32ph Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how 32ph (the "Platform," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information provided by users (the "Player," "User," or "you") of our online gaming platform. This Policy applies to all personal data collected through our website, mobile applications, customer support channels, and any other digital touchpoints where you interact with 32ph services.

By registering an account, depositing funds, playing games, or otherwise using 32ph, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must immediately cease using the Platform and refrain from providing any personal information. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of 32ph services.

32ph is committed to complying with the Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its implementing rules and regulations, as well as guidelines issued by the National Privacy Commission of the Philippines. We also adhere to Philippine Amusement and Gaming Corporation (PAGCOR) regulations regarding player data protection, anti-money laundering requirements, and responsible gaming obligations.

2. Information We Collect

2.1 Personal Information Provided Directly

When you register for a 32ph account, we collect the following personal information that you voluntarily provide:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., passport number, driver's license number, Philippine national ID number, SSS/GSIS number).
• Contact Information: Email address, mobile phone number, residential address including street, barangay, city, province, and postal code.
• Account Credentials: Username, password (stored in encrypted form), and security questions used for account access and recovery.
• Financial Information: Payment method details including GCash account information, Maya account information, bank account numbers, cryptocurrency wallet addresses, and transaction history related to deposits and withdrawals.
• Verification Documents: Copies of government-issued photo identification, proof of address documents (utility bills, bank statements), selfie photos for identity verification, and proof of payment method ownership.
• Communication Records: Content of messages exchanged with customer support via live chat, email, or other communication channels, including attachments and supporting documentation.

2.2 Information Collected Automatically

When you access and use 32ph, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Connection Information: IP address, internet service provider, approximate geographic location based on IP address, connection timestamps, and network quality metrics.
• Usage Data: Pages visited, games played, betting patterns, session duration, clickstream data, features accessed, search queries, and navigation paths through the Platform.
• Transaction Information: Deposit amounts, withdrawal requests, bonus claims, wagering activity, win/loss records, and payment method preferences.
• Marketing Interactions: Email open rates, promotional click-through rates, push notification responses, and marketing campaign engagement metrics.

2.3 Information from Third Parties

We may receive personal information about you from third-party sources including payment processors (GCash, Maya, banks), identity verification services, fraud detection agencies, credit reference agencies, and publicly available sources used for compliance and security purposes. This information is used to verify your identity, prevent fraud, comply with anti-money laundering regulations, and maintain platform security.

3. How We Use Your Information

3.1 Primary Purposes

32ph uses your personal information for the following legitimate business purposes:

• Account Management: Creating and maintaining your player account, authenticating your identity, processing login requests, managing account settings and preferences, and facilitating password resets.
• Transaction Processing: Processing deposits, withdrawals, and payment transfers; maintaining transaction records; reconciling financial accounts; and generating account statements.
• Game Provision: Providing access to casino games, sports betting, live dealer games, and other gaming products; tracking gameplay activity; calculating winnings; and processing payouts.
• Customer Support: Responding to inquiries, resolving disputes, addressing technical issues, providing account assistance, and maintaining communication records for quality assurance.
• Security and Fraud Prevention: Detecting and preventing fraudulent transactions, identifying duplicate accounts, monitoring for suspicious activity, verifying identity, preventing money laundering, and protecting against cyber threats.
• Regulatory Compliance: Meeting PAGCOR licensing requirements, complying with anti-money laundering laws, fulfilling tax reporting obligations, responding to lawful government requests, and maintaining audit trails.
• Responsible Gaming: Implementing deposit limits, enforcing self-exclusion requests, monitoring for problem gambling indicators, providing access to responsible gaming tools, and facilitating interventions when necessary.

3.2 Marketing and Communications

With your consent, we use your contact information to send promotional emails, SMS messages, push notifications, and in-platform messages about bonuses, promotions, new games, special events, and other offers that may interest you. You may opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your notification preferences in your account settings, or contacting customer support. Opting out of marketing does not affect transactional communications necessary for account operation.

3.3 Analytics and Improvement

We analyze usage patterns, player behavior, game performance, and platform metrics to improve our services, develop new features, optimize user experience, identify technical issues, and make data-driven business decisions. Aggregated and anonymized data may be used for research, reporting, and business intelligence purposes without identifying individual users.

4. Legal Basis for Processing

Under Philippine data privacy law, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our Terms and Conditions, provide gaming services, process transactions, and deliver features you request.
• Legal Obligation: Processing mandated by PAGCOR regulations, anti-money laundering laws, tax laws, consumer protection laws, and other applicable Philippine legislation.
• Consent: Processing authorized by your explicit consent, particularly for marketing communications and optional data collection practices. Consent may be withdrawn at any time.
• Legitimate Interest: Processing necessary for fraud prevention, security measures, platform improvement, and other legitimate business purposes that do not override your privacy rights.

5. Information Sharing and Disclosure

5.1 Service Providers and Partners

We share personal information with trusted third-party service providers who assist in operating our platform and delivering services to you. These include:

• Payment Processors: GCash, Maya, banks, and other financial institutions that process deposits, withdrawals, and money transfers on your behalf.
• Game Providers: Software developers and live casino operators whose games you play on 32ph, who may receive gameplay data necessary for game operation.
• Identity Verification Services: Third-party vendors who verify your identity, validate documents, and perform background checks as part of our KYC (Know Your Customer) procedures.
• Cloud Infrastructure Providers: Data hosting services, content delivery networks, and cloud computing platforms that store and process data on our behalf.
• Customer Service Tools: Live chat platforms, email service providers, and helpdesk software used to manage customer support interactions.
• Marketing Platforms: Email marketing services, SMS gateways, push notification providers, and analytics tools used for promotional campaigns (only with your consent).

