🔐 hawkph Privacy Policy

hawkph operates the online gaming platform accessible at hawkph.vip, offering casino games, live dealer tables, sports betting, bingo, and related services to eligible Filipino players. In the course of providing these services, hawkph processes personal data — information that identifies or can identify you as an individual — in accordance with this Policy and applicable Philippine privacy law.

This Policy applies to all personal data hawkph collects through the hawkph.vip website, through account registration and KYC verification, through payment transactions, through customer support interactions, and through any other touchpoint between you and the hawkph platform. It applies to all players, registered and unregistered visitors, and any person whose personal data hawkph processes in connection with its services.

By registering a hawkph account, making a deposit, or continuing to use the hawkph platform after being made aware of this Policy, you acknowledge that you have read and understood it. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to close your account.

hawkph is the Personal Information Controller (PIC) as defined under the Philippine Data Privacy Act for all personal data processed in connection with the hawkph platform and its services. As PIC, hawkph determines the purposes for which your personal data is collected and the means by which it is processed.

hawkph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA, IRR, and NPC issuances, and for handling Data Subject requests. Contact details for the DPO are provided in Section 15 of this Policy.

hawkph collects the following categories of personal data, depending on how you interact with the Platform:

hawkph collects personal data through the following mechanisms:

• Direct submission: Information you provide voluntarily when registering an account, completing KYC, depositing funds, contacting support, or responding to surveys;
• Automated collection: Technical and behavioral data collected automatically when you visit or interact with hawkph.vip, including through cookies, server logs, and analytics tools (see Section 10);
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard when you make deposits or withdrawals;
• Identity verification services: Data processed through third-party KYC service providers engaged by hawkph to verify the authenticity of government-issued identification documents;
• Regulatory sources: Information received from PAGCOR, AMLC, or other Philippine government bodies in connection with regulatory compliance obligations.

hawkph processes your personal data only for specific, legitimate purposes. The primary legal bases for processing under the Philippine Data Privacy Act are: contractual necessity (processing required to deliver gaming services under the Terms & Conditions), legal obligation (processing required by PAGCOR, AMLA, NPC, or other regulatory requirements), legitimate interests (processing necessary for fraud prevention, platform security, and service improvement), and consent (for optional marketing communications).

hawkph retains personal data only for as long as necessary to fulfill the purpose for which it was collected, unless a longer retention period is required by law or regulation. The following general retention periods apply:

• Account and KYC data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLA obligations;
• Gaming session data: Retained for a minimum of three (3) years from the date of the gaming session, to support dispute resolution and regulatory audit functions;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Technical and log data: Retained for twelve (12) months from collection, unless required for an ongoing investigation;
• Marketing consent and preference records: Retained for the duration of the account relationship and for one (1) year following withdrawal of consent or account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with hawkph's data disposal procedures.

hawkph does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Personal data may be disclosed to the following categories of recipients for the purposes described in this Policy:

• Payment service providers (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard): transaction data shared to process deposits and withdrawals;
• KYC and identity verification partners: identity data processed to fulfill age and identity verification obligations;
• Game content providers (PG Soft, Pragmatic Play, Jili, and others): limited technical session data shared to deliver game services and resolve game disputes;
• Fraud detection and security service providers: technical and behavioral data shared to detect and prevent unauthorized account access and fraudulent activity;
• Regulatory and government authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement, where disclosure is required by law, court order, or regulatory directive;
• Professional advisors: lawyers, auditors, and accountants engaged by hawkph, subject to confidentiality obligations;
• Business successors: in the event of a merger, acquisition, or transfer of hawkph's business operations, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

Some of hawkph's service providers — including game content providers and technology infrastructure partners — may process personal data outside the Philippines. Where personal data is transferred outside the Philippines, hawkph ensures that such transfers comply with Section 21 of the Philippine Data Privacy Act, which requires that the receiving jurisdiction provides an adequate level of protection for personal data, or that appropriate contractual safeguards (such as data transfer agreements) are in place.

hawkph does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing supplementary safeguards. If you have questions about the specific safeguards applied to cross-border transfers of your data, please contact our Data Protection Officer at the details provided in Section 15.

