This Privacy Policy explains how 234ph collects, processes, stores, and protects the personal information of all users of the 234ph Platform. 234ph is committed to handling your data responsibly, in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the regulatory requirements of PAGCOR.
234ph processes all personal data in full compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission of the Philippines.
All data transmitted between your device and the 234ph Platform is protected by 256-bit SSL/TLS encryption. Personal information, login credentials, and payment data are never transmitted in plaintext over any network connection.
As a data subject under Philippine law, you have the right to access, correct, object to, erase, and port your personal data held by 234ph. These rights can be exercised by contacting the 234ph Data Protection Officer at any time.
234ph does not sell, rent, or commercially trade your personal information to third-party marketers or data brokers. Personal data is shared only with service providers essential to Platform operations and as required by PAGCOR or Philippine law.
234ph stores personal data on secured servers with access controls, encryption at rest, and regular third-party security audits. Sensitive data — including ID documents submitted for KYC verification — is stored in isolated, restricted-access environments.
In the event of a personal data breach that poses risk to your rights and freedoms, 234ph will notify affected individuals and the National Privacy Commission of the Philippines within 72 hours of becoming aware of the breach, in accordance with NPC guidelines.
The following terms carry the meanings defined below throughout this Privacy Policy and all related 234ph data protection documentation:
234ph acts as the Data Controller in respect of all personal data collected through the 234ph Platform at 234ph.club. As Data Controller, 234ph determines the purposes for which your personal data is collected and the manner in which it is processed.
234ph has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. The DPO is responsible for overseeing 234ph's compliance with the DPA, acting as the point of contact for data subjects exercising their rights, and liaising with the National Privacy Commission.
Contact details for the 234ph Data Protection Officer are provided in Section 14 of this Policy. All formal data protection enquiries, data subject rights requests, and breach notifications should be directed to the DPO.
234ph collects the following categories of personal data that you provide when registering for and using the Platform:
| Data Category | Specific Data Elements | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Registration, KYC |
| Contact Data | Philippine mobile number, email address (where provided) | Registration |
| Identity Document Data | Government ID type, ID number, ID image, facial photograph | KYC verification |
| Address Data | Residential address (province, city, barangay) | KYC, account settings |
| Financial Data | GCash number, PayMaya number, bank account details, transaction history | Deposit/withdrawal |
| Account Credentials | Hashed password, security question responses (if set) | Registration |
| Communication Data | Live chat transcripts, support email correspondence | Customer support |
When you access the 234ph Platform, certain technical and behavioural data is collected automatically through the Platform's servers and analytics systems:
234ph may receive personal data about you from third-party sources in limited circumstances, including: payment processors (transaction confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank); fraud prevention and identity verification service providers; and PAGCOR or Philippine law enforcement authorities where required by regulation or court order.
Under the Philippine Data Privacy Act, every processing activity must be based on at least one lawful ground. 234ph relies on the following lawful bases for processing your personal data:
234ph processes personal data for the following specific purposes:
Your identity data, contact data, and account credentials are used to create and manage your 234ph account, authenticate your login sessions, send OTP verification codes, and enable account recovery. This processing is necessary to provide you with the Platform services you have contracted for.
Identity document data and facial photographs collected during KYC are processed to verify your identity, confirm that you are at least 21 years of age as required by PAGCOR regulations, and ensure compliance with the one-account-per-person policy. KYC data is retained for the duration of your account relationship with 234ph and for a mandatory post-closure period as required by PAGCOR record-keeping rules.
Financial data — including your linked GCash number, PayMaya number, or bank account details — is processed to facilitate deposits to and withdrawals from your 234ph account. Payment data is also processed for reconciliation, dispute resolution, and chargeback management purposes. 234ph does not store full bank account or GCash credentials on its own servers; payment processing is handled through certified payment gateway partners.
Transaction data, session data, and identity data are processed as part of 234ph's AML compliance program. 234ph is legally obligated under Republic Act No. 9160 to monitor transactions for suspicious activity, maintain transaction records, and file Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) where required. Automated and manual fraud detection systems also analyse session and transaction data to identify and prevent fraudulent account activity.
Session data, wagering history, and deposit/withdrawal patterns are analysed to support responsible gaming outcomes, including identifying patterns consistent with problem gambling behaviour, delivering responsible gaming notifications, and enforcing player-set limits. This processing is a condition of 234ph's PAGCOR operating licence.
Communication data from live chat and email correspondence is used to resolve support queries, process complaints, and improve the quality of 234ph's customer service. Support records may be retained for quality assurance and training purposes for up to 24 months after the query is resolved.
Device data, network data, and session data are processed to maintain the security of the Platform, detect and prevent unauthorised access, identify and block automated bots or scripts, and investigate suspected terms of service violations.
Where you have opted in to marketing communications, 234ph may use your contact data to send promotional offers, bonus notifications, and Platform updates via SMS or other channels. You may withdraw your marketing consent at any time by contacting 234ph support or following the opt-out instructions in any marketing message you receive.
234ph shares personal data with carefully selected third-party service providers that process data on our behalf under written data processing agreements. These providers are contractually bound to process data only as instructed by 234ph and to maintain security standards consistent with the DPA. Categories of service providers include:
234ph is required by Philippine law and PAGCOR licensing conditions to share certain personal data with regulatory authorities. This includes: transaction reports and player data shared with PAGCOR during regulatory audits or investigations; Suspicious Transaction Reports filed with the AMLC; and information disclosed to the NPC in the event of a data breach or as required by NPC order.
234ph will disclose personal data to Philippine law enforcement authorities, courts, or government agencies where required by a valid subpoena, court order, or applicable law. Where legally permitted to do so, 234ph will notify affected data subjects of such disclosures.
