phh44
Privacy Policy

Data Controller

The data controller responsible for the personal information processed under this Policy is GoTech Entertainment Corporation, the operator of phh44.vip. As a PAGCOR-licensed entity, GoTech Entertainment is registered with the National Privacy Commission (NPC) of the Philippines as a personal information controller (PIC) in accordance with Republic Act 10173 and its Implementing Rules and Regulations (IRR).

All data processing activities conducted by phh44 are subject to NPC oversight and to the regulatory supervision of PAGCOR with respect to data obligations arising from the Platform's gaming license conditions. Questions regarding this Policy or phh44's data practices may be directed to our Data Protection Officer (DPO) — see Section 13.

Personal Data We Collect

phh44 collects personal data in the categories set out below. We apply data minimisation principles and collect only what is necessary for the lawful purposes described in Section 4.

2.1 Identity and Contact Data

• Full legal name (as it appears on a Philippine government-issued ID)
• Date of birth
• Philippine mobile number (in +63 format)
• Email address
• Residential address

2.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued ID (UMID, passport, driver's licence, PhilSys National ID)
• Selfie photograph taken during live verification
• ID number and expiry date

2.3 Financial Data

• Deposit and withdrawal transaction records (amount, date, payment method, reference number)
• GCash or Maya account identifiers (mobile number associated with e-wallet)
• Bank account name and account number (for bank transfer withdrawals)
• Transaction history within the phh44 platform wallet

2.4 Gaming and Account Activity Data

• Game session logs (games played, bets placed, outcomes, session duration)
• Account login timestamps and session durations
• Device information (device type, operating system, browser, screen resolution)
• IP address at each login
• Responsible gaming settings and limit history
• Customer support interaction records (chat logs, email correspondence)

2.5 Marketing Preference Data

• Email and SMS marketing consent status
• Promotional offer interaction history (offers viewed, claimed, declined)
• Preferred game categories and betting patterns (used for personalisation where consented)

How We Collect Your Data

phh44 collects personal data through the following channels and mechanisms:

• Account Registration: Information you provide when creating your phh44 account, including name, mobile number, date of birth, and email address.
• KYC Verification: Identity documents and selfie photographs uploaded during the mandatory PAGCOR-required verification process.
• Deposits and Withdrawals: Financial and payment data provided when using phh44's Cashier to deposit via GCash, Maya, or bank transfer, or to request a withdrawal.
• Platform Use: Technical and behavioural data automatically recorded as you navigate and use phh44, including game play, device data, and IP address.
• Customer Support: Information you provide when contacting phh44's live chat or email support.
• Cookies and Tracking Technologies: Data collected through browser cookies and similar technologies as described in Section 9.

Purposes of Processing

phh44 processes your personal data for the following specific and declared purposes:

Legal Basis for Processing

phh44 processes personal data on the following legal bases under RA 10173 and its IRR:

• Contractual Necessity: Processing required to fulfil phh44's obligations under its Terms and Conditions — including account management, deposit/withdrawal processing, and game provision.
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), and mandatory KYC and reporting obligations.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and the protection of phh44 and its players, where such interests do not override your fundamental data rights.
• Consent: Processing for marketing communications and optional personalisation features, where your explicit consent has been given and may be withdrawn at any time without affecting other processing.

Data Sharing and Disclosure

6.1 Third-Party Service Providers

phh44 shares personal data with third-party service providers who process data on our behalf as personal information processors (PIPs) under RA 10173. These providers include:

• KYC Verification Providers: Identity document and liveness verification platforms that process your ID documents and selfie as part of the mandatory PAGCOR-required age and identity check.
• Payment Processors: GCash (operated by Mynt/Globe), Maya (Paymaya Philippines), BPI, BDO, Metrobank, and other payment providers involved in processing your deposits and withdrawals.
• Game Studios and Content Providers: Licensed game studios whose titles are integrated into the phh44 platform. These providers receive pseudonymised session data necessary to operate their games.
• Customer Support Technology Providers: Live chat and CRM platform providers who host phh44's customer support infrastructure.
• Cloud and Infrastructure Providers: Cloud hosting providers who provide the servers and infrastructure on which phh44's platform operates.

All third-party providers engaged by phh44 are contractually bound by data processing agreements requiring them to maintain appropriate security standards and to process personal data only for the specific purposes for which it was shared.

6.2 Regulatory Authorities

phh44 discloses personal data to regulatory and law enforcement authorities where required by applicable Philippine law, including:

• PAGCOR — pursuant to phh44's licensing obligations, including mandatory reporting on player activity and financial transactions.
• The Anti-Money Laundering Council (AMLC) — as required under RA 9160 and its amendments for suspicious transaction reports and covered transaction reports.
• The National Privacy Commission (NPC) — in the event of a notifiable data security incident as described in Section 12.
• Philippine courts and law enforcement agencies — pursuant to valid legal orders, warrants, or subpoenas.

