fhfun Privacy Policy

This Privacy Policy sets out the basis on which any personal data fhfun collects from you, or that you provide to fhfun, will be processed by us. "Personal data" means any information relating to an identified or identifiable natural person — in other words, information that can be used, directly or indirectly, to identify you as an individual.

This Policy applies to all personal data collected through:

• Registration and use of the fhfun online gaming platform at fhfun.club;
• Account management and KYC identity verification processes;
• Deposit and withdrawal transactions conducted via GCash, PayMaya, BPI, BDO, Metrobank, or card payment;
• Interactions with fhfun's customer support team via live chat or email;
• Technical data collected automatically through your use of the Platform, including device and browser information.

This Policy should be read together with fhfun's Terms and Conditions and Responsible Gaming Policy, both of which are published on the Platform and incorporated herein by reference.

For the purposes of the Philippine Data Privacy Act of 2012 and all applicable data protection legislation, fhfun is the data controller responsible for the personal information collected and processed through the Platform.

As data controller, fhfun determines the purposes and means by which your personal data is processed. fhfun is responsible for ensuring that data processing activities comply with applicable law, and for facilitating the exercise of your data subject rights as described in Section 11 of this Policy.

All enquiries relating to this Privacy Policy, your personal data held by fhfun, or the exercise of your data subject rights should be directed to fhfun's Data Protection Officer at the contact details provided in Section 16.

fhfun collects the following categories of personal data from its registered players and Platform users:

fhfun does not collect sensitive personal information such as health data, political affiliations, religious beliefs, or biometric data except where required for KYC identity verification purposes, in which case such data is processed solely for that purpose and in accordance with applicable law.

fhfun collects personal data through the following methods:

Direct Collection

Information you provide to fhfun directly, including:

• Data entered during account registration, including your name, email, phone number, and date of birth;
• Identity documents submitted for KYC verification;
• Payment information submitted when making deposits or requesting withdrawals;
• Messages and information submitted through customer support channels.

Automatic Collection

Technical data collected automatically when you access or use the Platform, including through:

• Server logs that record your IP address, access times, and pages viewed;
• Cookies and similar tracking technologies as described in Section 8;
• Game platform telemetry that records your gaming activity for account management and regulatory purposes.

Third-Party Sources

In limited circumstances, fhfun may receive personal data from third parties, including:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank) confirming the status of your payment transactions;
• Identity verification service providers used to cross-check KYC documents;
• Fraud detection and anti-money laundering screening services.

Under the Philippine Data Privacy Act of 2012 and applicable regulations, fhfun processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary for fhfun to fulfil its obligations to you under the Terms and Conditions, including account management, processing deposits and withdrawals, and delivering gaming services;
• Compliance with legal obligations: Processing is required to comply with fhfun's obligations under PAGCOR regulations, Philippine anti-money laundering laws, and other applicable legislation, including KYC and transaction monitoring requirements;
• Legitimate interests: Processing is necessary for fhfun's legitimate interests in fraud prevention, platform security, product improvement, and responsible gaming monitoring, provided these interests are not overridden by your rights and interests;
• Consent: Where fhfun relies on your consent as the basis for processing — primarily for marketing communications — you have the right to withdraw that consent at any time by adjusting your marketing preferences in your account settings.

fhfun uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your fhfun account, including processing login authentication and managing your account settings and preferences;
• Service delivery: To provide access to the gaming platform, process your bets and game results, and manage your account balance;
• Payment processing: To process your deposits via GCash and other Philippine payment methods, and to process withdrawal requests to your registered payment account;
• Identity verification: To verify your identity and age in accordance with PAGCOR's Know Your Customer requirements applicable to Philippine online gaming operators;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal or prohibited conduct on the Platform;
• Responsible gaming: To monitor gaming behaviour for indicators of potential problem gambling and to administer deposit limits, session controls, and self-exclusion requests;
• Regulatory compliance: To meet fhfun's reporting and record-keeping obligations to PAGCOR and other competent Philippine regulatory authorities;
• Customer support: To respond to your enquiries, complaints, and support requests submitted via live chat or email;
• Marketing (with consent): To send you promotional communications about fhfun's games, bonuses, and platform updates, where you have opted in to receive such communications.

fhfun does not sell your personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described below:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and card processors — to facilitate deposit and withdrawal transactions on your account;
• Game software providers: JILI, Pragmatic Play, Evolution Gaming, PG Soft, and other licensed game studios — to the extent necessary to deliver the relevant gaming services; these providers receive only the minimum data required and are bound by data processing agreements;
• KYC and fraud detection providers: Third-party identity verification and anti-fraud screening services engaged to fulfill fhfun's regulatory obligations;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government agencies, where disclosure is required by law, court order, or regulatory directive;
• Professional advisers: Lawyers, accountants, and auditors who provide professional services to fhfun, subject to confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of fhfun's assets, your personal data may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations.

