At phhoy, your privacy is not an afterthought — it is a core part of how we build and operate our platform. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have over your own information.
These are the six core principles that guide how phhoy handles your personal data. They are not just policy statements — they are built into how our systems and processes actually work.
phhoy follows a data minimization principle. We only collect personal information that is strictly necessary to operate your account, process transactions, verify your identity, and comply with Philippine legal requirements. We do not collect data speculatively or for purposes we cannot clearly justify.
phhoy does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely to operate and improve the phhoy platform and to comply with our legal obligations. This is a firm commitment, not a conditional one.
All data transmitted between your device and phhoy's servers is encrypted using 256-bit SSL/TLS technology. Our infrastructure is hosted on secure, access-controlled servers with regular security audits, intrusion detection systems, and strict internal access controls to prevent unauthorized access to your personal information.
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, delete, and port your personal data. phhoy provides straightforward mechanisms to exercise these rights. You can update your account information at any time, and you may submit a formal data request to our Data Protection Officer at any time.
phhoy does not hold your data indefinitely. We retain personal information only for as long as is necessary to fulfill the purpose for which it was collected, or as required by Philippine law. Account data is retained for a minimum of five years following account closure to comply with anti-money laundering regulations.
If you have opted in to receive promotional communications from phhoy, you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting our support team. Opting out of marketing will not affect your ability to use the phhoy platform or receive essential account notifications.
This Privacy Policy is issued by phhoy ("phhoy," "we," "us," or "our"), the operator of the online gaming platform accessible at phhoy.net (the "Platform"). phhoy is a gaming platform serving Filipino players and operates in compliance with applicable Philippine laws, including Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations.
For the purposes of the DPA, phhoy acts as the Personal Information Controller in respect of the personal data it collects and processes through the Platform. This means phhoy determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
Scope: This Privacy Policy applies to all personal data collected through the phhoy website, mobile platform, customer support channels, and any other touchpoint through which you interact with phhoy. It applies to registered players, prospective players, and visitors to the Platform.
phhoy collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include the following:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, government ID number, nationality | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, mobile number, residential address | Account communications, transaction notifications, support |
| Financial Data | GCash number, bank account details, transaction history | Processing deposits and withdrawals, AML compliance |
| Technical Data | IP address, device type, browser, operating system, session data | Platform security, fraud prevention, service optimization |
| Usage Data | Games played, bet history, session duration, feature interactions | Responsible gaming monitoring, personalization, analytics |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Customer support, dispute resolution, quality assurance |
| Verification Documents | Scanned government ID, selfie with ID, proof of address | KYC compliance, identity verification, fraud prevention |
phhoy does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion request, in which case it is processed solely for that purpose.
phhoy collects personal data through the following means:
You provide data directly to phhoy when you: register an account on the Platform; complete identity verification (KYC); make a deposit or withdrawal; contact our customer support team; participate in promotions or surveys; or submit a responsible gaming request.
When you access and use the phhoy Platform, we automatically collect certain technical and usage data through cookies, web beacons, log files, and similar tracking technologies. This includes your IP address, device identifiers, browser type, pages visited, and session duration. This data is collected to ensure the security and proper functioning of the Platform and to detect fraudulent activity.
phhoy may receive personal data about you from third-party sources in limited circumstances, including: identity verification service providers used to confirm your identity during KYC; payment processors such as GCash and Maya who confirm transaction details; and fraud prevention and anti-money laundering screening services. Data received from third parties is handled with the same level of care as data collected directly from you.
phhoy uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your personal data are as follows:
Under the Data Privacy Act of 2012, phhoy processes your personal data on the following legal bases:
phhoy does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
We share data with trusted third-party service providers who assist us in operating the Platform, including identity verification providers, payment processors (GCash, Maya, Philippine banks), cloud hosting providers, customer support software providers, and analytics platforms. All service providers are contractually bound to process your data only on phhoy's instructions and in accordance with applicable data protection law.
phhoy may disclose your personal data to government agencies, regulatory bodies, law enforcement authorities, or courts where required to do so by law, court order, or regulatory directive. This includes disclosures required under Philippine AML laws and any requirements from PAGCOR or other relevant regulatory authorities.
In the event of a merger, acquisition, or sale of all or substantially all of phhoy's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is processed as a result.
We will never share your data with third-party advertisers, data brokers, or marketing companies. Your personal information is not a product at phhoy.
phhoy uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phhoy Platform.
phhoy retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
When personal data is no longer required, phhoy will securely delete or anonymize it in accordance with our data disposal procedures.
Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phhoy. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.
phhoy will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty days, and you will be notified accordingly.
phhoy implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phhoy will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the DPA's breach notification requirements.
The phhoy Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law governing online gambling. phhoy does not knowingly collect personal data from individuals under the age of 21.
If phhoy becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate steps to prevent recurrence. If you believe that a minor has registered on the phhoy Platform, please contact us immediately at the details provided in Section 14.
Age Verification: phhoy conducts mandatory age verification as part of the KYC process. Providing false information about your age during registration is a breach of our Terms and Conditions and may constitute a criminal offence under Philippine law.
phhoy primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or identity verification services that operate internationally.
Where such transfers occur, phhoy ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or other legally recognized transfer mechanisms.
phhoy will not transfer your personal data to a country or territory that does not provide an adequate level of data protection without your explicit consent or without implementing appropriate safeguards.
phhoy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. The date of the most recent revision is displayed at the top of this page.
Where changes are material — meaning they significantly affect how we process your personal data or your rights in relation to it — phhoy will provide advance notice to registered players via email or a prominent notice on the Platform, at least fourteen (14) days before the changes take effect.
Your continued use of the phhoy Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the changes, you may close your account and request deletion of your personal data, subject to our legal retention obligations.
phhoy has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact our DPO using the details below.
Data Protection Officer – phhoy
Email: [email protected]
General Support
Email: [email protected]
phhoy will acknowledge receipt of all privacy-related inquiries within five (5) business days and will provide a substantive response within thirty (30) calendar days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
For urgent data breach reports or suspected unauthorized access to your account, please contact our support team immediately via live chat on the Platform. Our security team monitors live chat around the clock.
Now that you know how phhoy protects your privacy, experience the platform for yourself. Fast GCash deposits, hundreds of games, and a team that takes your security seriously. Must be 21 years or older to play.
Gambling is addictive. Know when to stop. | 21+ only | Play within your means.