Privacy Policy

ph365 ("we", "us", "our") is committed to protecting the privacy and security of personal data belonging to all users of the ph365 Platform, accessible at https://ph365.casa ("Platform"). This Privacy Policy describes how ph365 collects, uses, stores, shares, and protects your personal information in connection with your registration and use of our online sportsbook, live casino, and gaming services.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the Platform generally. By registering an account or continuing to use the ph365 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

ph365 takes its data protection obligations seriously. We do not sell your personal data to third parties for marketing purposes and we collect only the data that is genuinely necessary to deliver our services, comply with applicable licensing requirements, and protect the security and integrity of our Platform.

The following definitions apply throughout this Privacy Policy:

ph365 collects the following categories of personal data from users of the Platform:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the21+ minimum age requirement)
• Email address and mobile phone number
• Residential address, including city, postcode, and country
• Username and encrypted account password
• Nationality and country of residence

• Copies of government-issued photo identification: Malaysian MyKad (NRIC), Passport, or Driver's Licence
• Proof of residential address documents (utility bills, bank statements dated within 3 months)
• Selfie photographs submitted alongside identity documents during the verification process
• Source of funds documentation where applicable to large deposit thresholds

• Deposit and withdrawal transaction records, including amount, date, time, and payment method used
• Payment method identifiers — such as partial bank account references or e-wallet identifiers — for Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20
• Account balance history and transaction logs

• Betting history, game session logs, and wagering activity
• Platform navigation data, including pages visited and features used
• Login timestamps, session duration, and access frequency
• Responsible gambling settings including deposit limits and self-exclusion records

• IP address and approximate geolocation derived from IP data
• Device type, operating system, and browser type
• Cookie identifiers and analytics tracking data
• Referal source data where applicable (e.g., affiliate tracking parameters)

• Records of customer support interactions via live chat, WhatsApp, or email
• Complaint and dispute correspondence
• Marketing preferences and communication opt-in/opt-out records

ph365 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting customer support.
• Automated collection: Technical and usage data collected automatically when you access and interact with the Platform, including through cookies, session tracking, and analytics tools.
• Payment processors: Transaction confirmation data received from integrated Malaysian payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating banks.
• Identity verification providers: Data received from third-party KYC and identity verification service providers used to validate documents submitted by Players.
• Fraud prevention services: Risk and fraud assessment data received from third-party anti-fraud and AML screening providers as part of our security compliance obligations.

ph365 processes your personal data for the following purposes:

ph365 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account administration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable licensing conditions, AML regulations, KYC requirements, and responsible gambling obligations.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud and abuse, and improve Platform services, where such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications, non-essential cookies, and certain data-sharing activities where your explicit consent has been obtained. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

ph365 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

Third-party service providers engaged by ph365 to assist in delivering Platform services, including KYC verification providers, payment processors (including Malaysian e-wallet and banking partners), IT infrastructure providers, fraud detection services, and customer support platform operators. All such providers are contractually bound to process your data only on ph365's instructions and in accordance with applicable data protection standards.

ph365 may disclose personal data to its gaming licensing authority, financial intelligence units, or other regulatory and law enforcement bodies where required by applicable law, court order, or regulatory direction. This includes mandatory disclosures under AML and CTF obligations.

In the event of a merger, acquisition, or sale of all or substantially all of ph365's business assets, personal data held by ph365 may be transferred to the acquiring entity, subject to equivalent data protection obligations being assumed by that entity.

Legal counsel, auditors, accountants, and other professional advisers engaged by ph365 may have access to personal data on a strictly confidential basis in connection with the provision of their professional services.

ph365 operates as an international online gaming platform and your personal data may be processed by ph365 or its service providers in jurisdictions outside Malaysia. Where personal data is transferred internationally, ph365 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard consistent with this Privacy Policy.

Such safeguards may include contractual data transfer agreements incorporating recognised standard contractual clauses, or transfers to service providers operating within jurisdictions that maintain adequate data protection standards under applicable international frameworks.

