phh222 Privacy Policy

This Privacy Policy ("Policy") governs the collection, use, storage, disclosure, and protection of personal data by phh222 ("phh222," "we," "us," or "our") in connection with the operation of the phh222 online gaming platform accessible at phh222.club.

phh222 acts as the Personal Information Controller for all personal data collected through phh222.club, the account registration process, payment transactions, KYC verification, customer support interactions, and all other services offered on the Platform.

phh222 is a PAGCOR-authorized online gaming platform operating under Philippine law. Our operations and data processing activities are subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the issuances of the National Privacy Commission (NPC), and the data-related requirements of PAGCOR's regulatory framework.

By registering for and using phh222, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein, to the extent that such consent is the applicable legal basis for processing.

Under the Philippine Data Privacy Act, phh222 processes personal data on the following legal bases:

1. Contractual Necessity: Processing is necessary for the performance of the contract between you and phh222 — specifically, to register your account, accept deposits, process withdrawals, settle bets, and deliver the gaming services you have requested.
2. Legal Obligation: phh222 is subject to legal and regulatory obligations that require the processing of personal data, including PAGCOR Know Your Customer (KYC) requirements, Philippine Anti-Money Laundering Act (AMLA) transaction monitoring and reporting obligations, and BSP payment regulations.
3. Legitimate Interests: phh222 processes certain data on the basis of legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform performance analytics — provided such interests are not overridden by your rights and interests as a data subject.
4. Consent: Where processing is not covered by the above bases, phh222 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without prejudicing the lawfulness of processing conducted prior to withdrawal.

phh222 collects personal data through the following methods:

• Direct Collection: Information you provide directly during account registration (name, date of birth, mobile number, email, address), during the KYC verification process (government ID submission), and when you contact customer support.
• Automated Collection: Technical data collected automatically when you access phh222.club, including IP address, device identifiers, browser type, operating system, session logs, and behavioral data collected via cookies and analytics technologies.
• Payment Processing: Transaction data generated when you make deposits or withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, or other approved payment channels. phh222 receives transaction references and amounts; full payment card numbers are not stored on phh222 systems.
• Third-Party KYC Providers: Where phh222 uses a third-party identity verification service to assist with document authentication and facial recognition as part of KYC, that provider processes and returns verification outcomes to phh222.
• Gaming Activity Logs: Automatically generated records of all betting and gaming activity on the Platform, including game sessions, bet amounts, outcomes, and responsible gaming tool interactions.

phh222 processes your personal data for the following purposes:

phh222 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Personal data may be disclosed to the following categories of recipients only to the extent necessary and on a need-to-know basis:

• Payment Service Providers: GCash (Mynt – Globe Fintech Innovations), PayMaya (Maya Bank), BPI, BDO, Metrobank, and other BSP-regulated payment processors, solely for the purpose of processing deposits and withdrawals.
• KYC and Identity Verification Providers: Regulated third-party identity verification services engaged to conduct document authentication and biometric checks as part of the PAGCOR-mandated KYC process.
• Game Software Providers: Licensed game studios and live casino operators whose games are accessible through phh222 may receive game session data for technical operation and audit purposes. These providers are contractually bound to maintain data confidentiality.
• PAGCOR: As the regulatory authority over phh222, PAGCOR may request and receive player account information, transaction records, and gaming activity data as part of its regulatory oversight functions.
• AMLC and Law Enforcement: The Anti-Money Laundering Council (AMLC), law enforcement agencies, and courts may receive personal data pursuant to lawful orders, legal process, or phh222's mandatory reporting obligations under the Anti-Money Laundering Act.
• IT and Security Service Providers: Cloud hosting, cybersecurity, fraud detection, and platform support providers engaged by phh222 under data processing agreements that require them to process data only on phh222's instructions.
• Professional Advisors: Legal, audit, and financial advisors engaged by phh222 in connection with legal proceedings, regulatory compliance, or corporate transactions, subject to professional confidentiality obligations.

Some of phh222's service providers — particularly game software studios and cloud infrastructure providers — may process personal data in jurisdictions outside the Philippines. When personal data is transferred outside the Philippines, phh222 ensures that appropriate safeguards are in place consistent with NPC requirements, including:

• Contractual clauses requiring the recipient to provide a standard of data protection equivalent to that required by Philippine law;
• Verification that the recipient jurisdiction has been assessed as providing adequate data protection standards; or
• Other lawful transfer mechanisms recognized by the NPC.

