Your personal data belongs to you. This Privacy Policy explains in clear terms what information abc356 collects when you use the platform, why we collect it, how it is stored and protected, who it may be shared with, and what rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173) and related PAGCOR regulatory requirements.
Privacy at a Glance
Six key principles define how abc356 approaches data privacy. This is a plain-language summary — the full legal text follows below.
Only What We Need
abc356 collects personal data on a strict minimum-necessary basis. We collect what PAGCOR and Philippine law require for KYC, AML compliance, and account management — and nothing beyond that. We do not build marketing profiles, sell behavioral data, or collect information for purposes unrelated to your abc356 account.
256-bit SSL Protection
All data transmitted between your device and abc356 — registration details, ID documents, financial transactions — is protected by 256-bit SSL encryption in transit. Stored data is protected by encryption at rest using industry-standard methods. Access to personal data is restricted to authorized personnel on a strict need-to-know basis.
No Sale of Personal Data
abc356 does not sell, rent, trade, or license your personal information to third parties for commercial purposes. The only third-party disclosures we make are those required by PAGCOR licensing, the Anti-Money Laundering Act, and other applicable Philippine law — and these are documented in full in Section 5 of this Policy.
Defined Retention Periods
abc356 retains personal data only for as long as necessary to fulfil the purpose for which it was collected and to meet our legal obligations. KYC documents are retained for a minimum of five years as required by PAGCOR and AMLA. Transaction records are retained in accordance with Philippine accounting and regulatory requirements. Retention periods are detailed in Section 7 of this Policy.
Your Rights Under RA 10173
As a data subject under the Philippine Data Privacy Act of 2012, you have specific legal rights over your personal data held by abc356 — including the right to access, correct, object, erasure (subject to legal retention obligations), portability, and to lodge a complaint with the National Privacy Commission (NPC). Section 9 explains each right in full.
Breach Notification
If abc356 becomes aware of a personal data breach that is likely to result in harm to you as a data subject, we will notify affected individuals and the National Privacy Commission within 72 hours of becoming aware, as required under NPC Circular No. 16-03. abc356 maintains a documented incident response plan for data security events.
1.1. This Privacy Policy ("Policy") describes how abc356 ("abc356", "we", "us", "our") collects, processes, stores, and protects personal data in connection with the operation of the abc356 online casino and sports betting platform at abc356.vip (the "Platform").
1.2. This Policy applies to all personal data collected from: (a) registered abc356 account holders; (b) individuals who visit the Platform without registering an account; (c) individuals who contact abc356 support; and (d) any other natural person whose personal data is processed by abc356 in connection with Platform operations.
1.3. This Policy does not apply to third-party websites, applications, or services that may be linked from the Platform. abc356 is not responsible for the privacy practices of third parties and recommends reviewing the privacy policies of any third-party services you use.
1.4. Terms not defined in this Policy carry the meanings assigned to them in the abc356 Terms & Conditions, available at abc356.vip/terms-conditions.
2.1. The Data Controller responsible for your personal data is abc356, a company incorporated under the laws of the Republic of the Philippines and operating under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR).
2.2. abc356 has designated a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012 and NPC regulations. The DPO is responsible for overseeing abc356's data privacy compliance program, responding to data subject requests, and coordinating with the National Privacy Commission. Contact details for the DPO are provided in Section 13 of this Policy.
abc356 collects the following categories of personal data through your use of the Platform:
| Category | Examples | Legal Basis |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number, ID document images, selfie/photo | Legal obligation (PAGCOR KYC, AMLA), contract performance |
| Contact Data | Email address, Philippine mobile number, registered address | Contract performance, legal obligation |
| Financial Data | GCash account reference, Maya account reference, bank account name/number used for deposits and withdrawals, transaction amounts and history | Contract performance, legal obligation (AMLA) |
| Gaming Activity Data | Games played, wager amounts, session durations, win/loss records, bonus usage, responsible gaming limit settings | Contract performance, legal obligation (PAGCOR reporting), legitimate interest |
| Technical Data | IP address, device type and identifiers, browser type and version, operating system, session timestamps, geolocation data (country/region level) | Legitimate interest (security, fraud prevention), legal obligation |
| Communications Data | Records of support chat transcripts, emails, and any other communications between you and abc356 | Legitimate interest (service quality, dispute resolution), legal obligation |
3.1. abc356 does not collect special categories of personal data (as defined under RA 10173) except where strictly required for responsible gaming purposes — specifically, voluntary disclosures of gambling disorder that you provide in the context of using abc356's self-exclusion or responsible gaming tools. Such sensitive data is processed with your explicit consent and is not used for any purpose other than administering your responsible gaming protections.
abc356 processes your personal data for the following purposes, each with a corresponding legal basis:
5.1. abc356 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial purposes. Disclosure to third parties occurs only in the following circumstances:
5.2. In all cases where abc356 engages a third-party processor to handle personal data on its behalf, abc356 requires the processor to comply with RA 10173 and to process such data only in accordance with abc356's documented instructions.
6.1. abc356 uses cookies and similar technologies (session tokens, local storage) on the Platform for the following purposes:
6.2. abc356 does not use advertising cookies, tracking pixels from third-party ad networks, or social media tracking scripts on the Platform.
6.3. You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from using the Platform. Disabling functional or analytics cookies may limit certain features but will not prevent basic account access.
