hh77 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") explains how hh77 ("we," "us," or "our") collects, uses, stores, and protects the personal information of individuals ("you," "the player," or "the user") who access or use the hh77 platform, available at hh77.biz and its related mobile interfaces. hh77 is a PAGCOR-licensed online gaming operator serving Filipino players across the Philippines — from Metro Manila and Cebu to Davao and beyond.

We take your privacy seriously. This Policy is written in plain language so every Filipino player on hh77 understands exactly what happens to their personal data. By registering for, accessing, or using the hh77 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, which together form the complete agreement governing your use of hh77.

2 Personal Data We Collect

hh77 collects personal data in several categories depending on the nature of your interaction with the platform. We collect only what is necessary for lawful and operational purposes.

3 How We Collect Your Data

hh77 collects personal data through several channels:

• Direct Submission: Information you provide when registering, completing KYC, making deposits or withdrawals, or contacting support.
• Automated Technical Collection: Data gathered automatically when you use the hh77 platform, including IP address, session duration, pages visited, and device identifiers via cookies and server logs.
• Payment Processors: Confirmation data returned by GCash, Maya, BDO, BPI, and other payment partners after transaction authorization. hh77 receives transaction reference numbers and status only — not your full payment credentials.
• Identity Verification Providers: Data returned by third-party KYC services used to verify government-issued IDs during account verification as required by PAGCOR.
• Fraud Detection Systems: Behavioral and technical signals analyzed to detect and prevent fraudulent activity, money laundering, and multi-accounting in compliance with our PAGCOR obligations.

4 Purposes for Which We Process Your Data

hh77 processes your personal data for the following specific purposes:

• Account Registration and Management: To create, maintain, and operate your hh77 player account, including identity verification and age confirmation (21+ as required by PAGCOR).
• Service Delivery: To provide the sports betting, live casino, slots, bingo, and other gaming products available on hh77.
• Payment Processing: To facilitate deposits and withdrawals via GCash, Maya, Philippine bank transfers, and other payment methods, and to maintain accurate financial records.
• Legal and Regulatory Compliance: To meet PAGCOR licensing requirements, including Know Your Customer (KYC) obligations, anti-money laundering (AML) reporting, and responsible gaming mandates.
• Responsible Gaming: To monitor gaming behavior for indicators of problem gambling, enforce self-exclusion requests, and apply account limits as requested by players or required by regulation.
• Security and Fraud Prevention: To detect and prevent unauthorized access, account takeover, collusion, and other forms of fraud or abuse of the hh77 platform.
• Customer Support: To investigate and resolve queries, complaints, and disputes submitted through hh77 support channels.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.
• Analytics and Improvement: To analyze aggregated, anonymized usage data to improve the hh77 platform, product offerings, and user experience.

5 Legal Basis for Processing

hh77 processes your personal data under one or more of the following lawful bases:

6 Data Sharing and Disclosure

hh77 does not sell your personal information. We share your data only in the following limited and controlled circumstances:

• PAGCOR and Regulatory Authorities: We are required by our gaming license to report certain player data, suspicious transaction reports, and regulatory information to PAGCOR and relevant Philippine government agencies upon request or as mandated by law.
• Payment Service Providers: Data necessary to process transactions is shared with GCash, Maya, BDO, BPI, and other payment partners. These providers are bound by their own privacy and security obligations.
• Identity Verification Partners: KYC data (including government ID scans) is processed by contracted identity verification providers under strict data processing agreements. These providers may not use your data for any purpose other than identity verification for hh77.
• Game Software Providers: Game providers (such as Evolution, Pragmatic Play, Jili) receive minimal session data necessary to deliver their games. No full identity data is shared with game providers.
• Fraud Prevention Services: Anonymized or pseudonymized technical data may be shared with fraud detection service providers to protect the integrity of the hh77 platform.
• Legal Process: hh77 will disclose personal data when required by a valid court order, subpoena, or directive from a Philippine law enforcement agency or regulatory body with lawful authority.
• Corporate Transactions: In the event of a merger, acquisition, or change of ownership of hh77, player data may be transferred to a successor entity, provided that the successor entity is bound to this Policy or an equivalent privacy framework.

7 Data Retention

hh77 retains your personal data for the periods required by our legal and regulatory obligations and for no longer than necessary for the purposes described in this Policy.

