m.ph365 Privacy
Policy

This Privacy Policy applies to all personal information collected by m.ph365 in connection with the operation of the mph365.club platform, including all games, betting services, account functions, payment processing, customer support interactions, and marketing communications.

m.ph365 is committed to processing personal data in a manner that is lawful, fair, transparent, and consistent with the principles established under Republic Act No. 10173 (the Data Privacy Act of 2012) and the National Privacy Commission's (NPC) Implementing Rules and Regulations. This Policy explains your rights as a data subject and our obligations as a personal information controller (PIC).

By registering for an m.ph365 Account or continuing to use the Platform after this Policy's effective date, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms described herein, you should not use the Platform.

For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, m.ph365 — operating through its licensed Philippine entity and headquartered in Metro Manila, Philippines — acts as the Personal Information Controller (PIC) in respect of all personal data collected through the mph365.club platform.

As a PAGCOR-licensed operator, m.ph365 is also subject to PAGCOR's data governance requirements, which inform how we collect, retain, and disclose certain categories of player data — particularly data collected for Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance purposes.

Where m.ph365 engages third-party service providers who access personal data on our behalf (such as payment processors and game technology providers), those parties act as Personal Information Processors (PIPs) under agreements that bind them to processing data only as directed by m.ph365 and in accordance with applicable Philippine law.

m.ph365 collects personal data across several categories depending on how you interact with the Platform:

Identity and Registration Data

• Full legal name as it appears on government-issued identification
• Date of birth (to verify minimum age of 21 years)
• Philippine mobile number (used as primary account identifier)
• Email address (where provided during registration)
• Username chosen by the player at registration
• Gender (where provided voluntarily)
• Residential address in the Philippines

Identity Verification (KYC) Documents

• Government-issued photo identification (Philippine Passport, Driver's License, PhilSys National ID, SSS/UMID, PRC ID, Voter's ID)
• Proof of address documents (utility bills, bank statements) where required for enhanced due diligence
• Source of funds documentation for players subject to AML enhanced verification

Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references
• GCash wallet identifiers (mobile number associated with the GCash account used for transactions)
• PayMaya account references where applicable
• Bank account details where Philippine bank transfer methods are used (BPI, BDO, Metrobank)
• Historical balance records and account statement data

Gaming and Betting Activity Data

• Game session logs including game titles played, stakes, outcomes, and session duration
• Sportsbook betting history including markets, odds, wager amounts, and settlement results
• Bonus usage records including which promotions were claimed and wagering progress
• Responsible gaming tool settings including any limits or self-exclusions applied to the account

Technical and Device Data

• IP address at time of login and during active sessions
• Device type, operating system, and browser information
• Mobile network operator (Globe, Smart, DITO, Sun, etc.) where identifiable
• Session timestamps, login and logout records, and active session duration
• Geolocation data at login (country and regional level) for fraud prevention and regulatory compliance

Customer Support Data

• Content of live chat conversations, emails, and other communications with m.ph365 support agents
• Records of complaints, dispute submissions, and their outcomes
• Feedback and survey responses submitted voluntarily

m.ph365 collects personal data through the following mechanisms:

• Direct registration input: Information you provide when creating your Account, completing KYC verification, or updating your account profile.
• Transaction processing: Data generated automatically when you make deposits or withdraw funds through GCash, PayMaya, or Philippine bank transfer methods.
• Platform use: Game session data, betting activity logs, and navigation data generated by your use of the Platform — collected automatically through the application layer.
• Technical systems: Device identifiers, IP addresses, browser data, and connection information collected by m.ph365's infrastructure when you access the Platform.
• Cookies and similar technologies: Information collected through browser cookies and local storage as described in Section 10 of this Policy.
• Customer support: Data you provide when contacting m.ph365 support through live chat, email, or other communication channels.
• Third-party processors: Data received from payment processors (such as GCash/GXi and PayMaya/Voyager Innovations) and identity verification service providers in connection with transaction processing and KYC.