In the event that 234ph undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by 234ph may be transferred to the successor entity as part of that transaction. Any such transfer would be subject to the same or equivalent data protection commitments as those in this Policy, and affected data subjects would be notified prior to the transfer taking effect.
234ph retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law, PAGCOR regulations, or legitimate business necessity. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Identity Data | Duration of account + 7 years post-closure | PAGCOR regulatory requirement |
| KYC Identity Documents | Duration of account + 7 years post-closure | AML Act / PAGCOR |
| Financial Transaction Records | 10 years from transaction date | AML Act (RA 9160) |
| Wagering History | Duration of account + 7 years post-closure | PAGCOR / responsible gaming |
| Customer Support Records | 24 months from query resolution | Legitimate interests |
| Marketing Preferences | Until consent is withdrawn + 1 year | Consent |
| Session Logs (IP, device) | 12 months from session date | Security / fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised — such that it can no longer identify any individual — may be retained indefinitely for statistical and analytics purposes.
234ph implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. Key measures include:
The 234ph Platform uses cookies and similar tracking technologies to operate correctly and to improve your experience. The following categories of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Authentication, session management, CSRF protection, load balancing | Session |
| Functional | Language preferences, game display preferences, remembered login (if opted in) | Up to 12 months |
| Analytics | Aggregate usage statistics, page performance monitoring — no individual profiling | Up to 24 months |
| Security | Fraud detection signals, device fingerprinting for anomaly detection | Up to 12 months |
Strictly necessary cookies cannot be disabled as they are essential to Platform operation. For non-essential cookies (functional, analytics), you may manage your preferences through your browser settings. Please note that disabling certain functional cookies may affect your experience on the Platform — for example, your display preferences may not be remembered between sessions.
Most modern browsers provide controls for managing cookies, including clearing existing cookies, blocking all cookies, or selectively blocking third-party cookies. Refer to your browser's help documentation for specific instructions.
The 234ph Platform is strictly prohibited for use by individuals under the age of 21. 234ph does not knowingly collect personal data from persons under 21. All account registrations are subject to mandatory age verification through the KYC process, which requires submission of a valid Philippine government-issued identification document confirming the applicant's date of birth.
Where 234ph becomes aware — through KYC review, account investigation, or any other means — that an account has been registered by or on behalf of a person under 21, the account will be immediately suspended, all pending activity will be voided, and the matter will be referred to 234ph's compliance team for review.
Account holders must take all reasonable steps to prevent persons under 21 from accessing their 234ph account, their linked GCash or bank accounts used for Platform deposits, and any devices on which their 234ph session may be active.
Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 234ph. These rights are not absolute — some are subject to limitations where 234ph has overriding legal obligations, such as PAGCOR regulatory requirements or AML record-keeping mandates — but 234ph will inform you of any limitation and its basis when you exercise a right.
Request a copy of the personal data 234ph holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data. You may update basic account details directly in your 234ph profile settings.
Request deletion of your personal data where processing is no longer necessary, subject to 234ph's legal retention obligations under PAGCOR and AML regulations.
Object to processing of your personal data based on legitimate interests or for direct marketing purposes. Objections to mandatory regulatory processing cannot be upheld.
Request that 234ph restricts the processing of your data in certain circumstances, such as where you contest the accuracy of data or where processing is unlawful but you prefer restriction over erasure.
Receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
Where processing is based on consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
File a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) if you believe 234ph has processed your data in violation of the Data Privacy Act.
234ph's primary data processing and storage infrastructure is located within the Philippines. In limited circumstances, personal data may be transferred outside the Philippines — for example, to cloud infrastructure providers or game software partners operating in other jurisdictions.
Where such transfers occur, 234ph ensures that they are carried out only to countries that the National Privacy Commission recognises as providing an adequate level of data protection, or under appropriate contractual safeguards — such as standard data protection clauses approved by the NPC — that ensure your data receives equivalent protection to that afforded under the Philippine DPA.
234ph does not transfer special categories of personal data (such as KYC identity documents) outside the Philippines except where strictly necessary for regulatory compliance purposes and subject to equivalent contractual protections.
234ph reviews this Privacy Policy regularly and may update it to reflect changes in applicable law, PAGCOR regulatory requirements, the NPC's guidance, our data processing activities, or the structure of our service provider relationships.
Where changes to this Policy are material — meaning they substantively affect how we collect, use, or share your personal data — we will notify you at least 14 days before the changes take effect by posting a prominent notice on the 234ph Platform and, where feasible, by sending an SMS notification to your registered mobile number.
Non-material changes — such as typographical corrections or clarifications that do not affect the substance of data processing — may take effect immediately upon posting. The effective date at the top of this Policy will always reflect the date of the most recent revision.
Your continued use of the 234ph Platform following the effective date of any revised Policy constitutes your acknowledgement of the revised terms. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure in accordance with 234ph's account termination process.
For all privacy-related enquiries, data subject rights requests, consent withdrawals, or to report a potential data breach involving your 234ph account, please contact 234ph through the following channels:
234ph's Data Protection Officer will acknowledge all formal data privacy requests within 5 business days and provide a substantive response within 15 business days. For urgent matters — such as suspected unauthorised access to your account — please use live chat for the fastest response.
If you are not satisfied with 234ph's handling of your data privacy request or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines, which regulates data protection compliance under the Data Privacy Act. Information about filing a complaint with the NPC is available on the NPC's official government website (privacy.gov.ph).
Join thousands of Filipino players who trust 234ph with their gaming and their data. Create your verified 234ph account today — GCash deposits from ₱100, 500+ games, and full PAGCOR regulatory protection. Must be 21 or older.
DPA Compliant | 256-bit SSL | 21+ only | PAGCOR regulated