Privacy Policy – How p333 Handles Your Personal Data

1. Overview & Scope

p333.lat ("p333," "we," "us," "the Company") is committed to protecting the privacy and personal data of every individual who interacts with the p333 online gaming platform, including registered players, visitors to p333.lat, and users of any associated mobile applications (collectively, the "Platform").

This Privacy Policy ("Policy") describes how p333 collects, processes, stores, and protects personal information in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and the applicable guidelines issued by the National Privacy Commission ("NPC").

By registering an account, depositing funds, or otherwise using the p333 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the p333 Platform.

This Policy applies to all personal data collected through the Platform regardless of the device or browser used. It does not apply to third-party websites or services that may be linked to or from p333 — those are governed by their own respective privacy policies.

2. Personal Data We Collect

p333 collects personal data through various means, including account registration, KYC verification, platform usage, and payment transactions. The categories of personal data we collect include:

p333 does not collect sensitive personal information beyond what is strictly required for identity verification, PAGCOR compliance, and anti-money laundering (AML) obligations. We do not collect biometric data beyond photograph identification as part of KYC.

3. How We Use Your Personal Data

p333 processes personal data only for specified, explicit, and legitimate purposes. Your data is used for the following purposes:

• Account Management: To create, maintain, and manage your p333 player account, including authentication and password reset services.
• Identity Verification & KYC: To verify your identity and age (21+ requirement) in compliance with PAGCOR licensing conditions and Philippine AML regulations.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers, and to maintain accurate financial records of all transactions.
• Game Operations: To deliver, personalize, and improve the gaming experience on the p333 Platform, including RNG integrity monitoring and game history records.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, collusion, and other prohibited conduct.
• Regulatory Compliance: To fulfill our legal obligations under the DPA, PAGCOR licensing frameworks, AMLA, and other applicable Philippine laws and regulations.
• Responsible Gaming: To monitor gaming behavior for indicators of problem gambling and to administer self-exclusion requests, deposit limits, and other responsible gaming tools.
• Customer Support: To respond to your queries, complaints, and support requests effectively and in a timely manner.
• Marketing Communications: With your explicit consent, to send you promotional offers, bonus notifications, and gaming updates relevant to the p333 Platform. You may withdraw consent at any time through your account settings.
• Platform Improvement: To analyze aggregated, anonymized usage data for the purpose of improving Platform functionality, performance, and user experience.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 (R.A. 10173) and its IRR, p333 processes personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms and Conditions you agreed to upon registration — including account management, game operations, and payment processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR licensing requirements, AMLA reporting obligations, and NPC directives.
• Legitimate Interest: Processing is necessary for the legitimate interests of p333 in operating a secure, fair, and commercially viable platform — including fraud detection and platform security — where such interests are not overridden by your data protection rights.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third-Party Disclosure

p333 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared with third parties only in the following circumstances:

• Payment Service Providers: GCash (G-Xchange Inc.), PayMaya, and partner Philippine banks receive the minimum data necessary to process financial transactions on your behalf.
• Game Content Providers: Licensed third-party game studios (e.g., Pragmatic Play, PG Soft, Jili Games) receive anonymized player session data necessary for game delivery and RTP integrity monitoring. No personally identifiable information is shared with game providers beyond what is technically necessary.
• Identity Verification Services: Third-party KYC service providers may receive identity documents and data for automated verification, subject to strict data processing agreements.
• Regulatory Authorities: p333 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities in response to lawful requests, court orders, or regulatory investigations.
• Professional Advisors: Lawyers, auditors, and accountants engaged by p333 may access personal data to the extent required to provide their professional services, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of p333's assets, personal data held by p333 may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third-party service providers engaged by p333 are subject to contractual data processing agreements that require them to process personal data only for the specified purposes and to maintain appropriate security standards consistent with the DPA.

