Privacy Policy

1.1 This Privacy Policy ("Policy") is issued by xxhp ("xxhp," "we," "us," or "the Company"), the operator of the online gaming platform at xxhp.app. It governs the collection, use, storage, disclosure, and protection of personal data relating to:

• Registered account holders of the xxhp platform;
• Visitors to xxhp.app who have not registered but whose browsing data may be collected through cookies and analytics tools;
• Individuals who contact xxhp through any support channel (live chat, email, or otherwise);
• Any person whose personal data is submitted to xxhp in connection with the services offered on the platform.

1.2 This Policy should be read together with the xxhp Terms and Conditions and Responsible Gaming Policy. In the event of conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail.

1.3 Scope of Services. This Policy applies to all services offered by xxhp through xxhp.app, including live casino, slot games, bingo, dice, BetterLive sports betting, account management, payment processing, customer support, and promotional communications.

1.4 xxhp operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is required to process certain categories of personal data to fulfill its regulatory and legal obligations. The collection of this data is not discretionary — it is mandated by Philippine gaming law and anti-money laundering regulations.

2.1 For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, the data controller responsible for your personal data is:

2.2 xxhp has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act. The DPO is responsible for overseeing xxhp's compliance with this Policy and applicable data protection laws. The DPO may be contacted via the email address listed in Section 15 of this Policy.

3.1 xxhp collects personal data through several channels, including voluntary submission during registration, automated collection during platform use, and from third-party service providers. The categories of personal data we collect include:

3.2 Sensitive Personal Information. The Data Privacy Act of 2012 recognizes certain categories of personal information as "sensitive." xxhp may process the following sensitive categories only where strictly necessary for legal compliance or regulatory purposes:

• Government-issued identification numbers (e.g., Philippine National ID, SSS, TIN) — collected solely for KYC compliance;
• Financial account information — collected solely for payment processing and AML compliance.

3.3 xxhp does not collect sensitive personal information beyond what is required for legal, regulatory, or operational purposes. We do not collect racial or ethnic data, religious beliefs, political affiliations, or health information unless directly relevant to a responsible gaming assessment.

4.1 xxhp processes your personal data for the following purposes:

• Account registration and management: Creating and maintaining your xxhp account, verifying your identity and age (21+ requirement), and providing access to platform services;
• Service delivery: Processing bets, game outcomes, deposits, and withdrawals, and providing access to all gaming categories on xxhp;
• KYC and identity verification: Fulfilling our obligations under PAGCOR licensing conditions and Philippine anti-money laundering laws (Republic Act No. 9160, as amended);
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, and other prohibited conduct;
• Regulatory compliance: Complying with reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities;
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance;
• Responsible gaming: Monitoring gaming behavior to identify patterns that may indicate problem gambling; enforcing self-exclusion and deposit limits set by you;
• Marketing communications: Sending promotional offers, bonus alerts, and platform updates, subject to your communication preferences and opt-in status;
• Platform improvement: Analyzing aggregate usage patterns to improve game selection, interface design, and customer experience;
• Legal obligations: Complying with lawful orders, subpoenas, or regulatory directions from Philippine courts or government agencies.

5.1 Under the Data Privacy Act of 2012, xxhp processes your personal data on the following legal grounds:

• Consent: Where you have given explicit, freely given, specific, and informed consent — for example, for optional marketing communications;
• Contractual necessity: Processing required to perform the contract between you and xxhp (i.e., the Terms and Conditions) — including account management, game delivery, and payment processing;
• Legal obligation: Processing required to comply with Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself;
• Legitimate interests: Processing for the purposes of fraud prevention, platform security, and product improvement, where our legitimate interests are not overridden by your data protection rights;
• Vital interests: In rare cases, processing necessary to protect the safety of a person — relevant in the context of responsible gaming and problem gambling interventions.

6.1 xxhp does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• PAGCOR and regulatory authorities: As required by our licensing obligations and applicable Philippine gaming law;
• Anti-Money Laundering Council (AMLC): For mandatory suspicious transaction reporting and covered transaction reporting under RA 9160;
• Payment service providers: GCash (Mynt), PayMaya (Maya Bank), BPI, BDO, and Metrobank, for the sole purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party KYC and identity verification service providers acting as data processors under written data processing agreements;
• Game software providers: Licensed game developers and providers whose software operates on the xxhp platform, limited to session and bet data necessary for game function and audit;
• Fraud prevention services: Specialist providers used for risk scoring and suspicious activity detection;
• Cloud and infrastructure providers: Hosting and data storage providers operating under contractual data security obligations;
• Law enforcement and courts: Where xxhp is legally compelled to disclose information pursuant to a lawful order, subpoena, or court directive.

6.2 All third parties who receive personal data from xxhp are required to handle such data in accordance with applicable data protection laws and, where applicable, under formal data processing agreements that include security and confidentiality obligations.

6.3 In the event of a business restructure, merger, or acquisition involving xxhp, personal data held by xxhp may be transferred to the successor entity, provided that the processing continues to be governed by terms no less protective than this Policy.

7.1 xxhp retains personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law. The following retention periods apply as a general guide:

7.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification.