7.1. abc356 retains personal data for no longer than is necessary for the purpose for which it was collected and to meet applicable legal retention obligations. The following minimum retention periods apply:
| Data Category | Minimum Retention Period | Legal Basis for Retention |
|---|---|---|
| KYC identity documents | 5 years from account closure | PAGCOR license requirements; AMLA (RA 9160) |
| Financial transaction records | 5 years from transaction date | AMLA (RA 9160); Philippine accounting regulations |
| Account registration data | 5 years from account closure | PAGCOR license requirements; legal obligation |
| Gaming activity records | 3 years from activity date | PAGCOR reporting obligations; legitimate interest |
| Support communications | 3 years from communication date | Legitimate interest (dispute resolution) |
| Session & technical logs | 12 months from log date | Legitimate interest (security, fraud prevention) |
7.2. Following the expiry of applicable retention periods, personal data will be securely deleted or permanently anonymized. Anonymized data — from which all identifying information has been irreversibly removed — may be retained for statistical and research purposes without restriction.
7.3. Where you submit a deletion request (see Section 9), abc356 will delete or anonymize your data as promptly as practicable, subject to the retention obligations described in 7.1 above. Data that is subject to a mandatory legal retention period cannot be deleted before that period expires, regardless of your request.
8.1. Technical security measures implemented by abc356 include, but are not limited to:
8.2. Organizational security measures include staff privacy training, documented data handling procedures, data processing agreements with all third-party processors, and a maintained incident response plan.
8.3. Notwithstanding the foregoing, no security system is impenetrable. abc356 cannot guarantee absolute security against all threats. In the event of a data breach that is likely to result in a real risk of serious harm to data subjects, abc356 will comply with its mandatory breach notification obligations under NPC Circular No. 16-03 within the prescribed 72-hour timeframe.
Under the Data Privacy Act of 2012 (RA 10173) and its IRR, you have the following rights as a data subject with respect to the personal data held by abc356:
Right to Access
You have the right to request confirmation of whether abc356 holds personal data about you, and to obtain a copy of that data in a commonly used format. abc356 will respond to access requests within 15 business days of verification of your identity.
Right to Correction / Rectification
You have the right to request correction of any inaccurate or incomplete personal data held by abc356. You may update certain account details directly from your abc356 account dashboard. For changes to KYC identity data, please contact support with supporting documentation.
Right to Object
You have the right to object to processing of your personal data where abc356 relies on legitimate interest as the legal basis. Objections will be considered on a case-by-case basis; abc356 will cease processing unless compelling legitimate grounds override your interests or where processing is required for legal claims.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the legal basis), or where processing was unlawful. Erasure requests are subject to mandatory legal retention obligations detailed in Section 7.
Right to Data Portability
Where abc356 processes your personal data by automated means on the basis of contract performance or consent, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another personal information controller where technically feasible.
Right to Withdraw Consent
Where abc356 processes your personal data on the basis of your consent — specifically, for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before the withdrawal. Withdrawing consent for marketing will not affect your ability to use the abc356 platform.
Right to Lodge a Complaint with the NPC
If you believe abc356 has processed your personal data in violation of RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC). The NPC's contact information is available on the official NPC government website. abc356 encourages you to contact our DPO first so we can address your concern directly.
To exercise any of the above rights, please contact the abc356 Data Protection Officer at the contact details in Section 13. abc356 may require verification of your identity before processing a data subject request. abc356 will respond to all requests within the timeframes prescribed under RA 10173.
10.1. Age is verified through the KYC process using government-issued Philippine identification. Any account found to belong to a person under 21 years of age will be immediately closed, all associated data will be handled in accordance with applicable PAGCOR and AMLA requirements, and access to the Platform will be permanently suspended.
10.2. If a parent or guardian becomes aware that their child under 21 has provided personal data to abc356, they should contact the abc356 Data Protection Officer immediately at the contact details in Section 13. abc356 will take prompt action to close the account and address the data appropriately.
11.1. abc356 is a Philippine-incorporated entity and its primary data processing operations are conducted within the Philippines. However, certain technology infrastructure, game software delivery systems, or payment processing networks used by abc356 or its service providers may involve transfer of data to servers located outside the Philippines.
11.2. Where personal data is transferred outside the Philippines, abc356 ensures that such transfers are conducted in accordance with Section 21 of the Data Privacy Act of 2012 and applicable NPC guidelines — specifically, that the recipient country or organization provides an adequate level of data protection, or that appropriate contractual safeguards (such as standard data processing agreements) are in place to protect your data.
11.3. If you would like further information about the specific safeguards abc356 has in place for any particular cross-border transfer, please contact the abc356 Data Protection Officer.
12.1. abc356 reviews this Privacy Policy periodically and will update it when required by changes in applicable law, changes in abc356's data processing practices, or changes in PAGCOR regulatory requirements. The "Last Updated" date at the top of this document reflects the date of the most recent revision.
12.2. Where material changes are made to this Policy that affect how abc356 processes your personal data, abc356 will notify registered account holders by email and/or by displaying a prominent notice within the abc356 Platform, in advance of the changes taking effect.
12.3. The current version of this Policy is always available at abc356.vip/privacy-policy. Continued use of the abc356 Platform following publication of an updated Policy constitutes your acceptance of the revised terms, provided that where changes require fresh consent under RA 10173, abc356 will obtain such consent separately.
For all privacy-related enquiries, data subject rights requests, data breach reports, or general questions about this Policy, please contact abc356 through the following channels:
For complaints that cannot be resolved directly with abc356, you may contact the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for overseeing compliance with the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official Philippine government channels.
PAGCOR-licensed, RA 10173 compliant, 256-bit SSL protected.
GCash deposits from ₱100. Must be 21 or older to register and play.
21+ only. Gambling involves risk. Please play responsibly. PAGCOR regulated. See Responsible Gaming for support resources.