Under the Philippine Data Privacy Act, m.ph365 processes personal data on the following lawful bases:

• Contractual necessity: Processing required to provide the m.ph365 service under the Terms and Conditions you accepted at registration — including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Terrorism Financing Prevention and Suppression Act, and NPC regulations — including KYC verification, AML transaction monitoring, and retention of regulatory records.
• Legitimate interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where our interest in maintaining a safe and fair platform does not override your rights as a data subject.
• Consent: Processing for direct marketing communications and analytics beyond what is strictly necessary to provide the service. You may withdraw consent for these activities at any time as described in Section 13 of this Policy.

m.ph365 uses the personal data we collect for the following purposes:

• Account creation and management: Registering your account, maintaining your profile, verifying your identity and age, and managing account security settings.
• Service delivery: Providing access to the game library, processing bets and wagers, settling outcomes, and operating the sportsbook and live casino functions.
• Payment processing: Processing deposits through GCash, PayMaya, and Philippine bank channels; processing withdrawal requests to your verified payment accounts; and maintaining financial records.
• KYC and regulatory compliance: Verifying your identity and age (minimum 21 years) as required by PAGCOR; conducting AML transaction monitoring as required by Philippine law; reporting to PAGCOR and other regulatory authorities as required by applicable law.
• Fraud prevention and security: Detecting and preventing unauthorized account access, payment fraud, bonus abuse, multi-account activity, and other conduct prohibited under the m.ph365 Terms and Conditions.
• Responsible gaming: Monitoring gaming activity for patterns indicating problem gambling; administering responsible gaming tools including limits and self-exclusions; maintaining self-exclusion records as required by PAGCOR.
• Customer support: Responding to queries, resolving complaints, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: Analysing usage patterns to improve the Platform's functionality, game curation, and user experience — using aggregated and anonymised data where possible.
• Marketing communications: Sending promotional offers, bonus notifications, and news about m.ph365 to players who have provided consent for marketing — subject to the right to opt out described in Section 13.

m.ph365 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the following circumstances:

• Payment processors: GCash (operated by GXi Inc.), PayMaya (operated by Voyager Innovations Inc.), and Philippine banking institutions (BPI, BDO, Metrobank) receive the payment data necessary to process your transactions. These entities are regulated under Bangko Sentral ng Pilipinas (BSP) rules and their own privacy frameworks.
• Game technology providers: Third-party game studios and live casino operators whose games appear in the m.ph365 lobby receive session data necessary to operate their games. These providers are bound by contractual data processing obligations and are required to maintain RNG certifications.
• Identity verification services: KYC verification providers receive identity document images and personal details for the purpose of verifying your identity and age in compliance with PAGCOR requirements.
• PAGCOR and regulatory authorities: m.ph365 is required by its PAGCOR licence to report certain player data and transaction information to PAGCOR. m.ph365 also complies with lawful disclosures required by the Anti-Money Laundering Council (AMLC), courts, and other Philippine government authorities.
• Professional advisors: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations may access limited data as part of their engagement with m.ph365.
• Business transfer: In the event of a merger, acquisition, or transfer of the m.ph365 business, personal data may be transferred to the successor entity subject to equivalent privacy protections and notification to affected players.

m.ph365 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR licensing conditions.

• Active account data: Retained for the duration of your Account's active status plus a minimum retention period following account closure.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years following the transaction date, in compliance with AMLC record-keeping requirements.
• Customer support records: Retained for a minimum of three (3) years following resolution of the relevant query or dispute, for quality assurance and potential regulatory review purposes.
• Marketing consent records: Retained until you withdraw consent for marketing or close your Account, whichever occurs first, plus a reasonable administrative period to process the withdrawal.
• Self-exclusion records: Retained for the duration of the self-exclusion period and for a minimum of five (5) years thereafter, as required by PAGCOR's responsible gaming framework.

Following the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification of the data subject.

m.ph365 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks presented by the processing environment. These measures include:

• Transmission security: All data transmitted between your device and the m.ph365 platform is encrypted using 256-bit Transport Layer Security (TLS). This applies to login sessions, game play, and payment transactions.
• Password security: Player passwords are stored using industry-standard one-way cryptographic hashing. m.ph365 cannot retrieve your password; only password reset procedures initiated by you can change it.
• Access controls: Access to personal data within m.ph365's systems is restricted to staff with a demonstrated need to access that data for their job function. Access rights are reviewed regularly and revoked upon role change or departure.
• Infrastructure security: m.ph365's servers and databases are hosted in secured data centre environments with physical access controls, network firewall protections, and regular security patching.
• Fraud and anomaly detection: m.ph365 operates automated systems that monitor login and transaction activity for patterns indicative of fraud, unauthorized access, or money laundering. Alerts trigger review by m.ph365's security and compliance teams.
• Breach response: In the event of a personal data breach that poses a risk to data subjects, m.ph365 will comply with the NPC's mandatory breach notification requirements under the Data Privacy Act, including notifying affected players within the timeframes prescribed by NPC regulations.

