phhappy Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phhappy ("phhappy," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals who access or use the phhappy online gaming platform at phhappy.club (the "Platform"). This Policy applies to all members, registered users, and visitors of the Platform, including Filipino players across Metro Manila, Cebu, Davao, Iloilo, and all other regions of the Philippines.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

This Policy is to be read in conjunction with the phhappy Terms & Conditions. In the event of any conflict between the two documents on matters of privacy, this Policy shall prevail.

2. Data Controller

phhappy is the data controller responsible for your personal data collected through the Platform. As data controller, phhappy determines the purposes and means of processing your personal information and is accountable for compliance with the Data Privacy Act of 2012 (Republic Act 10173, "DPA") and its Implementing Rules and Regulations.

phhappy has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for the DPO are set out in Section 15 of this Policy.

3. Personal Data We Collect

phhappy collects the following categories of personal data from members and Platform users:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., PhilSys ID number, passport number, UMID number, driver's license number).
• Contact Data: Philippine mobile number (Globe, Smart, or DITO), email address, and residential address (barangay, city/municipality, province).
• Financial Data: GCash account details (registered name and mobile number), Maya account details, bank account information (BPI, BDO, Metrobank, or other institutions), transaction history, deposit amounts, withdrawal requests, and wallet balances.
• KYC Documentation: Photographs or scanned copies of government-issued identification documents and proof of address documents submitted during identity verification.
• Technical Data: IP address, device type and model, operating system, browser type and version, device identifiers, and geolocation data (country/region level only).
• Usage Data: Login timestamps, session duration, games played, wagers placed, bonus claims, and feature interactions within the Platform.
• Communications Data: Records of your interactions with phhappy customer support via Live Chat, email, or any other communication channel, including the content of those communications.
• Responsible Gaming Data: Deposit limit settings, self-exclusion status, session reminder configurations, and any self-reported problem gambling disclosures.

4. How We Collect Your Data

phhappy collects personal data through the following means:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or respond to surveys or promotional offers.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you access or interact with the Platform. See Section 8 for details on cookies.
• From third parties: From payment service providers (GCash, Maya, banks) during transaction processing; from KYC verification service providers; and, where permitted, from publicly available government or regulatory databases for fraud prevention purposes.

5. How We Use Your Personal Data

phhappy uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and securing your phhappy member account; verifying your identity; enabling login and authentication.
• Payment Processing: Processing deposits, withdrawals, and refunds; verifying payment method ownership; detecting and preventing fraudulent transactions.
• Regulatory Compliance: Fulfilling PAGCOR licensing obligations; conducting KYC and AML (anti-money laundering) checks; maintaining transaction records as required by law; reporting to regulatory authorities where required.
• Platform Delivery: Providing access to casino games, sports betting, and other Platform features; personalizing the gaming experience; maintaining Platform performance and security.
• Customer Support: Responding to enquiries, resolving disputes, and providing technical assistance.
• Responsible Gaming: Monitoring gaming behaviour for signs of problem gambling; enforcing deposit limits and self-exclusion requests; proactively contacting members who may be at risk.
• Marketing Communications: Sending promotional emails or SMS messages regarding phhappy bonuses, events, and offers — only where you have provided consent or where permitted by law. You may opt out at any time.
• Analytics & Improvement: Analyzing aggregated, anonymized usage data to improve Platform features, game selection, and user experience.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, phhappy processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and phhappy (i.e., the Terms & Conditions governing your use of the Platform), including account registration, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legislation.
• Legitimate Interests: Processing is necessary for phhappy's legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your rights and interests.
• Consent: For direct marketing communications and certain cookie usage, processing is based on your explicit consent, which you may withdraw at any time.

7. Sharing Your Personal Data

phhappy does not sell, rent, or trade your personal information. We share your personal data only in the following limited circumstances:

• Payment Processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations), and other financial institutions for transaction processing. These providers receive only the data necessary to execute and verify your transactions.
• KYC & Identity Verification Providers: Third-party identity verification services that assist in processing government ID submissions and conducting AML screening.
• Game Providers: Licensed game suppliers (e.g., Pragmatic Play, PG Soft, Jili) may receive session identifiers and anonymized usage data for game delivery and technical support purposes. These providers do not receive your full name or contact details.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government bodies as required by law.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by phhappy, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of phhappy's business assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

8. Cookies and Tracking Technologies

phhappy uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. phhappy uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for Platform operation, including session management, login state, and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymized data about how visitors use the Platform (page visits, error rates, load times) to help phhappy improve performance. No personally identifiable information is collected through these cookies.
• Functionality Cookies: Remember your preferences (language, currency display, remembered username) to provide a more personalized experience.
• Analytics Cookies: Used by analytics tools to generate aggregated reports on Platform usage patterns. Data is anonymized before processing.

You may configure your browser to refuse or delete cookies at any time. Note that disabling strictly necessary cookies will affect your ability to use certain Platform features, including login. phhappy does not use third-party advertising cookies or behavioural tracking for retargeting purposes.

9. Data Security

phhappy implements technical and organizational security measures appropriate to the nature of the personal data processed, including:

• TLS/SSL encryption for all data transmitted between your device and phhappy's servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial data;
• Multi-factor authentication for internal staff access to systems containing personal data;
• Regular penetration testing and security audits by independent third parties;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While phhappy takes all reasonable precautions to protect your data, no internet-based system is entirely immune to security risks. You are responsible for maintaining the security of your own device and account credentials.

10. Data Retention

phhappy retains personal data for the following periods:

• Active account data: Retained for the duration of your membership plus five (5) years following account closure, to meet PAGCOR record-keeping requirements and applicable AML laws.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, as required under Philippine AML legislation.
• Transaction records: Retained for five (5) years from the date of each transaction.
• Customer support communications: Retained for two (2) years from the date of the interaction.
• Technical and usage logs: Retained for twelve (12) months and then anonymized or deleted.

Upon expiry of the applicable retention period, phhappy will securely delete or anonymize personal data in accordance with its data disposal procedures.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phhappy:

To exercise any of the above rights, please contact phhappy's Data Protection Officer via Live Chat or email at [email protected] with the subject line "Data Privacy Request." phhappy will respond within thirty (30) days of receiving a valid request.

12. Children and Minors

The phhappy Platform is strictly intended for adults aged 21 years and older. phhappy does not knowingly collect, use, or retain personal data from individuals under 21 years of age. Registration by persons under 21 is prohibited under PAGCOR regulations. If phhappy discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be terminated. If you believe a minor has registered on the Platform, please contact us immediately via Live Chat.

13. Cross-Border Data Transfers

Some of phhappy's third-party service providers — including cloud infrastructure providers, game suppliers, and KYC verification services — may process personal data in jurisdictions outside the Philippines. Where such transfers occur, phhappy ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Data Privacy Act of 2012, including contractual data protection clauses with all relevant third parties.

14. Updates to This Policy

phhappy reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or business operations. When material changes are made, phhappy will notify registered members via email and/or a prominent notice on the Platform. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. Your continued use of the Platform after the revised Policy takes effect constitutes your acceptance of the updated terms.

15. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or phhappy's data processing practices, please contact our Data Protection Officer:

• Method 1 (Fastest): Live Chat inside your phhappy member dashboard — available 24/7, typical response within 3–5 minutes.
• Method 2: Email at [email protected] with subject line "Data Privacy Request" or "DPO Contact." Response within 24 business hours.

phhappy is committed to resolving all legitimate data privacy inquiries promptly and fairly. If you are unsatisfied with phhappy's response, you may escalate the matter to the National Privacy Commission of the Philippines.