + 5 years post-closure | RA 9160 AMLA requirements |
| Financial transaction records | 5 years from transaction date | AMLA, tax, and PAGCOR obligations |
| Gaming session logs | 3 years from session date | Dispute resolution and compliance |
| Support and chat records | 3 years from interaction date | Complaint investigation capability |
| Marketing preference data | Until opt-out or account closure | Consent-based; ends at withdrawal |
| Technical / server logs | 12 months rolling | Security and fraud monitoring |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Where data is retained for legal or regulatory purposes beyond account closure, access is restricted to compliance personnel only.
367ph implements a layered set of technical and organisational security controls to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
No security system is completely impenetrable. In the event of a personal data breach that poses a real risk of serious harm to affected data subjects, 367ph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with Section 20(f) of the Data Privacy Act.
367ph uses cookies and similar browser-based tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the 367ph website. Cookies do not identify you personally on their own; they identify your browser or device.
Types of Cookies Used
You may configure your browser to refuse or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from accessing authenticated areas of the 367ph platform, including the game lobby and cashier. 367ph does not currently respond to browser "Do Not Track" signals.
Under the Data Privacy Act of 2012 and its Implementing Rules, 367ph account holders and data subjects have the following rights with respect to the personal data held about them by 367ph. These rights may be exercised by contacting the 367ph Data Protection Officer as described in Section 15:
You have the right to be informed whether 367ph holds personal data about you, the purposes for which it is processed, and the identities of any third parties to whom it has been disclosed.
You have the right to request a copy of the personal data 367ph holds about you. Requests will be acknowledged within ten (10) business days and fulfilled within thirty (30) days of verification of your identity.
You have the right to request correction of inaccurate, incomplete, or outdated personal data held about you by 367ph, subject to any legal or regulatory constraints on modifying certain records.
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing was unlawful — subject to overriding legal retention obligations.
You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You also have the right to object to processing based on legitimate interests, subject to compelling legitimate grounds on 367ph's part.
Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Where you have suffered damage as a result of 367ph's inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, you may seek compensation in accordance with the provisions of the Data Privacy Act and its Implementing Rules.
Certain rights are subject to limitations where overriding legal obligations apply — for example, 367ph is required to retain KYC and financial data for AML compliance purposes regardless of a deletion request. 367ph will clearly explain any applicable limitations when responding to rights requests.
The 367ph platform is strictly intended for individuals who are at least twenty-one (21) years of age, as required by Philippine gaming law. 367ph does not knowingly collect or process personal data from any person under the age of 21. If 367ph becomes aware that personal data has been collected from a person who is under the minimum age, the account will be immediately suspended and the personal data will be deleted as soon as practicable, except to the extent required for compliance or legal proceedings.
If you believe that 367ph may have inadvertently collected personal data from a minor, please contact the 367ph Data Protection Officer immediately via the details in Section 15. Parent or guardian notification and cooperation will be requested where appropriate.
The 367ph platform may contain links to or embed content from third-party game providers, payment gateways, and operational tool providers. This Privacy Policy applies exclusively to the personal data processing conducted by 367ph and does not cover data practices of third-party platforms or services that have their own independent privacy policies.
When you interact with a third-party payment gateway — for example, when you authorise a GCash deposit — you are engaging with that third party's own systems and interface. 367ph is not responsible for the data practices of GCash, Maya, BPI, BDO, Metrobank, UnionBank, or any other independent service provider once you leave the direct 367ph platform environment. We encourage you to review the privacy policies of any third-party service you use in connection with 367ph transactions.
367ph reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, platform features, or regulatory requirements. The "Effective Date" at the top of this document will be updated to reflect the date the revised Policy enters into force.
Material changes to this Policy — particularly those affecting the purposes for which personal data is used, the categories of third parties with whom data is shared, or data subjects' rights — will be communicated to registered players via in-account notification or email at least seven (7) days before the changes take effect where reasonably practicable.
Your continued use of the 367ph platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must close your 367ph account by contacting support prior to the effective date of the changes.
All privacy-related inquiries, data subject rights requests, and personal data breach notifications should be submitted to the 367ph Data Protection Officer. Requests are acknowledged within five (5) business days and resolved as promptly as reasonably possible, with a maximum response period of thirty (30) days for standard requests.
Contact Details
Email (plain text — not a clickable link):
[email protected]
Support Channel: 24/7 Live Chat available on the 367ph website. When contacting regarding a privacy matter, please include "Privacy Request" in your initial message to ensure it is routed to the Data Protection Officer promptly.
National Privacy Commission
If you are not satisfied with 367ph's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), the independent regulatory body responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official Philippine government channels.
367ph takes all privacy concerns seriously. Our Data Protection Officer reviews every formal privacy request personally. Response times are tracked internally as a compliance KPI, and we aim to respond to straightforward requests well within the 30-day statutory window.
Beyond the legal requirements, here are the six practical privacy commitments that define how 367ph handles your personal information every day
367ph does not sell, rent, or commercially transfer your personal information to any third party for marketing purposes — not under any circumstances and not for any price. This is a platform-wide policy with no exceptions.
Every page on 367ph — from the Login page to the cashier — runs over HTTPS with 256-bit SSL. Your session data, payment details, and KYC documents are encrypted both in transit and at rest in our databases.
367ph's data practices are aligned with the Philippines Data Privacy Act of 2012 (RA 10173). A designated Data Protection Officer oversees compliance, handles rights requests, and liaises with the National Privacy Commission.
367ph collects only the personal data strictly necessary to operate your account, process transactions, meet regulatory requirements, and keep your account secure. We do not collect data speculatively or beyond defined operational purposes.
Privacy rights requests submitted via Live Chat or email are acknowledged within five (5) business days and resolved within thirty (30) days. For simple requests like marketing opt-outs, 367ph aims to confirm within 24 hours.
In the unlikely event of a data breach posing risk of serious harm, 367ph notifies the National Privacy Commission within 72 hours and affected individuals without undue delay — in full compliance with Section 20(f) of the DPA.
1,000+ games, live Baccarat, PBA and UFC betting, GCash payments, and Filipino-speaking support around the clock. 367ph is built for players who care about where they play — and who owns their data. Register in under 60 seconds. 21+ only.
By registering, you confirm you are 21+ and have read this Privacy Policy.