1Introduction
This Privacy Policy describes how 33ph ("33ph", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of players and visitors ("you", "your") who use the 33ph website at 33ph.best, our mobile platform, and all associated services.
33ph takes the privacy of Filipino players seriously. We built this platform for the Philippine market, and we understand that trust starts with how we handle your data. This document is written in plain language — not dense legal jargon — because we believe every 33ph member deserves to understand exactly what happens to their information.
By registering an account at 33ph, depositing funds, or otherwise using any part of our platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of the 33ph Terms and Conditions. If you do not agree with any part of this Policy, please do not use 33ph.
Plain language note: This entire document is about one thing — how 33ph handles the information you give us or that we collect when you play. If something isn't clear after reading, our support team at support@33ph.best can walk you through it in plain Filipino or English.
2Who We Are — Data Controller
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules, 33ph is the personal information controller responsible for the personal data of members and visitors who use the 33ph platform.
33ph operates under applicable Philippine online gaming regulations and maintains a registered Data Protection Officer (DPO) in compliance with NPC (National Privacy Commission) requirements. Contact details for the 33ph DPO are provided in Section 14 of this Policy.
All personal data processing activities at 33ph are recorded in our data processing register and are subject to regular internal privacy impact assessments. Any third-party service providers engaged by 33ph who process personal data on our behalf are contractually bound to data processing agreements that require them to maintain the same standard of data protection applied by 33ph itself.
3Personal Data We Collect
33ph collects personal data in two ways: information you provide directly to us, and information collected automatically when you interact with the platform. Here is a complete breakdown of what 33ph collects and why.
3.1 Information You Provide Directly
| Category | Examples | Purpose |
|---|---|---|
| Registration Data | Full name, date of birth, mobile number, email address, username, password (hashed) | Account creation and identity verification |
| KYC Documents | Government-issued Philippine ID, selfie with ID, proof of address, source of funds declaration | Age verification, AML compliance, regulatory requirement |
| Financial Data | GCash/Maya mobile number, bank account details, transaction history, deposit and withdrawal records | Payment processing, fraud prevention, AML monitoring |
| Support Communications | Live chat transcripts, email correspondence, complaint records | Customer service, dispute resolution, quality improvement |
| Responsible Gaming | Self-exclusion requests, deposit limit settings, session time preferences | Implementing player protection tools as requested |
3.2 Information Collected Automatically
When you visit or use the 33ph platform, we automatically collect certain technical and behavioural data that helps us deliver the service correctly and securely:
- Device information: Device model, operating system, browser type and version, screen resolution, and unique device identifiers
- Network information: IP address, internet service provider, and approximate geographic location at the region or city level (not street-level tracking)
- Usage data: Pages viewed, games played, bets placed, session duration, click patterns, and navigation paths within the 33ph platform
- Transaction logs: Timestamps, amounts, payment methods, and outcomes for all financial transactions at 33ph
- Cookie and tracking data: As described in Section 9 of this Policy
What 33ph does NOT collect: We do not collect your GCash PIN or Maya passcode, your bank account passwords, your full card number (only partial card details for verification), biometric data beyond what your ID document contains, or location data more precise than city/region level.
4How We Use Your Personal Data
33ph uses the personal data we collect only for specific, legitimate purposes directly related to operating the platform and serving Filipino players. Here is every purpose for which your data is used:
4.1 Platform Operation and Account Management
Your registration and contact details are used to create and manage your 33ph account, verify your identity, process your deposits and withdrawals, deliver promotional communications you have opted into, and provide customer support. This is the core purpose for which most of your data is collected, and without it we cannot provide the 33ph service.
4.2 Regulatory Compliance
As an online gaming platform serving Filipino players, 33ph is subject to regulatory requirements around age verification, anti-money laundering (AML), and know your customer (KYC) obligations. Your KYC documents and transaction records are processed as a legal obligation. 33ph cannot waive or reduce these requirements at individual request.
4.3 Security and Fraud Prevention
33ph uses your transaction data, device information, IP address history, and account behaviour patterns to detect and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and account takeover attempts. This processing is in both your interest and the interest of all 33ph members — it protects the fairness and integrity of the platform for everyone.
4.4 Platform Improvement and Analytics
Aggregated and anonymised usage data helps 33ph understand how Filipino players use the platform — which games are most popular, where navigation could be improved, which payment methods are most commonly used, and where technical issues occur. This analytics data does not identify individual players and is used solely to improve the 33ph experience.
