38phcash Privacy Policy

Introduction

38phcash ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every Filipino player who registers and plays on the 38phcash platform. This Privacy Policy ("Policy") describes in detail what personal data 38phcash collects about you, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have regarding your personal data.

This Policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. Where applicable, the Policy also references international privacy best practices.

By creating an account on 38phcash or by using any 38phcash service, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

Data Controller

For the purposes of the Data Privacy Act of 2012, the data controller responsible for your personal information collected through the 38phcash platform is:

As data controller, 38phcash determines the purposes and means by which your personal data is processed. Where 38phcash engages third-party service providers to process data on its behalf (data processors), those parties act under written data processing agreements that require them to process your data only as instructed by 38phcash and in accordance with applicable law.

Information We Collect

38phcash collects personal data from you directly (information you provide during registration, KYC, or support interactions), automatically (data generated by your use of the platform), and from third parties (payment processors, identity verification services, fraud prevention providers).

38phcash does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. We do not collect health information, biometric data (beyond ID photographs required for KYC), or political affiliation data.

How We Use Your Personal Data

38phcash uses your personal data only for specific, legitimate purposes directly connected to the operation of the platform and our obligations under Philippine law. The specific purposes are:

• Account creation and management: To register your account, authenticate your identity at login, and manage your account settings on 38phcash.
• Identity verification (KYC): To verify that you are who you say you are, that you meet the 21+ age requirement, and that you are legally permitted to use the platform. This is a regulatory obligation.
• Payment processing: To process deposits via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, and to process withdrawal requests to your registered payment methods.
• Anti-money laundering (AML) compliance: To monitor transactions and account activity for indicators of money laundering, terrorism financing, or other financial crimes, as required under Philippine law.
• Fraud prevention and security: To detect and prevent unauthorized account access, fraudulent transactions, bonus abuse, and other prohibited activities.
• Responsible gaming: To monitor gaming patterns and identify players who may require responsible gaming support, in line with our duty of care to all 38phcash account holders.
• Customer support: To respond to your queries, resolve disputes, and provide technical assistance through our 24/7 live support team.
• Platform improvement: To analyze aggregated usage data and improve the 38phcash game selection, interface, and payout infrastructure.
• Marketing communications: To send you promotional offers and bonus notifications where you have consented to receive such communications. You may opt out at any time.
• Legal compliance: To comply with applicable Philippine laws, PAGCOR guidelines, NPC requirements, court orders, or lawful regulatory demands.

Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), 38phcash processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you entered into when registering your 38phcash account — including KYC, payment processing, and account management.
• Legal obligation: Processing required to comply with applicable Philippine law, including AML obligations, PAGCOR guidelines, and NPC requirements.
• Legitimate interests: Processing conducted for 38phcash's legitimate operational interests, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Processing conducted on the basis of your explicit consent, including the sending of marketing communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Third-Party Disclosure

38phcash does not sell your personal data to any third party. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: GCash (Mynt / G-Xchange Inc.), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, Visa, and Mastercard — to process your deposit and withdrawal transactions. These providers have their own privacy policies governing their processing of your payment data.
• Identity verification providers: Third-party KYC services that verify your government-issued ID documents and perform age and identity checks on 38phcash's behalf.
• Fraud and AML screening providers: Services that cross-reference account and transaction data against watchlists and risk databases to detect financial crime.
• Game providers: Certified game studios (e.g., PG Soft, Pragmatic Play, Jili, Evolution) receive your account identifier and bet data as necessary to run games and record outcomes. They do not receive your full identity or financial data.
• Regulatory authorities: Philippine authorities including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies, where disclosure is required by law or lawful order.
• Professional advisers: Legal counsel, auditors, and compliance consultants, under strict confidentiality obligations.

Data Retention

38phcash retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements under the Anti-Money Laundering Act (RA 9160 as amended).
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine financial crime compliance obligations.
• Game and betting history: Retained for a minimum of three (3) years from the date of each session, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for two (2) years from the date of the interaction, unless the content is relevant to a longer-term dispute or legal matter.
• Marketing consent records: Retained for the duration of your account, or until you withdraw consent, plus one (1) year as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to you. Anonymized data may be retained indefinitely for statistical and analytical purposes.

Cookies & Tracking Technologies

38phcash uses cookies and similar tracking technologies to operate the platform, maintain your login session, prevent fraud, and analyze how Filipino players use the site. The following cookie categories are used:

• Strictly necessary cookies: Required for the 38phcash platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings and responsible gaming limits you have configured in your account.
• Analytics cookies: Collect aggregated data on how players navigate 38phcash, which games they play, and where they encounter issues. This data is used exclusively to improve the platform experience and is not shared with third-party advertisers.
• Security cookies: Used to detect fraudulent login attempts, bot traffic, and account takeover attempts.

Data Security

38phcash implements technical, organizational, and administrative security measures appropriate to the sensitivity of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 38phcash platform — the same encryption standard used by GCash and Philippine banks.
• Encrypted data storage for all sensitive personal data at rest, including identity documents and financial account details.
• Access controls: Personal data is accessible only to 38phcash personnel with a legitimate operational need. Access logs are maintained and reviewed regularly.
• Two-factor authentication (2FA) available for all player accounts and mandatory for internal staff accessing player data.
• Regular security assessments including vulnerability scanning and penetration testing conducted by independent security professionals.
• Data breach response procedures: In the event of a personal data breach that creates a risk to your rights and freedoms, 38phcash will notify the National Privacy Commission (NPC) within 72 hours of becoming aware, and will notify affected players without undue delay.

While 38phcash takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the confidentiality of your 38phcash login credentials and for notifying us immediately if you suspect unauthorized access to your account.

Your Rights Under Philippine Data Privacy Law

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 38phcash. These rights may be exercised by contacting us at the details in Section 14:

Children's Privacy

The 38phcash platform is strictly restricted to individuals aged 21 years and above, in accordance with PAGCOR guidelines for casino-style gaming in the Philippines. 38phcash does not knowingly collect personal data from any person under the age of 21.

If 38phcash discovers that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all personal data associated with the account will be securely deleted (except where retention is required by law), and any deposited funds will be returned to the originating payment method following identity verification of the account holder's guardian or legal representative.

If you are the parent or guardian of a minor and believe they have accessed the 38phcash platform, please contact us immediately at the details provided in Section 14.

Cross-Border Data Transfers

Some of 38phcash's third-party service providers — including game studios, identity verification services, and cloud infrastructure providers — may process your personal data in countries outside the Philippines. Where personal data is transferred internationally, 38phcash ensures that:

• The recipient country provides an adequate level of data protection as determined by the National Privacy Commission, or
• Appropriate safeguards are in place, such as data processing agreements incorporating standard contractual clauses approved by the NPC, or
• The transfer is necessary for the performance of our contract with you (e.g., running a game hosted by an international provider).

You may request details of the safeguards in place for any specific cross-border transfer by contacting our Data Protection Officer.

Updates to This Privacy Policy

38phcash may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or NPC guidance. Material changes — those that affect how your personal data is used or your rights as a data subject — will be communicated to you by email or in-platform notification at least seven (7) days before taking effect.

The "Last Updated" date displayed at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically. Your continued use of the 38phcash platform after the effective date of any update constitutes your acceptance of the revised Policy.

Contact & Data Protection Officer

For privacy-related inquiries, data subject access requests, complaints, or questions about this Policy, please contact the 38phcash Data Protection Officer:

If your complaint is not resolved to your satisfaction, you have the right to escalate to the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for enforcing the Data Privacy Act of 2012.