p333 Privacy Policy — How We Collect, Use, and Protect Your Personal Information

In this Privacy Policy, the following terms have the meanings set out below:

• "p333," "we," "us," or "our" — the operator of the online gaming platform accessible at p333.bid.
• "Platform" — the p333 website, mobile web interface, games, account system, and all related services available at p333.bid.
• "Player," "you," or "your" — any natural person who accesses the Platform, registers an account, or interacts with p333 in any capacity.
• "Personal Data" — any information, whether recorded in material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information, would directly and certainly identify an individual.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, organization, storage, updating, retrieval, use, disclosure, and destruction.
• "Data Controller" — p333, which determines the purposes and means of processing Personal Data collected through the Platform.
• "DPA" — Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines and its Implementing Rules and Regulations.
• "NPC" — the National Privacy Commission of the Philippines, the regulatory authority overseeing compliance with the DPA.
• "KYC" — Know Your Customer identity verification procedures as required for real-money gaming accounts.

p333 acts as the Data Controller for all Personal Data collected from Players and visitors through the Platform. As Data Controller, p333 determines the purposes for which your Personal Data is collected and the means by which it is processed.

p333 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA, responding to data subject rights requests, and managing data breach response procedures. The DPO may be contacted via the support email address published in the footer of this Platform and referenced in Section 15 of this Policy.

The categories of Personal Data collected by p333 vary depending on the nature of your interaction with the Platform. The table below sets out the primary data categories, examples of specific data points within each category, and the context in which they are typically collected:

p333 collects Personal Data through the following primary channels:

4.1 Direct Collection

Data you provide directly to p333 when registering an account, completing KYC verification, making a deposit or withdrawal request, configuring responsible gaming settings, or contacting our support team. This includes all information entered into forms, fields, and document upload interfaces on the Platform.

4.2 Automated Collection

Data collected automatically as you interact with the Platform, including IP addresses, device identifiers, session timestamps, game interaction logs, and page navigation data. This data is collected through server-side logging and session management systems necessary for the secure operation of the Platform.

4.3 Third-Party Collection

Data received from third-party service providers engaged by p333 in the course of delivering Platform services, including identity verification results from our KYC partner, transaction confirmation data from payment processors (GCash, Maya, BPI, BDO, QR Ph, GrabPay), and fraud risk signals from our security monitoring partners.

4.4 Cookies and Similar Technologies

Data collected via cookies, session tokens, and similar browser-based technologies as further described in Section 10 of this Policy.

p333 processes Personal Data only for specified, legitimate purposes with a valid legal basis under the DPA. The table below summarises our primary processing activities:

• Account Creation and Management: Necessary for the performance of the service contract between p333 and the Player. Processing your identity and contact data is required to create and maintain your account.
• KYC Identity Verification: Required by law to comply with the Anti-Money Laundering Act (RA 9160, as amended) and applicable PAGCOR online gaming requirements. Processing is necessary for compliance with a legal obligation.
• Payment Processing: Necessary for the performance of the service contract — specifically to execute your deposit and withdrawal instructions and reconcile your account balance.
• Fraud Detection and Platform Security: Legitimate interest of p333 in preventing fraud, protecting the integrity of the Platform, and safeguarding other Players' accounts and funds.
• Responsible Gaming Compliance: Legal obligation and legitimate interest — monitoring gaming activity data to identify patterns consistent with problem gambling and to enforce self-imposed limits set by the Player.
• Customer Support: Legitimate interest in resolving Player queries and disputes, and contractual necessity where support relates to account or transaction matters.
• Marketing Communications: Consent-based — promotional communications are sent only where the Player has expressly opted in during registration or through account settings. Opt-out is available at any time.
• Regulatory Reporting: Legal obligation — certain transaction and player data must be reported to regulatory authorities including PAGCOR and the Anti-Money Laundering Council (AMLC) as required by Philippine law.

p333 does not sell, lease, or trade your Personal Data to any third party for commercial gain. Personal Data is shared externally only in the following circumstances and only to the extent necessary for the stated purpose:

• KYC Verification Partners: Licensed identity verification service providers engaged to process government ID documents and perform liveness checks. These providers process data solely on p333's instructions under contractual data processing agreements.
• Payment Processors: GCash, Maya, QR Ph, GrabPay, BPI, and BDO receive the minimum data necessary to process deposit and withdrawal transactions. These are independent data controllers for their own financial services.
• Game Providers: Third-party game providers including Evolution Gaming, Pragmatic Play, JILI Games, and PG Soft may receive session identifiers and wager data for the purpose of delivering game content and resolving disputes. They do not receive your full identity data.
• Regulatory Authorities: PAGCOR, the AMLC, the NPC, and other competent Philippine government agencies may receive Personal Data as required by applicable law, court order, or regulatory direction.
• Legal and Fraud Prevention: Personal Data may be shared with law enforcement agencies or fraud prevention organisations where p333 is required by law or has a good-faith belief that disclosure is necessary to protect the rights, property, or safety of p333, its Players, or the public.

