Privacy Policy – phh22 Online Casino

1. Who We Are

1.1 phh22 ("phh22," "we," "us," "the Company") is the operator of the online gaming platform accessible at phh22.app and its associated subdomains and mobile-optimized interfaces. phh22 operates under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to Philippine law, including the Data Privacy Act of 2012 (Republic Act 10173, "DPA") and its implementing rules and regulations.

1.2 phh22 acts as the Personal Information Controller (PIC) as defined under RA 10173 with respect to the personal data of all registered players and website visitors. phh22 has appointed a Data Protection Officer (DPO) who can be contacted using the details in Section 14 of this Policy.

1.3 This Privacy Policy applies to all personal data processed by phh22 in connection with the phh22 platform, including data collected during account registration, gameplay, payment transactions, customer support interactions, and use of the phh22 website.

2. Personal Data We Collect

2.1 phh22 collects the following categories of personal data from players and website visitors:

2.2 phh22 does not intentionally collect or process sensitive personal information (as defined under RA 10173) beyond what is strictly required for KYC identity verification and PAGCOR-mandated compliance purposes.

3. How We Collect Your Data

3.1 phh22 collects personal data through the following means:

• Direct collection: Information you provide when registering a phh22 account, completing KYC verification, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the phh22 platform, including IP address, device information, browser data, and session cookies.
• Transaction data: Financial data generated when you make deposits or withdrawal requests via GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven Cliqq, Coins.ph, USDT TRC20, or Visa/Mastercard.
• Third-party verification: Identity verification data returned by PAGCOR-approved KYC verification service providers during the account verification process.

4. How We Use Your Personal Data

4.1 phh22 processes your personal data for the following purposes:

• Registering and maintaining your phh22 account;
• Verifying your identity and age (21+ requirement) in accordance with PAGCOR KYC requirements;
• Processing deposits and withdrawals through your chosen Philippine payment method;
• Enabling gameplay across all phh22 game verticals (slots, live dealer, sports betting, sabong, bingo, lottery);
• Detecting and preventing fraud, money laundering, and other prohibited activities under Philippine law;
• Fulfilling anti-money laundering (AML) reporting obligations under Republic Act 9160 and PAGCOR regulatory requirements;
• Administering bonuses, promotions, and the phh22 VIP loyalty programme;
• Providing customer support in Filipino-English via live chat and email;
• Monitoring responsible gaming indicators and applying player protection measures as required by PAGCOR;
• Improving the phh22 platform through aggregated, anonymised usage analytics;
• Sending account-related communications including security alerts, transaction confirmations, and service updates.

4.2 phh22 does not use your personal data for: sale to third-party marketers; automated profiling that produces legal effects without human review; or purposes incompatible with those listed in Section 4.1.

5. Legal Basis for Processing

5.1 phh22 processes your personal data on the following legal bases as recognised under RA 10173:

• Contractual necessity: Processing required to provide services under the phh22 Terms and Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML obligations under RA 9160, tax reporting, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your rights under RA 10173.
• Consent: Where phh22 relies on your consent as the legal basis for processing (e.g., optional marketing communications), you may withdraw consent at any time by contacting phh22 Support without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1 phh22 does not sell, rent, or trade your personal data to third parties for commercial purposes. phh22 may share personal data only in the following circumstances:

• PAGCOR and regulatory authorities: phh22 is legally required to disclose player account and transaction data to PAGCOR upon request and in mandatory periodic regulatory reports.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and covered transaction reports as required under RA 9160 and its amendments.
• Payment processors: Financial data is shared with GCash (Mynt), Maya (Voyager), and banking partners solely to process your deposit and withdrawal transactions.
• KYC verification providers: Identity documents are shared with PAGCOR-approved KYC service providers for the sole purpose of identity verification.
• Game software providers: Limited game session data is shared with phh22's certified game providers to enable gameplay and RNG certification audits.
• Law enforcement: In response to valid legal process, court orders, or where disclosure is required to prevent imminent harm.

6.2 All third-party processors used by phh22 are bound by contractual data protection obligations consistent with RA 10173 and PAGCOR requirements.

