hawkph Privacy Policy

1. Who We Are

hawkph ("the Company," "we," "us," or "our") operates the hawkph online casino platform accessible at hawkph.net. hawkph is the data controller responsible for the personal data of players and visitors who use the Platform.

hawkph is committed to protecting the privacy and personal data of all Filipino players in accordance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all personal data collected through the hawkph website, mobile platform, customer support channels, and any other touchpoint through which you interact with hawkph. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

hawkph collects the following categories of personal data from players and platform visitors:

hawkph does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect information about your religion, political affiliation, health status, or sexual orientation.

3. How We Collect Your Data

hawkph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity, via cookies and server logs.
• Third-party sources: Identity verification data from KYC service providers; payment transaction data from GCash, Maya, and banking partners; fraud detection signals from security service providers.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with compliance obligations.

4. Why We Use Your Personal Data

hawkph uses your personal data for the following purposes:

• Account registration and management: To create and maintain your hawkph account, verify your identity, and manage your account preferences.
• KYC and age verification: To verify that you are at least 21 years of age and to comply with PAGCOR's Know Your Customer requirements.
• Payment processing: To process deposits and withdrawals via GCash, Maya, bank transfer, and debit card, and to maintain accurate financial records.
• Platform operation: To provide access to games, process wagers, calculate winnings, and maintain game history records.
• Responsible gaming: To enforce deposit limits, session limits, self-exclusion orders, and other responsible gaming tools you have activated on your account.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Legal and regulatory compliance: To comply with obligations under Philippine law, including the DPA, Anti-Money Laundering Act (AMLA), and PAGCOR regulations.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
• Platform improvement: To analyze usage patterns, identify technical issues, and improve the hawkph user experience for Filipino players.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, hawkph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and hawkph — including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA obligations, and NPC requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

hawkph does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: GCash, Maya, and banking partners receive the minimum financial data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party verification services receive identity documents solely for the purpose of completing your KYC verification.
• Game providers: Licensed game software providers may receive anonymized or pseudonymized gaming session data necessary to operate their games on the Platform.
• Fraud and security providers: Security service providers receive technical data (such as IP addresses and device fingerprints) to detect and prevent fraudulent activity.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities may receive data where required by law or upon lawful request.
• Professional advisers: Legal counsel, auditors, and compliance consultants may access data on a confidential, need-to-know basis.

All third-party service providers engaged by hawkph are contractually required to process your personal data only for the specified purpose, to maintain appropriate security measures, and to comply with the Philippine Data Privacy Act.

7. Cookies & Tracking Technologies

hawkph uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Essential cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to understand how players interact with the Platform — which pages are visited most, how long sessions last, and where technical errors occur. This data is aggregated and anonymized.
• Preference cookies: Store your language, display, and notification preferences so you do not need to re-enter them on each visit.
• Marketing cookies: Used only where you have consented, to deliver relevant promotional content and measure the effectiveness of hawkph marketing campaigns.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the hawkph Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

8. Data Retention

hawkph retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable law or ongoing regulatory proceedings.
• Financial transaction records: Retained for a minimum of five (5) years in accordance with AMLA and PAGCOR requirements.
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with hawkph's data disposal procedures.

9. Data Security

hawkph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and hawkph servers.
• Encryption of sensitive data at rest, including financial data and KYC documents.
• Role-based access controls ensuring that only authorized hawkph personnel can access personal data, and only to the extent necessary for their role.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in harm to affected players, hawkph will notify the National Privacy Commission and affected individuals within the timeframes prescribed by the DPA and NPC regulations.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hawkph:

• Right to be informed: The right to know what personal data hawkph collects about you, why it is collected, and how it is used — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data hawkph holds about you, including information on how it has been processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your hawkph account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to hawkph's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, contact the hawkph Data Protection Officer at [email protected]. hawkph will respond to all data subject requests within fifteen (15) business days of receipt.

11. Children's Privacy

The hawkph Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. hawkph does not knowingly collect personal data from individuals under the age of 21.

If hawkph discovers or has reasonable grounds to believe that an account holder is under 21 years of age, the account will be immediately suspended, all pending transactions will be cancelled, and any deposited funds will be returned to the payment source after verification. KYC documents will be retained only for the minimum period required by law before secure deletion.

If you are a parent or guardian and believe that a minor has registered on the hawkph Platform, please contact us immediately at [email protected] so that we can take prompt action.

12. Cross-Border Data Transfers

hawkph primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting providers or international KYC verification services — hawkph ensures that such transfers are conducted in compliance with the DPA and NPC regulations, including:

• Entering into data processing agreements with receiving parties that impose data protection obligations equivalent to those required under Philippine law.
• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the NPC.
• Implementing appropriate safeguards such as standard contractual clauses where required.

You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting the hawkph Data Protection Officer.

13. Changes to This Privacy Policy

hawkph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, hawkph will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the hawkph Platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy.

14. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hawkph, please contact our Data Protection Officer:

• Data Protection Officer: hawkph DPO
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on the hawkph Platform

If you are not satisfied with hawkph's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through its official channels.