phh365 Privacy Policy

About This Privacy Policy

This Privacy Policy ("Policy") describes how phh365 ("phh365," "we," "us," or "our") collects, uses, stores, discloses, and protects personal information about individuals ("you," "Member," or "User") who access or use the phh365 website at phh365.net, including all subpages, mobile-optimized versions, and any related services (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and applicable issuances of the National Privacy Commission ("NPC"). It applies to all personal data collected and processed by phh365 in connection with your use of the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference. By accessing the Platform or creating a phh365 account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

Data Controller Information

For the purposes of the Data Privacy Act of 2012 and its IR R, phh365 acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform.

If you have any questions, concerns, or requests relating to the processing of your personal data by phh365, you may contact our designated Data Protection Officer (DPO) at:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Privacy Request — [Your Registered Name]"
• Response Time: Within 15 business days of receipt, as required under NPC guidelines

phh365 has appointed a Data Protection Officer in accordance with Section 21 of the Data Privacy Act of 2012. The DPO is responsible for ensuring phh365's compliance with the DPA, liaising with the NPC, and handling data subject requests and complaints.

Personal Data We Collect

phh365 collects only the personal data that is reasonably necessary to operate a safe, compliant, and high-quality online gaming platform for Filipino players. The categories of personal data we collect include:

phh365 does not intentionally collect sensitive personal information beyond what is required for KYC and AML compliance — specifically, government ID documents. We do not collect health, biometric, or religious affiliation data unless explicitly required by regulators in specific circumstances.

How We Collect Your Data

phh365 collects personal data through the following channels and methods:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or completing any form on the Platform.
• Automated technical collection: Data gathered automatically as you use the Platform, including IP addresses, device identifiers, browser type, operating system, pages visited, time spent on pages, and interaction patterns — collected via cookies, log files, and similar tracking technologies.
• Payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and other payment partners when you make deposits or request withdrawals.
• KYC and identity verification partners: Verification status and document validity confirmations received from third-party identity verification service providers engaged by phh365 to fulfil its KYC and AML obligations.
• Third-party game providers: Session and gaming activity data received from integrated game providers such as Pragmatic Play, PG Soft, Evolution, and Jili to support account management and responsible gaming monitoring.
• Publicly available sources: In specific fraud prevention or AML screening contexts, phh365 may cross-reference data against publicly available registries, watchlists, or sanctions databases as required by Philippine law.

Legal Basis for Processing

phh365 processes your personal data on one or more of the following legal bases as recognised under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Consent: Where you have given explicit, informed, and freely-given consent for a specific processing purpose — for example, when you opt in to receive phh365 promotional emails or SMS notifications.
• Contractual necessity: Where processing is necessary to perform the contract between you and phh365 — that is, to provide you with access to the Platform, process your deposits and withdrawals, credit bonuses, and deliver gaming services.
• Legal obligation: Where processing is required to comply with a legal obligation applicable to phh365, including PAGCOR reporting obligations, Anti-Money Laundering Act (RA 9160) requirements, NPC data subject request obligations, and Bureau of Internal Revenue (BIR) reporting.
• Legitimate interests: Where processing is necessary for phh365's legitimate interests, provided these interests are not overridden by your fundamental rights and freedoms — including fraud detection, platform security, responsible gaming monitoring, and internal analytics.

How We Use Your Personal Data

phh365 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your consent or updating this Policy:

• Account management: Creating, maintaining, and operating your phh365 account, including processing login requests, updating account details, and managing your preferences.
• Age and identity verification: Confirming that you are at least 21 years of age and that your identity matches your registered account details, in compliance with PAGCOR regulations and the DPA.
• Payment processing: Facilitating deposits and withdrawals via your chosen payment method (GCash, Maya, BPI, BDO, Metrobank, etc.) and maintaining an accurate transaction history for your account.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multiple account violations, bonus abuse, and any other prohibited conduct outlined in our Terms & Conditions.
• Regulatory compliance: Meeting phh365's obligations under PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other applicable Philippine regulatory bodies.
• Customer support: Responding to your inquiries, resolving disputes, processing complaints, and providing technical assistance through our live chat and email support channels.
• Responsible gaming: Monitoring your gaming activity to identify patterns associated with problem gambling and to deliver responsible gaming tools, alerts, and interventions where appropriate.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and content of the phh365 Platform.
• Marketing communications: Sending you relevant promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications and in accordance with your stated preferences.

Data Sharing & Third-Party Disclosure

phh365 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only in the following limited circumstances and only to the extent necessary for each purpose:

• Payment service providers: GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and Visa/Mastercard processing partners — solely to facilitate your financial transactions on the Platform.
• KYC and identity verification providers: Third-party identity verification services engaged by phh365 to process and validate government-issued identification documents in compliance with AML requirements.
• Game content providers: Integrated game studios and platform providers (e.g., Pragmatic Play, PG Soft, Evolution, Jili) who receive the minimum necessary account data to deliver their games within the phh365 environment.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and law enforcement agencies — where disclosure is required by law, court order, or regulatory directive.
• IT and platform infrastructure providers: Cloud hosting and cybersecurity service providers who process data on phh365's behalf under strict data processing agreements and are prohibited from using your data for any independent purpose.
• Professional advisers: Legal counsel, auditors, and compliance consultants, where necessary and subject to strict confidentiality obligations.

All third parties with whom phh365 shares personal data are required to handle that data securely, use it only for the specified purpose, and comply with applicable Philippine data protection law. phh365 enters into Data Sharing Agreements (DSAs) with all relevant third parties as required under NPC regulations.

