phhug Privacy Policy

This Privacy Policy ("Policy") is issued by phhug ("phhug," "we," "us," or "our"), the operator of the online gaming platform accessible at phhug.club. It applies to all personal data processed in connection with the phhug platform, including registration, account management, gameplay, financial transactions, customer support interactions, and marketing communications.

phhug is committed to complying with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC). Where applicable, phhug also observes the data protection principles set out by other relevant Philippine regulations, including those pertaining to financial services and anti-money laundering compliance.

phhug collects the following categories of personal data:

Identity Data

• Full legal name as it appears on a government-issued Philippine ID
• Date of birth (for age verification — must be 21 or older)
• Gender (optional, for personalization)
• Government-issued ID number (e.g., PhilSys ID, Passport, Driver's License, SSS/GSIS ID) collected during KYC verification
• Selfie or photograph submitted for biometric identity verification

Contact Data

• Email address
• Philippine mobile number (used for OTP authentication and account notifications)
• Residential address (for enhanced KYC where required)

Financial Data

• GCash mobile number and account reference
• PayMaya account reference
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where used for withdrawals
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references

Gaming & Behavioural Data

• Game history: titles played, bet amounts, outcomes, session durations
• Sports betting history: markets wagered, stakes, and results
• Active bonus status and wagering progress
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser
• Session tokens and login timestamps
• Cookie identifiers (see Section 8)

phhug collects personal data through the following means:

• Direct submission: Data you provide when registering a phhug account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access phhug, including IP address, device identifiers, session logs, and cookie data.
• Third-party sources: Identity verification data confirmed through KYC service providers; payment confirmation data from GCash, PayMaya, or Philippine banking partners; fraud prevention signals from risk management services.
• Gaming activity: Data generated by your use of phhug games, the sportsbook, and other platform features, including bet records and session logs generated by phhug's gaming engine.

phhug processes your personal data for the following purposes:

• Account management: To create, maintain, and secure your phhug account, including phhug login authentication via password and SMS OTP.
• Age & identity verification: To verify that you meet the 21+ age requirement under Philippine law and to confirm that your identity matches your registered details.
• Payment processing: To process deposits via GCash, PayMaya, and Philippine banks, and to execute withdrawal requests to your registered payment method.
• Compliance & anti-money laundering: To fulfil phhug's obligations under the Anti-Money Laundering Act (AMLA) of the Philippines, including transaction monitoring, suspicious activity reporting, and record retention.
• Responsible gaming: To operate deposit limits, loss limits, session time trackers, and self-exclusion tools, and to detect patterns of potentially problematic gaming behaviour.
• Customer support: To respond to enquiries, investigate disputes, and resolve complaints submitted to [email protected].
• Platform improvement: To analyse aggregate gaming and usage patterns to improve the phhug platform, fix bugs, and optimize the user experience.
• Marketing communications: To send promotional emails and SMS messages about phhug offers, bonuses, and new games — subject to your marketing consent preferences, which you may update at any time from your account settings.
• Fraud prevention & security: To detect unauthorized access, account takeover attempts, bonus abuse, and other fraudulent activity on the phhug platform.

Under the Philippine Data Privacy Act of 2012, phhug processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform phhug's obligations under the user agreement, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with Philippine law, including KYC obligations, AMLA reporting requirements, PAGCOR compliance obligations, and NPC data breach notification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics, where phhug's interests do not override your rights as a data subject.
• Consent: Processing for marketing communications and optional profiling, where you have provided explicit consent. You may withdraw marketing consent at any time without affecting the lawfulness of prior processing.

phhug does not sell your personal data to third parties. phhug may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• KYC and identity verification providers: Third-party services engaged to verify the authenticity of government-issued Philippine IDs and to perform biometric checks.
• Payment processors: GCash (GXI), PayMaya (Maya Bank), and Philippine banking partners for the processing of deposits and withdrawals.
• Game content providers: Licensed game studios whose titles are hosted on the phhug platform. These providers receive only the data necessary to deliver game sessions (e.g., session token, bet amounts).
• Fraud and risk management services: Third-party tools that help phhug detect and prevent fraudulent account activity, bonus abuse, and unauthorized transactions.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulatory order.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by phhug, subject to professional confidentiality obligations.

phhug retains your personal data for as long as your account is active and for such additional periods as required by Philippine law. Specifically:

• Account data and KYC records: Retained for a minimum of 5 years from the date of account closure, in compliance with AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming history: Retained for 2 years from account closure, unless a longer period is required for dispute resolution or regulatory compliance.
• Marketing consent records: Retained for as long as necessary to demonstrate lawful consent or until consent is withdrawn.
• Support interaction logs: Retained for 2 years from the date of the last interaction.

Upon expiry of the applicable retention period, phhug will securely delete or anonymize your personal data in accordance with the NPC's guidelines on data disposal.

phhug uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Essential cookies: Required for phhug login session management, security token storage, and basic platform functionality. These cannot be disabled without breaking core platform features.
• Performance cookies: Used to collect anonymized data on how users navigate the phhug platform, which pages are most visited, and where errors occur. This data is used solely to improve the platform.
• Preference cookies: Used to remember your language, display, and notification preferences within the phhug platform.
• Marketing cookies: Used — with your consent — to deliver relevant phhug promotional content. You may opt out of marketing cookies at any time from the cookie preferences panel within the platform.

phhug does not use cookies to track your activity on third-party websites outside of phhug.club.

phhug implements technical and organizational measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and phhug's servers
• Hashed storage of account passwords — phhug staff cannot access your password in plain text
• SMS OTP and two-factor authentication for phhug login
• Access controls limiting internal data access to authorized personnel with a legitimate operational need
• Regular security assessments and penetration testing of the phhug platform
• Encrypted storage of sensitive personal data including KYC documents and financial records

In the event of a personal data breach that poses a real risk of harm to affected users, phhug will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected users without undue delay, in accordance with the Data Privacy Act of 2012.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phhug:

• Right to be informed: The right to know what personal data phhug holds about you, how it is used, and with whom it is shared — as set out in this Policy.
• Right of access: The right to request a copy of the personal data phhug holds about you.
• Right to rectification: The right to correct inaccurate or incomplete personal data in your phhug account profile.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to phhug's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for marketing purposes. Marketing opt-out is available at any time from your phhug account settings.
• Right to data portability: The right to receive a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phhug has violated your data privacy rights.

To exercise any of the above rights, please contact phhug's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." phhug will respond within 15 business days of receiving a verifiable request.

phhug is strictly an adult platform. Under Philippine law, the minimum legal age to participate in casino-style gambling is 21 years. phhug does not knowingly collect personal data from persons under the age of 21. If phhug discovers that a minor has registered an account, the account will be immediately terminated, all balances forfeited, and all personal data securely deleted in accordance with NPC guidelines. If you have reason to believe a minor has created a phhug account, please contact [email protected] immediately.

phhug's primary operations and data storage are based in the Philippines. Where phhug engages third-party service providers — such as internationally headquartered game studios, KYC verification services, or cloud infrastructure providers — your personal data may be transferred to and processed in jurisdictions outside the Philippines. In all such cases, phhug ensures that appropriate safeguards are in place, including contractual data processing agreements that require third parties to maintain data protection standards equivalent to those required under the Philippine Data Privacy Act of 2012.

phhug may update this Privacy Policy from time to time to reflect changes in applicable law, phhug's data processing practices, or the platform's technical architecture. Material changes will be communicated to registered users via email at least 7 days before taking effect. The current version of this Policy is always accessible at phhug.club/privacy-policy. Your continued use of phhug following the effective date of any revision constitutes your acknowledgement of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phhug, please contact: