At ph38, your privacy is not an afterthought — it is built into how we operate. This Privacy Policy explains what personal data ph38 collects from players across the Philippines, how we use it, who we share it with, and what rights you have over your own information.
These six principles guide how ph38 handles every piece of personal information entrusted to us by our players.
All personal and financial data stored by ph38 is encrypted using industry-standard protocols. Your ph38 account credentials, payment details, and identity documents are never stored in plain text.
ph38 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data is used solely to operate and improve the ph38 platform and services.
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, and request deletion of your personal data held by ph38. We honour these rights promptly and without unnecessary barriers.
ph38 processes personal data in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.
ph38 collects only the personal data that is necessary for the purposes described in this Privacy Policy. We do not collect data speculatively or beyond what is required to deliver our services to you.
In the unlikely event of a data breach that affects your personal information, ph38 will notify affected players and the National Privacy Commission within the timeframes required by Philippine law.
Important Notice: This Privacy Policy ("Policy") describes how ph38 ("ph38," "we," "us," "our") collects, uses, stores, and discloses personal information obtained from users ("you," "your," "Player") of the ph38 platform at ph38.net. By registering an account or using the ph38 platform, you consent to the data practices described in this Policy. This Policy forms part of the ph38 Terms & Conditions and should be read alongside them.
ph38 is committed to protecting the privacy and personal data of all players who use our online gaming platform. We understand that when you share your personal information with us — whether during registration, account verification, or day-to-day use of ph38 — you are placing trust in us to handle that information responsibly.
This Policy applies to all personal data collected through the ph38 website at ph38.net, any mobile-optimised version of the platform, and any communications between you and ph38, including customer support interactions via live chat or email. It applies to all registered players and visitors to the ph38 platform, regardless of location within the Philippines.
ph38 acts as the data controller in respect of the personal data it collects from players. This means ph38 determines the purposes and means by which your personal data is processed. Where ph38 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations consistent with this Policy and applicable Philippine privacy law.
Governing Law: This Privacy Policy is governed by Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. ph38 is committed to full compliance with the requirements of the National Privacy Commission (NPC).
ph38 collects the following categories of personal data from players. We collect only what is necessary for the purposes described in this Policy.
ph38 does not store full bank account numbers or card numbers on its servers. Payment processing is handled by certified third-party payment processors, and ph38 retains only the minimum reference data necessary to reconcile transactions.
Sensitive Personal Information: ph38 may collect sensitive personal information as defined under the Data Privacy Act of 2012, including government ID numbers and financial account details, solely for the purpose of identity verification and anti-money laundering compliance. This data is handled with the highest level of security and access controls.
ph38 collects personal data through the following means:
Data you provide directly to ph38 when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account settings.
Technical and usage data collected automatically when you access the ph38 platform, including through cookies, web beacons, and server logs. See Section 7 (Cookies & Tracking) for more detail.
ph38 may receive data about you from third-party sources in limited circumstances, including:
ph38 does not purchase personal data from data brokers or marketing list providers.
ph38 uses the personal data it collects for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity, contact, and account data |
| Age and identity verification (KYC) | Identity, KYC, and contact data |
| Processing deposits and withdrawals | Financial and identity data |
| Delivering gaming services | Account and gaming activity data |
| Fraud prevention and security monitoring | Technical, financial, and gaming data |
| Anti-money laundering compliance | Identity, financial, and transaction data |
| Customer support | Identity, account, and communications data |
| Responsible gaming monitoring | Gaming activity and account data |
| Platform improvement and analytics | Technical and usage data (aggregated/anonymised) |
| Marketing communications (with consent) | Contact and communications preference data |
| Legal and regulatory compliance | All categories as required by law |
ph38 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or expressly consented to by you.
Under the Data Privacy Act of 2012, ph38 processes your personal data on the following legal bases:
ph38 does not sell your personal data. We share your data only in the following limited circumstances:
ph38 engages trusted third-party service providers who process data on our behalf, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank partner gateways), identity verification providers, IT infrastructure and hosting providers, customer support platform providers, and fraud and AML screening services. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to ph38.
ph38 may disclose your personal data to Philippine government authorities, law enforcement agencies, or regulatory bodies (including PAGCOR and the Anti-Money Laundering Council) where required to do so by law, court order, or regulatory direction.
In the event of a merger, acquisition, or sale of all or part of ph38's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.
ph38 may share your data with third parties in other circumstances where you have given your explicit prior consent to such sharing.
No Cross-Border Transfers Without Safeguards: ph38 does not transfer your personal data outside the Philippines unless adequate data protection safeguards are in place, consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines.
ph38 uses cookies and similar tracking technologies on the ph38.net website to enhance your experience, maintain your session, and gather analytics data. The types of cookies used by ph38 include:
ph38 does not use third-party advertising cookies or behavioural tracking cookies that profile you for external advertising purposes. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair your ability to use the ph38 platform.
ph38 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
Upon expiry of the applicable retention period, ph38 will securely delete or anonymise your personal data in accordance with its data disposal procedures.
ph38 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While ph38 takes data security seriously and invests in appropriate safeguards, no electronic system is completely immune to security risks. ph38 cannot guarantee absolute security of your data. You are encouraged to use a strong, unique password for your ph38 account and to enable any additional security features available within your account settings.
Security Tip: Never share your ph38 login credentials with anyone. ph38 staff will never ask for your password. If you receive a suspicious communication claiming to be from ph38 and requesting your login details, please report it to ph38 support immediately.
Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph38:
Request a copy of the personal data ph38 holds about you, along with information about how it is being used.
Request correction of inaccurate or incomplete personal data held by ph38 about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on ph38's legitimate interests.
Request a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph38 has not handled your personal data in accordance with the law.
To exercise any of these rights, please contact the ph38 Data Privacy Officer via the contact details in Section 14. ph38 will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. ph38 may request proof of identity before processing a data subject request to ensure the security of your personal data.
If you have previously consented to receive marketing communications from ph38 and wish to withdraw that consent, you may do so at any time by updating your communication preferences within your ph38 account settings, or by contacting ph38 support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and does not affect ph38's ability to send you service-related communications (such as transaction confirmations and account security alerts).
The ph38 platform is strictly intended for adults aged 21 years or older. ph38 does not knowingly collect personal data from individuals under the age of 21. If ph38 becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly and the associated account will be closed.
If you are a parent or guardian and believe that a minor has registered an account on ph38 or provided personal data to ph38, please contact ph38 support immediately so that appropriate action can be taken.
The ph38 platform may contain references to third-party services such as payment providers (GCash, PayMaya, BPI, BDO, Metrobank). When you interact with these third-party services, you are subject to their own privacy policies and terms of use. ph38 is not responsible for the privacy practices of third-party services and encourages you to review their privacy policies before providing any personal data to them.
ph38 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The revised Policy will be posted on this page with an updated effective date. Where changes are material, ph38 will notify registered players via email or in-platform notification prior to the changes taking effect.
Your continued use of the ph38 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should stop using ph38 and may request account closure in accordance with the ph38 Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or ph38's handling of your personal data, please contact the ph38 Data Privacy Officer:
ph38 aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within fifteen (15) business days. For complex requests, ph38 will keep you informed of progress and any expected delays.
If you are not satisfied with ph38's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.
National Privacy Commission (NPC): The NPC is the Philippine government body responsible for administering and implementing the Data Privacy Act of 2012. Players who believe their data privacy rights have been violated may file a complaint with the NPC. ph38 cooperates fully with NPC investigations and inquiries.
Now that you know how ph38 protects your data, you can play with full confidence. Join hundreds of thousands of Filipino players from Manila, Cebu, Davao, and Quezon City who trust ph38 for their online gaming experience.
Must be 21+ to play. ph38 promotes responsible gaming. Please play within your means.