phhoy Casino Privacy Policy

1. Introduction

This Privacy Policy ("Policy") applies to phhoy Casino, operated at phhoy.org ("phhoy," "we," "us," "our"), and governs the collection, use, storage, sharing, and protection of personal data provided by users ("you," "Member," "Player") in connection with your use of the phhoy Casino platform and all associated services.

phhoy is registered as a Personal Information Controller (PIC) under the National Privacy Commission (NPC) of the Philippines pursuant to Republic Act No. 10173 (Data Privacy Act of 2012, "DPA") and its Implementing Rules and Regulations. We process personal data only in accordance with the DPA, NPC issuances, and other applicable Philippine data protection laws.

By registering an account on phhoy.org, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the phhoy platform.

2. Personal Data We Collect

2.1 Identity & Contact Information

• Full legal name as appearing on a Philippine government-issued ID;
• Date of birth (for age verification — players must be 21 years of age or older);
• Philippine mobile number (primary account identifier and OTP delivery channel);
• Email address (if provided during registration or account recovery);
• Residential address (collected during KYC verification);
• Government-issued ID type and number (e.g., SSS, UMID, passport, driver's license).

2.2 Financial Information

• GCash or Maya account number linked to your phhoy account;
• Bank account details (BPI, BDO, Metrobank, or other linked banks) if used for transactions;
• Transaction history including all deposits, withdrawals, bonuses credited, and game wagers;
• Source of funds documentation as required by Anti-Money Laundering regulations.

2.3 Technical & Usage Data

• IP address and approximate geolocation at time of login and gameplay;
• Device identifiers including device type, operating system, browser type and version;
• Session data including login timestamps, session duration, and session activity logs;
• Game play data including game titles accessed, bets placed, and outcomes;
• Referral source and marketing attribution data where applicable.

2.4 Communications Data

• Customer support chat transcripts and email correspondence with phhoy support;
• Records of feedback, complaints, and dispute resolution communications;
• Marketing preference records and communication opt-in/opt-out history.

3. How We Collect Your Data

phhoy collects personal data through the following channels:

• Direct registration: Information you provide when creating your phhoy account, including mobile number, name, and date of birth;
• KYC submissions: Identity documents and supporting information submitted during verification processes;
• Payment transactions: Transaction data received from GCash, Maya, and partner banks when you deposit or withdraw funds;
• Platform interaction: Automatically collected data from your use of the phhoy website and gaming platform, including via cookies, server logs, and session tracking;
• Support interactions: Information you voluntarily provide when contacting phhoy's customer support team via live chat or email;
• Third-party sources: In limited circumstances, phhoy may receive data from identity verification partners, fraud prevention services, or payment processors as permitted under applicable law.

4. How We Use Your Personal Data

phhoy processes your personal data for the following purposes:

• Account management: Creating and maintaining your phhoy account, authenticating logins, and processing account-related requests;
• Service delivery: Enabling your access to phhoy Casino games, sports betting, live dealer tables, and all associated platform features;
• Payment processing: Processing deposits and withdrawals via your linked GCash, Maya, or bank accounts, and maintaining accurate transaction records;
• Age and identity verification: Verifying that all phhoy members are 21 years of age or older, and confirming identity for KYC compliance purposes;
• Regulatory compliance: Meeting obligations under the Anti-Money Laundering Act (RA 9160), Data Privacy Act (RA 10173), and applicable PAGCOR directives;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account compromise, bonus abuse, and other security threats;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and administering self-exclusion requests;
• Customer support: Responding to inquiries, resolving disputes, and maintaining records of support interactions;
• Platform improvement: Analyzing aggregate usage data to improve phhoy's platform performance, game offerings, and user experience;
• Marketing communications: Sending promotional offers, bonus notifications, and updates to members who have provided marketing consent (opt-out available at any time).

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, phhoy relies on the following legal bases to process your personal data:

• Consent: For marketing communications, certain cookie use, and processing categories where you have provided explicit opt-in consent during registration or subsequently through account settings;
• Contractual necessity: For account management, payment processing, and service delivery — processing necessary to fulfill our obligations under the phhoy Terms & Conditions;
• Legal obligation: For KYC, AML compliance, tax reporting, and any processing required by PAGCOR, the AMLC, or other Philippine regulatory authorities;
• Legitimate interest: For fraud prevention, platform security, abuse detection, and aggregate analytics — where our legitimate interests do not override your data protection rights.

