Privacy Policy

1. Introduction

PHHappy ("PHHappy," "we," "us," or "our") operates the online gaming platform accessible at phhappy.net and through the PHHappy mobile application. We are committed to protecting the privacy and personal data of all players, visitors, and users ("you") who interact with our platform.

This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it, and the rights available to you under applicable Philippine law — in particular, the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By registering an account on PHHappy or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

PHHappy collects personal data from you in the following categories, depending on how you interact with our platform:

2.1 Registration & Identity Data

When you create a PHHappy account, we collect your full legal name, date of birth, gender, nationality, Philippine mobile number, email address, and a username of your choosing. We may also collect a copy of your government-issued identification document (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, or PRC ID) for identity verification purposes.

2.2 Financial Data

To process deposits and withdrawals, we collect information about your payment methods, including GCash account details, PayMaya account details, and bank account information for BPI, BDO, or Metrobank transactions. We do not store full card numbers or complete banking credentials on our servers. All payment data is handled through secure, encrypted channels.

2.3 Transaction & Gaming Data

We maintain records of all transactions conducted through your PHHappy account, including deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance history. This data is necessary for the operation of the platform, dispute resolution, and regulatory compliance.

2.4 Technical & Device Data

When you access PHHappy, we automatically collect certain technical information, including your IP address, device type and model, operating system, browser type and version, time zone, and unique device identifiers. This information helps us secure your account, detect fraud, and optimise platform performance.

2.5 Usage & Behavioural Data

We collect data about how you use the PHHappy platform, including pages visited, games accessed, session duration, click patterns, and feature interactions. This data is used in aggregate and individually to improve our services and personalise your experience.

2.6 Communications Data

If you contact PHHappy's support team, we retain records of your communications, including the content of messages, support tickets, and any attachments you provide. This helps us resolve disputes and improve our customer service.

Data Category	Examples	Purpose
Identity Data	Name, date of birth, government ID	Account registration, KYC verification
Financial Data	GCash, PayMaya, bank account details	Deposits, withdrawals, AML compliance
Transaction Data	Bet history, deposit records	Account management, dispute resolution
Technical Data	IP address, device ID, browser type	Security, fraud prevention
Usage Data	Pages visited, games played	Platform improvement, personalisation
Communications Data	Support messages, tickets	Customer service, dispute resolution

3. How We Use Your Personal Data

PHHappy uses the personal data we collect for the following purposes:

• To create, verify, and manage your PHHappy player account.
• To process deposits, withdrawals, and other financial transactions through GCash, PayMaya, BPI, BDO, and Metrobank.
• To verify your identity and age (21+) in compliance with Philippine gaming regulations.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To provide customer support and resolve disputes or complaints.
• To send you transactional communications, including account confirmations, deposit receipts, and security alerts.
• To send you promotional communications about PHHappy offers and new games, where you have consented to receive such communications.
• To personalise your gaming experience and recommend games or promotions relevant to your preferences.
• To comply with applicable Philippine laws and regulations, including the Data Privacy Act of 2012, Anti-Money Laundering Act, and gaming regulations.
• To analyse platform usage and improve the performance, security, and features of the PHHappy platform.
• To enforce our Terms & Conditions and other applicable policies.

4. Legal Basis for Processing

PHHappy processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your PHHappy account, process transactions, and provide gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including anti-money laundering regulations, gaming licensing requirements, and tax obligations.
• Legitimate Interests: Processing is necessary for PHHappy's legitimate interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending promotional communications or using non-essential cookies — we rely on your explicit consent, which you may withdraw at any time.

5. Sharing Your Personal Data

PHHappy does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

5.1 Payment Service Providers

We share necessary financial data with payment processors — including GCash, PayMaya, BPI, BDO, and Metrobank — to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and are bound by applicable data protection obligations.

5.2 Identity Verification Providers

To comply with KYC and age verification requirements, we may share identity documents and personal data with third-party identity verification service providers. These providers are contractually bound to process your data solely for verification purposes.

5.3 Regulatory and Law Enforcement Authorities

PHHappy may disclose your personal data to Philippine regulatory authorities, law enforcement agencies, or the Anti-Money Laundering Council (AMLC) where required or permitted by applicable law, including in response to lawful requests, court orders, or to protect the rights and safety of PHHappy, its players, or the public.

5.4 Technology and Infrastructure Providers

We use third-party technology providers for cloud hosting, data analytics, and platform infrastructure. These providers access personal data only as necessary to provide their services to PHHappy and are bound by strict data processing agreements.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of PHHappy's business, your personal data may be transferred to the relevant successor entity. We will notify you of any such transfer and the applicable privacy terms before your data is transferred.

6. Cookies & Tracking Technologies

PHHappy uses cookies and similar technologies (such as web beacons and local storage) on our platform. These technologies help us deliver a functional, secure, and personalised experience.

6.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function correctly, including maintaining your login session and processing transactions. These cannot be disabled.
• Performance Cookies: Collect anonymised data about how players use the platform to help us identify and fix issues and improve performance.
• Functional Cookies: Remember your preferences, such as language settings and display options, to personalise your experience.
• Analytics Cookies: Help us understand aggregate usage patterns across the PHHappy platform to guide product development decisions.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the PHHappy platform, including your ability to log in or complete transactions. For detailed instructions on managing cookies, refer to your browser's help documentation.

7. Data Security

PHHappy implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption for data at rest and TLS encryption for data in transit.
• Multi-factor authentication options for player accounts.
• Regular security audits and vulnerability assessments of our platform infrastructure.
• Strict access controls limiting personal data access to authorised PHHappy personnel on a need-to-know basis.
• Continuous monitoring for suspicious activity and potential security incidents.
• Incident response procedures to address and notify affected players of any data breach in accordance with applicable Philippine law.

While PHHappy takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying PHHappy immediately if you suspect any unauthorised access to your account.

8. Data Retention

PHHappy retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations.
• Transaction and gaming records are retained for a minimum of five (5) years for regulatory and audit purposes.
• Communications data is retained for three (3) years from the date of the communication.
• Technical and device data is retained for up to two (2) years for security and fraud prevention purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by PHHappy:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed, as described in this Privacy Policy.
• Right of Access: You may request a copy of the personal data PHHappy holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact PHHappy's Data Protection Officer using the contact details provided in Section 13 of this Privacy Policy. We will respond to all verified data subject requests within thirty (30) days of receipt.

10. Minors and Age Restriction

PHHappy's platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on PHHappy, please contact us immediately at the details provided in Section 13.

11. International Data Transfers

PHHappy primarily stores and processes your personal data within the Philippines. In certain circumstances, your data may be transferred to and processed in countries outside the Philippines — for example, where we use cloud infrastructure or technology service providers with servers in other jurisdictions.

Where such transfers occur, PHHappy ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012, including contractual data processing agreements that impose equivalent data protection standards on the recipient.

12. Changes to This Privacy Policy

PHHappy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the contact details associated with their account and/or by posting a prominent notice on the PHHappy platform.

The revised Privacy Policy will take effect on the date specified in the notice. Your continued use of the PHHappy platform after the effective date constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by PHHappy, please contact us using the details below. Our Data Protection Officer and support team are available to assist you.

General Support: [email protected]

Data Protection Officer: [email protected]

Please include your registered account username and a clear description of your request or concern. We aim to acknowledge all privacy-related requests within five (5) business days and to resolve them within thirty (30) days of receipt.