phkkk Privacy Policy

Unless the context otherwise requires, the following terms shall have the meanings set out below throughout this Privacy Policy:

This Privacy Policy applies to all Personal Data collected by phkkk in connection with your use of the phkkk Platform, including the website at phkkk.bio, any official phkkk mobile applications, and any communications between you and phkkk's support team.

phkkk acts as the Personal Information Controller in respect of the Personal Data it collects directly from players and registers with the National Privacy Commission of the Philippines as required under RA 10173 and its Implementing Rules and Regulations.

This Policy does not cover third-party websites, payment processors, or services that may be linked to or integrated with the phkkk Platform but that operate under their own separate privacy policies. phkkk is not responsible for the privacy practices of those third parties.

phkkk collects the following categories of Personal Data in connection with the operation of the phkkk Platform:

phkkk collects Personal Data through the following channels and mechanisms:

• 4.1 Direct submission: Data you provide when completing the phkkk registration form, uploading KYC documents, making a deposit or withdrawal request, completing a responsible gaming questionnaire, or contacting phkkk's support team.
• 4.2 Automated collection: Technical Data collected automatically by phkkk's servers and analytics systems as you interact with the phkkk Platform — including your IP address, device identifiers, login events, and in-session navigation data.
• 4.3 Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, and Metrobank when you deposit funds to or withdraw funds from your phkkk account. phkkk receives transaction reference numbers and confirmed amounts, not your full payment credentials.
• 4.4 Third-party identity verification services: In some cases, phkkk uses a third-party KYC service provider to validate government ID documents submitted by players. These providers process identity data under a data processing agreement with phkkk and are prohibited from using your data for any other purpose.
• 4.5 Cookies and tracking technologies: Session cookies and certain analytics tools used on the phkkk Platform may collect browsing behaviour data. See Section 8 for full details on phkkk's use of cookies.

phkkk processes Personal Data only where a lawful basis under the Data Privacy Act of 2012 and its Implementing Rules applies. The legal bases phkkk relies on are:

• 5.1 Contractual necessity: Processing is necessary to perform the contract between phkkk and you — specifically, to operate your phkkk account, deliver gaming services, process your deposits and withdrawals, and provide customer support.
• 5.2 Legal obligation: Processing is required for phkkk to comply with its obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act of 2012, and other applicable Philippine laws and regulations.
• 5.3 Legitimate interests: Processing is necessary for phkkk's legitimate interests in preventing fraud, ensuring platform security, and improving the phkkk gaming experience, provided those interests are not overridden by your rights and interests.
• 5.4 Consent: For processing activities that are not covered by the above bases — such as sending you promotional communications about phkkk offers — phkkk relies on your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

phkkk uses your Personal Data for the following purposes, each of which is linked to the legal basis identified in Section 5:

• 6.1 Account management: Creating and maintaining your phkkk account, authenticating your identity at login, managing your account settings and responsible gaming preferences, and communicating account-related updates.
• 6.2 Age and identity verification: Verifying that you are at least 21 years of age and that your identity matches the details you provided at registration, as required by PAGCOR and Philippine AML law.
• 6.3 Payment processing: Facilitating deposits to and withdrawals from your phkkk wallet, verifying that payment accounts are registered in your name, and maintaining financial transaction records.
• 6.4 Gaming service delivery: Running game sessions, recording game outcomes for dispute resolution purposes, and maintaining game history accessible to you through your phkkk account dashboard.
• 6.5 Regulatory compliance: Fulfilling phkkk's obligations to PAGCOR, the AMLC, the NPC, and other relevant Philippine regulatory bodies — including submitting required reports on player activity, suspicious transaction reports, and covered transaction reports as mandated by law.
• 6.6 Fraud prevention and security: Detecting and preventing unauthorized account access, fraudulent transactions, multi-accounting, and other forms of abuse on the phkkk Platform.
• 6.7 Customer support: Responding to your support requests, resolving disputes, and maintaining records of your interactions with phkkk's support team.
• 6.8 Responsible gaming monitoring: Monitoring gameplay patterns for indicators of problem gambling, enforcing deposit and loss limits you have set, managing self-exclusion and cooling-off requests, and fulfilling PAGCOR's responsible gaming requirements.
• 6.9 Promotional communications (with consent): Sending you information about phkkk promotions, bonuses, and new game releases where you have opted in to receive such communications. You may opt out at any time by contacting phkkk support.

phkkk does not sell, rent, or trade your Personal Data to any third party. phkkk shares your Personal Data only in the following limited circumstances:

• 7.1 Service providers (processors): phkkk shares data with third-party service providers who assist in operating the phkkk Platform — including payment processors (GCash / PayMaya / partner banks), KYC verification providers, IT infrastructure and hosting providers, and customer support platform providers. All such providers are engaged under data processing agreements and are contractually prohibited from using your data for purposes other than providing services to phkkk.
• 7.2 Regulatory authorities: phkkk is legally required to share player data with PAGCOR as part of its licensing obligations, with the AMLC in connection with covered and suspicious transaction reports under RA 9160, and with the NPC in response to lawful investigation processes.
• 7.3 Law enforcement: phkkk will disclose Personal Data to Philippine law enforcement agencies where required by a valid court order, subpoena, or other lawful legal process. phkkk will notify the affected player of such disclosure unless prohibited from doing so by law.
• 7.4 Shared exclusion registries: phkkk participates in PAGCOR's player self-exclusion registry. Where a player self-excludes from phkkk, their exclusion status may be shared with the registry for enforcement across participating PAGCOR-licensed operators.
• 7.5 Game studios and providers: Certain technical data (such as session tokens and bet data) is necessarily shared with phkkk's game content providers to deliver individual game sessions. These providers receive only the data technically required to run the game and are prohibited from using it for any other purpose.

phkkk uses cookies and similar tracking technologies on its Platform for the purposes described below. A cookie is a small text file stored on your device when you visit a website.

