1Introduction
phh777 ("phh777," "we," "us," or "our") operates the online gaming platform accessible at phh777.app (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, prospective players, and visitors.
This Privacy Policy ("Policy") describes how phh777 collects, uses, stores, shares, and protects personal data in connection with the operation of the Platform. It also describes the rights available to data subjects under applicable Philippine law and how those rights may be exercised.
This Policy applies to all personal data processed by phh777 in connection with the Platform, regardless of the medium through which such data is collected (website, mobile application, customer support channels, or otherwise). By accessing the phh777 Platform or registering an account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy should be read together with phh777's Terms & Conditions and Responsible Gaming Policy.
2Data Controller
For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations, phh777 acts as the personal information controller ("PIC") with respect to the personal data of its players and Platform users.
As a PIC, phh777 determines the purposes and means of processing personal data collected through the Platform. phh777 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with the DPA and this Policy. Contact details for the DPO are provided in Section 15 of this Policy.
3Personal Data We Collect
phh777 collects the following categories of personal data from players and Platform users:
- Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., passport number, driver's license number, SSS/UMID number) collected during account registration and KYC verification.
- Contact Data: Philippine mobile number, email address, and residential address. These are used for account communications, OTP verification, and regulatory correspondence.
- Financial Data: GCash account number, PayMaya account details, bank account information (BPI, BDO, Metrobank), and card details (Visa/Mastercard) used for processing deposits and withdrawals. phh777 does not store full card numbers; payment card data is tokenized by our PCI-DSS compliant payment processors.
- Transaction Data: Records of all deposits, withdrawals, wagers, game results, bonus claims, and account balance history on the phh777 Platform.
- Technical Data: IP address, device type, operating system, browser type and version, time zone, and session duration collected automatically when you access the Platform.
- Usage Data: Information about how you use the phh777 Platform, including pages visited, games played, features accessed, and click-stream data.
- Communications Data: Records of your communications with phh777 customer support, including live chat transcripts, email correspondence, and support ticket history.
- Responsible Gaming Data: Self-exclusion requests, deposit limit settings, session time preferences, and any information provided in connection with responsible gaming tools on the phh777 Platform.
4How We Collect Your Data
phh777 collects personal data through the following means:
- Direct Collection: Data you provide when registering a phh777 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
- Automated Collection: Technical and usage data collected automatically through cookies, web beacons, pixel tags, and similar tracking technologies when you access the phh777 Platform. See Section 8 for details on our cookie practices.
- Third-Party Sources: Identity verification data from KYC service providers; fraud detection signals from anti-fraud partners; payment verification data from payment processors (GCash, PayMaya, banks). phh777 only receives data from third parties where you have consented to such sharing or where phh777 has a legitimate legal basis to receive it.
5Legal Basis for Processing
phh777 processes your personal data on the following legal bases under the Data Privacy Act of 2012:
- Contractual Necessity: Processing necessary to perform the contract between you and phh777 (i.e., the Terms & Conditions), including account management, game provision, and payment processing.
- Legal Obligation: Processing required to comply with phh777's legal obligations under Philippine law, including anti-money laundering (AML) regulations, PAGCOR licensing requirements, and tax reporting obligations.
- Legitimate Interests: Processing necessary for phh777's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6How We Use Your Personal Data
phh777 uses the personal data it collects for the following purposes:
- To create, verify, and manage your phh777 player account, including identity verification and KYC compliance.
- To process deposits, withdrawals, and other financial transactions on the phh777 Platform.
- To provide access to phh777 games, live casino services, sports betting, and other Platform features.
- To administer bonuses, promotions, and loyalty programs in accordance with applicable terms.
- To communicate with you regarding your phh777 account, including transaction confirmations, security alerts, and service updates.
- To send marketing communications about phh777 promotions and new features, where you have consented to receive such communications.
- To detect, investigate, and prevent fraud, money laundering, and other prohibited activities on the Platform.
- To monitor and enforce responsible gaming obligations, including age verification, self-exclusion management, and deposit limit enforcement.
- To comply with phh777's legal and regulatory obligations under Philippine law, including reporting to PAGCOR and the Anti-Money Laundering Council (AMLC) where required.
- To analyze Platform usage patterns and improve the phh777 user experience, game offerings, and customer support services.
- To resolve disputes, enforce phh777's Terms & Conditions, and respond to legal claims.
7Data Sharing & Disclosure
phh777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard processing partners receive the minimum financial data necessary to process your transactions. All payment partners are contractually bound to handle your data securely.
- KYC & Identity Verification Providers: Third-party identity verification services that assist phh777 in confirming player identities and complying with AML obligations. These providers act as personal information processors under phh777's instruction.
- Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law, court order, or regulatory directive.
- Fraud Prevention & Security Partners: Third-party fraud detection and cybersecurity service providers that help phh777 protect the Platform and its players from unauthorized access and financial crime.
- Technology Service Providers: Cloud hosting providers, software vendors, and IT support partners who process data on phh777's behalf under strict data processing agreements that prohibit independent use of your data.
