Privacy & Data Protection

PHP38 Privacy Policy — How We Protect Your Personal Data

Your personal information matters to us. This Privacy Policy explains in straightforward terms what data PHP38 collects, why we collect it, who we share it with, and what rights you have over your own information as a registered Filipino player.

Last updated: January 2025 Applies to: Republic of the Philippines Language: English (en-PH)
php38
PHP38 serves Filipino players across the archipelago — your privacy is protected every step of the way.
Before You Read

This Privacy Policy applies to all personal data processed by PHP38 in connection with your use of the platform, including account registration, deposits, withdrawals, gameplay, and customer support interactions. By using PHP38, you acknowledge that you have read and understood this policy.

1 Introduction

PHP38 is committed to protecting the privacy of every player who uses our platform. We understand that handing over your personal details — your name, your mobile number, your GCash account — requires a level of trust. This Privacy Policy is our way of being transparent about exactly what we do with that information, and what we don't do.

This policy applies to all data collected through the PHP38 website at php38.click and all associated services, including account registration, gameplay, customer support, promotions, and payment processing. It covers information collected from players located in the Republic of the Philippines and, where applicable, players accessing the platform from other jurisdictions.

PHP38 processes personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations. We are committed to the principles of transparency, legitimate purpose, and proportionality in everything we do with your data.

If you have questions about this policy or about how PHP38 handles your personal information, please contact us using the details in Section 14. We would rather you ask than wonder.

2 What Personal Data We Collect

PHP38 collects only the personal data that is necessary for the legitimate purposes described in this policy. Here is a breakdown of the categories of information we may hold about you:

Identity and Contact Information

Full legal name Date of birth Philippine mobile number Email address Residential address Government-issued ID details

Financial Information

GCash / Maya mobile number Bank account details (for transfers) Card details (processed by payment provider) Deposit and withdrawal history

Account and Activity Data

Username and encrypted password Game history and bet records Login timestamps and session data Customer support communications Bonus and promotion participation

Technical and Device Data

IP address Device type and operating system Browser type and version Page interaction and navigation data
Payment Card Note

PHP38 does not store full credit or debit card numbers on our servers. Card payments are processed directly by our certified payment partners who operate under their own PCI-DSS compliant security frameworks. PHP38 only receives confirmation of the transaction outcome and a masked card reference.

3 How We Collect Your Data

PHP38 collects personal data through the following channels:

  • Direct submission: Information you provide when registering, completing verification, making deposits or withdrawals, contacting support, or participating in promotions.
  • Automated collection: Technical data collected automatically as you navigate the PHP38 platform — including IP address, device identifiers, browser information, and session activity logs.
  • Payment processors: Transaction confirmation and payment method reference data shared by our payment partners (GCash, Maya, banks) when you complete a deposit or withdrawal.
  • Verification services: Identity and age verification data returned by third-party verification providers when we are required to confirm your eligibility to use the platform.
  • Cookies and tracking: Behavioral and preference data collected through cookies and similar technologies as described in Section 7.
php38
PHP38 processes all player data with full compliance with the Philippine Data Privacy Act of 2012.

4 How PHP38 Uses Your Personal Data

PHP38 uses your personal data for specific, legitimate purposes only. We do not use your information for anything beyond what is described here without first obtaining your consent or having a valid legal basis to do so.

Account Management

To create, maintain, and administer your PHP38 account — including processing your registration, enabling login and security features, and managing your account settings and preferences.

Transaction Processing

To process your deposits and withdrawals, verify your identity for payment purposes, prevent fraudulent transactions, and maintain accurate financial records as required by Philippine law.

Identity and Age Verification

To confirm that you meet the minimum age requirement of 21 years and are eligible to use the PHP38 platform, and to comply with any applicable know-your-customer (KYC) regulatory requirements.

Platform Operation and Improvement

To monitor the technical performance of the PHP38 platform, identify and fix bugs or errors, analyse usage patterns to improve the user experience, and develop new features that better serve Filipino players.

Customer Support

To respond to your questions, resolve account or payment issues, and maintain records of support interactions for quality assurance and dispute resolution purposes.

Promotions and Communications

To send you information about PHP38 promotions, bonuses, and platform updates that may be relevant to your account — but only where you have opted in to receive such communications or where we have a legitimate interest in informing you of relevant changes.

Legal and Regulatory Compliance

To comply with our legal obligations under Philippine law, including the Data Privacy Act, anti-money laundering regulations, and any instructions from regulatory authorities. In certain circumstances, PHP38 may be legally required to retain or disclose specific data regardless of your preferences.

Responsible Gaming

To monitor account activity for indicators of problem gambling, enforce self-exclusion requests, and support the operation of PHP38's responsible gaming tools including deposit limits and session controls.