• 8.1 Strictly necessary cookies: These cookies are essential for the operation of the phkkk Platform — including maintaining your login session, storing your language and preference settings, and enabling secure authentication. These cookies cannot be disabled without impairing Platform functionality.
• 8.2 Security cookies: Used to detect fraudulent login attempts, prevent CSRF attacks, and maintain session integrity. These are essential security measures and are always active.
• 8.3 Analytics cookies: With your consent, phkkk uses first-party analytics tools to understand how players navigate the Platform — which pages are visited, how long sessions last, and where players encounter difficulties. This data is aggregated and not linked to your individual identity in analytics reports. You may opt out of analytics cookies through your account settings.
• 8.4 Preference cookies: These remember your display preferences and game lobby settings across sessions to improve your experience on the phkkk Platform.

phkkk does not use third-party advertising cookies or permit advertising networks to place tracking cookies on the phkkk Platform. You can manage cookie settings through your browser. Please note that disabling strictly necessary cookies will impair your ability to log in and use the phkkk Platform.

phkkk retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal retention obligations. The following general retention periods apply:

After the applicable retention period, Personal Data is securely deleted or anonymized in a manner that renders re-identification impossible. Where data has been anonymized, phkkk may retain and use the anonymized data indefinitely for statistical and analytical purposes.

phkkk implements a range of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 10.1 SSL/TLS encryption for all data in transit between your device and phkkk's servers, using current industry-standard cipher suites.
• 10.2 Encryption of sensitive stored data, including hashing of all player passwords using a strong one-way cryptographic algorithm. phkkk does not store your plaintext password.
• 10.3 Access controls limiting phkkk employee access to Personal Data on a strict need-to-know basis. Staff with access to Personal Data receive privacy and data handling training.
• 10.4 Regular security vulnerability assessments and penetration testing of the phkkk Platform infrastructure.
• 10.5 An incident response plan enabling phkkk to detect, contain, and notify affected parties and the NPC of any Personal Data breach within 72 hours of discovery, as required by the Data Privacy Act.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your Personal Data held by phkkk:

To exercise any of the rights above, please contact phkkk's Data Protection Officer using the contact details in Section 15. phkkk will respond to all verifiable data subject requests within thirty (30) calendar days. We may require proof of identity before processing your request.

The phkkk Platform is strictly restricted to persons aged 21 years and above. phkkk does not knowingly collect Personal Data from persons under the age of 21. This restriction applies regardless of whether the minor is using their own details or those of an adult.

If phkkk discovers that it has collected Personal Data from a person under 21 — whether through misrepresentation during registration or any other means — phkkk will immediately close the account, delete the associated Personal Data (subject to any mandatory regulatory retention obligations), and report the incident to PAGCOR as required under its licensing conditions.

phkkk's primary data processing infrastructure is located within the Philippines. However, certain service providers used by phkkk — such as cloud infrastructure providers and game content studios — may be located in other jurisdictions, including other ASEAN member states and international locations.

• 13.1 Where Personal Data is transferred outside the Philippines, phkkk ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Data Privacy Act of 2012. Such safeguards include: contractual clauses approved by the NPC; transfer to jurisdictions with equivalent data protection laws; or transfer pursuant to a written consent from the affected Data Subject.
• 13.2 phkkk will not transfer your Personal Data to a third country or international organization if doing so would violate Philippine law or would expose your data to materially lower protections than those available under the Data Privacy Act.
• 13.3 You may request information about the specific countries to which phkkk may transfer your Personal Data by contacting phkkk's Data Protection Officer at the address in Section 15.

phkkk may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in Philippine law or NPC guidance, or the introduction of new phkkk products and services.

• 14.1 Material changes to this Privacy Policy will be notified to registered players via email or in-platform notification at least fourteen (14) days before the change takes effect, unless a shorter notice period is required by law.
• 14.2 The effective date shown at the top of this document reflects the current version. The previous version of this Privacy Policy is available upon request from phkkk's Data Protection Officer.
• 14.3 Your continued use of the phkkk Platform after an updated Privacy Policy takes effect constitutes your acknowledgement of the updated terms. If you do not agree with the updated Policy, you should close your account and contact support to arrange withdrawal of any remaining balance.

phkkk has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and with the Data Privacy Act of 2012. You may contact phkkk's DPO for any privacy-related query, data subject rights request, or complaint.

If you are not satisfied with phkkk's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) — the independent regulatory authority established under the Data Privacy Act of 2012. The NPC's contact information is publicly available on its official Philippine government website.