38phcash Privacy Policy

Overview

This Privacy Policy applies to all personal data processed by 38phcash in connection with the operation of the 38phcash online gaming platform accessible at https://38phcash.org and any associated mobile web interfaces. 38phcash acts as the data controller for the personal information collected from users registered on the platform.

By creating a 38phcash account, using the platform, or otherwise submitting personal information to 38phcash, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with this Privacy Policy, you must not register an account or use the 38phcash platform.

Data We Collect

38phcash collects the following categories of personal data from users:

38phcash does not collect sensitive personal information — such as racial or ethnic origin, religious beliefs, health data, or political opinions — unless specifically required by law or with your explicit consent.

How We Collect Data

38phcash collects personal data through the following means:

• Direct Provision: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, participating in promotions, or contacting support.
• Automated Collection: Technical and usage data collected automatically when you access and use the 38phcash platform, including through cookies, web beacons, and server logs.
• Third-Party Payment Providers: Transaction confirmation data received from payment processors including GCash, Maya, BPI, BDO, and other integrated payment channels when you complete a deposit or withdrawal.
• Identity Verification Services: Confirmation data from KYC document verification processes, which may involve automated document checking tools.
• Game Providers: Game session data — including wagers placed and outcomes — received from the certified game studios whose content is hosted on the 38phcash platform.

Purpose of Processing

38phcash processes your personal data for the following purposes:

• Account Management: Creating, operating, and maintaining your 38phcash account, including login authentication and session management.
• KYC and Age Verification: Verifying your identity and confirming that you meet the minimum age requirement of 21 years, as required under PAGCOR regulations applicable to the 38phcash platform.
• Payment Processing: Processing deposits and withdrawals in Philippine Peso through your selected payment channel (GCash, Maya, BPI, BDO, InstaPay, etc.).
• Regulatory Compliance: Fulfilling obligations under Philippine law, including the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and PAGCOR licensing conditions.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised access, money laundering, and other prohibited conduct on the platform.
• Responsible Gaming: Monitoring gaming activity to identify problem gambling patterns and to apply responsible gaming tools such as deposit limits and self-exclusion at your request.
• Customer Support: Responding to your enquiries, resolving account issues, and managing disputes through the 38phcash support team.
• Communications: Sending account-related notifications via SMS or email, including deposit confirmations, withdrawal notifications, security alerts, and bonus activations. Marketing communications are sent only where you have provided consent or where permitted by law.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, features, and user experience of the 38phcash platform.

Data Sharing

38phcash does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances and only to the extent strictly necessary:

• Payment Processors: Financial data shared with GCash, Maya, BPI, BDO, and other integrated payment partners solely for the purpose of processing transactions you initiate.
• Game Content Providers: Game session data (username and wager information) shared with certified game studios to enable game delivery and record keeping.
• KYC Verification Partners: Identity document data may be processed by accredited document verification service providers operating under data processing agreements with 38phcash.
• Regulatory Authorities: Personal and transaction data disclosed to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies where legally required or in response to a valid legal order.
• IT Infrastructure and Hosting Providers: Technical data processed by cloud hosting and cybersecurity service providers operating under strict data processing agreements and bound by confidentiality obligations.

All third parties with whom 38phcash shares personal data are required to process that data only for the stated purpose, under appropriate data protection safeguards, and in compliance with Philippine data privacy law.

Data Retention

38phcash retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal minimum retention periods. The following general retention periods apply:

• Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, as required by RA 9160 as amended.
• Transaction Records: All financial transaction records (deposits, withdrawals, bets) retained for a minimum of five (5) years.
• Support Communications: Retained for two (2) years from the date of the last interaction, unless required for longer periods in connection with ongoing disputes.
• Technical and Usage Data: Retained in anonymised or aggregated form for up to three (3) years for platform analytics purposes.

Upon expiry of applicable retention periods, personal data will be securely deleted or permanently anonymised.

Data Security

38phcash implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 38phcash platform.
• Password hashing using industry-standard cryptographic algorithms. Passwords are never stored in plain text.
• KYC documents and financial records stored in encrypted, access-controlled server environments with restricted personnel access.
• SMS OTP two-factor authentication available for all 38phcash accounts.
• Regular security audits and penetration testing of platform infrastructure.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Incident response procedures for managing data breach events, including notification obligations to the NPC and affected users in accordance with RA 10173.

While 38phcash takes all reasonable steps to protect your data, no system is completely impervious to security risks. You are responsible for keeping your login credentials confidential and for notifying 38phcash immediately if you suspect unauthorised access to your account.

Cookies

38phcash uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how users interact with the site.

8.1 Types of Cookies Used

• Essential Cookies: Required for the platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences — such as language settings and remembered login — to provide a personalised experience.
• Analytics Cookies: Collect anonymised data about how users navigate the platform, which pages are visited most frequently, and where users drop off. This data is used solely to improve the 38phcash platform experience.

8.2 Managing Cookies

You can configure your browser to block or delete cookies. Note that disabling essential cookies may impair your ability to use the 38phcash platform, including the ability to remain logged in and to complete transactions. 38phcash does not use third-party advertising cookies or tracking pixels for external advertising networks.

Your Data Rights

Under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules, you have the following rights with respect to your personal data held by 38phcash:

• Right to Be Informed: The right to know what personal data 38phcash collects and how it is processed — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data 38phcash holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your 38phcash account. Many details can be updated directly from your account settings; others require identity verification through support.
• Right to Erasure: The right to request deletion of your personal data, subject to 38phcash's legal obligations to retain certain records under Philippine law (including AML retention periods).
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Object: The right to object to certain processing of your personal data, including processing for direct marketing purposes.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, contact 38phcash support via the live chat in your account dashboard or email [email protected]. Identity verification may be required before your request is processed. 38phcash will respond to data rights requests within 15 business days.

Minors

If you believe that a minor has submitted personal data to 38phcash, please contact our support team immediately so that the information may be identified and promptly deleted.

Policy Changes

38phcash reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, platform features, data processing practices, or regulatory requirements. Material changes to this Privacy Policy will be communicated to registered users via email or SMS to the contact details on file, and a notice will be posted on the 38phcash website.

The "Last updated" date in the header of this document identifies the current version of the Policy. Continued use of the 38phcash platform after the effective date of any amendments constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended Policy, you must cease using the platform and close your account before the amendments take effect.

Contact Us

For questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 38phcash, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 in Filipino and English from your 38phcash account dashboard. Average response time under 2 minutes.
• Email: [email protected] — for formal data subject requests, please use the subject line "Data Privacy Request — [Your Account Username]".

38phcash will acknowledge receipt of all data privacy enquiries within 3 business days and will aim to provide a full response within 15 business days. Where a request requires additional time to process, 38phcash will notify you of the expected timeline.