4.5 Responsible Gaming
33ph uses your gaming behaviour data — including session length, frequency of play, deposit patterns, and loss history — to monitor for signs of problem gambling and to power the responsible gaming tools available in your account settings. This processing is a platform priority and a regulatory requirement.
4.6 Marketing Communications
With your explicit opt-in consent at the time of registration, 33ph may send you promotional emails, SMS notifications, or push notifications about new games, bonuses, tournaments, and other 33ph offers relevant to Filipino players. You can withdraw this consent at any time by using the unsubscribe link in any marketing communication or by updating your notification preferences in your account settings.
5Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, every instance of personal data processing must have a valid legal basis. 33ph processes your personal data under the following legal grounds:
- Contractual necessity: Processing required to fulfil our service agreement with you — creating and managing your account, processing transactions, providing customer support, and operating the games and betting products you use
- Legal obligation: Processing required to comply with Philippine laws and regulations, including AML obligations, KYC requirements, age verification, regulatory reporting, and tax record-keeping
- Legitimate interests: Processing for fraud prevention, platform security, multi-accounting detection, and aggregated analytics that improves the service for all players — where these interests are not overridden by your fundamental rights
- Consent: Processing for marketing communications, optional personalisation features, and non-essential analytics — where you have given explicit, informed, freely-given consent that you may withdraw at any time
6Who We Share Your Data With
33ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Full stop. When 33ph shares data, it is only with service providers who need it to help us operate the platform, or with authorities where we are legally required to disclose.
6.1 Service Providers (Data Processors)
The following categories of service providers process personal data on 33ph's behalf under strict data processing agreements:
- Payment processors: GCash, Maya, GrabPay, Coins.ph, and banking partners process transaction data to execute deposits and withdrawals
- KYC verification providers: Third-party identity verification services process your ID documents to validate your identity and age
- Cloud infrastructure: Hosting and database providers store your account data on secure, encrypted servers
- Customer support tools: Live chat and ticketing platform providers process support conversation data
- Fraud detection: Anti-fraud analytics providers process transaction and behavioural data to identify suspicious activity
- Email and SMS providers: Communication platforms deliver account notifications and, with your consent, marketing messages
6.2 Regulatory and Legal Disclosure
33ph may disclose your personal data to Philippine government authorities, regulatory bodies, law enforcement agencies, or courts where we are legally compelled to do so — including but not limited to PAGCOR (for gaming regulation), AMLC (for anti-money laundering), the National Privacy Commission, and the Bureau of Internal Revenue. All such disclosures are made only to the extent required by law.
33ph commitment: Whenever a regulator or authority requests your data, we verify the legal basis for the request before complying. We do not voluntarily provide your data to any government body beyond what is legally required, and we will notify you of any such disclosure where we are legally permitted to do so.
7Data Retention
33ph retains your personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with our legal obligations. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration details | Duration of account + 5 years | Regulatory requirement (AML) |
| KYC documents | Duration of account + 5 years | AMLC and regulatory compliance |
| Transaction records | Duration of account + 5 years | BIR and AML reporting obligations |
| Support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Marketing consent records | Until withdrawal + 3 years | Proof of consent compliance |
| Gaming session logs | 2 years | Responsible gaming monitoring, disputes |
| Cookie / analytics data | Up to 13 months | Platform analytics and improvement |
After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Data that is anonymised and no longer identifiable is not subject to this Policy and may be retained indefinitely for statistical purposes.
Closed accounts are subject to the same retention periods as active accounts to meet our regulatory obligations. The closure of your 33ph account does not immediately result in deletion of your personal data.
8Your Rights Under Philippine Data Privacy Law
As a Filipino data subject under Republic Act 10173, you have the following rights with respect to the personal data 33ph holds about you. 33ph honours all valid requests within the timeframes prescribed by law.
Right to Be Informed
You have the right to know that your data is being collected, what it is being used for, and who it may be shared with — before or at the time of collection. This Privacy Policy fulfils that obligation.
Right of Access
You may request a copy of all personal data 33ph holds about you. We will provide this within 30 days of a verified request in a structured, commonly used format.
Right to Rectification
If any personal data 33ph holds about you is inaccurate or incomplete, you have the right to have it corrected. Basic corrections (name spelling, contact number) can be made directly in your account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to 33ph's legal retention obligations. Data we are legally required to keep cannot be deleted on request.
