Privacy Policy – phh22 Online Casino

This Privacy Policy ("Policy") is issued by the operator of the phh22 online gaming platform, accessible at phh22.club ("phh22," "we," "us," or "our"). It describes how phh22 collects, uses, stores, discloses, and protects personal information in connection with your access to and use of the phh22 Platform.

This Policy applies to all personal information collected through the phh22 website and any related services, features, or communications, including customer support interactions, marketing communications (where consent has been given), and KYC verification processes.

This Policy is intended to comply with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA") of the Philippines, together with its Implementing Rules and Regulations and the issuances of the National Privacy Commission ("NPC"). By using the phh22 Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read together with the phh22 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and phh22.

For the purposes of the Data Privacy Act of 2012 and this Policy, phh22 acts as the Personal Information Controller in respect of the personal data it collects directly from users of the Platform. Where phh22 engages third-party service providers to process data on its behalf (for example, payment processors and game studios), those providers act as Personal Information Processors under binding data processing agreements.

If you have any questions or concerns about how phh22 handles your personal data, or if you wish to exercise any of your data subject rights described in Section 11, you may contact the phh22 Data Privacy Officer using the contact details provided in Section 15 of this Policy.

phh22 collects the following categories of personal information from players and visitors to the Platform:

phh22 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by a regulatory obligation and separately communicated to you.

phh22 collects personal information through the following methods:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys.
• Automated collection: Technical and usage data collected automatically when you access the Platform, through cookies, web beacons, server log files, and similar tracking technologies (see Section 8).
• Third-party sources: Identity verification information from KYC service providers; fraud and risk signals from payment processors and financial institutions; geolocation information derived from your IP address by technical infrastructure partners.
• Government and regulatory databases: Where required by anti-money laundering obligations, phh22 may verify information against publicly available sanctions lists or regulatory databases.

phh22 collects only the personal data that is necessary for the identified purpose and does not collect data in excess of what is required for legitimate operations, regulatory compliance, or the provision of services to you.

Under the Data Privacy Act of 2012, phh22 processes your personal information on the following legal grounds, depending on the specific processing activity:

• Performance of a contract: Processing necessary to create and maintain your phh22 account, process deposits and withdrawals, deliver game access, and provide customer support — i.e., to fulfill the agreement between you and phh22.
• Compliance with a legal obligation: Processing required to comply with Philippine gaming regulations, anti-money laundering obligations under Republic Act No. 9160 and its amendments, tax reporting requirements, and data retention mandates imposed by applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional marketing communications, including promotional emails and SMS notifications. Consent is sought separately and may be withdrawn at any time without affecting the lawfulness of prior processing.

phh22 uses the personal information it collects for the following specific purposes:

• Account management: Creating and maintaining your phh22 account, authenticating your identity on login, processing account settings changes, and delivering 2FA security codes.
• Payment processing: Verifying GCash, PayMaya, BPI, BDO, and Metrobank transactions; processing deposits; executing withdrawals; investigating disputed or failed transactions.
• KYC and age verification: Confirming that you are 21 years of age or older; verifying your identity in compliance with Philippine gaming and anti-money laundering regulations; conducting ongoing due diligence on high-value or high-risk transactions.
• Game delivery: Providing access to all phh22 games, recording game outcomes and transaction history, maintaining bet and win records, and computing bonus wagering progress.
• Fraud and security: Detecting and preventing unauthorized account access, payment fraud, bonus abuse, multi-accounting, money laundering, and other prohibited activities.
• Responsible gaming: Monitoring gaming behavior to identify patterns consistent with problem gambling; processing self-exclusion and deposit limit requests; enforcing cooling-off periods.
• Customer support: Responding to your queries, complaints, and account requests via live chat and email; maintaining records of support interactions for quality and training purposes.
• Platform improvement: Analyzing aggregated usage data to improve the Platform's design, performance, game library, and user experience — including analysis of which features are most used by players in Manila, Cebu, Davao, and other Philippine cities.
• Marketing communications (consent-based only): Sending you promotional offers, bonus notifications, and platform news where you have explicitly consented to receive such communications. You may unsubscribe at any time.
• Legal compliance: Retaining records as required by law; responding to lawful requests from Philippine regulatory authorities including PAGCOR and the Anti-Money Laundering Council (AMLC).

phh22 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. phh22 shares personal data only in the following circumstances:

• Service providers and processors: Third-party companies that provide services on phh22's behalf, including payment processors (GCash/GXI, PayMaya/Voyager Innovations, BancNet), KYC verification service providers, cloud infrastructure providers, game studios, fraud detection services, and customer support platform providers. All processors are bound by data processing agreements that restrict their use of your data to the specific service they provide for phh22.
• Regulatory and legal authorities: Philippine government agencies, law enforcement, courts, and regulators — including PAGCOR, the AMLC, and the National Privacy Commission — where disclosure is required by law, court order, or regulatory direction. phh22 will notify you of such a disclosure where legally permitted to do so.
• Group companies: Where phh22 is part of a group of companies, data may be shared with affiliated entities for the purpose of providing the Platform services, fraud prevention, and consolidated reporting, subject to the same data protection standards as described in this Policy.
• Business transfers: In the event of a merger, acquisition, sale of assets, or reorganization involving phh22, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the continuing application of this Privacy Policy or a materially equivalent replacement policy.
• With your consent: In any other circumstances where you have given your explicit prior consent to such sharing.

