ph365 Privacy Policy — How We Handle Your Personal Data

01 Who We Are

ph365 operates the online gaming platform available at ph365.bid. In this Privacy Policy, "ph365", "we", "us", and "our" refer to the operator of the ph365 platform. "You" and "your" refer to any person who accesses, registers on, or uses the ph365 platform.

ph365 is the data controller for the personal data collected through the ph365 platform. This means we are responsible for deciding how and why your personal data is processed. If you have any questions about how ph365 handles your data, you can contact us at any time using the details in Section 12.

02 Data We Collect

ph365 collects personal data in several ways — directly from you when you register or use the platform, automatically when you interact with the platform, and from third parties such as payment providers and identity verification services.

ph365 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by responsible gaming obligations — for example, if you voluntarily disclose a gambling-related health concern when requesting self-exclusion.

03 How We Use Your Data

ph365 uses your personal data only for legitimate purposes directly related to operating the platform and providing you with a safe, fair, and enjoyable gaming experience. Here is a breakdown of how we use each category of data:

• Account management: We use your identity and contact data to create and manage your ph365 account, verify your identity, and communicate with you about your account.
• Transaction processing: We use your financial data to process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate transaction records.
• Legal compliance: We use your identity and financial data to comply with anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and other applicable legal obligations.
• Platform security: We use technical and usage data to detect and prevent fraud, unauthorised account access, and prohibited activities such as multi-accounting or bot use.
• Service improvement: We use aggregated usage data to understand how members use the platform and to improve game selection, platform performance, and user experience.
• Responsible gaming: We use usage and financial data to monitor for signs of problem gambling and to apply responsible gaming tools where appropriate.
• Marketing communications: With your consent, we use your contact data to send you information about ph365 promotions, bonuses, and new games. You can opt out at any time.
• Customer support: We use your communications data to respond to your support queries and to improve our support service.

04 Legal Basis for Processing

ph365 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you as a registered ph365 member — for example, processing your deposits and withdrawals.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML and KYC requirements.
• Legitimate interests: Processing is necessary for ph365's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
• Consent: For marketing communications and certain non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

05 Sharing Your Data

ph365 does not sell, rent, or trade your personal data to third parties. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment providers: We share financial data with bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers process your data under their own privacy policies and are bound by applicable financial regulations.
• Identity verification providers: We share identity and verification data with KYC service providers to verify your identity as required by law. These providers are contractually bound to process your data only for verification purposes.
• Regulatory and law enforcement authorities: We may be required by law to disclose your data to regulatory bodies, law enforcement agencies, or courts. ph365 will comply with such requests where legally obligated to do so.
• Technology and infrastructure providers: We use third-party cloud hosting and platform infrastructure providers. These providers process data on our behalf and are bound by data processing agreements that restrict their use of your data.
• Business transfers: In the event of a merger, acquisition, or sale of ph365's business, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and the privacy implications before it takes effect.

06 Cookies and Tracking

ph365 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. A cookie is a small text file stored on your device when you visit a website.

ph365 uses the following types of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit. You cannot opt out of essential cookies without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience on return visits.
• Analytics cookies: Help us understand how members use the platform — for example, which games are most popular and where members encounter difficulties. This data is aggregated and anonymised.
• Security cookies: Used to detect and prevent fraudulent activity, including bot access and multi-account creation attempts.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking essential cookies will affect your ability to use the ph365 platform. ph365 does not use third-party advertising cookies or cross-site tracking cookies.

07 Data Retention

ph365 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and business requirements. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five years after account closure, as required by AML regulations.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC and verification documents: Retained for a minimum of five years after account closure or the completion of the relevant transaction, whichever is later.
• Support communications: Retained for two years from the date of the last communication, unless the communication relates to a formal complaint or legal matter, in which case it is retained for five years.
• Marketing consent records: Retained for as long as you remain a registered member, and for two years after account closure as evidence of consent.

When personal data is no longer required, ph365 securely deletes or anonymises it. Anonymised data — which cannot be used to identify you — may be retained indefinitely for analytical purposes.

08 Your Rights

As a ph365 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact ph365 support with your request. We will respond within 30 days.

Please note that some rights are subject to limitations. For example, ph365 cannot delete data that we are legally required to retain under AML or KYC regulations. Where a limitation applies, we will explain the reason when responding to your request.

09 Data Security

ph365 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration.

• All data transmitted between your device and ph365 is encrypted using Transport Layer Security (TLS).
• Sensitive data stored on ph365 servers is encrypted at rest using industry-standard encryption algorithms.
• Access to personal data within ph365 is restricted to staff who need it to perform their job functions, and is controlled through role-based access permissions.
• ph365 conducts regular internal security reviews and vulnerability assessments.
• ph365 maintains an incident response plan. In the event of a data breach that poses a risk to your rights, we will notify affected members and relevant authorities as required by law.

While ph365 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password and never share your login credentials with anyone.

10 Children's Privacy

The ph365 platform is strictly for adults aged 18 and over. ph365 does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register on or use the ph365 platform.

If ph365 becomes aware that personal data has been collected from a person under the age of 18, we will immediately close the associated account, forfeit any balance, and delete the personal data in question. If you believe a minor has registered on ph365, please contact our support team immediately.

11 Changes to This Policy

ph365 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make changes, we will update the "Last Updated" date at the top of this page.

For significant changes — such as a new category of data being collected or a new purpose for processing — ph365 will notify registered members via email or in-platform notification before the changes take effect. Your continued use of the ph365 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how ph365 protects your personal data.

12 Contact and Complaints

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a privacy-related complaint, please contact the ph365 support team:

• Live chat: available within the ph365 platform after login, 24/7 in Bengali and English.
• Email: [email protected] — use the subject line "Privacy Request" for data rights requests.

ph365 will acknowledge your request within 24 hours and respond in full within 30 days. If your request is complex or you have submitted multiple requests, we may extend this period by a further 30 days, in which case we will notify you.

If you are not satisfied with how ph365 has handled your personal data or responded to your request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.