hawkph implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the hawkph platform;
• Password hashing using industry-standard salted hashing algorithms — hawkph never stores passwords in plaintext;
• Two-factor authentication (2FA) available to all players via SMS OTP for login and sensitive account actions;
• Role-based access controls ensuring that hawkph staff can only access personal data to the extent necessary for their specific job function;
• Anomaly detection systems that flag unusual login patterns, transaction volumes, or account behavior for security review;
• Regular security audits and penetration testing conducted by qualified third-party security professionals;
• Data minimization — hawkph collects only the personal data necessary for the specified purposes;
• Secure data disposal procedures ensuring that personal data is irreversibly deleted or anonymized when retention periods expire.

hawkph uses cookies and similar tracking technologies on the hawkph.vip website. Cookies are small text files stored on your device by your browser. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of these cookies without losing access to the Platform;
• Functional Cookies: Remember your preferences (e.g., language settings, responsible gaming limit selections) to personalize your experience. These can be disabled but may affect Platform functionality;
• Analytics Cookies: Collect anonymized or pseudonymized data about how visitors use the Platform (pages visited, session duration, click paths) to help hawkph improve its services. These cookies process data in aggregate form and do not personally identify individual users in reports;
• Performance Cookies: Monitor Platform performance and identify technical errors to improve stability and loading speed.

hawkph does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing your hawkph account.

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data processed by hawkph. To exercise any of these rights, contact our Data Protection Officer as described in Section 15.

• 📋
  Right to be Informed You have the right to be informed that your personal data is being processed, the purposes of processing, and the identity of the Data Controller (hawkph). This Policy fulfills this obligation.
• 👁️
  Right to Access You have the right to request a copy of the personal data hawkph holds about you, including information about how it is being processed. We will respond to access requests within 15 business days.
• ✏️
  Right to Rectification You have the right to request correction of inaccurate or incomplete personal data. You can update most account information directly from your hawkph profile settings. For KYC-related corrections, contact support.
• 🗑️
  Right to Erasure (Right to be Forgotten) You have the right to request deletion of your personal data where it is no longer necessary for the original purpose, where consent has been withdrawn, or where processing is unlawful. Note that erasure requests may be limited by hawkph's legal obligations to retain certain data under PAGCOR and AMLA regulations.
• 🚫
  Right to Object You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though hawkph may continue processing where it has compelling legitimate grounds.
• 📦
  Right to Data Portability Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• ⏸️
  Right to Restriction of Processing You have the right to request that hawkph restricts processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection is being assessed.
• ⚖️
  Right to Lodge a Complaint If you believe hawkph has not handled your personal data in accordance with the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

If hawkph discovers that personal data has been collected from a person under the age of 21 without appropriate parental consent or in violation of applicable law, that data will be deleted immediately and the associated Account closed. If you believe that a minor has registered an Account on the hawkph Platform, please contact us immediately at [email protected].

Players are responsible for ensuring that minors do not access the Platform through devices under their supervision or control. We recommend the use of parental control software on shared devices to prevent underage access to online gaming platforms.

The hawkph Platform integrates with third-party services, including game content providers, payment processors, and identity verification platforms. These third parties operate under their own privacy policies and data processing terms. While hawkph selects third-party providers with rigorous data protection standards and enters into data processing agreements with all processors, hawkph cannot accept responsibility for the independent data practices of third-party services.

hawkph does not embed third-party social media widgets, advertising trackers, or affiliate tracking scripts that would allow external parties to collect your personal data through the Platform without your knowledge.

hawkph reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or regulatory guidance. Material changes to this Policy — those that significantly affect your rights or the nature of processing — will be communicated to registered players via email to the registered address no less than seven (7) days prior to the change taking effect.

The "Last updated" date at the top of this Policy indicates when the current version took effect. The current version of this Policy is always accessible at hawkph.vip/privacy-policy. We encourage you to review this Policy periodically to stay informed about how hawkph protects your personal data. Your continued use of the Platform following any update constitutes your acknowledgment of the revised Policy.

hawkph has designated a Data Protection Officer (DPO) to oversee compliance with the Philippine Data Privacy Act and to handle all data subject requests, privacy complaints, and privacy-related inquiries.

To contact the hawkph DPO or to exercise any of your Data Subject rights under Section 11, use the following channels:

• Email: [email protected] — include "Privacy / DPO" in the subject line;
• Live Chat: Available 24/7 via the chat icon at hawkph.vip — request to escalate to a DPO representative;
• Written requests: Addressed to the Data Protection Officer, hawkph Legal & Compliance Department — accessible via the Contact section of the About Us page.

For complaints regarding hawkph's handling of your personal data that cannot be resolved through our internal DPO process, you may contact the National Privacy Commission (NPC) of the Philippines, which serves as the regulatory body for data privacy matters in the country.