6. Data Sharing & Third-Party Disclosure

phhoy does not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment partners receive only the transaction data necessary to process your deposits and withdrawals;
• Game technology providers: Licensed game providers (e.g., JILI, PG Soft, Pragmatic Play) receive anonymized session tokens required for game delivery — they do not receive your full identity or financial data;
• KYC and identity verification partners: Third-party identity verification services may receive your identification documents solely for the purpose of verifying your identity and age;
• Regulatory authorities: phhoy will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government bodies as required by law or upon valid legal process;
• Fraud prevention services: Aggregated or pseudonymized data may be shared with fraud detection partners to maintain platform security;
• Business transfers: In the event of a merger, acquisition, or sale of phhoy's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

7. Data Retention

phhoy retains personal data for the periods necessary to fulfill the purposes for which it was collected, subject to applicable legal retention requirements:

• Active account data: Retained for the lifetime of your phhoy account plus a minimum of five (5) years following account closure, to comply with AML record-keeping obligations under RA 9160;
• Transaction records: Financial transaction data is retained for a minimum of five (5) years as required by Philippine financial regulations;
• KYC documents: Identity verification documents are retained for five (5) years after the end of the business relationship;
• Support communications: Customer support records are retained for three (3) years from the date of the interaction;
• Marketing data: Marketing preference records and consents are retained until you withdraw consent or request deletion, plus any applicable legal hold period.

After the applicable retention period, personal data is securely deleted or anonymized in accordance with phhoy's data disposal procedures.

8. Data Security

phhoy implements industry-standard technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and phhoy servers;
• Encryption at rest for sensitive personal and financial data stored on phhoy infrastructure;
• Access controls restricting personal data access to phhoy personnel with a legitimate operational need;
• Multi-factor authentication requirements for administrative access to phhoy systems;
• Regular security assessments, penetration testing, and vulnerability management;
• Incident response procedures aligned with NPC notification requirements under the DPA.

In the event of a personal data breach that is likely to result in serious harm to affected individuals, phhoy will notify the National Privacy Commission and affected data subjects within 72 hours of discovery, as required under NPC Circular 16-03.

9. Cookies & Tracking Technologies

phhoy uses cookies and similar technologies on the phhoy.org platform to enhance your user experience, maintain session state, and collect analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Required for the phhoy platform to function correctly, including authentication session cookies and security tokens. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language, display settings, and saved login state to personalize your phhoy experience across sessions.
• Analytics cookies: Collect aggregate, anonymized data about how players use the phhoy platform to help us improve performance and game offerings. We use privacy-respecting analytics configurations.
• Marketing cookies: Used to deliver relevant promotional offers based on your phhoy usage patterns. Applied only where marketing consent has been provided.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the phhoy platform. The phhoy cookie consent mechanism on first visit allows you to configure non-essential cookie categories.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phhoy:

• Right to be informed: The right to know that phhoy is processing your personal data, the categories of data processed, and the purposes of processing — as set out in this Policy;
• Right of access: The right to request a copy of the personal data phhoy holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your phhoy account;
• Right to erasure: The right to request deletion of your personal data, subject to applicable legal retention obligations (e.g., AML record-keeping requirements may override this right in certain circumstances);
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phhoy has processed your data in violation of the DPA.

To exercise any of the above rights, contact the phhoy Data Protection Officer at [email protected]. phhoy will respond to data rights requests within 15 business days of verified receipt.

11. Children's Privacy & Age Restriction

If you believe that phhoy may have inadvertently collected personal data from a person under 21, please contact phhoy support immediately at [email protected]. phhoy takes underage access violations extremely seriously and will take immediate remedial action upon notification.

12. Marketing Communications

With your consent, phhoy may send you promotional communications including bonus offers, new game announcements, sports betting previews, and special event notifications via SMS to your registered Philippine mobile number.

You may withdraw marketing consent at any time by:

• Updating your marketing preferences in your phhoy account settings;
• Replying "STOP" to any marketing SMS from phhoy;
• Contacting phhoy support at [email protected] with a marketing opt-out request.

Withdrawal of marketing consent does not affect transactional communications — phhoy will continue to send you account-related notifications (e.g., deposit confirmations, withdrawal status, security alerts) as these are necessary for the operation of your phhoy account.

13. Changes to This Privacy Policy

phhoy reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, phhoy's data practices, or regulatory guidance from the National Privacy Commission. The "Last Updated" date at the top of this Policy will be revised upon any material change.

Where changes are material, phhoy will notify registered members via SMS to their registered mobile number or via a prominent notice on the phhoy platform, with reasonable advance notice before the changes take effect. Continued use of phhoy's services after the effective date of an updated Policy constitutes acceptance of the revised terms.

14. Contact & Data Protection Officer

phhoy has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. For all data privacy inquiries, rights requests, and concerns, you may contact phhoy's DPO through the following official channels:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.