- Legal & Professional Advisors: Lawyers, auditors, and compliance consultants engaged by phh777, subject to professional confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, or sale of phh777's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.
In all cases where phh777 shares personal data with third-party processors, we require those parties to implement appropriate technical and organizational security measures and to process data only in accordance with phh777's documented instructions.
8Cookies & Tracking Technologies
phh777 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the phh777 website. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in to your phh777 account and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
- Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how players use the phh777 Platform, including which pages are visited most frequently and how players navigate between game categories. This data helps phh777 optimize the Platform experience.
- Functional Cookies: Used to remember your preferences on the phh777 Platform, such as your preferred language, display settings, and game lobby filters.
- Responsible Gaming Cookies: Used to enforce session time limits, deposit limit settings, and self-exclusion status across your phh777 sessions.
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phh777 Platform. phh777 does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.
9Data Security
phh777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
- Encryption: All data transmitted between your device and the phh777 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Sensitive data at rest, including financial records and identity documents, is encrypted using AES-256 encryption.
- Access Controls: Access to personal data within phh777's systems is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data privacy training.
- Two-Factor Authentication: phh777 supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of security beyond the standard phh777 login credentials.
- Penetration Testing: phh777's Platform and infrastructure undergo regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
- Incident Response: phh777 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, phh777 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the DPA.
While phh777 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phh777 login credentials and for notifying phh777 immediately if you suspect unauthorized access to your account.
10Data Retention
phh777 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:
- Account & Identity Data: Retained for the duration of your phh777 account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR licensing conditions.
- Transaction Records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
- KYC Documents: Identity verification documents are retained for the period required by applicable AML regulations, typically five (5) years from the end of the business relationship.
- Customer Support Records: Communications with phh777 customer support are retained for three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
- Marketing Data: Where you have consented to marketing communications, your contact details are retained until you withdraw consent or request deletion, whichever is earlier.
Upon expiry of the applicable retention period, phh777 will securely delete or anonymize your personal data in accordance with its data disposal procedures, unless retention is required by a specific legal obligation or ongoing legal proceedings.
11Your Data Privacy Rights
As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phh777:
- Right to Be Informed: The right to be informed of how your personal data is being collected and processed by phh777, as set out in this Policy.
- Right of Access: The right to request a copy of the personal data phh777 holds about you, along with information about how it is being processed.
- Right to Rectification: The right to request correction of any inaccurate or incomplete personal data phh777 holds about you. You may update basic account information directly through your phh777 account settings.
- Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phh777's legal retention obligations.
- Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on phh777's legitimate interests.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
- Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phh777 has processed your personal data in violation of the DPA.
To exercise any of the above rights, please contact phh777's Data Protection Officer using the contact details provided in Section 15. phh777 will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with the DPA and NPC regulations. phh777 may request proof of identity before processing a data subject request to prevent unauthorized disclosure.
12Children's Privacy
The phh777 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. phh777 does not knowingly collect personal data from individuals under the age of 21.
If phh777 becomes aware that personal data has been collected from an individual under 21 years of age, the relevant account will be immediately suspended, all associated data will be deleted, and any deposits will be returned to the originating payment method. If you believe that a minor has registered a phh777 account, please contact our support team immediately at [email protected] so that we can take prompt action.
phh777 employs age verification procedures during the registration process and reserves the right to request documentary proof of age at any time. Providing false information about your age to circumvent these controls is a serious breach of phh777's Terms & Conditions.
13International Data Transfers
phh777 primarily processes personal data within the Republic of the Philippines. However, some of phh777's technology service providers and game content partners may be located in other countries. Where personal data is transferred outside the Philippines, phh777 ensures that such transfers are subject to appropriate safeguards, including:
- Contractual clauses that require the recipient to protect personal data to a standard equivalent to that required under the DPA.
- Transfers only to countries or organizations that the National Privacy Commission has recognized as providing an adequate level of data protection.
- Your explicit consent to the transfer, where required by applicable law.
phh777 will not transfer your personal data to any jurisdiction where adequate data protection safeguards cannot be ensured.
14Updates to This Policy
phh777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, phh777 will notify registered players via the email address or mobile number associated with their phh777 account, and will update the "Last Updated" date at the top of this page.
Your continued use of the phh777 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you must cease using the Platform and may request account closure by contacting phh777 customer support.
phh777 recommends that you review this Privacy Policy periodically to stay informed of how we are protecting your personal data. Previous versions of this Policy are available upon request from the phh777 Data Protection Officer.
15Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or phh777's data processing practices, please contact our Data Protection Officer through the following channel:
- Email: [email protected] (plain text — not a clickable link)
- Subject Line: Please include "Data Privacy Request" or "DPO Inquiry" in your subject line to ensure prompt routing to the correct team.
- Response Time: phh777 aims to acknowledge all data privacy inquiries within 5 business days and to provide a substantive response within 30 days, in accordance with NPC guidelines.
If you are not satisfied with phh777's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available through official Philippine government channels.
For responsible gaming support, self-exclusion requests, or deposit limit assistance, please visit the phh777 Responsible Gaming page, which provides dedicated tools and resources for all phh777 players in the Philippines.