7. Data Retention

7.1 phh22 retains your personal data for as long as your account is active and for such further period as required by applicable law and PAGCOR regulations. Specifically:

• Account and KYC data: Retained for a minimum of five (5) years from account closure, as required by PAGCOR and Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under RA 9160.
• Gaming records: Retained for a minimum of two (2) years for dispute resolution and PAGCOR audit purposes.
• Technical logs: Retained for a maximum of twelve (12) months, unless required for an ongoing investigation or legal proceeding.

7.2 Upon expiry of the applicable retention period, phh22 will securely delete or anonymise your personal data in a manner that prevents reconstruction.

8. Your Rights Under RA 10173

8.1 As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by phh22:

• Right to be Informed: The right to know what personal data phh22 collects, why, and how it is used — as provided in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data phh22 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by phh22.
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
• Right to Object: The right to object to processing of your personal data on grounds of legitimate interest, direct marketing, or automated processing.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phh22 has violated your rights under RA 10173.

8.2 To exercise any of these rights, contact phh22's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." phh22 will respond within thirty (30) calendar days of receipt.

9. Cookies & Tracking Technologies

9.1 phh22 uses cookies and similar tracking technologies on the phh22 platform for the following purposes:

• Essential cookies: Required for platform functionality including login session management, fraud detection, and geographic access controls. These cannot be disabled without impairing platform use.
• Analytics cookies: Aggregated, anonymised data used to understand how players interact with the phh22 platform and identify areas for improvement. No individually identifiable data is used for analytics.
• Security cookies: Used to detect suspicious login attempts, bot activity, and other security threats.

9.2 phh22 does not use third-party advertising cookies or allow advertising networks to place tracking technologies on the phh22 platform for the purpose of serving targeted advertising on other websites.

9.3 You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to log in and use core phh22 platform features.

10. Data Security

10.1 phh22 implements technical and organisational security measures appropriate to the risk presented by the personal data it processes. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and phh22 servers;
• Encryption of sensitive data at rest, including KYC documents and financial credentials;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Two-factor authentication requirements for staff accessing player account data;
• Regular security audits and penetration testing by independent third parties;
• Incident response procedures including mandatory breach notification to the NPC within 72 hours of discovery of a personal data breach likely to result in harm to data subjects.

10.2 While phh22 maintains robust security measures, no system is completely immune to security incidents. You are advised to maintain strong, unique passwords and to notify phh22 immediately if you suspect unauthorised access to your account.

11. Children's Privacy

11.1 phh22 does not knowingly collect personal data from any person under the age of 21 years. The phh22 platform is strictly for adults aged 21 and above as required by PAGCOR for all Philippine online gaming operators. Age verification is conducted for all phh22 accounts before withdrawal privileges are activated.

11.2 If phh22 discovers that an account has been registered by a person under the age of 21, the account will be immediately suspended, all funds handled per PAGCOR guidelines, and the matter reported to PAGCOR as required by regulation. If you are a parent or guardian and believe your child has registered a phh22 account, please contact phh22 Support immediately.

12. International Data Transfers

12.1 Where phh22 transfers your personal data to service providers located outside the Philippines — including game software certification bodies or certain technical infrastructure providers — such transfers are conducted in accordance with RA 10173 requirements for cross-border data transfers, including the use of appropriate contractual safeguards.

12.2 phh22 requires all overseas data processors to implement data protection standards equivalent to those mandated under RA 10173 and to process data only for purposes specified by phh22 in the applicable data processing agreement.

13. Changes to This Privacy Policy

13.1 phh22 may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or phh22's data processing practices. Where changes are material, phh22 will notify registered players via the mobile number or email address on file prior to the changes taking effect.

13.2 The current version of this Privacy Policy, as displayed on this page with the date of last update, supersedes all prior versions. Continued use of the phh22 platform following notification of changes constitutes your acknowledgement of the updated Policy.

13.3 This Privacy Policy was last reviewed and updated in June 2026.

14. Contact & Data Protection Officer

14.1 For all data privacy enquiries, access requests, rectification requests, or complaints relating to this Privacy Policy, please contact phh22's Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Request")
• Response Time: Within 30 calendar days of receipt
• Support Hours: 24 hours a day, 7 days a week

14.2 You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe phh22 has violated your rights under RA 10173. Information on lodging a complaint with the NPC is available at the NPC's official website.

14.3 phh22's regulatory oversight for gaming operations is conducted by the Philippine Amusement and Gaming Corporation (PAGCOR).