hp888 Privacy Policy

hp888 ("hp888," "we," "us," "our") operates the online casino and sports betting platform accessible at hp888.one (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you," "your," "Player") who access or use the hp888 Platform.

This Privacy Policy describes how hp888 collects, uses, discloses, stores, and protects your personal information. It applies to all personal data collected through the hp888 Platform, including data collected during registration, account verification, gameplay, financial transactions, customer support interactions, and marketing communications.

This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission ("NPC"). By using the hp888 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

hp888 collects the following categories of personal data from registered players and Platform visitors:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — you must be 21 or older)
• Philippine mobile number and email address
• Residential address (province, city, barangay)
• Government-issued ID details (passport, driver's license, SSS/UMID, PhilSys ID)

• GCash or PayMaya mobile wallet number
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) for withdrawal processing
• Transaction history (deposits, withdrawals, wagers, winnings)
• Source of funds declarations (where required by AML regulations)

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the Platform
• Game history, betting patterns, and wagering activity
• Login timestamps and account activity logs

• Customer support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing preferences and communication opt-in/opt-out records

hp888 collects your personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-Party Sources: Identity verification data from KYC service providers; fraud detection signals from security partners; payment confirmation data from GCash, PayMaya, and banking partners.
• Regulatory Sources: Data received from PAGCOR, AMLC, or other Philippine regulatory authorities in connection with compliance obligations.

hp888 uses your personal data for the following purposes:

Under the Data Privacy Act of 2012, hp888 processes your personal data on the following legal bases:

• Consent: For marketing communications and non-essential cookies, where you have given explicit opt-in consent.
• Contractual Necessity: For processing necessary to perform our contract with you, including account management, payment processing, and game provision.
• Legal Obligation: For processing required to comply with Philippine laws, including AML obligations, PAGCOR regulations, and tax reporting requirements.
• Legitimate Interests: For fraud prevention, security monitoring, and Platform improvement, where our legitimate interests are not overridden by your privacy rights.

hp888 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data only in the following limited circumstances:

hp888 engages trusted third-party service providers who process personal data on our behalf, including: identity verification (KYC) providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection and cybersecurity firms, cloud hosting and infrastructure providers, and customer support platform operators. All service providers are contractually bound to process your data only as instructed by hp888 and to maintain appropriate security measures.

hp888 is required by Philippine law to disclose certain personal data to regulatory and law enforcement authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and Philippine law enforcement agencies, when required by a valid legal order, warrant, or regulatory directive.

In the event of a merger, acquisition, or sale of all or substantially all of hp888's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer via email or a prominent notice on the Platform.

hp888 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML and PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing preferences: Retained until you withdraw your consent or request deletion.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, hp888 will securely delete or anonymize your personal data in accordance with NPC guidelines.

hp888 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, and analyze usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled and do not require your consent.
• Functional Cookies: Remember your preferences (such as language and display settings) to personalize your experience.
• Analytics Cookies: Collect anonymized data about how you use the Platform to help us improve performance and usability.
• Security Cookies: Used for fraud detection, bot prevention, and account security monitoring.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the hp888 Platform. hp888 does not use third-party advertising or tracking cookies.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hp888:

• Right to be Informed: You have the right to know what personal data hp888 collects about you and how it is used.
• Right of Access: You may request a copy of the personal data hp888 holds about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

hp888 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the hp888 Platform
• Encryption of sensitive data at rest, including financial records and identity documents
• Multi-factor authentication (MFA) options for player accounts
• Regular security audits and penetration testing by independent cybersecurity firms
• Strict access controls limiting employee access to personal data on a need-to-know basis
• 24/7 automated monitoring for suspicious account activity and potential data breaches
• Incident response procedures compliant with NPC breach notification requirements

In the event of a personal data breach that poses a risk to your rights and freedoms, hp888 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the DPA.

The hp888 Platform is strictly intended for adults aged 21 years and above. hp888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data and close the associated account.

hp888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, hp888 will notify registered players via email and post a prominent notice on the Platform. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the hp888 Platform after any changes to this Privacy Policy constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how hp888 protects your personal data.

hp888 has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

• Data Protection Officer, hp888
• Email: [email protected] (Subject: "Data Privacy Request" or "DPO Inquiry")
• Live Chat: Available 24/7 on the hp888 Platform
• Response Time: Within 15 business days for data rights requests