You may contact phh222's Data Protection Officer (DPO) to request information about specific international transfer safeguards in place for particular processing activities.

phh222 retains personal data only for as long as is necessary for the purposes for which it was collected, consistent with our legal and regulatory obligations:

• Account and Identity Data: Retained for the duration of your phh222 account and for a minimum of five (5) years following account closure, consistent with PAGCOR and AMLA record-keeping requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLA and PAGCOR regulations applicable to online gaming operators.
• KYC Documents: Retained for five (5) years following account closure or the date of the last transaction, in line with BSP and AMLA document retention requirements.
• Gaming Activity Logs: Retained for five (5) years to support regulatory reporting, dispute resolution, and responsible gaming monitoring obligations.
• Support and Communications: Retained for three (3) years from the date of the interaction for quality assurance, dispute resolution, and customer service continuity purposes.
• Technical and Usage Data: Retained for a maximum of thirteen (13) months for analytics and fraud prevention purposes, after which it is aggregated or deleted.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, whichever is earlier.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized in accordance with NPC-recognized data destruction standards.

phh222.club uses cookies and similar tracking technologies to operate the platform, analyze usage, and improve your experience. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function — including authentication session cookies that keep you logged in to your phh222 account. These cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated information about how Filipino players navigate phh222.club — which pages are visited, how long sessions last, and which features are most used. This data is used to improve the platform. It is anonymized before analysis.
• Fraud Prevention Cookies: Device fingerprinting and behavioral analytics cookies that help phh222 detect unusual account activity, bot access, and potential fraudulent behavior. These are necessary for platform security and player protection.
• Functional Cookies: Used to remember your preferences on phh222, such as language and display settings, for a more personalized experience.

You can manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect certain features of phh222.club. Strictly necessary and fraud prevention cookies cannot be disabled without compromising platform security.

phh222 implements technical and organizational security measures appropriate to the risk of processing player personal data on an online gaming platform. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and phh222 infrastructure is encrypted using industry-standard Transport Layer Security.
• Encryption at Rest: Sensitive personal data (including KYC documents and financial information) is encrypted in phh222's databases using AES-256 or equivalent encryption.
• Access Controls: Access to personal data is restricted to phh222 employees and contractors with a legitimate operational need. All access is logged and subject to regular review.
• Two-Factor Authentication: phh222 systems that access player personal data require multi-factor authentication for staff access.
• Penetration Testing: phh222 conducts regular security assessments and penetration tests of its platform infrastructure.
• Incident Response: phh222 maintains a documented data breach response plan consistent with NPC breach notification requirements.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phh222. phh222 will respond to verified data subject requests within 15 business days of receipt:

phh222 does not knowingly collect personal data from individuals under the age of 21. Consistent with PAGCOR regulations and the phh222 Terms & Conditions, use of the Platform is strictly restricted to persons aged 21 years and above.

Age verification is conducted as a mandatory step in the KYC process. If phh222 discovers or is notified that personal data has been collected from a person under 21, the account will be immediately suspended, all associated personal data will be deleted to the extent permitted by law, and any balance will be returned to the payment method from which it was deposited.

phh222 may send promotional communications about bonuses, new games, and platform updates to registered players who have consented to receive marketing communications. The following terms apply:

• Marketing communications are sent by SMS to your registered Philippine mobile number and/or by email to your registered address only with your consent.
• You may withdraw consent to marketing communications at any time by: (a) clicking the unsubscribe link in any marketing email; (b) replying STOP to any SMS communication; or (c) adjusting your communication preferences in your phh222 account settings.
• Withdrawal of marketing consent does not affect your ability to use phh222 or receive transactional communications (deposit confirmations, withdrawal notifications, KYC status updates) which are sent as part of the service contract.
• phh222 does not send marketing communications to players who have self-excluded or who are in a cooling-off period. This is enforced automatically by the Platform.

In the event of a personal data breach that is likely to result in risk or harm to affected players, phh222 will:

1. Notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required under the Data Privacy Act and NPC Circular No. 16-03;
2. Notify affected data subjects within 72 hours where the breach is likely to result in significant harm — including via registered email, in-app notification, or SMS to the affected player's registered contact details;
3. Provide affected data subjects with information about the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach;
4. Maintain a record of all data breaches, whether or not they met the NPC notification threshold, consistent with NPC requirements.

phh222 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform operations. When material changes are made, phh222 will:

• Update the "Effective Date" at the top of this Policy;
• Provide notice to registered players via email and/or in-platform notification prior to the effective date of material changes; and
• Where required by the Data Privacy Act, obtain fresh consent for new or significantly changed processing activities before commencing such processing.

Continued use of phh222 after the effective date of an amended Privacy Policy constitutes acceptance of the revised terms, except where fresh consent is required.

For any questions, concerns, or requests relating to this Privacy Policy or phh222's data processing practices, please contact:

• Data Protection Officer (DPO): phh222 has designated a Data Protection Officer as required by the Philippine Data Privacy Act.
• Contact Method – Email: [email protected] (plain text — not a clickable link). Subject line: "Privacy Inquiry" or "Data Subject Request."
• Contact Method – Live Chat: Available 24 hours a day, 7 days a week via phh222.club. Reference "Privacy / DPO request" when initiating the chat.
• Response Time: phh222 will acknowledge data subject requests within 3 business days and provide a substantive response within 15 business days. Complex requests may require additional time, in which case we will inform you of the extended timeline.
• Regulatory Complaints: If you are not satisfied with phh222's response to a privacy complaint, you may file a complaint with the National Privacy Commission at privacy.gov.ph (official NPC website — not linked here per phh222's no-external-links policy; please search for the NPC directly).