All third parties with whom fhfun shares personal data are required to maintain the confidentiality and security of your information and to use it only for the specific purpose for which it was shared.

fhfun uses cookies and similar tracking technologies on the Platform to improve functionality, analyse usage, and deliver a personalised experience. A "cookie" is a small text file placed on your device by the Platform when you visit.

Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function, including session management and login authentication. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming limits you have set.
• Analytics cookies: Help fhfun understand how players navigate and use the Platform, so we can improve performance and user experience. Data is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns and potential account takeover attempts.

fhfun retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention periods apply:

• Active account data: Retained for the duration of your account plus five (5) years following account closure, to meet PAGCOR record-keeping requirements and AMLC transaction record obligations;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering laws;
• Transaction records: Retained for a minimum of five (5) years to satisfy financial record-keeping obligations;
• Customer support communications: Retained for three (3) years from the date of the relevant interaction;
• Technical and usage data: Retained for up to thirteen (13) months on a rolling basis, after which it is aggregated or deleted.

Where fhfun is required by law to retain data for a longer period, or where data is necessary for the establishment, exercise, or defence of legal claims, it will be retained until that obligation is satisfied.

fhfun implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and fhfun's servers;
• Cryptographic hashing of stored passwords — fhfun cannot view your plain-text password;
• Access controls that limit access to personal data to fhfun personnel who have a legitimate operational need;
• Regular security audits and penetration testing of fhfun's platform infrastructure;
• Two-factor authentication available to all account holders to protect against unauthorized login;
• Automatic session timeouts to protect inactive account sessions on shared devices.

Despite these measures, no system is completely immune to security breaches. In the event of a data breach that is likely to result in a risk to your rights and freedoms, fhfun will notify the National Privacy Commission (NPC) and, where required, affected account holders in accordance with the notification obligations under RA 10173 and its Implementing Rules and Regulations.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by fhfun:

To exercise any of the above rights, please contact fhfun's Data Protection Officer using the contact details in Section 16. fhfun will respond to all verified data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you.

Please note that certain rights may be subject to limitations where fhfun has a compelling legitimate interest or a legal obligation that overrides your request — for example, fhfun cannot delete transaction records it is required to retain for PAGCOR or AMLC compliance purposes.

fhfun takes significant measures to prevent minors from accessing the Platform, including mandatory age declaration at registration and KYC identity verification with government-issued Philippine ID prior to withdrawal processing.

If fhfun becomes aware — or has reasonable grounds to suspect — that personal data has been collected from an individual under 21 years of age, fhfun will:

• Immediately suspend the relevant account;
• Delete or anonymise all personal data associated with that account to the extent permitted by applicable law;
• Return any deposited funds to the payment method used, net of any applicable processing fees.

If you believe that fhfun may have inadvertently collected data from a person under 21, please notify our support team immediately at the contact address in Section 16.

The fhfun Platform integrates with third-party services including payment gateways, game software platforms, and analytics tools. While fhfun selects its third-party partners carefully and requires them to implement appropriate data protection measures, fhfun is not responsible for the independent data processing activities of these third parties under their own terms and privacy policies.

Specifically:

• GCash and PayMaya operate under their own privacy policies published by their respective operators, and process payment data in connection with your transactions independently of fhfun;
• Game providers may process session data in connection with game delivery, subject to their own privacy commitments and any data sharing agreements in place with fhfun;
• Analytics tools used by fhfun are configured to anonymise or pseudonymise user data to the greatest extent practicable.

fhfun's Privacy Policy governs only the personal data collected and processed by fhfun as data controller. fhfun does not control, and takes no responsibility for, the privacy practices of independent third-party services.

fhfun primarily stores and processes personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed in countries outside the Philippines — for example, where game software provider infrastructure is hosted internationally.

Where such transfers occur, fhfun takes steps to ensure that appropriate safeguards are in place to protect your personal data, in accordance with the requirements of the Philippine Data Privacy Act and applicable National Privacy Commission (NPC) guidelines. These safeguards include:

• Contractual clauses requiring the overseas recipient to comply with data protection standards equivalent to those applicable in the Philippines;
• Limiting the scope of data transferred to the minimum necessary for the specific processing purpose;
• Conducting due diligence on the data protection frameworks of countries where recipients are located.

By using the fhfun Platform, you acknowledge that your personal data may be processed in countries outside the Philippines in the limited circumstances described above, subject to the safeguards outlined in this section.

fhfun reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or fhfun's data processing activities.

Where amendments are material — meaning they significantly affect the nature of the data we collect, the purposes for which it is used, or your rights in relation to it — fhfun will notify you prior to those changes taking effect by:

• Sending a notification to the email address registered on your fhfun account; and/or
• Displaying a prominent notice on the Platform.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. We encourage you to review this Policy periodically to stay informed of how fhfun handles your personal data.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how fhfun has handled your personal data, please contact our Data Protection Officer:

If you are not satisfied with fhfun's response to your complaint or believe that fhfun is not handling your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

Information about how to file a complaint with the NPC is available on the NPC's official government website. fhfun encourages you to contact us directly in the first instance so we can attempt to resolve your concern promptly before escalating to the NPC.