Where personal data is shared with third-party processors, phh22 remains responsible for ensuring that those processors handle your data in compliance with applicable Philippine law and this Policy.

phh22 uses cookies and similar tracking technologies to operate the Platform, remember your session, analyze usage patterns, and deliver a consistent experience across your visits. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. phh22 does not use third-party advertising cookies that track you across external websites.

phh22 retains personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account and for a period of five (5) years after account closure, in line with applicable anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine AML regulations.
• KYC and identity verification documents: Retained for five (5) years from account closure or the last KYC refresh, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the last interaction for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, to demonstrate compliance.
• Technical and usage logs: Retained for up to thirteen (13) months for security monitoring and fraud detection purposes.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, phh22 will securely delete or anonymize it in accordance with industry best practices.

phh22 implements a range of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the phh22 Platform — the same standard used by Philippine banks for their online portals.
• Encrypted storage of sensitive account information, including passwords (hashed using industry-standard algorithms) and identity document data.
• Access controls: Personal data is accessible only to phh22 personnel and service providers who have a legitimate need to access it for the performance of their duties. Access is governed by role-based permissions and is subject to regular review.
• Two-factor authentication available on all player accounts to reduce the risk of unauthorized login.
• Regular security assessments including vulnerability testing of the Platform's infrastructure and application layers.
• Incident response procedures designed to detect, contain, and respond to data security incidents, including notification to affected players and the NPC where required by law.

Under the Data Privacy Act of 2012, as a data subject you hold the following rights with respect to your personal information held by phh22. You may exercise these rights by contacting phh22 using the details in Section 15:

To exercise any of these rights, contact phh22's Data Privacy Officer using the details in Section 15. We may need to verify your identity before fulfilling a request. We will not charge a fee for reasonable requests but may charge a reasonable administrative fee for manifestly unfounded, excessive, or repetitive requests.

The phh22 Platform is strictly for persons who are 21 years of age or older. phh22 does not knowingly collect personal data from individuals under 21 years of age. The collection of data during registration is conducted for the purpose of verifying that users meet this age requirement.

If phh22 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted promptly, the associated account will be closed, and any deposits will be returned in accordance with phh22's underage account procedures.

If you are a parent or guardian and believe that a minor under your care has registered a phh22 account, please contact us immediately via live chat or at the email address provided in Section 15 so that we can take immediate action.

phh22 primarily processes and stores personal data within infrastructure located in Asia-Pacific regions. In certain circumstances — for example, where a game studio or technical service provider operates servers outside the Philippines — personal data may be transferred to, processed, or stored in countries other than the Philippines.

Where such international transfers occur, phh22 takes steps to ensure that the receiving entity provides an adequate level of data protection, either through the use of standard contractual clauses, binding corporate rules, or other legally recognized transfer mechanisms consistent with NPC guidance.

phh22 does not transfer personal data to countries that do not provide an adequate level of data protection without implementing appropriate safeguards and, where required, obtaining your explicit consent.

phh22 may update this Privacy Policy from time to time to reflect changes in applicable law, the nature of our data processing activities, Platform features, or our operational structure. The effective date of the current version is displayed at the top of this Policy and in the table of contents sidebar.

When material changes are made to this Policy, phh22 will notify registered players via email to the address on file or via a prominent notice displayed on the Platform prior to the changes taking effect. For minor changes that do not substantially affect your rights, phh22 will simply update the Policy on this page.

Your continued use of the phh22 Platform following notification of a revised Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with the updated Policy, you must stop using the Platform and may request account closure in accordance with the Terms & Conditions.

For all data privacy-related inquiries, requests to exercise your data subject rights, or to report a potential data security concern, you may contact the phh22 Data Privacy Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the phh22 Platform. Live chat agents in Tagalog and English are on every shift and can escalate privacy requests to the DPO team. This is the fastest channel for urgent account security or data concerns.
• Email: [email protected] — displayed as plain text only, not a clickable link. Please mark your subject line with "Privacy Request" or "Data Subject Rights" so your message reaches the DPO team promptly.

phh22 will acknowledge privacy requests within three (3) business days and will respond substantively within fifteen (15) business days of receiving a verified request, consistent with NPC guidelines.

If you are not satisfied with phh22's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information on filing a complaint with the NPC is available on the NPC's official website.