m.ph365 Privacy Policy

This Privacy Policy ("Policy") describes how m.ph365 ("we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," or "Player") who access or use the m.ph365 online gaming platform available at mph365.app (the "Platform").

m.ph365 is committed to protecting the privacy and personal data of all its users in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an Account on the m.ph365 Platform, accessing any of its services, or continuing to use the Platform after this Policy has been updated, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

For the purposes of the Data Privacy Act of 2012 and its IRR, m.ph365 acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. As PIC, m.ph365 determines the purposes and means by which your personal data is processed.

m.ph365 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. The DPO can be contacted using the details provided in Section 16 of this Policy.

Where m.ph365 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and cloud infrastructure partners — those providers act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with m.ph365's instructions and applicable Philippine data protection law.

m.ph365 collects the following categories of personal data from Players and Platform visitors:

m.ph365 does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required by law or regulatory mandate. Where such data is incidentally disclosed, it will be handled with the heightened protections required by the DPA.

m.ph365 collects personal data through the following means:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 7).
• Third-party sources: Identity and fraud-screening data received from KYC verification providers, payment processors, and fraud prevention services engaged by m.ph365 to comply with PAGCOR and AML regulatory requirements.
• Publicly available sources: In limited circumstances, m.ph365 may supplement your data with information from publicly available sources, such as public records or social media profiles, where this is necessary for fraud prevention or regulatory compliance purposes.

m.ph365 will always inform you at the point of collection if providing certain personal data is mandatory (e.g., for KYC compliance) or optional. Failure to provide mandatory data may prevent you from accessing certain features of the Platform, including the ability to make withdrawals.

m.ph365 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The following table sets out the primary purposes for which we process your data and the corresponding legal basis:

m.ph365 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with PAGCOR and AML requirements.
• Fraud prevention and security services: Providers that help m.ph365 detect and prevent fraudulent activity, unauthorized access, and money laundering.
• Cloud infrastructure and IT service providers: Companies that provide hosting, data storage, and technical infrastructure for the Platform, operating under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law, court order, or regulatory direction.
• Professional advisors: Legal counsel, auditors, and compliance consultants, where necessary for the conduct of m.ph365's business operations.

All third-party recipients of personal data are required to maintain the confidentiality and security of the data shared with them and to use it only for the specific purposes for which it was disclosed.

m.ph365 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They help us recognize your device, maintain your session, and understand how you use the Platform.

The following types of cookies are used on the m.ph365 Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences (such as language settings and display options) to provide a more personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how Players use the Platform, helping us identify areas for improvement. These do not identify you personally.
• Marketing Cookies: Used only where you have provided consent, to deliver relevant promotional content. You may opt out of marketing cookies at any time through your browser settings.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the m.ph365 Platform, including your ability to log in and access your Account.

m.ph365 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with PAGCOR licensing requirements and AMLA record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act and its implementing regulations.
• KYC verification documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory direction or ongoing investigation.
• Gaming history and session data: Retained for a minimum of two (2) years for responsible gaming monitoring and dispute resolution purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with m.ph365's data disposal procedures, unless retention is required by a specific legal obligation or ongoing regulatory proceeding.

m.ph365 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the m.ph365 Platform is encrypted using Transport Layer Security (TLS). Sensitive data stored on our servers is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorized m.ph365 personnel and service providers who require it to perform their duties. Access is governed by role-based permissions and is subject to regular review.
• Secure infrastructure: The Platform is hosted on secure cloud infrastructure with firewalls, intrusion detection systems, and regular security patching.
• Security monitoring: m.ph365 conducts ongoing monitoring of its systems for suspicious activity, unauthorized access attempts, and potential data breaches.
• Staff training: All m.ph365 personnel with access to personal data receive regular training on data protection obligations and security best practices.

While m.ph365 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your Account login credentials and for notifying m.ph365 immediately if you suspect unauthorized access to your Account.

Under the Data Privacy Act of 2012 and its IRR, you have the following rights in relation to your personal data held by m.ph365:

• Right to be Informed: You have the right to be informed of how your personal data is being collected and processed, including the purposes, scope, and methods of processing.
• Right to Access: You have the right to request a copy of the personal data m.ph365 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure or Blocking: You have the right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, or where processing is unlawful, subject to m.ph365's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data where processing is based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that m.ph365 has violated your data privacy rights.

To exercise any of the above rights, please contact m.ph365's Data Protection Officer using the contact details in Section 16. We will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may request proof of identity before processing your request.

The m.ph365 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. m.ph365 does not knowingly collect personal data from individuals under the age of 21.

If m.ph365 becomes aware that personal data has been collected from a person under the age of 21, the relevant Account will be immediately suspended, all associated data will be reviewed, and the Account will be permanently closed in accordance with our Terms & Conditions. Any deposits made by an underage user will be returned to the payment source used, subject to verification.

If you are a parent or guardian and believe that your child under the age of 21 has registered an Account on m.ph365, please contact our Data Protection Officer immediately using the details in Section 16 so that we can take appropriate action.

In the course of operating the m.ph365 Platform, your personal data may be transferred to, stored in, or processed in countries outside the Philippines — for example, where our cloud infrastructure providers or technology partners maintain data centers.

Where such cross-border transfers occur, m.ph365 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers. These safeguards may include:

• Contractual clauses in data processing agreements that require recipient organizations to maintain data protection standards equivalent to those required under Philippine law.
• Transfers to countries or organizations that have been assessed as providing an adequate level of data protection.
• Other legally recognized transfer mechanisms as approved by the National Privacy Commission.

By using the m.ph365 Platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

m.ph365 may send you promotional emails, SMS messages, or in-Platform notifications about bonuses, new games, special events, and other offers — but only where you have provided your explicit consent to receive such communications during registration or through your Account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your m.ph365 Account settings.
• Clicking the "unsubscribe" link included in any marketing email sent by m.ph365.
• Contacting m.ph365 customer support and requesting removal from marketing lists.

Please note that even if you opt out of marketing communications, m.ph365 will continue to send you transactional and service-related communications that are necessary for the operation of your Account — such as deposit confirmations, withdrawal notifications, security alerts, and updates to our Terms & Conditions or Privacy Policy.

The m.ph365 Platform may contain links to third-party websites or services — for example, links to payment provider portals or regulatory body websites. This Privacy Policy applies solely to the m.ph365 Platform and does not cover the data practices of any third-party websites or services.

m.ph365 is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal data.

m.ph365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The most current version of this Policy will always be available on the Platform at this page.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — m.ph365 will notify registered Players via the email address associated with their Account or through a prominent notice on the Platform, at least seven (7) days before the changes take effect.

Your continued use of the m.ph365 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you must cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by m.ph365, please contact our Data Protection Officer:

Data Protection Officer, m.ph365
Email: [email protected]

For general customer support inquiries unrelated to data privacy, please contact our support team at: [email protected]

If you are not satisfied with m.ph365's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.