Right to Object
You may object to the processing of your data for marketing purposes at any time. You may also object to processing based on legitimate interests, though we may demonstrate compelling grounds to continue.
Right to Data Portability
Where technically feasible, you may request your personal data in a portable format so that it can be transferred to another service provider. Submit this request to our DPO at the contact details in Section 14.
Right to Withdraw Consent
Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
Right to Lodge a Complaint
If you believe 33ph has mishandled your personal data, you have the right to file a complaint with the Philippine National Privacy Commission (NPC) at privacy.gov.ph — independent of any complaint you lodge directly with 33ph.
To exercise any of these rights, please email our Data Protection Officer at privacy@33ph.best with the subject line "Data Rights Request" and include your full name, registered mobile number, and a description of your request. We will respond within 15 business days. Complex requests may take up to 30 days; we will notify you if an extension is required.
9Cookies and Tracking Technologies
The 33ph website uses cookies and similar tracking technologies to make the platform work correctly, understand how Filipino players use the service, and — with your consent — to deliver relevant content and promotions.
9.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. They allow the website to remember your preferences and actions over time. Most modern browsers accept cookies by default, but you can control cookie settings through your browser preferences — note that disabling certain cookies may affect 33ph functionality.
9.2 Types of Cookies 33ph Uses
10Security Measures
33ph implements a layered security architecture to protect the personal data of all Filipino members. Our technical and organisational measures include:
- SSL/TLS encryption: All data transmitted between your device and 33ph servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher)
- Data encryption at rest: Sensitive personal data stored on 33ph servers — including KYC documents, financial records, and password hashes — is encrypted at rest using AES-256
- Access controls: Personal data is accessible only to 33ph staff and contractors with a documented business need. Access is controlled through role-based permissions and multi-factor authentication
- Intrusion detection: 33ph systems are monitored continuously for unauthorised access attempts and anomalous activity patterns
- Vulnerability management: Regular penetration testing and security assessments are conducted on all 33ph platform components
- Segregated player funds: Financial data is kept separate from operational data; player funds are held in segregated accounts
- Staff training: All 33ph staff with access to personal data undergo data privacy training and are bound by confidentiality obligations
Data breach notification: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 33ph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected members without undue delay where the breach is likely to result in high risk to them.
11Children's Privacy
33ph is strictly for persons aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the 33ph registration process, and KYC verification is required before any real money activity can occur.
If 33ph discovers that an account has been created by or for an individual under 21 years of age, the account will be immediately closed, all deposits will be returned to the source payment method, all winnings generated will be forfeited, and all personal data associated with the underage account will be deleted as soon as practically possible following the resolution of any regulatory reporting obligations.
If you believe a minor is using a 33ph account, please contact our support team at support@33ph.best immediately. We take underage gaming extremely seriously and act on all credible reports without delay.
12Cross-Border Data Transfers
Some of the third-party service providers used by 33ph — particularly cloud infrastructure, fraud detection, and KYC verification providers — may process your personal data on servers located outside the Philippines. Where such transfers occur, 33ph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to what is required under Philippine law.
These safeguards include contractual data processing agreements incorporating standard data protection clauses, transfer impact assessments for transfers to jurisdictions with materially different data protection standards, and vendor due diligence to verify that recipient organisations maintain adequate security and privacy practices.
By using 33ph, you acknowledge that your personal data may be transferred to and processed in countries other than the Philippines where data protection laws may differ. 33ph takes all reasonable steps to ensure that such transfers are conducted securely and lawfully.
13Changes to This Privacy Policy
33ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law, or improvements to our platform. When we make changes, the "Last Updated" date at the top of this page will be revised.
For material changes — those that significantly affect how we use your data or your rights as a data subject — 33ph will provide at least 14 days' advance notice via the email address registered to your account. Less significant changes (such as clarifications or formatting updates) may take effect immediately on publication.
Your continued use of 33ph after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. We encourage all 33ph members to review this page periodically, particularly before providing any new categories of personal data to the platform.
14Contact and Data Protection Officer
For any questions, requests, or concerns related to this Privacy Policy or the personal data 33ph holds about you, please contact our Data Protection Officer. All formal data rights requests must be submitted in writing — email is the fastest channel.
If you are not satisfied with 33ph's response to a data rights request, you have the right to escalate your concern to the Philippine National Privacy Commission (NPC). The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.