6 Sharing Your Personal Data

PHP38 does not sell, rent, or trade your personal data to third parties. We may share your information with the following categories of third parties only to the extent necessary and for the purposes described in this policy:

Payment Service Providers

PHP38 shares the minimum necessary information with Philippine payment processors — including GCash, Maya, GrabPay, Coins.ph, partner banks, and card networks — to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual data protection obligations with PHP38.

Identity Verification Partners

Where required to complete KYC verification, PHP38 may share your identification documents and personal details with certified verification service providers. These partners are contractually restricted from using your data for any purpose other than completing the specific verification request.

Regulatory and Law Enforcement Authorities

PHP38 may be legally required to disclose personal data to Philippine government agencies, regulatory bodies, or law enforcement authorities when compelled to do so by law, court order, or valid regulatory instruction. PHP38 will not voluntarily disclose data to authorities beyond what is legally required.

Technology and Infrastructure Partners

PHP38 uses third-party cloud hosting, analytics, and security services to operate the platform. These providers process data on PHP38's behalf under strict data processing agreements and are not permitted to use your data for their own purposes.

No Data Sales — Ever

PHP38 will never sell your personal data to advertisers, data brokers, or any other commercial third parties. Your information exists to help us provide you with a safe and fair gaming experience — nothing more.

7 Cookies and Tracking Technologies

PHP38 uses cookies and similar tracking technologies to make the platform work correctly and to understand how players use it. Cookies are small text files stored on your device when you visit a website. They are widely used across the internet and serve several purposes on the PHP38 platform.

Types of Cookies PHP38 Uses

  • Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and cookies that remember your preferences during a visit. You cannot opt out of essential cookies without affecting your ability to use PHP38.
  • Analytics cookies: Help PHP38 understand how players navigate the platform — which pages are visited most, where users drop off, and how features are used. This data is used to improve the platform. It is collected in aggregate form where possible.
  • Security cookies: Used to detect and prevent fraudulent activity, including suspicious login patterns and bot behaviour.
  • Preference cookies: Remember your settings and choices between sessions, so you don't have to re-enter them every time you visit.

You can manage cookie preferences through your browser settings. Blocking all cookies may impact how the PHP38 platform functions — in particular, essential session cookies are required for account login and gameplay.

php38
PHP38 players across the Philippines — from Puerto Princesa to the capital — can trust that their data is handled responsibly.

8 Data Retention

PHP38 retains your personal data only for as long as it is necessary for the purposes described in this policy, or as required by Philippine law. The following general retention principles apply:

  • Active accounts: Personal data is retained for the full duration of your PHP38 account membership.
  • Closed accounts: Following account closure, PHP38 retains certain data — including identity records, transaction history, and support communications — for a minimum of five (5) years, or longer if required by anti-money laundering regulations or ongoing legal proceedings.
  • Financial records: Transaction records are retained for the period required by applicable Philippine financial regulations.
  • Marketing data: Consent records for marketing communications are retained for as long as necessary to demonstrate compliance with data protection obligations, or until you withdraw consent.

When data is no longer required and the retention period has passed, PHP38 securely deletes or anonymises it in accordance with our internal data deletion procedures.

9 Data Security

PHP38 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

  • SSL/TLS encryption on all data transmitted between your device and the PHP38 platform.
  • Encrypted password storage — your PHP38 password is stored in hashed form and cannot be retrieved in plain text by PHP38 staff.
  • Access controls — internal access to personal data is restricted to staff who need it to perform specific functions, and is logged and audited.
  • Fraud detection systems — automated monitoring identifies unusual account activity patterns and triggers security reviews where necessary.
  • Secure payment processing — financial transactions are handled by PCI-DSS certified payment partners, keeping your card and banking details out of PHP38's direct data environment.

No digital platform can guarantee absolute security against all threats. In the event of a data breach that poses a risk to your rights, PHP38 will notify affected players and the National Privacy Commission of the Philippines in accordance with the requirements of the Data Privacy Act.

Your Role in Account Security

PHP38's security measures protect data at the platform level. You also have a role to play — use a strong, unique password for your PHP38 account, never share your login credentials with anyone, and contact us immediately if you suspect your account has been accessed without your authorisation.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by PHP38. To exercise any of these rights, contact us at support@php38.click and we will respond promptly.

Right to Access

You have the right to request a copy of the personal data PHP38 holds about you, as well as information about how it is being used.

Right to Rectification

If any of your personal data on PHP38 is inaccurate or incomplete, you have the right to request that we correct or update it without delay.

Right to Erasure

In certain circumstances, you may request that PHP38 delete your personal data — for example, if it is no longer necessary for the purpose it was collected. This right is subject to legal retention requirements.

