phhug Privacy Policy

1. Data Controller

phhug.org ("phhug," "we," "us") is the data controller responsible for the personal data of players who register and use the phhug platform. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phhug is the entity that determines the purpose and means of processing personal data collected through phhug.org.

phhug has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. Contact details for the DPO are provided at the end of this Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create a phhug account, we collect the information you provide directly, including:

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (to verify the 21+ age requirement);
• Philippine mobile number;
• Email address;
• Chosen username and hashed password (passwords are never stored in readable form);
• Residential address (collected at KYC verification stage).

2.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal, phhug collects KYC documentation as required by PAGCOR regulations and anti-money laundering laws, including:

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's license, UMID);
• Proof of address documents (e.g., utility bill, bank statement dated within 90 days);
• Selfie photographs for identity matching purposes;
• Payment method verification documentation where required.

2.3 Transaction Data

phhug records all financial transactions associated with your account, including deposit amounts, withdrawal requests, bonus crediting events, wagering activity, and game outcomes. Transaction records are retained for compliance purposes in accordance with applicable Philippine financial regulations.

2.4 Technical and Usage Data

When you access phhug, our systems automatically collect technical data, including:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type and version;
• Session timestamps, pages visited, and navigation paths;
• Game activity logs including games played, bet amounts, and session durations;
• Cookies and similar tracking technologies (see Section 6).

2.5 Communications Data

phhug retains records of communications between you and our support team, including live chat transcripts, email correspondence, and any documents or screenshots you provide in connection with a support inquiry or formal complaint.

3. How We Use Your Personal Data

phhug uses the personal data it collects for the following purposes:

Purpose	Data Used
Account registration and authentication	Registration data, device/IP data
Age and identity verification (KYC)	Registration data, KYC documents
Processing deposits and withdrawals	Transaction data, KYC data, payment method data
Anti-money laundering (AML) compliance	Transaction data, KYC data, IP data
Fraud detection and security monitoring	Technical data, transaction data, login history
Customer support	All relevant account and communications data
Responsible gaming monitoring	Game activity logs, transaction data
Platform analytics and improvement	Technical and usage data (aggregated where possible)
Promotional communications (with consent)	Email address, mobile number, game preferences

4. Legal Basis for Processing

phhug processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the phhug service agreement with you, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, and tax reporting obligations under Philippine law;
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where these interests do not override your fundamental rights;
• Consent: Processing for marketing communications, where you have provided explicit and freely given consent. You may withdraw consent at any time by contacting support or updating your account notification preferences.

5. Data Sharing and Disclosure

5.1 Service Providers

phhug shares personal data with trusted third-party service providers who assist in delivering the platform, including payment processors (for GCash, PayMaya, BPI, BDO, Visa, and Mastercard transactions), KYC verification service providers, fraud detection technology providers, cloud infrastructure providers, and customer support software providers. All service providers are bound by data processing agreements that require them to process personal data only as instructed by phhug and in compliance with applicable data protection law.

5.2 Regulatory and Legal Disclosure

phhug may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other Philippine government authorities where required by law or in response to a valid legal process. phhug will endeavor to notify affected players of such disclosures where legally permitted to do so.

5.3 No Sale of Personal Data

phhug does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. Any sharing of personal data is limited to what is necessary for the purposes described in this Policy.

6. Cookies and Tracking Technologies

phhug uses cookies and similar technologies on its platform for the following purposes:

• Essential cookies: Required for platform functionality, including session management and authentication. These cannot be disabled without impairing the platform experience.
• Analytics cookies: Used to understand how players interact with the platform, which pages are most visited, and where technical errors occur. Data is processed in aggregated and anonymized form where possible.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and anomalous login pattern identification.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the phhug platform.

7. Data Retention

phhug retains personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods mandated by Philippine law and regulatory requirements:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Communications data: Retained for three (3) years from the date of the communication;
• Technical logs: Retained for twelve (12) months on a rolling basis, unless retained for longer in connection with a specific security investigation.

After applicable retention periods expire, personal data is securely deleted or anonymized in accordance with phhug's data destruction procedures.

8. Data Security

phhug implements appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, or disclosure. Key security measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and phhug servers;
• Bcrypt hashing for all stored passwords — passwords are never stored in recoverable form;
• Role-based access controls limiting personal data access to authorized phhug personnel on a need-to-know basis;
• Regular security assessments and penetration testing of the phhug platform;
• Two-factor authentication requirements for phhug administrative account access;
• Incident response procedures with defined timelines for breach containment and notification.

While phhug takes data security seriously, no online system is completely immune to security risks. Players are responsible for maintaining the security of their own account credentials. See the phhug Login security tips for recommended practices.

9. International Data Transfers

In connection with the provision of its services, phhug may transfer personal data to third-party service providers whose infrastructure or personnel are located outside the Philippines. Where such transfers occur, phhug ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to Philippine data protection law, including contractual data protection clauses with international service providers. phhug does not transfer personal data to jurisdictions that do not maintain adequate data protection standards without implementing compensating safeguards.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phhug:

• Right to be informed: The right to know what personal data phhug holds about you and how it is used — addressed by this Privacy Policy;
• Right of access: The right to request a copy of the personal data phhug holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes;
• Right to data portability: The right to receive a copy of personal data you have provided to phhug in a structured, machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phhug has violated your data privacy rights.

To exercise any of these rights, contact phhug's Data Protection Officer at [email protected] with a written request. phhug will respond within thirty (30) days of receiving a valid request.

11. Children's Privacy

phhug does not knowingly collect personal data from individuals under 21 years of age. The phhug platform is strictly for adult players who are 21 years or older in accordance with PAGCOR guidelines and Philippine law. If phhug becomes aware that personal data has been collected from a person under 21, the associated account will be immediately suspended, all personal data will be deleted, and any funds returned to the deposit source where possible. If you believe a minor has registered a phhug account, please notify us immediately at [email protected].

12. Third-Party Links

The phhug platform does not include links to third-party websites as a matter of policy. To the extent that game providers or payment processors operate their own interfaces within or alongside the phhug platform, those parties maintain their own privacy policies governing their data practices. phhug is not responsible for the privacy practices of third-party game providers or payment processors and encourages players to review the privacy terms of any third-party service they interact with.

13. Updates to This Privacy Policy

phhug may update this Privacy Policy from time to time to reflect changes in its data practices, applicable Philippine law, or regulatory requirements. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the phhug platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

14. Contact — Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or phhug's data practices, contact the phhug Data Protection Officer:

• Email: [email protected]
• Subject line: "Privacy / DPO Request — [Your Account Username]"
• Response time: Within 30 calendar days for data rights requests; within 48 hours for general privacy inquiries.
• Live support: Available via the in-platform chat after logging in at phhug Login — please state your inquiry is a privacy matter.

You also have the right to escalate unresolved privacy complaints to the National Privacy Commission of the Philippines (privacy.gov.ph). phhug cooperates fully with NPC investigations.