Privacy Policy

1. About This Policy

This Privacy Policy describes how phhappy collects, uses, stores, discloses, and protects the personal information of players and visitors who access the phhappy platform. It applies to all personal data processed by phhappy in connection with the provision of our online gaming services to players in the Philippines and other permitted jurisdictions.

This Policy should be read alongside phhappy's Terms & Conditions and Responsible Gaming Policy. Capitalised terms not defined in this Policy have the meanings given to them in the phhappy Terms & Conditions.

phhappy acts as the Personal Information Controller in respect of the personal data it collects and processes about you, as defined under the Philippine Data Privacy Act of 2012 (RA 10173).

2. Data We Collect

phhappy collects the following categories of personal data from players and platform visitors:

phhappy does not collect sensitive personal information (as defined under RA 10173) unless strictly required for regulatory compliance purposes, in which case such collection will be clearly disclosed to you at the time of collection.

3. How We Collect Your Data

phhappy collects personal data through the following means:

• Direct Collection: Information you provide when registering a phhappy account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the phhappy platform, including through cookies, web beacons, and server logs. See Section 8 for details on our cookie practices.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, PayMaya, and banking partners in connection with your transactions.
• Publicly Available Sources: In limited circumstances, phhappy may supplement your profile with information from publicly available sources for fraud prevention or regulatory compliance purposes.

4. How We Use Your Data

phhappy uses your personal data for the following purposes:

• Account Management: To register, verify, maintain, and administer your phhappy account, including processing your phhappy Login credentials securely.
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver the full range of phhappy platform features.
• KYC & Regulatory Compliance: To verify your identity and age (21+), comply with PAGCOR requirements, and meet our obligations under Philippine anti-money laundering (AML) and counter-terrorism financing (CTF) laws.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats to the phhappy platform.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion requests, and administer responsible gaming tools such as deposit limits and cool-off periods.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your consent or where we have a legitimate interest to do so. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the phhappy platform's features, performance, and user experience.
• Legal Obligations: To comply with applicable Philippine laws, regulations, court orders, and regulatory directives from PAGCOR and other competent authorities.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), phhappy processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to provide the phhappy gaming services you have registered for.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AML/CTF obligations, and tax reporting requirements.
• Legitimate Interests: Processing necessary for phhappy's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, particularly for marketing communications. You may withdraw your consent at any time by updating your phhappy account preferences or contacting our support team.

6. Sharing Your Data

phhappy does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• KYC & Identity Verification Providers: Third-party service providers who assist phhappy in verifying your identity and age as required by PAGCOR regulations.
• Payment Processors: GCash, PayMaya/Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) in connection with processing your deposits and withdrawals.
• AML & Fraud Screening Partners: Compliance technology providers who assist phhappy in meeting its anti-money laundering and fraud prevention obligations.
• Game Software Providers: Third-party game studios and platform providers whose games are available on phhappy, to the extent necessary for game delivery and fairness certification.
• IT & Cloud Infrastructure Providers: Hosting, data storage, and cybersecurity service providers who support the operation of the phhappy platform.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where disclosure is required by law or regulatory directive.
• Legal & Professional Advisers: Lawyers, auditors, and other professional advisers engaged by phhappy in connection with legal proceedings, regulatory investigations, or compliance reviews.

All third-party service providers engaged by phhappy are contractually required to process your personal data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws.

7. Data Retention

phhappy retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active Account Data: Retained for the duration of your phhappy account and for a minimum of 5 years after account closure, in accordance with PAGCOR record-keeping requirements and Philippine AML regulations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act (AMLA) and its amendments.
• Support Communications: Retained for 3 years from the date of the communication, or longer if related to an ongoing dispute or legal proceeding.
• Marketing Preferences: Retained until you withdraw your consent or close your phhappy account.

When personal data is no longer required, phhappy will securely delete or anonymise it in accordance with our internal data retention and disposal procedures.

8. Cookies & Tracking Technologies

phhappy uses cookies and similar tracking technologies on the phhappy platform to enhance your experience, maintain session security, and analyse platform usage. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential for the phhappy platform to function correctly, including maintaining your phhappy Login session and security tokens. These cannot be disabled.
• Functional Cookies: Remember your preferences (such as language settings and responsible gaming limits) to personalise your phhappy experience.
• Analytics Cookies: Collect anonymised data about how players use the phhappy platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats to the phhappy platform.

9. Data Security

phhappy implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the phhappy platform.
• Encryption of sensitive data at rest, including financial data and government ID information.
• Multi-factor authentication (MFA) options for phhappy account access.
• Regular security audits, penetration testing, and vulnerability assessments of the phhappy platform.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• 24/7 security monitoring and incident response procedures.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phhappy will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173.

While phhappy takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your phhappy Login credentials. See Section 4 of the phhappy Terms & Conditions for your account security obligations.

10. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phhappy:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data phhappy holds about you, and information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data phhappy holds about you.
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to phhappy's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phhappy has violated your data privacy rights.

11. Children's Privacy

The phhappy platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine law and PAGCOR regulations. phhappy does not knowingly collect personal data from persons under 21 years of age.

If phhappy discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and return any deposited funds in accordance with applicable regulations.

If you are a parent or guardian and believe that your child has registered a phhappy account, please contact us immediately via live chat or at [email protected].

12. Third-Party Links

The phhappy platform may contain links to third-party websites or services (for example, payment provider portals). phhappy is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party services you access in connection with your use of phhappy.

This Privacy Policy applies solely to personal data collected and processed by phhappy in connection with the phhappy platform and services.

13. Changes to This Privacy Policy

phhappy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When material changes are made, phhappy will notify registered players via email or an in-platform notification at least 7 days before the changes take effect, where practicable.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. Your continued use of the phhappy platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes.

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or phhappy's data processing practices, please contact our Data Protection Officer:

• Live Chat: Available 24/7 within your phhappy account dashboard.
• Privacy Enquiries: [email protected]
• General Support: [email protected]

If you are not satisfied with phhappy's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing RA 10173.