phh44 Privacy Policy

phh44 ("the Platform," "we," "us," or "our") is committed to protecting the privacy and personal data of everyone who accesses or uses the phh44 website at phh44.app and all related services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have in relation to it.

This Privacy Policy applies to all users of the phh44 Platform, including registered Account holders, visitors who browse without registering, and any individual who communicates with phh44 through any channel. By accessing the phh44 Platform, creating an Account, or using our services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read alongside the phh44 Terms & Conditions, which govern the overall relationship between phh44 and its users.

For the purposes of the Data Privacy Act of 2012 and its IRR, phh44 is the personal information controller in respect of your personal data. This means phh44 determines the purposes and means by which your personal data is processed.

Where phh44 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and game software suppliers — those parties act as personal information processors and are contractually required to process data only in accordance with phh44's instructions and in compliance with Applicable Laws.

If you have any questions about how phh44 handles your data, or wish to exercise any of your rights under the Data Privacy Act of 2012, please contact our Data Protection Officer using the contact details provided in Section 16 of this Policy.

phh44 collects personal data across several categories, depending on the nature of your interaction with the Platform:

3.1 Registration and Account Data

When you create a phh44 Account, we collect:

• Full legal name;
• Date of birth;
• Email address;
• Philippine mobile phone number;
• Username and encrypted password;
• Residential address (where required for KYC or regulatory purposes).

3.2 Identity Verification (KYC) Data

To satisfy our KYC and AML obligations, we collect:

• Government-issued photo identification document (e.g., PhilSys ID, Passport, Driver's Licence, UMID, SSS Card, Voter's ID, or PRC ID) — including the name, ID number, issue/expiry date, and photograph appearing on the document;
• Selfie photographs taken for liveness verification and document-matching purposes;
• Proof of address documentation, where required under enhanced due diligence procedures.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references;
• GCash, Maya, BPI, BDO, Metrobank, or other payment identifier details (stored in tokenised or masked form where technically feasible);
• Bonus and promotional activity records;
• Account balance history.

3.4 Gaming and Activity Data

• Game session records including game title, stake amounts, outcomes, and session duration;
• Sports betting selections, odds accepted, and settlement records;
• Platform navigation and feature usage data.

3.5 Technical and Device Data

• IP address;
• Device type, operating system, and browser information;
• Approximate geolocation derived from IP address;
• Cookie identifiers and session tokens (see Section 10);
• Login timestamps and session activity logs.

3.6 Communications Data

• Content of support conversations conducted via live chat, email, or any other channel;
• Complaint and dispute records;
• Marketing preference settings and communication consent records.

phh44 collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC, make deposits or withdrawal requests, contact customer support, participate in promotions, or otherwise interact with the Platform;
• Automatically — through cookies, server logs, and similar tracking technologies when you visit or use the phh44 Platform (see Section 10);
• From third-party identity verification providers — KYC screening results, politically exposed person (PEP) and sanctions list checks conducted as part of our AML compliance programme;
• From payment processors — transaction confirmation data and, in some cases, flagged transaction risk scores from payment gateway providers; and
• From fraud prevention and security providers — device fingerprinting data and risk assessment signals used to protect Accounts from unauthorised access.

phh44 uses the personal data it holds about you for the following purposes:

phh44 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where such processing is necessary for fraud prevention and is subject to appropriate safeguards.

Under the Data Privacy Act of 2012, phh44 processes personal data on the following legal grounds, as applicable to each processing activity:

• Performance of a contract: Processing necessary to provide the services you have requested — including Account creation, payment processing, and gameplay access;
• Compliance with a legal obligation: Processing required to meet our KYC, AML, tax reporting, and regulatory obligations under Philippine law and PAGCOR requirements;
• Legitimate interests: Processing for fraud prevention, account security, platform improvement, and responsible gaming enforcement, where these interests are not overridden by your data protection rights; and
• Consent: Processing for marketing communications, where you have given explicit and freely given consent. You may withdraw consent at any time by updating your Account preferences or contacting phh44 support.

phh44 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and with the following categories of recipients:

7.1 Service Providers and Processors

phh44 engages third-party vendors who process personal data on our behalf as personal information processors. These include:

• Payment processors — GCash (Mynt/G-Xchange), Maya (Voyager Innovations), and bank payment gateways, for the purpose of processing transactions;
• KYC and identity verification providers — third-party identity verification platforms used to validate government-issued IDs and conduct AML screening;
• Game software providers — licensed game studios whose software is integrated into the phh44 Platform may receive anonymised session data for game integrity monitoring;
• Cloud infrastructure and hosting providers — for data storage and Platform operations; and
• Customer support platforms — live chat and ticketing system providers who facilitate support interactions.

All third-party processors are bound by data processing agreements that restrict their use of your data to the services they provide to phh44 and require them to implement appropriate security measures.