8.1 xxhp implements appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and xxhp servers is encrypted using TLS 1.3 — the same standard used by major Philippine banks and e-wallet providers;
• Encryption at rest: Sensitive data stored in xxhp databases is encrypted using AES-256 encryption;
• Access controls: Personal data is accessible only to xxhp personnel and authorized processors who require access for their specific role and are bound by confidentiality obligations;
• Two-factor authentication: xxhp offers and encourages 2FA via SMS OTP for all account holders, adding a second layer of protection to account access;
• Security audits: xxhp conducts periodic security reviews and penetration testing to identify and remediate vulnerabilities;
• Incident response: xxhp maintains a data breach response plan. In the event of a personal data breach, xxhp will notify affected users and the National Privacy Commission (NPC) in accordance with the requirements of the Data Privacy Act and NPC Circular 16-03.

8.2 While xxhp takes data security seriously, no online system is 100% secure. Users are encouraged to protect their own account credentials, enable 2FA, and report any suspected unauthorized access to the xxhp support team immediately.

9.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by xxhp:

• Right to be Informed: The right to be informed of whether xxhp holds personal data about you, and to receive this Privacy Policy explaining how your data is processed;
• Right of Access: The right to obtain a copy of the personal data xxhp holds about you and information about the processing activities applied to it;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by xxhp about you;
• Right to Erasure or Blocking: The right to request the deletion or blocking of personal data where processing is no longer necessary, consent has been withdrawn, or processing is unlawful — subject to xxhp's legal retention obligations;
• Right to Object: The right to object to processing of your personal data for direct marketing purposes at any time;
• Right to Data Portability: The right to receive personal data you have provided to xxhp in a structured, commonly used, and machine-readable format;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe xxhp has violated your data privacy rights.

9.2 To exercise any of the above rights, please contact the xxhp Data Protection Officer as described in Section 15. xxhp will respond to verified requests within thirty (30) days of receipt, subject to identity verification and any applicable legal limitations.

9.3 xxhp may decline requests to delete data where retention is required by PAGCOR regulations, anti-money laundering laws, or other applicable Philippine legal obligations.

10.1 xxhp uses cookies and similar tracking technologies to operate the platform, analyze usage patterns, and improve the player experience. The following categories of cookies are used:

• Essential cookies: Required for basic platform functionality, including maintaining your login session and security features. These cannot be disabled without impairing platform functionality;
• Analytics cookies: Used to collect aggregated, anonymized data about how players use xxhp.app, including pages visited and session duration. This data is used to improve the platform;
• Functional cookies: Used to remember your preferences, such as language settings, game lobby filters, and communication preferences;
• Security cookies: Used to detect and prevent fraudulent login attempts and suspicious account activity.

10.2 You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the xxhp platform. Essential and security cookies cannot be disabled while using the platform.

10.3 xxhp does not use cookies to track your browsing activity on third-party websites outside of xxhp.app.

11.1 The xxhp platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations and Philippine gaming law. xxhp does not knowingly collect personal data from individuals under 21.

11.2 If xxhp becomes aware that personal data has been collected from an individual under 21 years of age, the relevant account will be immediately closed, all personal data collected will be deleted to the extent permitted by law, and the matter may be referred to PAGCOR in accordance with regulatory requirements.

11.3 Parents and guardians who believe their minor child has registered on xxhp are urged to contact xxhp support immediately via live chat or at [email protected] so that the matter can be handled promptly and appropriately.

12.1 With your consent, xxhp may send you promotional communications via SMS to your registered Philippine mobile number and via email to your registered address. These communications may include information about new games, bonuses, promotions, tournaments, and platform updates.

12.2 You may withdraw consent for marketing communications at any time by:

• Updating your communication preferences in your xxhp account settings;
• Using the opt-out link included in any marketing email from xxhp;
• Contacting xxhp support via live chat or email and requesting removal from marketing lists.

12.3 Withdrawing consent for marketing communications will not affect your ability to use the xxhp platform or receive essential service communications (such as deposit confirmations, withdrawal notifications, or security alerts), which are sent regardless of marketing preferences.

13.1 Some of xxhp's service providers and technology partners may process personal data in countries outside the Philippines. Where personal data is transferred outside the Philippines, xxhp ensures that appropriate safeguards are in place to protect that data, including:

• Contractual clauses requiring the recipient to provide a standard of data protection equivalent to that required under Philippine law;
• Ensuring that recipient countries or entities provide an adequate level of data protection as assessed by the National Privacy Commission;
• Obtaining your explicit consent to the transfer where required by law.

13.2 xxhp's primary data storage infrastructure is located in Asia-Pacific region data centers selected for their compliance with applicable data protection standards and their physical security measures.

14.1 xxhp reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or our data processing practices.

14.2 Material changes to this Policy will be communicated to registered users via the email address or mobile number on file no less than seven (7) days before the change takes effect, where practicable. Minor or clarificatory changes may be published without individual notification but will always be reflected in the "Last Updated" date at the top of this document.

14.3 Continued use of the xxhp platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the platform and may request account closure under the Terms and Conditions.

15.1 For all privacy-related inquiries, requests to exercise your data subject rights, or to contact the xxhp Data Protection Officer, please use the following channels:

• 24/7 Live Chat: Available directly on xxhp.app
• Email (DPO): [email protected]
• Reference: About Us | Terms & Conditions | Responsible Gaming

15.2 National Privacy Commission. If you believe your data privacy rights have been violated and xxhp has not resolved your concern satisfactorily, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC complaint process is available through the NPC's official government channels.