All service providers are contractually obligated to protect your information, use it only for specified purposes, and comply with applicable data protection laws. We conduct due diligence to ensure partners maintain adequate security measures.

5.2 Legal and Regulatory Disclosure

We disclose personal information when required or permitted by law, including:

• To PAGCOR and other regulatory authorities upon lawful request for licensing compliance, investigation, or audit purposes.
• To law enforcement agencies in response to valid subpoenas, court orders, or legal processes related to criminal investigations.
• To tax authorities to fulfill tax reporting obligations under Philippine revenue regulations.
• To the Anti-Money Laundering Council (AMLC) when suspicious transactions are detected or as required by anti-money laundering laws.
• In legal proceedings where disclosure is necessary to defend our rights, enforce our Terms and Conditions, or protect the safety of users or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or similar corporate transaction involving 32ph, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent website notice before your information becomes subject to a different privacy policy. You will have the opportunity to close your account before such transfer if you do not consent to the new policy.

5.4 What We Do Not Do

32ph does not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your data with advertisers or data brokers. We do not allow third-party tracking cookies for advertising purposes without your explicit consent.

6. Data Security Measures

32ph implements comprehensive technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers uses TLS/SSL encryption. Sensitive data stored in our databases is encrypted using industry-standard algorithms.
• Access Controls: Employee access to personal information is restricted on a need-to-know basis and governed by role-based access controls. All access is logged and monitored.
• Network Security: Firewalls, intrusion detection systems, and regular security audits protect our infrastructure from cyber threats and unauthorized access attempts.
• Secure Development: Our platform is built following secure coding practices, undergoes regular security testing, and is patched promptly when vulnerabilities are discovered.
• Physical Security: Data centers hosting our services maintain strict physical access controls, surveillance systems, and environmental protections.
• Incident Response: We maintain a security incident response plan to detect, contain, and remediate data breaches promptly while notifying affected users as required by law.

While we employ robust security measures, no internet-based system is completely secure. You acknowledge that data transmission over the internet carries inherent risks, and 32ph cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and promptly notifying us of any suspected security breaches.

7. Data Retention and Deletion

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Information is retained throughout your active use of 32ph services and for a reasonable period afterward to facilitate potential account reactivation and address post-closure inquiries.
• Closed Accounts: After voluntary account closure, personal information is retained for five (5) years to comply with PAGCOR record-keeping requirements, anti-money laundering regulations, and tax laws.
• Transaction Records: Financial transaction data is retained for seven (7) years as required by Philippine taxation and anti-money laundering regulations.
• Marketing Data: Contact information used for marketing purposes is deleted within thirty (30) days of your opt-out request unless required for other legitimate purposes.
• Verification Documents: Identity verification documents are retained for the duration of your account relationship plus the regulatory retention period, after which they are securely destroyed.

Upon expiration of applicable retention periods, personal information is securely deleted or anonymized such that it can no longer identify you. Aggregated, anonymized data that does not identify individuals may be retained indefinitely for analytical and research purposes.

8. Your Privacy Rights

Under Philippine data privacy law, you have the following rights regarding your personal information:

• Right to Access: Request confirmation of what personal information we hold about you and obtain a copy of that information.
• Right to Rectification: Request correction of inaccurate or incomplete personal information in your account.
• Right to Erasure: Request deletion of your personal information when it is no longer necessary for the purposes collected, subject to legal retention requirements.
• Right to Object: Object to processing of your personal information for direct marketing purposes or other legitimate interests.
• Right to Data Portability: Request transfer of your personal information in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Withdraw previously given consent for data processing without affecting the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: File a complaint with the National Privacy Commission if you believe your privacy rights have been violated.

To exercise these rights, contact our Data Protection Officer via email at [email protected] with the subject line "Privacy Rights Request." We will respond within fifteen (15) business days. Identity verification may be required before processing requests. Some rights are subject to legal limitations, such as mandatory retention periods for compliance purposes.

9. Cookies and Tracking Technologies

32ph uses cookies, web beacons, and similar technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you across sessions:

• Essential Cookies: Required for platform functionality, including session management, authentication, security features, and shopping cart operations. These cannot be disabled without affecting site functionality.
• Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with the Platform and identify areas for improvement.
• Functional Cookies: Remember your preferences, language settings, and customization choices to provide a personalized experience.
• Marketing Cookies: Track your browsing behavior to deliver targeted advertisements and measure campaign effectiveness (only with your consent).

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit your ability to use some Platform features. Our Cookie Policy provides detailed information about specific cookies used and how to manage them.

10. International Data Transfers

32ph primarily stores and processes data within the Philippines. However, some service providers may process data in other jurisdictions. When data is transferred internationally, we ensure adequate safeguards are in place through:

• Standard contractual clauses approved by data protection authorities.
• Verification that recipient countries provide adequate data protection standards.
• Contractual obligations requiring third parties to protect data according to Philippine standards.

By using 32ph, you consent to such transfers necessary for service provision. We remain responsible for ensuring third parties comply with applicable data protection requirements.

11. Children's Privacy

32ph services are intended exclusively for individuals twenty-one (21) years of age or older. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information and terminate the associated account. Parents or guardians who believe their child has provided information to 32ph should contact us immediately at [email protected].

12. Changes to This Privacy Policy

32ph reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated via email to registered users and through prominent notice on the Platform at least thirty (30) days before taking effect. Continued use of 32ph following notification constitutes acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically. The "Last Updated" date indicates when the most recent changes were made.

13. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact our Data Protection Officer:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 through the 32ph Platform
• Telegram: @32ph_official

We are committed to addressing your privacy concerns promptly and transparently. Our customer support team is trained to handle privacy-related inquiries and will escalate matters to our Data Protection Officer when necessary.