6.3 No Third-Party Marketing

phh44 does not sell, lease, or transfer your personal data to any third party for that party's independent marketing or commercial purposes. Data shared with third-party service providers under Section 6.1 is used exclusively for the purposes described in this Policy.

Data Retention

phh44 retains personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data may be retained for statistical and analytical purposes without limitation as it no longer constitutes personal information under RA 10173.

Security Measures

phh44 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it processes. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and phh44's servers is encrypted in transit using TLS 1.2 or higher.
• Password Hashing: Account passwords are never stored in plaintext. phh44 uses industry-standard cryptographic hashing with salting to protect stored credentials.
• Payment Tokenisation: Payment data processed through GCash, Maya, and bank partners is handled via tokenised references — phh44's systems do not store raw card or bank account numbers.
• Access Controls: Access to personal data within phh44's systems is restricted on a need-to-know basis. All staff access to production data is logged, monitored, and subject to periodic review.
• Two-Factor Authentication: Internal system access for phh44 staff is protected by mandatory multi-factor authentication. Player accounts may optionally enable SMS-based 2FA.
• Vulnerability Management: phh44 conducts regular penetration testing and vulnerability assessments of its platform infrastructure, with findings remediated according to risk severity.
• Physical Security: Server infrastructure is hosted in certified data centres with physical access controls, environmental monitoring, and 24/7 security operations.

Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by the phh44 website when you visit. They allow phh44 to recognise your browser, maintain your logged-in session, and improve your experience on the Platform.

9.2 Cookies phh44 Uses

• Strictly Necessary Cookies: Required for core platform functionality — login session management, security tokens, and load balancing. These cannot be disabled without breaking Platform functionality.
• Performance and Analytics Cookies: Used to understand how players navigate and use the Platform, enabling phh44 to identify areas for improvement. Data collected is aggregated and anonymised.
• Functionality Cookies: Remember your preferences — such as language settings and notification configurations — to personalise your experience across sessions.
• Marketing Cookies: Used only with your explicit consent to measure the effectiveness of phh44's promotional campaigns. These cookies track whether you visited phh44 via a particular promotional link.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use the phh44 Platform, including the ability to log into your account. Browser-level cookie controls vary by browser — consult your browser's help documentation for instructions.

Your Data Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by phh44:

To exercise any of the above rights, contact phh44's Data Protection Officer as described in Section 13. phh44 will respond to all verified data rights requests within 30 calendar days of receipt. Where a request cannot be fully fulfilled (e.g., due to a legal retention obligation), phh44 will provide a written explanation of the limitation. Where phh44 declines to take action on a request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

Minors and Age Restriction

If you are a parent or guardian and believe that a person under 21 years of age has created a phh44 account, please contact phh44's Data Protection Officer immediately using the details in Section 13 so the account can be investigated and closed without delay. phh44 takes its obligations regarding underage gaming with the utmost seriousness and will act promptly on any such report.

Personal Data Breach Response

In the event that phh44 discovers or is notified of a personal data security breach that is likely to result in serious harm to affected data subjects, phh44 will:

1. Contain the breach by taking immediate technical action to limit ongoing unauthorised access or disclosure.
2. Assess the scope and severity of the breach within 72 hours of discovery, including identification of affected individuals and data categories.
3. Notify the National Privacy Commission (NPC) within 72 hours of discovering a notifiable breach, in accordance with NPC Circular 16-03.
4. Notify affected individuals promptly and directly via their registered phh44 email address or in-platform notification, providing a description of the breach, the data involved, and steps being taken to address the incident.
5. Conduct a post-incident review to identify root causes and implement measures to prevent recurrence.

Data Protection Officer (DPO)

GoTech Entertainment has appointed a Data Protection Officer responsible for overseeing phh44's compliance with RA 10173 and this Policy. The DPO serves as phh44's primary point of contact for all data privacy matters and is registered with the National Privacy Commission.

When submitting a data rights request or privacy enquiry, please include your full registered name and phh44 account identifier (username or registered mobile number) so that phh44 can verify your identity before processing the request. Identity verification is required to protect against unauthorised requests for access to another person's data.

Updates to This Policy

phh44 may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or updated PAGCOR licensing conditions. Where updates are material — meaning they alter how your personal data is processed or your rights in relation to it — phh44 will provide advance notice by:

• Posting a prominent notice on phh44.vip;
• Sending a notification to your registered email address; and/or
• Displaying an in-account notification on your next login.

Non-material updates — such as formatting corrections, clarifications that do not alter the substance of the Policy, or updates to reflect minor changes in law — may be made without advance notice and take effect immediately. The "Last Updated" date at the top of this page indicates when the most recent version of the Policy was published. Your continued use of phh44 after the effective date of any revision constitutes acceptance of the updated Policy.