phh365 Privacy Policy

This Privacy Policy ("Policy") is issued by phh365 ("phh365", "we", "us", "our") and applies to all personal information collected through the phh365 online gaming platform available at phh365.cam, including all associated web pages, mobile interfaces, support channels, promotional communications, and any other touchpoint through which you interact with phh365 (collectively, the "Platform").

phh365 is committed to protecting the privacy and personal data of its users ("you", "Player", "Data Subject") in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its implementing rules and regulations ("IRR"). We act as the Personal Information Controller (PIC) with respect to the personal data you provide to us or that we collect in connection with your use of the phh365 Platform.

By registering an account on phh365, using any feature of the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein, to the extent that consent is required as a legal basis for processing under the DPA.

phh365 collects personal data in the following categories, depending on how you interact with the Platform:

phh365 does not collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) except where specifically required by applicable law or regulatory compliance obligations.

phh365 collects your personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automatically — through cookies, session tracking technologies, and server logs that record technical data each time you access the phh365 Platform. See Section 7 (Cookies & Tracking) for details.
• From payment processors — GCash, PayMaya, and banking partners may share confirmation data with phh365 in connection with transaction processing and fraud prevention.
• From identity verification services — third-party KYC providers may supply phh365 with identity match scores or document verification results in connection with regulatory compliance obligations.
• From game providers — JILI, PG Soft, and other licensed studio partners may share session-level gaming data with phh365 for account integrity and responsible gaming monitoring purposes.

phh365 processes your personal data only for specified, legitimate purposes. The primary purposes for which we use your data include:

• Account administration — creating and maintaining your phh365 account, verifying your identity, and managing your login security.
• Service delivery — enabling access to games, processing deposits and withdrawals in PHP, managing bonuses, and delivering platform features.
• Regulatory compliance — fulfilling our obligations under Philippine anti-money laundering law (AMLA), PAGCOR-aligned standards, and the DPA, including record-keeping requirements.
• Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, unauthorised account access, and other suspicious behaviour on the Platform.
• Responsible gaming — monitoring gaming activity to identify patterns that may indicate problem gambling, enforcing deposit and session limits, and managing self-exclusion requests.
• Customer support — responding to your enquiries, resolving disputes, and improving the quality of phh365's support services.
• Platform improvement — analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing communications — sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time.

Under the Data Privacy Act of 2012 and its IRR, phh365 relies on the following legal bases for processing your personal data:

• Consent — where you have given specific, informed, and freely given consent, such as for marketing communications or optional platform features.
• Contractual necessity — processing required to fulfil our obligations under the phh365 Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation — processing required to comply with Philippine law, including AMLA obligations, tax reporting requirements, and PAGCOR-aligned regulatory standards.
• Legitimate interests — processing necessary for the legitimate interests of phh365, such as fraud prevention, platform security, and responsible gaming monitoring, provided that such interests do not override your fundamental privacy rights.

phh365 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following circumstances, and only to the extent necessary for the relevant purpose:

• Payment processors — GCash operator Mynt, PayMaya Networks, BPI, BDO, Metrobank, and other payment partners receive transaction data necessary to process your deposits and withdrawals.
• Game providers — Licensed third-party studios including JILI and PG Soft receive session-level data necessary to operate their games within the phh365 Platform.
• Identity verification providers — KYC and AML compliance service providers receive the personal data necessary to verify your identity and conduct risk screening, under binding data processing agreements.
• Technology service providers — Cloud hosting, database, analytics, and customer support platform providers who process data on our behalf as Personal Information Processors (PIPs) under the DPA, subject to contractual data protection obligations.
• Regulatory and law enforcement authorities — Government agencies, including the AMLC, BIR, and law enforcement, where disclosure is required by applicable Philippine law, court order, or regulatory directive.
• Corporate transactions — In the event of a merger, acquisition, or sale of phh365 assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party service providers who receive personal data from phh365 are required to maintain the confidentiality of that data and to use it only for the purposes for which it was shared.

phh365 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — Required for the Platform to function correctly, including maintaining your login session and account security settings. These cannot be disabled without affecting Platform functionality.
• Functional cookies — Remember your preferences (e.g., language settings, last-played games) to improve your experience on the phh365 Platform.
• Analytics cookies — Collect anonymised usage data (page views, session duration, feature engagement) to help phh365 improve the Platform. No personally identifiable information is included in analytics reports.
• Security cookies — Detect and prevent fraudulent login activity, bot access, and other security threats to your phh365 account.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phh365 Platform, including your ability to maintain a logged-in session.