Cookies & Tracking Technologies

phh365 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. phh365 uses the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These cookies enable you to log in, maintain your session, and use core features. They cannot be disabled without breaking the Platform.
• Performance and analytics cookies: Used to collect anonymised data about how visitors use the Platform — which pages are visited most, where users navigate from, and how long sessions last. This data is used solely to improve platform performance.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming limit configurations so you do not need to re-enter them on each visit.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and multiple account violations by tracking device fingerprints and session behaviour.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the phh365 Platform. Strictly necessary and security cookies cannot be disabled while you remain logged in to your account.

Data Retention

phh365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

• Account data and KYC documents: Retained for a minimum of five (5) years following account closure, as required under the Anti-Money Laundering Act (RA 9160) and PAGCOR record-keeping obligations.
• Transaction and gaming activity records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with BIR and AMLC requirements.
• Customer support communications: Retained for two (2) years following the resolution of the relevant inquiry or complaint, unless a longer period is required for ongoing dispute resolution.
• Marketing preference records: Retained for as long as your account is active or until you withdraw your marketing consent, whichever is earlier.
• Technical and log data (IP addresses, session logs): Retained for twelve (12) months from collection, unless a security investigation requires extended retention.

Upon expiry of the applicable retention period, phh365 will securely delete or anonymise your personal data in accordance with NPC-recommended data disposal standards. Anonymised data (from which you cannot be identified) may be retained indefinitely for aggregate analytics purposes.

Data Security

phh365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phh365 servers.
• AES-256 encryption at rest for sensitive personal and financial data stored in phh365 databases.
• Multi-factor authentication (MFA) available for member accounts and required for all internal administrative access.
• Firewall and intrusion detection systems monitoring platform traffic in real time for anomalous patterns indicative of cyberattacks or unauthorised access attempts.
• Regular penetration testing by independent third-party cybersecurity firms to identify and remediate platform vulnerabilities.
• Role-based access controls ensuring that phh365 employees can only access personal data that is strictly necessary for their role and responsibilities.
• Data breach response plan — in the event of a personal data breach, phh365 will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected members as required under NPC Circular 16-03.

While phh365 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your phh365 login credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights as a data subject, which phh365 is committed to upholding:

• Right to be informed: You have the right to be told what personal data phh365 holds about you, why it is being processed, and with whom it is shared — as set out in this Policy.
• Right of access: You may request a copy of the personal data phh365 holds about you at any time. We will respond within 15 business days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update basic account details directly via your phh365 account dashboard, or contact support for more complex corrections.
• Right to erasure (Right to be forgotten): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phh365's legal retention obligations (see Section 9).
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, subject to phh365's right to demonstrate compelling legitimate grounds.
• Right to lodge a complaint: If you believe phh365 has breached your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer by sending an email to [email protected] with the subject line "Data Privacy Request — [Your Registered Name]." We may need to verify your identity before processing your request.

Children's Privacy

The phh365 Platform is strictly for adults who are 21 years of age or older, in accordance with PAGCOR regulations governing online gambling in the Philippines. phh365 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If phh365 discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the relevant data, and — where required — report the matter to PAGCOR. If you are a parent or guardian and believe that a minor in your care has registered on phh365, please contact our support team immediately at [email protected] so we can take prompt remedial action.

International Data Transfers

phh365 primarily stores and processes personal data within the Philippines. However, because some of our third-party service providers — including cloud infrastructure partners and certain game content providers — operate data centres outside the Philippines, some personal data may be transferred to, stored in, or processed in other countries.

Where personal data is transferred outside the Philippines, phh365 ensures that:

• The transfer is to a country or organisation that provides an adequate level of protection for personal data, as determined by the NPC.
• Appropriate contractual safeguards — including standard data protection clauses — are in place with the receiving party.
• The transfer is strictly limited to what is necessary for the specified processing purpose.

phh365 does not transfer personal data internationally for marketing or data monetisation purposes. All international data transfers are documented and logged for regulatory compliance purposes.

Marketing Communications

phh365 may send you promotional communications — including bonus offers, game announcements, tournament invitations, and VIP program updates — via email, SMS, or in-platform notifications, but only where you have provided your explicit consent to receive such communications during registration or through your account preferences.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any phh365 marketing email.
• Updating your communication preferences in your phh365 account dashboard under "Notification Settings."
• Contacting phh365 support and requesting removal from all marketing lists.

Opting out of marketing communications will not affect the delivery of transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts. These operational communications cannot be disabled while your account is active.

Changes to This Privacy Policy

phh365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, phh365 will provide notice through one or more of the following channels:

• A prominent banner or pop-up notification displayed on the phh365.net Platform upon your next login.
• An email notification sent to your registered email address, for significant changes that materially affect your rights.
• An update to the "Last Updated" date at the top of this page.

Your continued use of the phh365 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any material change to this Policy, you may request account closure in accordance with Section 12 of our Terms & Conditions.

We encourage you to review this Privacy Policy periodically. The most current version is always available at phh365.net/privacy-policy.

Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phh365 handles your personal data, please contact our Data Protection Officer directly:

• Email: [email protected]
• Subject Line: "Data Privacy Request — [Your Registered Name]"
• Response Time: Within 15 business days of receipt
• Live Chat: Available 24/7 on phh365.net for urgent privacy concerns

If you are not satisfied with phh365's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. For more information on filing a complaint with the NPC, please visit the NPC's official website or contact the NPC directly through their published channels.