• Active Account Data: Retained for the lifetime of your hh77 account plus a minimum of five (5) years following account closure, as required by PAGCOR anti-money laundering regulations.
• Transaction and Bet Records: Retained for a minimum of five (5) years in compliance with Philippine financial recordkeeping requirements applicable to licensed gaming operators.
• KYC and Identity Documents: Retained for the period of account activity plus five (5) years, or as otherwise required by PAGCOR or applicable law.
• Support Communications: Retained for two (2) years from the date of last interaction, unless a longer period is required by an ongoing dispute or legal process.
• Marketing Opt-In Records: Retained for three (3) years from the date of opt-in to demonstrate compliance with consent-based marketing obligations.
• Technical Logs: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

After applicable retention periods expire, hh77 will securely delete or anonymize your personal data so that it can no longer be attributed to you.

8 Cookies and Tracking Technologies

hh77 uses cookies and similar tracking technologies on the hh77 platform. Cookies are small text files stored on your device that help us deliver and improve our services.

• Essential Cookies: Required for the hh77 platform to function — session authentication, account security, and load balancing. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings and display options to improve your experience on hh77.
• Analytics Cookies: Collect anonymized data about how players use the hh77 platform — pages visited, session duration, and navigation patterns — to help us improve the platform.
• Security Cookies: Used by our fraud detection systems to identify unusual login patterns and protect your hh77 account from unauthorized access.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect your ability to use parts of the hh77 platform. hh77 does not use advertising cookies or behavioral tracking cookies for third-party advertising networks.

9 Data Security Measures

hh77 implements a layered approach to personal data security:

• Encryption at Rest and in Transit: Personal data stored in hh77 systems is encrypted at rest. All data transmitted between your device and hh77 servers uses 256-bit SSL/TLS encryption.
• Access Controls: Access to personal data within hh77 systems is restricted to personnel with a legitimate operational need, protected by role-based access controls and audit logging.
• Password Security: Account passwords are stored as salted cryptographic hashes. hh77 never stores passwords in plain text and has no ability to recover your password — only reset it via OTP to your registered mobile number.
• Two-Factor Authentication: hh77 offers SMS OTP-based 2FA for account logins. We strongly encourage all players to activate this feature to protect their account and PHP wallet balance.
• Incident Response: hh77 maintains a data breach response procedure. In the event of a confirmed personal data breach that creates a risk to your rights, we will notify affected players and report to relevant authorities as required by applicable regulations.

10 Your Data Privacy Rights

As a player on hh77, you have the following rights regarding your personal data, subject to applicable legal limitations and regulatory retention obligations:

• Right of Access: You may request a copy of the personal data hh77 holds about you.
• Right to Correction: You may request correction of inaccurate or incomplete personal data in your hh77 account.
• Right to Erasure: You may request deletion of your personal data. Note that data required by PAGCOR regulations or ongoing legal process cannot be immediately deleted.
• Right to Object: You may object to processing of your personal data based on our legitimate interests where your individual circumstances warrant it.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting prior lawful processing.
• Right to Data Portability: You may request your personal data in a commonly used, machine-readable format where technically feasible.

To exercise any of these rights, submit a written request to [email protected] from the email address registered to your hh77 account. We will respond within thirty (30) calendar days. We may require identity verification before processing requests to protect against unauthorized access to personal data.

11 Minors and Age Restrictions

hh77 is strictly a platform for adults. Under PAGCOR regulations, the minimum legal gambling age in the Philippines is 21 years old. hh77 does not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory part of the hh77 account registration and KYC process.

If hh77 discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the data will be deleted as soon as regulatory retention obligations permit, and any funds held in that account will be handled in accordance with applicable law and PAGCOR guidance.

If you are a parent or guardian and believe a minor may have registered on hh77, please contact us immediately at [email protected] with the relevant account details for urgent investigation.

12 Changes to This Privacy Policy

hh77 may update this Privacy Policy from time to time to reflect changes in our platform, services, regulatory requirements, or data processing practices. When material changes are made, we will notify active players via the contact details registered to their hh77 account — typically by SMS to their registered Philippine mobile number — and update the Effective Date at the top of this Policy.

Continued use of the hh77 platform following notification of material changes constitutes acceptance of the updated Policy. If you do not accept the updated Policy, you should discontinue use of the platform and may request account closure by contacting [email protected].

13 Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or hh77's data processing practices, you may contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Platform: Live chat and in-account support ticket system available after logging in to hh77

We aim to respond to all privacy-related inquiries within thirty (30) calendar days. For urgent matters related to account security, suspected unauthorized access, or potential data breaches, please mark your message as urgent in the subject line for prioritized review by our security team.