Right to Object

You have the right to object to certain types of processing, including direct marketing. If you no longer wish to receive promotional communications from PHP38, you may opt out at any time.

Right to Restriction

You may request that PHP38 restrict the processing of your data in specific circumstances — such as while a correction request is being assessed.

Right to Data Portability

Where technically feasible, you may request your personal data in a structured, machine-readable format for transfer to another service provider.

PHP38 aims to respond to all data rights requests within fifteen (15) business days. In complex cases, we may request an extension and will notify you if this is necessary. We may ask you to verify your identity before fulfilling any data rights request to ensure that your information is not disclosed to an unauthorised party.

If you believe PHP38 has failed to handle your personal data appropriately, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

11 Minors

PHP38 is strictly an adult platform. The minimum age to register and use PHP38 is 21 years old. We do not knowingly collect, store, or process personal data from individuals under 21 years of age.

If PHP38 becomes aware that a minor has registered an account or submitted personal data, the account will be closed immediately and all personal data associated with it will be deleted. If you are a parent or guardian and believe your child has created a PHP38 account, please contact us immediately at support@php38.click.

12 Third-Party Links

The PHP38 platform may contain references or navigation links to other pages within the php38.click domain. PHP38 does not link to external third-party websites. This privacy policy applies exclusively to data processing conducted by PHP38 in connection with the php38.click platform and its services.

If you access any third-party services — such as your GCash app or bank's online portal — in connection with a PHP38 payment, the privacy practices of those third parties are governed by their own policies, which are separate from PHP38's.

13 Changes to This Privacy Policy

PHP38 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable Philippine law. When we make material changes, we will update the "last updated" date at the top of this page.

For significant changes that materially affect how your data is used, PHP38 will make reasonable efforts to notify you through your registered contact details. However, we encourage you to review this page periodically. Your continued use of PHP38 after changes have been posted constitutes your acceptance of the updated policy.

14 Contact Our Data Privacy Team

If you have any questions, concerns, or requests related to this Privacy Policy or to how PHP38 handles your personal data, you can reach us through the following channel:

  • Email: support@php38.click
  • Subject line: "Data Privacy Request" for faster routing
  • Response time: We aim to respond to all privacy-related inquiries within 5 business days
  • Support hours: 24 hours a day, 7 days a week

For formal data rights requests under the Data Privacy Act of 2012, please include your full name, registered mobile number, and a clear description of your request to help us process it efficiently.

National Privacy Commission

If you are not satisfied with how PHP38 has handled your privacy concern after contacting us directly, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent regulatory body responsible for the enforcement of the Data Privacy Act of 2012.

PHP38's Privacy Commitments in Practice

Privacy isn't just a policy document at PHP38 — it's a set of active practices that shape how we build and run the platform every day.

End-to-End Encryption

All data transmitted between your device and PHP38 is protected by SSL/TLS encryption. Whether you're logging in, making a deposit, or checking your game history, your connection is secure.

No Data Selling — Ever

PHP38 will never sell your personal information to advertisers, data brokers, or any other third party for commercial purposes. Your data exists to make your PHP38 experience work — full stop.

Minimal Data Collection

PHP38 collects only what is genuinely necessary. We don't ask for information we don't need. Every data point we hold has a clear, legitimate purpose tied to your account or a legal requirement.

DPA 2012 Compliance

PHP38 operates in full compliance with the Philippine Data Privacy Act of 2012. Our data practices are aligned with the principles of transparency, legitimate purpose, and proportionality required by law.

Controlled Internal Access

Access to player personal data within PHP38 is restricted to the staff who genuinely need it to perform their role. All data access is logged and subject to regular internal review.

Your Rights, Honoured

PHP38 takes data rights requests seriously. Access, rectification, erasure, and objection requests are handled promptly by our support team. You're always in control of your own information.

Privacy Policy at a Glance

Key privacy facts for PHP38 players. For the full picture, read the sections above.

Topic PHP38 Privacy Summary
Governing Law Data Privacy Act of 2012 (Republic Act 10173), Philippines
Data We Collect Identity, contact, financial, account activity, and technical/device data
Why We Collect It Account management, payments, verification, security, compliance, responsible gaming
Data Sharing Payment processors, verification partners, regulatory authorities only — never sold
Retention Period Duration of membership + minimum 5 years post-closure for financial/identity records
Security Measures SSL encryption, hashed passwords, access controls, fraud monitoring
Your Rights Access, rectification, erasure, objection, restriction, portability
Contact for Privacy support@php38.click — Subject: Data Privacy Request
Escalation National Privacy Commission of the Philippines (NPC)

Play at PHP38 With Confidence

Now you know exactly how PHP38 handles your data. We built this platform to be transparent and trustworthy — because Filipino players deserve nothing less. Join PHP38 today and play with peace of mind.