m.ph365 uses cookies and similar browser-based storage technologies to enable the functioning of the Platform and to improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during an active session and cookies that store your language and display preferences. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store your preferences such as game display settings, last-visited lobby category, and responsible gaming tool configurations. These are not strictly required but improve your experience.
• Performance and analytics cookies: Used to understand how players navigate the Platform — which games are most accessed, where players encounter errors, and how long sessions typically run. This data is collected in aggregated and anonymised form where possible and is used solely to improve the Platform.
• Security cookies: Used by fraud detection and session security systems to identify unusual patterns in login and navigation behaviour. These are necessary for Platform security and cannot be disabled.

m.ph365 does not use third-party advertising tracking cookies or permit external ad networks to place tracking pixels on the Platform. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to or using the Platform.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by m.ph365:

To exercise any of these rights, contact the m.ph365 Data Protection Officer (DPO) using the details in Section 16. m.ph365 will respond to data subject requests within 30 calendar days of receipt, as required by NPC regulations. Where a request is complex or involves large volumes of data, this period may be extended by a further 30 days with notification to you.

m.ph365 will not charge a fee to exercise your rights, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. If you believe m.ph365 has not adequately responded to your request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The m.ph365 Platform is strictly for persons aged 21 years and older. m.ph365 does not knowingly collect personal data from individuals under 21 years of age. The minimum age of 21 for online casino-style gambling is set by PAGCOR and is strictly enforced through age verification during the KYC process.

If m.ph365 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted and the associated Account will be permanently closed. Any funds deposited by a minor will be handled in accordance with applicable law and PAGCOR requirements.

If you are a parent or guardian and believe that a minor may have registered an Account on m.ph365, please contact our support team immediately using the contact details in Section 16 so that the matter can be investigated and resolved promptly.

m.ph365 may send promotional communications — including bonus offers, game announcements, and platform news — to registered players who have provided marketing consent at registration or through Account settings. All marketing from m.ph365 is conducted via SMS to the registered Philippine mobile number and, where provided, to the registered email address.

You may withdraw consent for marketing communications at any time by:

• Updating your communication preferences in Account Settings under "Notifications and Marketing"
• Contacting the m.ph365 support team via live chat and requesting removal from marketing lists
• Contacting the Data Protection Officer at the email address provided in Section 16

Withdrawing marketing consent does not affect processing for operational purposes — you will continue to receive transactional messages related to your Account activity (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing preference setting.

The m.ph365 Platform does not contain links to third-party websites for general navigation purposes. Where links to third-party platforms exist (for example, within specific promotional content), m.ph365 is not responsible for the privacy practices or content of those third-party sites. This Privacy Policy applies only to data collected through the m.ph365 Platform at mph365.club.

Players should review the privacy policies of any third-party service they use in connection with m.ph365 — including GCash, PayMaya, BPI, BDO, and Metrobank — as these entities have their own data processing obligations under BSP regulations and their own privacy frameworks that are entirely independent of this Policy.

m.ph365 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When we make material changes — particularly changes that affect how we use your data or your rights as a data subject — we will notify you through the Platform and, where possible, by SMS or email to your registered contact details.

The effective date of the current version of this Policy is stated at the top of this document. By continuing to use the Platform after a revised Policy's effective date, you acknowledge and accept the updated terms. If you do not agree with any changes, you should close your Account before the effective date of the revision.

The current version of this Privacy Policy is always accessible at mph365.club/privacy-policy.

m.ph365 has designated a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. The DPO is responsible for overseeing m.ph365's compliance with the DPA and NPC regulations and serves as the primary point of contact for data subject rights requests and privacy-related enquiries.

• Data Protection Officer — Email: [email protected] (mark your message "Attention: Data Protection Officer" — plain text, not a clickable link)
• General Support: Available 24/7 via live chat in your m.ph365 Account dashboard, staffed by Filipino agents fluent in Tagalog and English.
• Registered Operations: Metro Manila, Philippines.

For complaints about m.ph365's data processing that cannot be resolved through our internal process, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, the body responsible for enforcing the Data Privacy Act. NPC contact details are available through the official Philippine government website.