Some of p333's third-party service providers, including game content delivery networks and KYC technology partners, may process data in server infrastructure located outside the Philippines. Where such transfers occur, p333 ensures that:

• The recipient country or organisation provides an adequate level of protection for personal data as assessed under the DPA and NPC guidelines.
• Contractual data processing agreements incorporating the NPC's standard data protection clauses or equivalent safeguards are in place with the receiving party.
• The transfer is limited to the minimum data necessary for the specific processing purpose.

Players may request information about specific cross-border transfers affecting their Personal Data by contacting the p333 DPO.

p333 implements a layered security architecture to protect Personal Data against unauthorized access, accidental loss, alteration, and disclosure. Our current security measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the p333 Platform is encrypted using TLS 1.2 or higher. The Platform enforces HTTPS across all pages and API endpoints.
• Encryption at Rest: Sensitive personal data fields, including KYC documents and financial data, are encrypted at the database level using AES-256 encryption.
• Access Controls: Access to personal data within p333's systems is governed by role-based access controls. Only personnel with a documented business need may access identifiable player data.
• Password Security: Player passwords are stored as salted cryptographic hashes. p333 staff cannot retrieve or view a Player's plaintext password under any circumstances.
• Two-Factor Authentication: OTP-based two-factor authentication is available to all Players and is automatically triggered for logins from unrecognised devices.
• Security Monitoring: p333 operates continuous monitoring for suspicious access patterns, unusual transaction activity, and potential platform vulnerabilities.

While p333 maintains robust security measures, no internet-based system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their p333 accounts and to enable two-factor authentication.

p333 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law, whichever is longer. The following general retention guidelines apply:

• Account Data and KYC Documents: Retained for a minimum of five (5) years from the date of account closure, as required by the Anti-Money Laundering Act and its implementing regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction for regulatory and audit purposes.
• Game Session Logs: Retained for a minimum of one (1) year from the date of the session for dispute resolution purposes, and for up to five (5) years where a session is subject to an active investigation or dispute.
• Support Communications: Retained for three (3) years from the date of the final communication in a support thread.
• Marketing Preferences: Retained for the duration of the active account and deleted within 30 days of opt-out or account closure.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

p333 uses cookies and similar browser-based technologies to operate the Platform securely and to improve the Player experience. The following cookie categories are in use on p333.bid:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These include session authentication tokens, security cookies, and load balancing identifiers. These cookies cannot be disabled without impacting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and whether you have acknowledged the age verification notice. These enhance your experience but are not essential.
• Analytics Cookies: Used by p333 to understand aggregated user behaviour patterns on the Platform, such as pages visited and session duration. This data is used in anonymous, aggregated form to improve Platform design and performance.

Strictly necessary cookies are placed without requiring consent as they are required for the basic security and functionality of the Platform. Functional and analytics cookies are subject to your consent, which can be managed through your browser settings. Most modern browsers allow you to refuse cookies or delete existing cookies through the browser's settings menu.

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your Personal Data held by p333. These rights may be exercised by contacting the p333 DPO as described in Section 15:

p333 will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, notifying you of the extension and the reason for it. There is no fee for exercising your rights under the DPA in normal circumstances.

p333 does not knowingly collect Personal Data from individuals under the age of 21. The p333 Platform is intended solely for adults who meet the minimum age requirement for online gambling in the Philippines. KYC age verification is mandatory for all Players before real-money play is enabled.

If p333 discovers that Personal Data has been collected from a person under 21 years of age, we will promptly delete that data and close the associated account. If you are a parent or guardian and believe that a minor under your care has provided Personal Data to p333, please contact the DPO immediately using the contact details in Section 15.

p333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance from the NPC. The effective date shown at the top of this Policy will be updated to reflect the date of any material revision.

Where changes are material — meaning they significantly affect how your Personal Data is collected, used, or shared — p333 will provide reasonable prior notice by posting a notice on the Platform and, where practicable, by notifying you through your registered mobile number or email address. Your continued use of the Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms.

The current version of this Privacy Policy is always accessible at p333.bid/privacy-policy. We encourage you to review this Policy periodically to remain informed of our data practices.

In the event of a personal data breach that poses a real risk of serious harm to affected Players, p333 will comply with its notification obligations under the DPA and NPC Circular No. 16-03, as follows:

• NPC Notification: p333 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of a breach that satisfies the NPC's mandatory reporting threshold.
• Player Notification: Where a breach poses a high risk to the rights and freedoms of affected Players, p333 will notify those Players without undue delay, providing a description of the nature of the breach, the data involved, the likely consequences, and the measures taken or proposed to address the breach.
• Breach Response: Upon identification of a breach, p333 will immediately activate its incident response procedure, which includes containment of the breach, assessment of risk, notification as required, and implementation of corrective measures to prevent recurrence.

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by p333, you may contact our Data Protection Officer through the following channel:

If you are not satisfied with p333's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, which oversees compliance with the Data Privacy Act. Information about filing complaints with the NPC is available through the NPC's official Philippine government website.