hph999 Privacy Policy

SECTION 1 Scope & Application

This Privacy Policy ("Policy") is issued by hph999 ("hph999," "we," "us," or "our") and applies to all personal data collected, processed, stored, and used in connection with your access to and use of the hph999 online gaming platform available at hph999.com (the "Platform"), including all associated mobile applications, customer support channels, and promotional communications.

This Policy applies to all registered players, prospective players who browse the Platform without registering, and any individual whose personal data is processed by hph999 in connection with the services we provide. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference. In the event of any conflict between this Policy and any other document, this Policy shall prevail with respect to matters of data privacy.

SECTION 2 Personal Data We Collect

hph999 collects the following categories of personal data in the course of providing our services. We collect only what is necessary and proportionate to the purposes described in this Policy.

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used for mandatory age verification — players must be 21 or older)
• Residential address in the Philippines (e.g., street, barangay, city, province)
• Valid email address and mobile number registered in your name
• Nationality and country of residence

2.2 Identity Verification Data

• Copies of government-issued photo identification (Philippine National ID, passport, driver's license, SSS/GSIS ID, Voter's ID, or PRC ID)
• Proof of address documents (utility bills, bank statements, or barangay certificates)
• Selfie or live photo for biometric verification where required
• Source of funds documentation for enhanced due diligence

2.3 Financial & Transaction Data

• GCash or PayMaya account details (mobile number and registered name)
• Bank account details for BPI, BDO, Metrobank, UnionBank, or other linked banks
• Debit or credit card details (card number, expiry, and billing name — stored in tokenized form only)
• Deposit and withdrawal history, transaction amounts, and timestamps
• Bonus and promotional credit history

2.4 Gaming Activity Data

• Game session logs, including games played, bet amounts, win/loss records, and session duration
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Bonus wagering progress and promotional participation history
• Customer support interaction records and complaint history

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Unique device identifiers and mobile advertising IDs
• Login timestamps, session duration, and Platform navigation data

SECTION 3 How We Collect Your Data

hph999 collects personal data through the following channels and methods:

3.1 Directly From You

The majority of personal data we hold is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account settings. You are always informed at the point of collection what data is being requested and why.

3.2 Automatically Through Platform Use

When you access and use the hph999 Platform, certain technical and behavioral data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device information, browser type, pages visited, and session activity. See Section 9 for full details on our use of cookies.

3.3 From Third-Party Service Providers

hph999 may receive personal data about you from trusted third-party service providers in the following circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and card networks may share transaction confirmation data with us
• Identity verification providers: Third-party KYC and AML screening services may provide verification results and risk scores
• Fraud prevention services: Providers of fraud detection and device fingerprinting services may share risk signals with us
• Game providers: Third-party game studios may share game session data with us for dispute resolution and audit purposes

3.4 From Public Sources

hph999 may supplement the personal data you provide with information obtained from publicly available sources, including public records, social media profiles (where publicly visible), and databases maintained by regulatory authorities, for the purposes of identity verification and fraud prevention.

SECTION 4 Purpose & Legal Basis for Processing

hph999 processes your personal data only where we have a lawful basis to do so under the Philippine Data Privacy Act of 2012. The table below summarizes the primary purposes for which we process your data and the corresponding legal basis for each.

SECTION 5 Data Sharing & Disclosure

hph999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Service Providers & Data Processors

hph999 engages trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include payment processors, KYC and AML verification providers, cloud hosting and infrastructure providers, customer support platform providers, fraud detection services, and game content providers. All such providers are required to implement appropriate security measures and may only process your data in accordance with our instructions.

5.2 Regulatory & Law Enforcement Authorities

hph999 is required by Philippine law to disclose certain personal data to regulatory and law enforcement authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and law enforcement agencies acting under valid legal process. Such disclosures are made only to the extent required by applicable law and in accordance with established legal procedures.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of hph999's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, in advance of the transfer taking effect.

5.4 With Your Consent

hph999 may share your personal data with third parties not described above where you have given your explicit, informed consent to such sharing. You may withdraw this consent at any time by contacting our Data Protection Officer.