6. Cookies & Tracking Technologies

The p333 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve the player experience. The types of cookies used include:

• Strictly Necessary Cookies: Required for core Platform functionality including login session management, security tokens, and payment flow integrity. These cannot be disabled without breaking Platform functionality.
• Performance Cookies: Anonymized analytics data used to understand how players navigate the Platform, which games are most accessed, and where technical performance issues occur. This data is aggregated and not linked to individual player identities.
• Functional Cookies: Store your preferences such as language settings, display preferences, and last-visited game category to improve your experience on return visits.
• Marketing Cookies: Used to deliver personalized promotional content within the Platform based on your gaming history and preferences. These are only activated with your explicit consent.

You may manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to use core Platform features including login and payment processing.

7. Data Retention

p333 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following retention principles:

• Account data and KYC documents are retained for a minimum of five (5) years following account closure, in compliance with AMLC record-keeping requirements under Philippine law.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Gaming history logs are retained for three (3) years for dispute resolution and regulatory audit purposes.
• Customer support communication records are retained for two (2) years.
• Marketing consent records are retained for as long as you remain an active subscriber plus one (1) year following withdrawal of consent.

Following the applicable retention period, personal data is securely deleted or anonymized in accordance with p333's data disposal procedures.

8. Data Security

p333 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the p333 Platform.
• Encrypted storage of sensitive data including passwords (hashed), KYC documents, and financial account details.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication requirements for all p333 staff accessing production systems containing personal data.
• Incident response procedures for detecting, containing, and notifying affected individuals and the NPC in the event of a personal data breach, within the timeframes required by the DPA.

While p333 takes all reasonable steps to protect your data, no internet-based system can guarantee absolute security. You are responsible for keeping your p333 account credentials confidential and for ensuring your device is adequately secured.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (R.A. 10173), you have the following rights with respect to your personal data held by p333:

• Right to Be Informed: The right to know what personal data p333 holds about you, the purposes for which it is processed, and who it is shared with — as set out in this Policy.
• Right of Access: The right to request a copy of the personal data p333 holds about you, subject to identity verification.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. Most account details can be updated directly through your p333 account settings.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where processing is no longer necessary, subject to overriding legal retention obligations (e.g., AMLA compliance).
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible and where processing is based on consent or contractual necessity.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time, without prejudice to processing based on other lawful grounds.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact p333's Data Protection Officer using the contact details in Section 13 of this Policy. Requests will be acknowledged within three (3) business days and resolved within fifteen (15) business days, or such longer period as permitted by the DPA in complex cases.

10. Children & Minors

The p333 Platform is strictly for individuals aged 21 years and above, in accordance with PAGCOR licensing requirements and Philippine gambling laws. p333 does not knowingly collect personal data from individuals below the age of 21. Age verification is conducted as part of the mandatory KYC process before any withdrawal is permitted.

If p333 discovers that it has inadvertently collected personal data from an individual below the age of 21, that account will be immediately suspended, all funds will be handled in accordance with applicable regulations, and the personal data will be deleted from active systems as promptly as legally permissible.

If you believe that p333 may hold data relating to a minor, please contact us immediately using the details in Section 13.

11. Cross-Border Data Transfers

Some of p333's service providers and technology partners may be located outside of the Philippines. Where personal data is transferred to a country that does not provide a level of data protection equivalent to the DPA, p333 ensures appropriate safeguards are in place, including contractual clauses approved by the NPC or other mechanisms recognized under Philippine data protection law. By using the p333 Platform, you acknowledge and consent to such cross-border transfers to the extent they are necessary for the delivery of the services described in this Policy.

12. Amendments to This Policy

p333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform services. Material changes will be communicated to registered players via SMS to their registered Philippine mobile number or by prominent notice on the Platform prior to the change taking effect. Continued use of the p333 Platform following the effective date of any amendment constitutes acceptance of the revised Policy. The "Last Updated" date at the top of this page indicates the most recent revision.

13. Contact & Data Protection Officer

p333 has designated a Data Protection Officer (DPO) in compliance with Section 21 of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by p333, please contact our DPO through the following channel:

Email (plain text — not a clickable link): [email protected]

Please include "Data Privacy Request" in the subject line of your message, along with your registered p333 mobile number for identity verification purposes. p333 will not process data privacy requests submitted by third parties on behalf of a registered player without appropriate written authorization.

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines at any time if you believe your data privacy rights have been violated. Information about how to contact the NPC is available through the official NPC website.