phh222 Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data processed by phh222 in connection with the operation of the phh222 online casino and sports betting platform accessible at phh222.org ("the Platform"). It applies to all registered players, prospective players who visit phh222 without registering, and individuals who contact phh222 via any support channel.

phh222 is the data controller responsible for the personal data you provide or that is generated through your use of the Platform. As a PAGCOR-licensed operator, phh222 processes personal data both to fulfil its obligations under its gaming licence and to deliver gaming and support services to Filipino players across Metro Manila, Cebu, Davao, and the rest of the Philippines.

By registering on phh222 or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood how phh222 handles your personal data. If you do not agree with any aspect of this Policy, you should not use the Platform and should contact phh222 to close your account and request data erasure where applicable.

2. Personal Data We Collect

2.1 Registration Data. When you create a phh222 account, we collect: full legal name, date of birth (to verify the 21+ age requirement), Philippine mobile number, email address, and preferred username. This information is mandatory — accounts cannot be created without it.

2.2 Identity Verification (KYC) Documents. To comply with phh222's PAGCOR licence conditions and Anti-Money Laundering (AML) obligations, we collect and process copies of government-issued identification documents (such as PhilSys National ID, passport, driver's license, UMID, SSS/GSIS ID, or PRC ID) and, in some cases, proof of address documents. These are processed solely for identity verification and regulatory compliance purposes.

2.3 Financial Data. phh222 collects payment method identifiers necessary to process deposits and withdrawals — for example, the GCash-registered mobile number, PayMaya account reference, or bank account number for BDO, BPI, or Metrobank transfers. phh222 does not store full payment card numbers. All financial data is processed and stored in accordance with applicable payment industry security standards.

2.4 Transaction and Gaming Data. phh222 maintains detailed records of all platform transactions, including deposit and withdrawal history, bet history across all game types (slots, live casino, bingo, keno, tower, sportsbook), bonus credits awarded and used, account balance changes, and session timestamps. This data is required by PAGCOR regulations and is also used to deliver the platform experience and personalise promotions.

2.5 Technical and Device Data. When you access phh222, we automatically collect: IP address, device type and operating system, browser type and version, device identifiers used for fraud prevention and duplicate account detection, session duration, and pages visited. This data is collected via server logs and platform analytics tools.

2.6 Communications Data. If you contact phh222 support via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and any information you provide in the course of seeking assistance.

2.7 Responsible Gaming Data. If you use phh222's responsible gaming tools — deposit limits, session time limits, cool-off periods, or self-exclusion — the details of those elections are recorded and enforced by the platform. This data is treated with particular sensitivity and is not used for marketing purposes.

3. How and Why We Use Your Data

phh222 processes personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to create and operate your account, process deposits and withdrawals, settle bets, and deliver support services.
• Legal obligation: Processing required to comply with phh222's PAGCOR licence conditions, AML obligations under Republic Act 9160, age verification requirements, NPC data privacy regulations, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, service improvement, and analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications (promotional emails, SMS offers) where you have specifically opted in. You may withdraw consent at any time through your account settings.

Specific purposes for which phh222 uses your data include: account creation and authentication; processing financial transactions via GCash, PayMaya, and partner banks; verifying your identity and age; complying with PAGCOR reporting requirements; detecting and preventing fraud, money laundering, and bonus abuse; personalising your phh222 experience and promotions; enforcing responsible gaming measures; responding to support queries; and improving the platform through aggregated analytics.

4. Disclosure of Personal Data to Third Parties

4.1 Payment Processors. phh222 shares the minimum personal data necessary with payment service providers — including GCash (G-Xchange, Inc.), PayMaya (Voyager Innovations), and Philippine banking partners — to process deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.

4.2 PAGCOR and Regulatory Bodies. As a PAGCOR-licensed operator, phh222 is obligated to share player data with PAGCOR as required under its licence conditions, including for regulatory audits, AML reporting to the Anti-Money Laundering Council (AMLC), and player dispute resolution. phh222 may also share data with the National Privacy Commission in the event of a breach or as required by NPC investigation.

4.3 Technology and Service Providers. phh222 engages third-party providers for platform infrastructure, game delivery, identity verification (KYC), fraud prevention, customer support tooling, and analytics. These providers act as data processors under written agreements that prohibit them from using phh222 player data for any purpose other than the specific service being provided.

4.4 Legal Requirements. phh222 may disclose personal data to law enforcement agencies, courts, or other government bodies where required by valid legal process under Philippine law, including the National Bureau of Investigation (NBI) or Philippine National Police (PNP) in connection with fraud or criminal investigations.