By registering and using the ph365 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

ph365 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, regulatory, licensing, and audit requirements. The following indicative retention periods apply:

• Account and registration data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following completion of the verification process, or such longer period as required by applicable licensing obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction to comply with financial record-keeping and AML obligations.
• Customer support communications: Retained for up to three (3) years from the date of the interaction, unless the subject matter relates to an unresolved dispute or legal claim.
• Marketing preferences and consent records: Retained for as long as you maintain an active account plus one (1) year, to document consent and opt-out history.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ph365's data disposal procedures.

The ph365 Platform uses cookies and similar tracking technologies to deliver and improve our services. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no opt-out is available as they are essential to Platform operation.

Subject to applicable law and ph365's legitimate processing requirements, you hold the following rights in respect of your personal data held by ph365:

To exercise any of the above rights, please contact ph365 Support using the details provided in Section16 of this Policy. ph365 will respond to verified data rights requests within 30 calendar days. Complex requests may require an extension of up to a further 30 days, in which case you will be notified accordingly.

The ph365 Platform is strictly for persons aged21 years and above. ph365 does not knowingly collect, process, or retain personal data from any person under the age of 21. All account registrations require confirmation of the applicant's age, and all accounts are subject to mandatory KYC identity verification to confirm eligibility.

If ph365 discovers or has reasonable grounds to believe that an account has been registered by, or personal data has been collected from, a person under the age of 21, ph365 will immediately suspend the account, delete the associated personal data, and — where applicable — report the incident to the relevant authorities.

If you are a parent or guardian and believe that your child has accessed the ph365 Platform or registered an account without your consent, please contact ph365 Support immediately using the contact details in Section 16.

ph365 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• SSL/TLS 256-bit encryption for all data transmitted between your device and the Platform
• Encrypted storage of passwords and sensitive account credentials using industry-standard hashing algorithms
• Two-factor authentication (2FA) available to all registered players for additional account security
• Access controls ensuring that personal data is accessible only to ph365 personnel and authorised service providers on a strict need-to-know basis
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure
• Documented data breach response procedures with defined notification timelines

While ph365 takes data security seriously, no online platform can guarantee absolute security against all possible threats. Players are reminded to use strong, unique passwords for their ph365 accounts, enable2FA, and contact ph365 Support immediately if they suspect any unauthorised access to their account.

The ph365 Platform may contain references or links to third-party services, including payment provider portals (such as Maybank Online, CIMB Clicks, or Touch 'n Go eWallet), that are not operated or controlled by ph365. This Privacy Policy applies solely to data processing carried out by ph365 in connection with the ph365 Platform.

ph365 is not responsible for the privacy practices, data security standards, or content of any third-party platforms or services. When you are redirected to a third-party platform — such as your banking portal or e-wallet provider to complete a deposit or withdrawal — that platform's own privacy policy will govern the processing of your personal data within that environment.

Players are encouraged to review the privacy policies of any third-party service they use in connection with their ph365 account, particularly payment providers handling MYR transactions.

ph365 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform services. Where changes are material, ph365 will provide registered Players with prior notice via email or a prominent notification on the Platform before the amended Policy takes effect.

The effective date of the most recent revision to this Privacy Policy is displayed at the top of this page. Your continued use of the ph365 Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and contact ph365 Support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph365, please contact our Data & Privacy support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly through the ph365 Platform in English, Bahasa Melayu, and Chinese. Average response time: 3–5 minutes via live chat.
• WhatsApp Support: Accessible through the Platform's contact section during operating hours.

When submitting a data rights request, please include your full name, registered email address, and a clear description of your request to enable our team to process it efficiently. ph365 may need to verify your identity before acting on any data rights request.

ph365 serves players across all of Malaysia — from Kuala Lumpur, Petaling Jaya, and Shah Alam to Penang, Johor Bahru, and Kota Kinabalu. Our multilingual support team is available around the clock to assist with any privacy-related queries.