SECTION 6 Data Retention

hph999 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLA record-keeping requirements
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the relevant gaming session
• Customer support records: Retained for three (3) years from the date of the last interaction
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent
• Technical and device data: Retained for up to twelve (12) months from collection, unless required for longer for fraud investigation purposes

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

SECTION 7 Data Security Measures

hph999 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to, the following measures:

7.1 Technical Safeguards

• Encryption in transit: All data transmitted between your device and the hph999 Platform is encrypted using TLS 1.2 or higher
• Encryption at rest: Sensitive personal data stored on our servers is encrypted using AES-256 encryption
• Tokenization: Payment card details are tokenized and never stored in plain text on hph999 systems
• Access controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls
• Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication
• Intrusion detection: hph999 operates continuous network monitoring and intrusion detection systems

7.2 Organizational Safeguards

• Regular data privacy and security training for all staff who handle personal data
• Documented data processing procedures and internal privacy policies
• Regular security audits and vulnerability assessments conducted by independent third parties
• A documented data breach response plan with defined notification procedures
• Contractual data protection obligations imposed on all third-party processors

7.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hph999 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act. Affected individuals will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

SECTION 8 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hph999. hph999 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers.

8.1 Right to Be Informed

You have the right to be informed about how your personal data is collected, used, stored, and shared. This Privacy Policy is our primary means of fulfilling this obligation. If you have questions not answered by this Policy, you may contact our Data Protection Officer at any time.

8.2 Right to Access

You have the right to request a copy of the personal data that hph999 holds about you, along with information about how it is being processed. Requests for access will be fulfilled within thirty (30) days of receipt, subject to identity verification.

8.3 Right to Rectification

You have the right to request the correction of inaccurate or incomplete personal data held by hph999. You may update certain account details directly through your account settings. For corrections that cannot be made through self-service, please contact our support team or Data Protection Officer.

8.4 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that this right is subject to hph999's legal obligations to retain certain data under PAGCOR and AMLA regulations, which may override erasure requests in specific circumstances.

8.5 Right to Object

You have the right to object to the processing of your personal data where hph999 relies on legitimate interest as the legal basis for processing, and where you believe your interests override those of hph999. You also have an absolute right to object to the processing of your personal data for direct marketing purposes at any time.

8.6 Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

8.7 Right to Lodge a Complaint

If you believe that hph999 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available through the NPC's official channels.

SECTION 9 Cookies & Tracking Technologies

hph999 uses cookies and similar tracking technologies to operate the Platform, improve your experience, and analyze how the Platform is used. This section explains what cookies we use and how you can manage your preferences.

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognize your device on subsequent visits and to store certain preferences or session information. Cookies may be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device for a set period or until you delete them).

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Help us understand how players use the Platform by collecting aggregated, anonymized data about page visits, session duration, and navigation paths.
• Security & Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

9.3 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the hph999 Platform, including your ability to log in and access your account. Strictly necessary cookies cannot be disabled through browser settings without impacting Platform access.

SECTION 10 Protection of Minors

The hph999 Platform is strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with Philippine law. hph999 does not knowingly collect personal data from individuals under the age of 21.

As part of our mandatory Know Your Customer (KYC) process, all players are required to verify their age before being permitted to deposit funds or participate in real-money gaming. Where hph999 discovers or has reason to believe that personal data has been collected from an individual under 21 years of age, we will immediately suspend the relevant account, delete the personal data collected, and return any deposited funds to the payment source, subject to applicable legal requirements.

Account holders are responsible for ensuring that minors do not access the hph999 Platform through their accounts. If you believe a minor has accessed the Platform using your account or any other account, please contact our support team immediately.

SECTION 11 Cross-Border Data Transfers

hph999 primarily processes and stores personal data within the Republic of the Philippines. However, in certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where hph999 uses cloud infrastructure providers or game content providers whose servers are located abroad.

Where personal data is transferred outside the Philippines, hph999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. Such safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission
• Binding corporate rules where transfers are made within a corporate group
• Transfers to countries recognized by the NPC as providing an adequate level of data protection
• Your explicit consent to the transfer, where required

By using the hph999 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines in accordance with the safeguards described above.

SECTION 12 Changes to This Privacy Policy

hph999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

When material changes are made to this Policy, hph999 will notify registered players by email and by displaying a prominent notice on the Platform at least fourteen (14) days before the changes take effect. For non-material changes, the updated Policy will be posted on this page with an updated revision date.

Your continued use of the hph999 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the amended Policy, you must stop using the Platform and may request the closure of your account by contacting our support team.

We recommend bookmarking this page and reviewing it periodically to stay informed of how hph999 protects your personal data.

SECTION 13 Contact & Data Protection Officer

hph999 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact our DPO using the details below.

Data Protection Officer

• Role: Data Protection Officer, hph999
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the hph999 Platform

We aim to acknowledge all privacy-related inquiries within two (2) business days and to provide a substantive response within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with our response to your privacy inquiry or complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.