7.2 Regulatory and Law Enforcement Authorities

phh44 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities where required by law, court order, or regulatory instruction. Such disclosures are made to the minimum extent necessary to satisfy the legal obligation.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of phh44's business or assets, personal data held by phh44 may be transferred to the relevant successor entity, subject to equivalent privacy protections being maintained.

Some of the third-party service providers engaged by phh44 — including cloud infrastructure providers and certain game software suppliers — may store or process data in locations outside the Republic of the Philippines. Where personal data is transferred internationally, phh44 ensures that such transfers are subject to appropriate safeguards, which may include:

• Standard contractual clauses or equivalent contractual protections approved by the National Privacy Commission or recognised under comparable data protection frameworks;
• Transfers to jurisdictions that provide an adequate level of data protection as determined by applicable Philippine law or NPC guidance; or
• Any other lawful transfer mechanism recognised under the Data Privacy Act of 2012 and its IRR.

You may request information about the specific safeguards in place for international transfers of your data by contacting phh44's Data Protection Officer.

phh44 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by Applicable Laws. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with phh44's data disposal procedures, unless continued retention is required by a court order or regulatory instruction.

phh44 uses cookies and similar technologies on the Platform to deliver core functionality, maintain session security, analyse usage patterns, and (where you have consented) deliver relevant promotional content. The main categories of cookies used are:

• Strictly Necessary Cookies: These are essential for the Platform to function. They include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: These remember your preferences — such as your last game category or display settings — to improve your experience. They do not track you across other websites.
• Analytics Cookies: These help phh44 understand how the Platform is used in aggregate — which game categories are most visited, where users encounter errors, and how overall usage patterns evolve. This data is collected in anonymised or pseudonymised form.
• Marketing and Preference Cookies: Where you have given consent, these cookies are used to deliver phh44 promotional content that is relevant to your activity on the Platform. They do not share your data with external advertising networks.

You may adjust your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will affect the functionality of the Platform. Disabling other categories of cookies will not prevent you from using the Platform but may reduce the personalisation of your experience.

phh44 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the phh44 Platform;
• Encryption of sensitive data fields at rest within phh44's database infrastructure;
• Access controls that restrict internal access to personal data on a need-to-know basis, enforced through role-based access management;
• Two-factor authentication (OTP SMS) enforced on new-device logins and for privileged internal system access;
• Regular penetration testing and security assessments of the Platform infrastructure;
• Automated anomaly detection systems that flag suspicious login attempts, unusual transaction patterns, and potential account compromise events in real time; and
• Staff training on data protection obligations and information security best practices.

While phh44 takes reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your phh44 Account credentials confidential and for notifying phh44 promptly if you suspect unauthorised access to your Account.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by phh44. To exercise any of these rights, contact phh44's Data Protection Officer using the details in Section 16.

phh44 will respond to rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will inform you of the extension and the reason for it. There is no fee for exercising your rights, except where requests are manifestly unfounded or excessive, in which case phh44 may charge a reasonable administrative fee.

Where phh44 discovers or reasonably suspects that an Account has been created by or on behalf of a person under 21 years of age, we will immediately suspend the Account, freeze any associated funds, and initiate an investigation. Any personal data collected in connection with an underage Account will be deleted to the extent permitted by Applicable Laws (including AML record-keeping requirements) following the completion of the investigation.

Age is verified as part of the mandatory KYC process. Until KYC is satisfactorily completed, withdrawal functionality remains disabled. If you are a parent or guardian and believe that your child has accessed or registered an Account on phh44, please contact our support team immediately so that the matter can be investigated and resolved.

The phh44 Platform does not include links to third-party websites or external platforms other than those necessary for payment processing and game delivery through embedded integrations. This Privacy Policy applies only to data processed by phh44 in connection with the phh44 Platform. phh44 is not responsible for the privacy practices or data handling of any third-party payment provider, game studio, or any other external party you interact with in connection with phh44 services.

If you are directed to a third-party platform (for example, to your GCash application to confirm a payment), please review the privacy policy of that third party separately.

phh44 may update this Privacy Policy from time to time to reflect changes in our data practices, changes to Applicable Laws, or improvements to the Platform. The updated Policy will be published on this page with a revised effective date. Where changes are material — meaning they significantly affect how we process your data or affect your rights — phh44 will notify you via the email address registered to your Account at least seven (7) days before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the phh44 Platform following the effective date of any revision constitutes your acknowledgement of the updated Policy. Where the revised Policy requires your renewed consent for any processing activity, we will request such consent separately.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or wish to submit a complaint about how phh44 has handled your personal data, please contact the phh44 Data Protection Officer:

If you are not satisfied with phh44's response to your complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC). The NPC is the government body responsible for administering and enforcing the Data Privacy Act of 2012 in the Philippines. Information on how to file a complaint with the NPC is available through official Philippine government channels.