phh365 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal, regulatory, and operational requirements. The following general retention periods apply:

• Account and identity data — Retained for the duration of your active account, plus a minimum of five (5) years after account closure, as required by Philippine AML regulations.
• Transaction and financial records — Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA record-keeping obligations.
• Gaming activity data — Retained for three (3) years from the date of the relevant session, unless a longer period is required for dispute resolution or regulatory purposes.
• Support communications — Retained for two (2) years from the date of the relevant interaction.
• KYC documents — Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phh365:

To exercise any of these rights, contact our Data Protection Officer using the details in Section 14. phh365 will respond to verifiable requests within the timeframes prescribed by the DPA and its IRR. We may need to verify your identity before processing any data subject request.

The phh365 Platform is strictly intended for use by individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing casino-style gaming in the Philippines. phh365 does not knowingly collect or process personal data from any person under the age of 21.

During registration and KYC verification, phh365 collects and verifies your date of birth as part of mandatory age verification. Where phh365 becomes aware or has reasonable grounds to suspect that personal data has been collected from a person under 21 years of age, we will:

• Immediately suspend the relevant account pending investigation
• Delete or anonymise any personal data associated with that account to the extent permitted by law
• Return any net deposits to the payment method used, subject to AML requirements
• Notify the relevant parent or guardian where contact information is available

If you are a parent or guardian and believe a person under the age of 21 has registered an account on phh365, please contact us immediately at the details in Section 14.

phh365 implements technical and organisational security measures appropriate to the nature of the personal data we process, including but not limited to:

• Transport encryption — All data in transit between your device and the phh365 Platform is protected by TLS 1.2 or higher.
• Data at rest encryption — Personal data stored in phh365 databases is encrypted using AES-256 encryption.
• Password hashing — Account passwords are stored as bcrypt-hashed values and are never stored or transmitted in plaintext.
• Access controls — Access to personal data within phh365 is restricted on a need-to-know basis using role-based access controls (RBAC). Staff access to player data is logged and audited.
• OTP multi-factor authentication — New device logins trigger OTP verification to your registered Philippine mobile number, reducing the risk of unauthorised account access.
• Regular security testing — phh365 conducts periodic security assessments, including vulnerability scanning and penetration testing, of the Platform and its supporting infrastructure.
• Incident response — phh365 maintains a documented data breach response procedure aligned with the NPC's mandatory notification requirements under RA 10173.

While phh365 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that your device and network are adequately secured.

phh365 may transfer your personal data to service providers and partners located outside the Philippines where necessary to deliver the Platform, including game providers and cloud infrastructure operators located in other jurisdictions.

Where such transfers occur, phh365 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that required under the Philippine Data Privacy Act, including through contractual data protection clauses and data processing agreements with the relevant recipients.

By using the phh365 Platform, you consent to the transfer of your personal data to jurisdictions outside the Philippines where phh365 has confirmed that adequate protections are in place, as described in this section.

phh365 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, new purposes for processing, or new third-party sharing arrangements — phh365 will provide advance notice to registered players via the email address associated with their account or through a prominent notice on the Platform.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the phh365 Platform after the effective date of any revised Policy constitutes your acknowledgement of the changes. If you do not agree with any updates, you may close your account by contacting support.

The current version of this Policy is always accessible at phh365.cam/privacy-policy.

If you have questions about this Privacy Policy, wish to exercise your rights under the Data Privacy Act of 2012, or need to report a privacy concern, please contact phh365 through the following channels:

• Data Protection Officer (DPO): [email protected] — subject line: "Privacy / DPO Request"
• General Support: [email protected]
• Live Chat: Available 24/7 directly on the phh365 Platform
• Operating Hours: 24/7, Philippine Standard Time (GMT+8)

For complaints regarding phh365's handling of your personal data that cannot be resolved through our support channels, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012.

phh365 will respond to data subject access and rights requests within the timeframe prescribed under the DPA and its IRR. Identity verification may be required before any request is processed to protect against unauthorised disclosure of personal data.