4.5 No Sale of Data. phh222 does not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial marketing purposes. Any third-party disclosure is limited to the categories above.

5. Data Retention

phh222 retains personal data for as long as your account is active and for the periods required by applicable law and regulation thereafter. Specific retention periods include:

• KYC and identity documents: Retained for a minimum of five (5) years after account closure, as required by PAGCOR licence conditions and RA 9160 (AML Act).
• Financial transaction records: Retained for a minimum of five (5) years after each transaction, as required by AML regulations.
• Gaming and bet history: Retained for a minimum of three (3) years after account closure, as required by PAGCOR.
• Support communications: Retained for two (2) years after the most recent communication.
• Marketing consent records: Retained for three (3) years after consent is withdrawn, to demonstrate compliance.
• Self-exclusion records: Retained indefinitely to ensure permanent self-exclusions are honoured.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.

6. Cross-Border Data Transfers

phh222 primarily processes personal data within the Philippines. Where the use of technology partners or infrastructure providers results in personal data being transferred outside the Philippines — for example, to data centres in Singapore or other jurisdictions — phh222 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards equivalent to those required under the Philippine Data Privacy Act.

phh222 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards as required under NPC regulations.

7. Security of Personal Data

phh222 implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.2+ encryption for all data in transit between players and phh222 servers
• AES-256 encryption for sensitive data at rest, including identity documents and financial credentials
• Multi-factor authentication options for player accounts (OTP via SMS or authenticator app)
• Role-based access controls limiting phh222 staff access to personal data on a need-to-know basis
• Regular security audits and penetration testing conducted by independent third parties
• Device fingerprinting and anomaly detection systems to identify suspicious access patterns
• Secure deletion procedures for data that has reached the end of its retention period

While phh222 takes all reasonable precautions, no data transmission over the internet or electronic storage system is 100% secure. phh222 cannot guarantee the absolute security of your data against all threats.

8. Your Rights as a Data Subject

Under the Philippine Data Privacy Act (RA 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phh222:

• Right to be informed: You have the right to be informed about the data phh222 collects and how it is processed. This Privacy Policy fulfils that obligation.
• Right to access: You may request a copy of all personal data phh222 holds about you, together with information about how it is being processed.
• Right to rectification: If any personal data phh222 holds about you is inaccurate or incomplete, you may request that it be corrected. Some corrections (e.g., legal name changes) require supporting documentation.
• Right to erasure or blocking: In certain circumstances — where data is no longer necessary for the purposes it was collected, or where you withdraw consent and no other legal basis applies — you may request that phh222 erase or block your personal data. Note that erasure requests cannot override mandatory retention obligations under PAGCOR regulations or the AML Act.
• Right to object: You may object to specific processing activities, including direct marketing. If you opt out of marketing communications, phh222 will cease sending them within a reasonable time.
• Right to data portability: You may request that phh222 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to damages: If you suffer harm as a direct result of phh222's non-compliance with the Data Privacy Act, you may be entitled to compensation.
• Right to lodge a complaint: If you believe phh222 has violated your privacy rights, you may lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, contact phh222's Data Protection Officer via the platform's 24/7 live chat or at [email protected] with the subject "Data Privacy Request". phh222 will respond within thirty (30) calendar days of receiving a valid and complete request.

9. Cookies and Tracking Technologies

phh222 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for platform functionality, including session authentication, security tokens, and game state persistence. These cannot be disabled without breaking the platform.
• Performance and analytics cookies: Aggregate, anonymised data about how players navigate the Platform, which helps phh222 identify technical issues and improve user experience.
• Fraud prevention: Device identifiers and browser fingerprinting used to detect duplicate accounts and suspicious login patterns.

phh222 does not use third-party advertising cookies or cross-site tracking technologies that share your data with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from using core phh222 services.

10. Changes to This Privacy Policy

phh222 may update this Privacy Policy from time to time to reflect changes in the Platform, applicable law, or regulatory requirements. Material changes will be communicated to registered players by email to their registered address and by a notice displayed on the Platform at least seven (7) days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of phh222 after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the changes, you should cease using phh222 and contact support to request account closure and applicable data erasure.

11. Contact and Complaints

For all data privacy enquiries, access requests, rectification requests, or complaints relating to phh222's handling of your personal data, you may contact us through the following channels:

• Live Chat: Available 24/7 directly within the phh222 Platform — the fastest way to reach the data privacy team.
• Email: [email protected] — Subject line: "Data Privacy Request" (plain text address — not a clickable link).

If you are not satisfied with phh222's response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines, which has jurisdiction over data privacy violations by organisations operating within the Philippines.